Black Screen Appears before login screen

Question

We are having a weird issue with some of our computers/laptops. When starting the system after shutdown, it gets stuck on the "black screen" screen and only the mouse cursor is visible even no keys of the keyboard is working like ALT+CLTRL+DEL . It takes more than 15 minutes to stay stuck on a black screen and need to hard boot / Power Off system and after Power of the login screen appeared immediately.

We have a domain-based environment having Windows Server 2012 R2 Single forest and multiple domain controllers on different sites. We have Windows 8.1 and Windows 10

Also analyzed events and nothing specious found in system login however on every system we have found some DCOM errors

Event Id 10036 - DistributedCOM

Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Date:          29/12/2021 9:51:09 am
Event ID:      10036
Task Category: None
Level:         Error
Keywords:      Classic
User:          CSAPLHO\JRN-DC$
Computer:      lap-4.csaplho.pk
Description:
The server-side authentication level policy does not allow the user CSAPLHO\JRN-DC$ SID (S-1-5-21-1782958495-2074117089-3830507010-11625) from address 10.3.0.25 to activate DCOM server. Please raise the activation authentication level at least to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY in client application.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10036</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2021-12-29T04:51:09.9339177Z" />
    <EventRecordID>69600</EventRecordID>
    <Correlation />
    <Execution ProcessID="1156" ThreadID="10392" />
    <Channel>System</Channel>
    <Computer>lap-4.csaplho.pk</Computer>
    <Security UserID="S-1-5-21-1782958495-2074117089-3830507010-11625" />
  </System>
  <EventData>
    <Data Name="Domain Name">CSAPLHO</Data>
    <Data Name="User Name">JRN-DC$</Data>
    <Data Name="SID">S-1-5-21-1782958495-2074117089-3830507010-11625</Data>
    <Data Name="Client IP Address">10.3.0.25</Data>
  </EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Date:          29/12/2021 9:48:21 am
Event ID:      10036
Task Category: None
Level:         Error
Keywords:      Classic
User:          CSAPLHO\NRA-DC$
Computer:      lap-4.csaplho.pk
Description:
The server-side authentication level policy does not allow the user CSAPLHO\NRA-DC$ SID (S-1-5-21-1782958495-2074117089-3830507010-12621) from address 10.2.0.25 to activate DCOM server. Please raise the activation authentication level at least to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY in client application.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10036</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2021-12-29T04:48:21.9074526Z" />
    <EventRecordID>69599</EventRecordID>
    <Correlation />
    <Execution ProcessID="1156" ThreadID="17616" />
    <Channel>System</Channel>
    <Computer>lap-4.csaplho.pk</Computer>
    <Security UserID="S-1-5-21-1782958495-2074117089-3830507010-12621" />
  </System>
  <EventData>
    <Data Name="Domain Name">CSAPLHO</Data>
    <Data Name="User Name">NRA-DC$</Data>
    <Data Name="SID">S-1-5-21-1782958495-2074117089-3830507010-12621</Data>
    <Data Name="Client IP Address">10.2.0.25</Data>
  </EventData>
</Event>

Answer 1

Hello @Osama Mansoor

This may be related to some driver update where the computer takes more time than expected to load all the components, specially explorer.exe for the GUI.

Try the next:
Repair windows installation with DISM: https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/repair-a-windows-image?view=windows-11
Perform clean boot (if this solves the issue, re-enable services in small quantity so you can detect which service causes the issue) https://support.microsoft.com/en-us/topic/how-to-perform-a-clean-boot-in-windows-da2f9573-6eec-00ad-2f8a-a97a1807f3dd
Perform a Windows update reset (in case an update is "stuck"): https://learn.microsoft.com/en-us/windows/deployment/update/windows-update-resources

Hope this helps with your query,

--If the reply is helpful, please Upvote and Accept as answer--