01

Issue

Windows reaches the sign-in screen and accepts credentials, but the desktop, taskbar, or Explorer never appears or appears only after a long delay. Task Manager usually remains available. This includes failures that begin after a Windows feature update makes an installed ExplorerPatcher build, Start/taskbar replacement, third-party theme patcher, or other shell-injection component incompatible.

Searchable Windows error codes and exact messages

There is no unique Windows code for a missing desktop after sign-in. The useful identifiers usually come from Application or User Profile Service events, the faulting process, and its exception code.

TypeSearchable identifierWhen it applies
Application eventEvent ID 1000Application ErrorA shell process such as explorer.exe, sihost.exe, ShellExperienceHost.exe, or StartMenuExperienceHost.exe crashes. Record the faulting application, module, and exception code.
Windows Error ReportingEvent ID 1001Windows Error Reporting records the crash bucket or follow-up report. Pair it with the application name and bucket/fault data.
Application eventEvent ID 1002Application HangExplorer or another shell process stops responding rather than immediately crashing.
User Profile ServiceEvent ID 1500Windows cannot log the user on because the profile cannot be loaded.
User Profile ServiceEvent ID 1508Windows cannot load the profile's registry file.
User Profile ServiceEvent ID 1509Windows cannot copy or access a profile file during sign-in.
User Profile ServiceEvent ID 1511Windows logged the user on with a temporary profile.
User Profile ServiceEvent ID 1515Windows backed up or is using a profile state associated with profile-loading failure.
Exception status0xc0000005STATUS_ACCESS_VIOLATIONEvent ID 1000 shows Explorer or a shell component accessing invalid memory, often because of a faulty shell extension or injected component.
Exception status0xc0000374STATUS_HEAP_CORRUPTIONThe faulting shell process detects heap corruption; third-party extensions are a common suspect, not a proven cause.
Exception status0xc0000409STATUS_STACK_BUFFER_OVERRUNA shell process terminates after a fast-fail/security check; use the faulting module to identify the component.
Windows stop/status0xc000021aSTATUS_SYSTEM_PROCESS_TERMINATEDWinlogon or CSRSS terminated. This is an escalation beyond an ordinary Explorer-only black screen; preserve the named process and stop data.

Useful exact-message searches include The User Profile Service failed the sign-in. User profile cannot be loaded, explorer.exe - Application Error, sihost.exe - System Warning, and Unknown Hard Error. Search Event ID + process + exception code + faulting module; searching black screen alone merges graphics, profile, shell, update, display-output, and storage causes.

02

Applies when

Use this procedure when manually starting Explorer, using a second account, Safe Mode, or disabling a shell customization changes the result. A strong variation-specific match is a black or grey post-login screen that begins immediately after Windows or the customization program updates and disappears when that exact shell, taskbar, theme, or UX patcher is removed.

03

Does not apply when

Do not use it when the display is absent in firmware or WinRE, when Safe Mode and Task Manager are also unavailable, or when the system stops before sign-in.

04

Information that may remain unknown

The exact Windows build can remain unknown initially. Whether the problem follows the user profile, Explorer process, Winlogon shell values, startup service, or shell-customization program must be narrowed before permanent changes.

05

Requirements

  • Task Manager or Safe Mode access
  • Administrator rights for configuration repair
  • A record of any shell, Start-menu, taskbar, theme, or Explorer customization installed before the failure
06

Starting position

At the black screen, press Ctrl+Shift+Esc. If Task Manager opens in compact view, select More details.

07

Confirm the diagnosis

  1. In Task Manager, locate Windows Explorer.

  2. If present, right-click it and select Restart.

  3. If absent, select Run new task, enter:

    explorer.exe
    
  4. If the desktop appears, Explorer or shell startup is implicated.

  5. If Explorer immediately exits, inspect Task Manager's process list for shell-customization software.

  6. If Explorer does not restore the desktop, enter Safe Mode through WinRE Startup Settings.

  7. In Safe Mode, determine whether the desktop loads promptly.

08

Resolution steps

Proceed in order and stop when a step permanently resolves the failure.

