asked on

Extremely slow user local and roaming profile logon times.

I am currently running a windows 2008 domain with approx. 350 roaming profiles. Users are using windows XP/windows 7.
The users complain of extremely slow log on times ranging from 3-8 minutes.
I have enabled the user debug log in the registry but I am having trouble deciphering the logs.

I was hoping that someone could 1. help determine what is going on and let me know what the issue is. and 2. explain to me how to read these. I've read a few articles but its not clicking.

thanks in advance.

Computer 1

USERENV(ff0.ff4) 12:43:03:634 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(ff0.ff4) 12:43:03:634 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(ff0.ff4) 12:43:03:634 LibMain: Process Name: \??\C:\WINDOWS\system32\winlogon.exe
USERENV(33c.638) 12:43:05:577 LibMain: Process Name: C:\WINDOWS\system32\mpnotify.exe
USERENV(3ec.3f0) 12:43:05:588 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(3ec.3f0) 12:43:05:588 =========================================================
USERENV(3ec.3f0) 12:43:05:588 LoadUserProfile: Entering, hToken = <0x854>, lpProfileInfo = 0x6e3e0
USERENV(3ec.3f0) 12:43:05:588 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(3ec.3f0) 12:43:05:588 LoadUserProfile: lpProfileInfo->lpUserName = <TestUser1>
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: lpProfileInfo->lpProfilePath = <\\RB-FileADM\Profiles$\TestUser1>
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\RB-DC1-HW\netlogon\Default User>
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: NULL server name
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: In console winlogon process
USERENV(3ec.3f0) 12:43:05:609 In LoadUserProfileP
USERENV(3ec.3f0) 12:43:05:609 =========================================================
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: Entering, hToken = <0x854>, lpProfileInfo = 0x6e3e0
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: lpProfileInfo->lpUserName = <TestUser1>
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: lpProfileInfo->lpProfilePath = <\\RB-FileADM\Profiles$\TestUser1>
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\RB-DC1-HW\netlogon\Default User>
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: NULL server name
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: User sid: S-1-5-21-2549970651-2034936752-3548929381-18026
USERENV(3ec.3f0) 12:43:05:609 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3ec.3f0) 12:43:05:609 CSyncManager::EnterLock: No existing entry found
USERENV(3ec.3f0) 12:43:05:609 CSyncManager::EnterLock: New entry created
USERENV(3ec.3f0) 12:43:05:609 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-18026 added in bucket 22
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: Wait succeeded. In critical section.
USERENV(3ec.3f0) 12:43:05:609 LoadUserProfile: Expanded profile path is \\RB-FileADM\Profiles$\TestUser1
USERENV(3ec.3f0) 12:43:05:609 ParseProfilePath: Entering, lpProfilePath = <\\RB-FileADM\Profiles$\TestUser1>
USERENV(3ec.3f0) 12:43:05:652 CheckXForestLogon: checking x-forest logon, user handle = 2132
USERENV(3ec.3f0) 12:43:05:652 CheckXForestLogon: not XForest logon.
USERENV(3ec.3f0) 12:43:05:652 AbleToBypassCSC: Try to bypass CSC
USERENV(3ec.3f0) 12:43:06:015 AbleToBypassCSC: tried NPAddConnection3ForCSCAgent. Error 2109
USERENV(3ec.3f0) 12:43:06:015 AbleToBypassCSC: Share \\RB-FileADM\Profiles$ mapped to drive E. Returned Path E:\TestUser1
USERENV(3ec.3f0) 12:43:06:015 ParseProfilePath: CSC bypassed. Profile path E:\TestUser1
USERENV(3ec.3f0) 12:43:06:015 ParseProfilePath: Tick Count = 0
USERENV(3ec.3f0) 12:43:06:026 PingComputer: PingBufferSize set as 2048
USERENV(3ec.3f0) 12:43:06:036 PingComputer: Adapter speed 1000000000 bps
USERENV(3ec.3f0) 12:43:06:036 PingComputer: First time: 0
USERENV(3ec.3f0) 12:43:06:036 PingComputer: Fast link. Exiting.
USERENV(3ec.3f0) 12:43:06:036 ParseProfilePath: GetFileAttributes found something with attributes <0x10>
USERENV(3ec.3f0) 12:43:06:036 ParseProfilePath: Found a directory
USERENV(3ec.3f0) 12:43:06:036 LoadUserProfile: ParseProfilePath returned a directory of <E:\TestUser1>
USERENV(3ec.3f0) 12:43:06:036 RestoreUserProfile: Entering
USERENV(3ec.3f0) 12:43:06:036 RestoreUserProfile: User is a Admin
USERENV(3ec.3f0) 12:43:06:036 IsCentralProfileReachable: Entering
USERENV(3ec.3f0) 12:43:06:036 CheckRoamingShareOwnership: checking ownership for E:\TestUser1
USERENV(3ec.3f0) 12:43:06:036 CheckRoamingShareOwnership: policy set to disable ownership check
USERENV(3ec.3f0) 12:43:06:036 IsCentralProfileReachable: Testing <E:\TestUser1\ntuser.man>
USERENV(3ec.3f0) 12:43:06:036 IsCentralProfileReachable: Profile is not reachable, error = 2
USERENV(3ec.3f0) 12:43:06:036 IsCentralProfileReachable: Testing <E:\TestUser1\ntuser.dat>
USERENV(3ec.3f0) 12:43:06:036 IsCentralProfileReachable: Found a user profile.
USERENV(3ec.3f0) 12:43:06:036 RestoreUserProfile: Central Profile is reachable
USERENV(3ec.3f0) 12:43:06:036 RestoreUserProfile: Central Profile is roaming
USERENV(3ec.3f0) 12:43:06:036 RestoreUserProfile: Profile path = <E:\TestUser1>
USERENV(3ec.3f0) 12:43:06:036 ExtractProfileFromBackup: A profile already exists
USERENV(3ec.3f0) 12:43:06:036 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(3ec.3f0) 12:43:06:036 CreateLocalProfileKey: Not setting additional Security
USERENV(3ec.3f0) 12:43:06:036 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(3ec.3f0) 12:43:06:047 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\TestUser1>
USERENV(3ec.3f0) 12:43:06:047 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\TestUser1>
USERENV(3ec.3f0) 12:43:06:047 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(3ec.3f0) 12:43:06:047 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\TestUser1\ntuser.dat>
USERENV(3ec.3f0) 12:43:06:047 Local Existing Profile Image is reachable
USERENV(3ec.3f0) 12:43:06:047 Local profile name is <C:\Documents and Settings\TestUser1>
USERENV(3ec.3f0) 12:43:06:047 RestoreUserProfile: Reconciling roaming profile with local profile
USERENV(3ec.3f0) 12:43:06:058 GetExclusionList: The exclusion on both server and client are same: <Local Settings;Temporary Internet Files;History;Temp>
USERENV(3ec.3f0) 12:43:06:079 CopyProfileDirectoryEx: Entering, lpSourceDir = <E:\TestUser1>, lpDestinationDir = <C:\Documents and Settings\TestUser1>, dwFlags = 0x4c20
USERENV(3ec.3f0) 12:43:06:079 CopyProfileDirectoryEx: lpExclusionList = <Local Settings;Temporary Internet Files;History;Temp>
USERENV(3ec.3f0) 12:43:06:079 ConvertExclusionList: Adding E:\TestUser1\Local Settings to ExclusionList
USERENV(3ec.3f0) 12:43:06:079 ConvertExclusionList: Adding E:\TestUser1\Temporary Internet Files to ExclusionList
USERENV(3ec.3f0) 12:43:06:079 ConvertExclusionList: Adding E:\TestUser1\History to ExclusionList
USERENV(3ec.3f0) 12:43:06:079 ConvertExclusionList: Adding E:\TestUser1\Temp to ExclusionList
USERENV(3ec.3f0) 12:43:06:079 ConvertExclusionList: Adding C:\Documents and Settings\TestUser1\Local Settings to ExclusionList
USERENV(3ec.3f0) 12:43:06:079 ConvertExclusionList: Adding C:\Documents and Settings\TestUser1\Temporary Internet Files to ExclusionList
USERENV(3ec.3f0) 12:43:06:079 ConvertExclusionList: Adding C:\Documents and Settings\TestUser1\History to ExclusionList
USERENV(3ec.3f0) 12:43:06:079 ConvertExclusionList: Adding C:\Documents and Settings\TestUser1\Temp to ExclusionList
USERENV(3ec.3f0) 12:43:06:090 RecurseDirectory: Adding E:\TestUser1\Application Data\Apple Computer\Logs\ to the list of directories
