Just sharing with the communtity, since I had to find my own answers. If you have machines that start to boot Windows, then crash with either Winlogon BSOD (blue screen of death) or SAS errors, you probably have a GINA problem. Our problem was that there was a GINA logical loop. Windows loaded SBGINA, then CSGINA, which passed back to SBGINA... and crash. This fix should be similar for any other third party GINA components. Since the machine is broken in normal mode, you will have to fix it in Safe Mode.
Basically, you tell Windows to load SBGINA.DLL as first logon component. SBGINA then passes this control to CSGina.dll, which should then pass it to MSGina.dll. If you do not have any third party GINA components, set SB-OrigGinaDLL to blank.