DOCUMENT:Q259042  08-MAY-2002  [winnt]
TITLE   :Handle Leak in WinLogon After Applying Windows NT 4.0 SP6
PRODUCT :Microsoft Windows NT
PROD/VER:winnt:4.0 SP6,4.0 SP6a
OPER/SYS:
KEYWORDS:kbWinNT400PreSP7Fix

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Windows NT Server versions 4.0 SP6, 4.0 SP6a 
 - Microsoft Windows NT Workstation versions 4.0 SP6, 4.0 SP6a 
-------------------------------------------------------------------------------

SYMPTOMS
========

After you install Windows NT 4.0 Service Pack 6 and if the RegConnectRegistry()
API is being used heavily, the Winlogon process may exhibit a Handle Leak.

CAUSE
=====

This issue occurs because Windows NT 4.0 Service Pack 6 introduced a problem in
the termination code for WinLogon, which prevents orphaned handles from
closing.


RESOLUTION
==========

To resolve this problem, obtain the Windows NT 4.0 Security Rollup Package. For
additional information, click the article number below to view the article in
the Microsoft Knowledge Base:

   Q299444 Post-Windows NT 4.0 Service Pack 6a Security Rollup Package (SRP)

The English-language version of this fix should have the following file
attributes or later:

   Date      Time                 Size    File name     Platform
   -------------------------------------------------------------
   04/04/00  00:46                135,440 services.exe  Intel
   04/04/00  00:46                192,272 winlogon.exe  Intel
   04/04/00  00:45                249,104 services.exe  Alpha
   04/04/00  00:45                275,216 winlogon.exe  Alpha



STATUS
======

Microsoft has confirmed that this problem may cause a degree of security
vulnerability in Windows NT 4.0.

Additional query words:

======================================================================
Keywords          : kbWinNT400PreSP7Fix 
Technology        : kbWinNTsearch kbWinNTWsearch kbWinNTW400search kbWinNT400search kbWinNTSsearch kbWinNTS400sp6 kbWinNTS400search kbWinNTW400sp6 kbWinNTW400SP6a
Version           : winnt:4.0 SP6,4.0 SP6a
Hardware          : ALPHA x86
Issue type        : kbbug
Solution Type     : kbfix

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2002.