USERENV(3ec.3f0) 12:43:06:090 RecurseDirectory: Adding E:\TestUser1\Application Data\Apple Computer\ to the list of directories
USERENV(3ec.3f0) 12:43:06:090 RecurseDirectory: Adding E:\TestUser1\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\ to the list of directories
USERENV(3ec.3f0) 12:43:06:090 RecurseDirectory: Adding E:\TestUser1\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\ to the list of directories
USERENV(3ec.3f0) 12:43:06:090 RecurseDirectory: Adding E:\TestUser1\Application Data\Macromedia\Flash Player\www.macromedia.com\ to the list of directories
USERENV(3ec.3f0) 12:43:06:090 RecurseDirectory: Adding E:\TestUser1\Application Data\Macromedia\Flash Player\ to the list of directories
USERENV(3ec.3f0) 12:43:06:090 RecurseDirectory: Adding E:\TestUser1\Application Data\Macromedia\ to the list of directories
USERENV(3ec.3f0) 12:43:06:100 RecurseDirectory: Adding E:\TestUser1\Application Data\Microsoft\Credentials\S-1-5-21-2549970651-2034936752-3548929381-18026\ to the list of directories
USERENV(3ec.3f0) 12:43:06:100 RecurseDirectory: Adding E:\TestUser1\Application Data\Microsoft\Credentials\ to the list of directories
USERENV(3ec.3f0) 12:43:06:100 RecurseDirectory: Adding E:\TestUser1\Application Data\Microsoft\Internet Explorer\ to the list of directories
USERENV(3ec.3f0) 12:43:06:100 RecurseDirectory: Adding E:\TestUser1\Application Data\Microsoft\SystemCertificates\My\Certificates\ to the list of directories
USERENV(3ec.3f0) 12:43:06:100 RecurseDirectory: Adding E:\TestUser1\Application Data\Microsoft\SystemCertificates\My\CRLs\ to the list of directories
USERENV(3ec.3f0) 12:43:06:111 RecurseDirectory: Adding E:\TestUser1\Application Data\Microsoft\SystemCertificates\My\CTLs\ to the list of directories
USERENV(3ec.3f0) 12:43:06:111 RecurseDirectory: Adding E:\TestUser1\Application Data\Microsoft\SystemCertificates\My\ to the list of directories
USERENV(3ec.3f0) 12:43:06:111 RecurseDirectory: Adding E:\TestUser1\Application Data\Microsoft\SystemCertificates\ to the list of directories
USERENV(3ec.3f0) 12:43:06:111 RecurseDirectory: Adding E:\TestUser1\Application Data\Microsoft\ to the list of directories
USERENV(3ec.3f0) 12:43:06:111 RecurseDirectory: Adding E:\TestUser1\Application Data\ to the list of directories
USERENV(3ec.3f0) 12:43:06:111 RecurseDirectory: Adding E:\TestUser1\Cookies\ to the list of directories
USERENV(3ec.3f0) 12:43:06:111 RecurseDirectory: Adding E:\TestUser1\Desktop\ to the list of directories
USERENV(3ec.3f0) 12:43:06:111 RecurseDirectory: Adding E:\TestUser1\Favorites\ to the list of directories
USERENV(3ec.3f0) 12:43:06:111 RecurseDirectory: Adding E:\TestUser1\IETldCache\ to the list of directories
USERENV(3ec.3f0) 12:43:06:111 RecurseDirectory: Adding E:\TestUser1\My Documents\ to the list of directories
USERENV(3ec.3f0) 12:43:06:122 RecurseDirectory: Adding E:\TestUser1\NetHood\ to the list of directories
USERENV(3ec.3f0) 12:43:06:122 RecurseDirectory: Adding E:\TestUser1\PrintHood\ to the list of directories
USERENV(3ec.3f0) 12:43:06:122 RecurseDirectory: Adding E:\TestUser1\PrivacIE\ to the list of directories
USERENV(3ec.3f0) 12:43:06:122 RecurseDirectory: Adding E:\TestUser1\Recent\ to the list of directories
USERENV(3ec.3f0) 12:43:06:122 RecurseDirectory: Adding E:\TestUser1\SendTo\ to the list of directories
USERENV(3ec.3f0) 12:43:06:132 RecurseDirectory: Adding E:\TestUser1\Start Menu\Programs\Accessories\Accessibility\ to the list of directories
USERENV(3ec.3f0) 12:43:06:132 RecurseDirectory: Adding E:\TestUser1\Start Menu\Programs\Accessories\Entertainment\ to the list of directories
USERENV(3ec.3f0) 12:43:06:132 RecurseDirectory: Adding E:\TestUser1\Start Menu\Programs\Accessories\ to the list of directories
