Quote: Originally Posted by
Sal R. 
Do I need to tweak the registry entries to enable winlogon or is it just a matter of disabling EWF, renaming winlogon.exe.bak back to winlogon.exe and rebooting?
disable ewf, restart in safe mode (the service is locked) then delete and replace with the .bak version of winlogon, that should work.