Windows-Logonroutine winlogon.exe stopped working (APPCRASH)

[WS03R2]

After a reboot of my Windows Server 2008 machine i noticed this problem notification:

APPCRASH winlogon.exe

Problemsignatur

Problemereignisame: APPCRASH

Anwendungsname: winlogon.exe

Anwendungsversion: 6.0.6002.18005

Anwendungszeitstempel: 49e01d05

Fehlermodulname: ntdll.dll

Fehlermodulversion: 6.0.6002.18541

Fehlermodulzeitstempel: 4ec3e3d5

Ausnahmecode: c0000005

Ausnahmeoffset: 00040d78

Betriebsystemversion: 6.0.6002.2.2.0.272.7

Gebietsschema-ID: 1031

Zusatzinformation 1: ef34

Zusatzinformation 2: 3775f664ea8631623037060d969e5565

Zusatzinformation 3: d365

Zusatzinformation 4: 98de86ba6b7c73d5071479e0845b2f07

You can see a picture here: https://plus.google.com/u/0/110271370019803275441/posts/BdD3Lk2uLkZ

Until now i did not restart the machine again because i'm not sure if it will come back online and if i'll be able to logon. Does anybody know how to deal with this problem?

[Tripredacus]

I tend to agree with the response you got on Technet. That event alone is not enough information. I would look in Event Viewer for any additional information.

[MagicAndre1981]

import this file to your registry.

http://cid-128fc518635be2dc.office.live.com/self.aspx/.Public/MS%20Foren/Registry/LocalDumps.reg

when you get the crash you can see a dump file in C:\localdumps. Zip and upload the dump.

[WS03R2]

import this file to your registry.

http://cid-128fc518635be2dc.office.live.com/self.aspx/.Public/MS%20Foren/Registry/LocalDumps.reg

when you get the crash you can see a dump file in C:\localdumps. Zip and upload the dump.

I think this will only work, if i restart the server? i'm afraig of restarting it 'cause i don't know what is going to happen...

[Tripredacus]

Well if you think about it, winlogon.exe must still be running. Look to see if it is in Task Manager. Windows usually will restart itself if winlogon.exe actually crashes.

But to determine the issue, a dump file is needed.

[MagicAndre1981]

the setting should be activated after you imported the .reg file.