have you tried to run in observe mode? does it logg anything?
It COULD be sth of the following:
- (pending) windows updates (that I guess will be tried to be installed/configured on startup) -> check policies
- some logon scripts etc (on SYSVOL or other network shares) -> configure trusted paths/directories
regarding policies: there are some pre-defined policies/policy groups like "windows update", windows ... (system), ... or so (maybe it was sth microsoft...?) .
Try to check those policies and (may) add them.
and btw: we had some similar issues on a test machine (not sure if xp or win7) - we managed somehow to fix that machine by starting with safe mode, disabeling mcafee services, starting ... enabeling policies (or maybe removing solidcore fist?) pushing vorrect policy).
at the end everything works find ... not sure what it was ... BUT ... we also diabled malwarebytes .software/service ... so mybe there was some conflict e.g. checking for roorkit at startup or so ...
Thank you Meforum for yours advices!
I will try to follown yours instructions.