USERENV(3ec.3f0) 12:43:06:132 RecurseDirectory: Adding E:\TestUser1\Start Menu\Programs\Administrative Tools\ to the list of directories
USERENV(3ec.3f0) 12:43:06:132 RecurseDirectory: Adding E:\TestUser1\Start Menu\Programs\Startup\ to the list of directories
USERENV(3ec.3f0) 12:43:06:132 RecurseDirectory: Adding E:\TestUser1\Start Menu\Programs\ to the list of directories
USERENV(3ec.3f0) 12:43:06:132 RecurseDirectory: Adding E:\TestUser1\Start Menu\ to the list of directories
USERENV(3ec.3f0) 12:43:06:132 RecurseDirectory: Adding E:\TestUser1\Templates\ to the list of directories
USERENV(3ec.3f0) 12:43:06:186 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Apple Computer\Logs\ to the list of directories
USERENV(3ec.3f0) 12:43:06:186 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Apple Computer\ to the list of directories
USERENV(3ec.3f0) 12:43:06:207 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\ to the list of directories
USERENV(3ec.3f0) 12:43:06:207 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\ to the list of directories
USERENV(3ec.3f0) 12:43:06:207 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Macromedia\Flash Player\www.macromedia.com\ to the list of directories
USERENV(3ec.3f0) 12:43:06:207 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Macromedia\Flash Player\ to the list of directories
USERENV(3ec.3f0) 12:43:06:207 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Macromedia\ to the list of directories
USERENV(3ec.3f0) 12:43:06:218 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Microsoft\Credentials\S-1-5-21-2549970651-2034936752-3548929381-18026\ to the list of directories
USERENV(3ec.3f0) 12:43:06:218 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Microsoft\Credentials\ to the list of directories
USERENV(3ec.3f0) 12:43:06:218 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Microsoft\Internet Explorer\ to the list of directories
USERENV(3ec.3f0) 12:43:06:218 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Microsoft\SystemCertificates\My\Certificates\ to the list of directories
USERENV(3ec.3f0) 12:43:06:218 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Microsoft\SystemCertificates\My\CRLs\ to the list of directories
USERENV(3ec.3f0) 12:43:06:218 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Microsoft\SystemCertificates\My\CTLs\ to the list of directories
USERENV(3ec.3f0) 12:43:06:218 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Microsoft\SystemCertificates\My\ to the list of directories
USERENV(3ec.3f0) 12:43:06:218 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Microsoft\SystemCertificates\ to the list of directories
USERENV(3ec.3f0) 12:43:06:218 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\Microsoft\ to the list of directories
USERENV(3ec.3f0) 12:43:06:218 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Application Data\ to the list of directories
USERENV(3ec.3f0) 12:43:06:228 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Cookies\ to the list of directories
USERENV(3ec.3f0) 12:43:06:228 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Desktop\ to the list of directories
USERENV(3ec.3f0) 12:43:06:228 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Favorites\ to the list of directories
USERENV(3ec.3f0) 12:43:06:228 RecurseDirectory: Skipping <C:\Documents and Settings\TestUser1\History> due to exclusion list.
USERENV(3ec.3f0) 12:43:06:228 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\IETldCache\ to the list of directories
USERENV(3ec.3f0) 12:43:06:228 RecurseDirectory: Skipping <C:\Documents and Settings\TestUser1\Local Settings> due to exclusion list.
