Solved

EventID1530 on server 2008 r2 sp1

Posted on 2012-04-01
4
396 Views
Last Modified: 2015-05-27
Hi,

I'm seeing eventid 1530 in App log on w2k8 r2 sp1 box running  citrix xenapp 6.5 everytime user(s) log off. I've read few articles about this issue, should i be concerned? I've tested it in our test lab and after reconnecting back I haven't noticed any issues. All printers are mapped back and I can use them without any issues.

i'm familiar with following articles:
http://support.microsoft.com/kb/947238
http://support.microsoft.com/kb/980408


 DETAIL -
  1 user registry handles leaked from \Registry\User\S-1-5-21-1770385481-4272976326-2274647878-1032:
 Process 1244 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1770385481-4272976326-2274647878-1032\Printers\DevModePerUser

any other suggestions?

ty
pw
0
Comment
Question by:publicworks
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 24

Accepted Solution

by:
Dirk Kotte earned 250 total points
ID: 37793601
while deleting the user-profile are open handles detected.
this should not be a problem mostly. Its a warning only.
many times this raised by symantec endpoint protection.
there are a possibility of data-loss if the file are not written - but this registry-key are uncritical.
you should not be concerned because this.

if you detect some critical errors you can switch to the citrix UserProfileManager.
0
 

Author Comment

by:publicworks
ID: 37794054
hi dkotte,

thx for your reply. i've cupm 4.0 configured on all citrix servers and yes we do run SEP 12.1 on all servers. I know its only a warning so it shouldnt be a that much of big deal but with citrix one never knows. for example, when i install Xerox UPD on citrix box i do get more of those warnings, like one below:
Process 8864 (\Device\HarddiskVolume1\Program Files (x86)\Citrix\system32\CpSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-2129660284-1997560955-905330997-340192\Software\Xerox\PrinterDriver\V5.0\NamedSettings\UNIV

actually, i tested it and havent had any xerox printer problems. however, with xerox upd i can always uninstall it and use citrix upd. would be interesting to see if i get those warnings without SEP.
ty
pw
0
 
LVL 35

Expert Comment

by:Seth Simmons
ID: 40797883
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question