Has anyone else experienced this error? Whenever it happens the affected user gets their session dropped, but the session still shows up in MFAdmin. If you try to get properties for the session MF tells you it can't retrieve the properties. I found MS Q828664 that says properties in AD for the user could be corrupted, the thing is that this appears to be happening to random users and just started occurring basically after I installed the set of Citrix hot fixes for MF3 and also MS Q828326 to fix slow log off times. I'm not really sure where to start diagnosing it since it is referring to the ctxnotif.dll as well as winlogon. Below is the full text of the event: Event Type: Information Event Source: Application Error Event Category: (100) Event ID: 1004 Date: 10/8/2004 Time: 8:31:35 AM User: N/A Computer: TS1 Description: Reporting queued error: faulting application winlogon.exe, version 0.0.0.0, faulting module ctxnotif.dll, version 2.4.2085.1, fault address 0x0002170f. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 41 70 70 6c 69 63 61 74 Applicat 0008: 69 6f 6e 20 46 61 69 6c ion Fail 0010: 75 72 65 20 20 77 69 6e ure win 0018: 6c 6f 67 6f 6e 2e 65 78 logon.ex 0020: 65 20 30 2e 30 2e 30 2e e 0.0.0. 0028: 30 20 69 6e 20 63 74 78 0 in ctx 0030: 6e 6f 74 69 66 2e 64 6c notif.dl 0038: 6c 20 32 2e 34 2e 32 30 l 2.4.20 0040: 38 35 2e 31 20 61 74 20 85.1 at 0048: 6f 66 66 73 65 74 20 30 offset 0 0050: 30 30 32 31 37 30 66 002170f Thanks in advance, John Hardwick John Hardwick President nXio, LLC. 913-754-8120 x125 www.nxio.net