Link to home
Start Free TrialLog in
Avatar of ADTADatacenter
ADTADatacenter

asked on

User profile issue

I get the below error on two separate windows 7 32 bit and windows 7 64 bit machines

Error1.
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL -
 1 user registry handles leaked from \Registry\User\S-1-5-21-1993962763-2146995231-725345543-1345:
Process 936 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1993962763-2146995231-725345543-1345\Software\Microsoft\Internet Explorer\LinksBar

Error2.
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

 DETAIL -
 1 user registry handles leaked from \Registry\User\S-1-5-21-1993962763-2146995231-725345543-1345:
Process 1944 (\Device\HarddiskVolume2\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe) has opened key \REGISTRY\USER\S-1-5-21-1993962763-2146995231-725345543-1345\Software\Symantec\Symantec Endpoint Protection\AV\Custom Tasks

Due to this some group policy scripts do not execute
Old group policy script execute
But new group policy scripts do not execute
The script in question is a vbs user login script mapping a network shared folder for the user
The same user when logs-in to another Windows 7 machine gets the folder mapped without errors
Also on another Windows XP machine the folder maps without errors

I wanted help in troubleshooting the error and how to remove this error completely


Avatar of arnold
arnold
Flag of United States of America image

windows 7 has the UPHC http://www.microsoft.com/download/en/details.aspx?id=6676 
Are you running a service using your credentials?

Reset the netcache on this workstation and look for mountpoint2 in the registry on whether this computer/user have stales sessions on teh file servers.
Avatar of ADTADatacenter
ADTADatacenter

ASKER

Dear Arnold,
The Unload Profile package you have suggested is for only windows xp
Does not install on windows 7

I am not running any service using my credentials

When you say "Reset the netcache"; how exactly you advise I can achieve this?
ipconfig  /flushdns?

For looking for mountpoint2  in the registry I should search for the string "mountpoint2" in the registry?

Please advice
Not to mention many thanks for your time and effort
For windows XP it is the package one has to add, this is actually installed on win7 (User Profile service).

To reset the netcache:
http://support.microsoft.com/kb/230738
http://support.microsoft.com/kb/942974

Mountpoint2
HKey_current_USER\software\microsoft\curentversion\explorer\mountpoint2
Dear Arnold,
Nope, I read the full page of the article at http://www.microsoft.com/download/en/details.aspx?id=6676 
It does say anywhere thatthis package can be installed opn Widnows 7
And not at all anythign for Windows 7 64 bit
I tried on Windows 7 32 bit also; it does not work either
Dear Arnold,

C:\Program Files\uphclean>uphclean -install
User Profile Hive Cleanup does not run on Windows 6 or later.

Dear Arnold,

Could find the below location
Please check teh below path again
HKey_current_USER\software\microsoft\curentversion\explorer\mountpoint2
Oops, windows missing.
HKey_current_USER\software\microsoft\windows\curentversion\explorer\mountpoint2


Windows 7 You already have it installed (user profile service) which is the source of the notification in your event log. Provided the link as a way for you to see the description/what it does.

There is nothing to troubleshoot.  This is more of an informaitonal alert that deals with an event that a user wes trying to logoff the windows 7 and to make sure that the logoff is successful, the user profile service helps in closing up resources in use by the user.

For roaming users this help because sync of profile does not begin unless the logoff is successful i.e. no local resources are used.

Please only read the Overview about UHPS (User Profile Service windows 7 service) which describes exactly what the two events reflect.
Dear Arnold,
Right
Ok
But when I checked there were some group policies which were not being implemented to some machines
On these machines the only common was this error in the event viewer
SO I thought if can solve this error the group policies may be pushed

Any advice?
Use GPMC and run a group policy results wizard to see what is being applied and this should also tell you why somethings do not run.
I have no idea what is going on so it is rather hard to say how to fix it.

the second error deals with possibly scheduled task running in end point (scan system) when a logoff is your Endpoint deployment user based or computer based?
Or the logged in added a custom scheduled task to endpoint.
Dear Arnold,
Endpoint protection is deployed as user based anti-virus
No scheduled system scans on local machine
No user initiated scans at the time of error

GP results shows all is well
ASKER CERTIFIED SOLUTION
Avatar of arnold
arnold
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial