Solved

EventID1530 on server 2008 r2 sp1

Posted on 2012-04-01
4
375 Views
Last Modified: 2015-05-27
Hi,

I'm seeing eventid 1530 in App log on w2k8 r2 sp1 box running  citrix xenapp 6.5 everytime user(s) log off. I've read few articles about this issue, should i be concerned? I've tested it in our test lab and after reconnecting back I haven't noticed any issues. All printers are mapped back and I can use them without any issues.

i'm familiar with following articles:
http://support.microsoft.com/kb/947238
http://support.microsoft.com/kb/980408


 DETAIL -
  1 user registry handles leaked from \Registry\User\S-1-5-21-1770385481-4272976326-2274647878-1032:
 Process 1244 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-1770385481-4272976326-2274647878-1032\Printers\DevModePerUser

any other suggestions?

ty
pw
0
Comment
Question by:publicworks
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 24

Accepted Solution

by:
Dirk Kotte earned 250 total points
ID: 37793601
while deleting the user-profile are open handles detected.
this should not be a problem mostly. Its a warning only.
many times this raised by symantec endpoint protection.
there are a possibility of data-loss if the file are not written - but this registry-key are uncritical.
you should not be concerned because this.

if you detect some critical errors you can switch to the citrix UserProfileManager.
0
 

Author Comment

by:publicworks
ID: 37794054
hi dkotte,

thx for your reply. i've cupm 4.0 configured on all citrix servers and yes we do run SEP 12.1 on all servers. I know its only a warning so it shouldnt be a that much of big deal but with citrix one never knows. for example, when i install Xerox UPD on citrix box i do get more of those warnings, like one below:
Process 8864 (\Device\HarddiskVolume1\Program Files (x86)\Citrix\system32\CpSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-2129660284-1997560955-905330997-340192\Software\Xerox\PrinterDriver\V5.0\NamedSettings\UNIV

actually, i tested it and havent had any xerox printer problems. however, with xerox upd i can always uninstall it and use citrix upd. would be interesting to see if i get those warnings without SEP.
ty
pw
0
 
LVL 35

Expert Comment

by:Seth Simmons
ID: 40797883
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After several days of searching and hunting for limited documentation, I wanted to share this guide to hopefully save someone the hassle of trying to figure this out on their own. I have tested this on Xendesktop 7.1 and PS 4.5 running simultaneous…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question