Step A — Remove incompatible shell customization

  1. In Safe Mode or the temporarily restored desktop, open Settings > Apps > Installed apps.
  2. Locate recently installed or recently updated taskbar, Start-menu, Explorer, theme, or shell-patching software. Examples include ExplorerPatcher and third-party UX/theme patchers, but the product name alone is not proof; confirm the installed version and timing.
  3. Uninstall only the implicated customization.
  4. Restart normally.
  5. If Explorer now starts, do not reinstall the same version.

Step B — Verify Winlogon values without blindly overwriting them

  1. Open an administrator Command Prompt.

  2. Query the shell values:

    reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Shell
    reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Userinit
    
  3. Normal values are:

    • Shell = explorer.exe
    • Userinit = C:\Windows\system32\userinit.exe,
  4. If both values are already correct, do not rewrite them. Continue to Step C.

  5. If one is demonstrably wrong, export the key first:

    md C:\BootRepairBackup
    reg export "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" C:\BootRepairBackup\Winlogon-before-shell-repair.reg
    
  6. Correct only the wrong value:

    reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Shell /t REG_SZ /d explorer.exe /f
    reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Userinit /t REG_SZ /d C:\Windows\system32\userinit.exe, /f
    
  7. Restart and test.

Step C — Test whether the problem is profile-specific

  1. From the restored desktop or Safe Mode, open Settings > Accounts > Other users.
  2. Create a temporary local test account.
  3. Sign out and sign in to the test account.
  4. If the test account loads normally, the original profile or its per-user startup configuration is implicated. Do not immediately copy the entire old profile over the new one.
  5. If both accounts fail identically, continue to Step D.

Step D — Isolate third-party services and startup items

  1. Run msconfig.
  2. On Services, select Hide all Microsoft services before disabling anything.
  3. Record the enabled third-party services, then select Disable all.
  4. Open Task Manager's Startup apps page and disable nonessential startup items, recording each one.
  5. Restart normally.
  6. If the desktop loads, re-enable items in halves until the failure returns. The last group can then be tested one item at a time.

Step E — Repair Windows components when no third-party cause is found

  1. From a working Safe Mode or temporary desktop, open an administrator Command Prompt.

  2. Run DISM first:

    DISM /Online /Cleanup-Image /RestoreHealth
    
  3. Record the final DISM result.

  4. Then run:

    sfc /scannow
    
  5. Restart and test.

09

Expected results and branches

  • Starting Explorer restores the desktop: Focus on shell startup, customization, and Winlogon values.
  • Removing the evidenced ExplorerPatcher, taskbar replacement, or theme/UX patcher restores the native desktop: Preserve its former version and the Windows build; do not reinstall the same incompatible combination.
  • A second account works: Preserve the original profile and migrate data selectively after identifying per-user startup or profile damage.
  • Clean boot works: A third-party service or startup item is responsible; binary-search the recorded items.
  • Explorer starts only after a long delay: Inspect App Readiness and profile-loading events. Disabling App Readiness may be a diagnostic test but is not a preferred permanent fix because it can interfere with application provisioning and updates.
  • DISM requires source files: Exact Windows build and edition become required. Stop rather than using arbitrary installation media.
10

Do not do this

  • Do not replace the entire Winlogon registry key.
  • Do not copy a complete old user profile over a new profile.
  • Do not disable Microsoft services in msconfig.
  • Do not permanently disable App Readiness solely because doing so shortens the black-screen delay.
  • Do not reset Windows before testing Explorer, a second account, and a clean boot.
11

Rollback

Re-import the saved Winlogon registry file if a corrected value makes the condition worse:

reg import C:\BootRepairBackup\Winlogon-before-shell-repair.reg

Re-enable clean-boot services and startup items from the recorded list. Remove the temporary account only after any required data and comparisons are complete.

12

Verification

  • The desktop and taskbar appear promptly after three sign-ins.
  • Explorer remains running.
  • The original and test-account results are understood.
  • Required third-party services have been re-enabled.
  • Sleep/wake and a cold boot return to the desktop normally.
13

Confidence and stop conditions

Confidence is approximately 85% when Task Manager works and Explorer, a second account, or clean boot changes the outcome. Stop if the display is also absent in Safe Mode, registry values cannot be backed up, DISM requires an unmatched repair source, or the black screen occurs before sign-in.