USERENV(3ec.3f0) 12:43:06:228 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\My Documents\ to the list of directories
USERENV(3ec.3f0) 12:43:06:228 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\NetHood\ to the list of directories
USERENV(3ec.3f0) 12:43:06:228 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\PrintHood\ to the list of directories
USERENV(3ec.3f0) 12:43:06:250 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\PrivacIE\ to the list of directories
USERENV(3ec.3f0) 12:43:06:260 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Recent\ to the list of directories
USERENV(3ec.3f0) 12:43:06:282 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\SendTo\ to the list of directories
USERENV(3ec.3f0) 12:43:06:357 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Start Menu\Programs\Accessories\Accessibility\ to the list of directories
USERENV(3ec.3f0) 12:43:06:367 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Start Menu\Programs\Accessories\Entertainment\ to the list of directories
USERENV(3ec.3f0) 12:43:06:367 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Start Menu\Programs\Accessories\ to the list of directories
USERENV(3ec.3f0) 12:43:06:367 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Start Menu\Programs\Administrative Tools\ to the list of directories
USERENV(3ec.3f0) 12:43:06:399 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Start Menu\Programs\Startup\ to the list of directories
USERENV(3ec.3f0) 12:43:06:399 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Start Menu\Programs\ to the list of directories
USERENV(3ec.3f0) 12:43:06:399 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Start Menu\ to the list of directories
USERENV(3ec.3f0) 12:43:06:421 RecurseDirectory: Adding C:\Documents and Settings\TestUser1\Templates\ to the list of directories
USERENV(3ec.3f0) 12:43:06:421 FindTotalDiskSpaceNeeded: Largest 7 file size is 436829
USERENV(3ec.3f0) 12:43:06:431 Available            1923391488
USERENV(3ec.3f0) 12:43:06:431 Needed            1153433
USERENV(3ec.3f0) 12:43:06:431 Src size            1541786
USERENV(3ec.3f0) 12:43:06:431 Dest size            1541786
USERENV(3ec.3f0) 12:43:06:431 Largest hive file            1048576
USERENV(3ec.3f0) 12:43:06:431 CopyProfileDirectoryEx: Found hive file NTUSER.DAT
USERENV(3ec.3f0) 12:43:06:431 CopyProfileDirectoryEx: Found hive file NTUSER.DAT.LOG
USERENV(3ec.3f0) 12:43:06:431 CopyProfileDirectoryEx: Found hive file ntuser.ini
USERENV(3ec.3f0) 12:43:06:453 ReconcileFile: E:\TestUser1\ntuser.ini ==> C:\Documents and Settings\TestUser1\ntuser.ini [OK]
USERENV(3ec.3f0) 12:43:06:453 CopyProfileDirectoryEx: Found hive file ntuser.pol
USERENV(3ec.3f0) 12:43:06:453 CopyProfileDirectoryEx: Calling ReconcileDirectory for all Directories
USERENV(854.900) 12:43:06:666 LibMain: Process Name: C:\WINDOWS\system32\Ati2evxx.exe
USERENV(3ec.3f0) 12:43:06:677 CopyProfileDirectoryEx: Reconcile Directory Done for all Directories
USERENV(3ec.3f0) 12:43:06:730 CopyProfileDirectoryEx: Setting Directory TimeStamps all Directories
USERENV(3ec.3f0) 12:43:06:730 CopyProfileDirectoryEx: Set times on all directories
USERENV(3ec.3f0) 12:43:06:730 CopyProfileDirectoryEx: Leaving with a return value of 1
USERENV(3ec.3f0) 12:43:06:773 MyRegLoadKey: Returning 00000000
USERENV(3ec.3f0) 12:43:06:816 MyRegLoadKey: Returning 00000000
USERENV(3ec.3f0) 12:43:06:816 CreateClassHive: existing user classes hive found
USERENV(3ec.3f0) 12:43:06:816 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(3ec.3f0) 12:43:06:816 Profile was successfully loaded.
USERENV(3ec.3f0) 12:43:06:816 lpProfile->lpRoamingProfile = <E:\TestUser1>
USERENV(3ec.3f0) 12:43:06:816 lpProfile->lpLocalProfile = <C:\Documents and Settings\TestUser1>
USERENV(3ec.3f0) 12:43:06:816 lpProfile->dwInternalFlags = 0x110
USERENV(3ec.3f0) 12:43:06:816 RestoreUserProfile: Leaving.
USERENV(3ec.3f0) 12:43:06:816 UpgradeProfile: Entering
USERENV(3ec.3f0) 12:43:06:816 UpgradeProfile: Build numbers match
USERENV(3ec.3f0) 12:43:06:816 UpgradeProfile: Leaving Successfully
USERENV(3ec.3f0) 12:43:06:816 GetProfileType: Profile already loaded.
USERENV(3ec.3f0) 12:43:06:816 LoadProfileInfo: Failed to query central profile with error 2
USERENV(3ec.3f0) 12:43:06:816 GetProfileType: ProfileFlags is 0
USERENV(3ec.3f0) 12:43:06:837 Profile Ref Count is 1
USERENV(3ec.3f0) 12:43:06:837 LoadUserProfile: Leaving critical Section.
USERENV(3ec.3f0) 12:43:06:837 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3ec.3f0) 12:43:06:837 CSyncManager::LeaveLock: Lock released
USERENV(3ec.3f0) 12:43:06:837 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-18026 deleted
USERENV(3ec.3f0) 12:43:06:837 CSyncManager::LeaveLock: Lock deleted
USERENV(3ec.3f0) 12:43:06:837 LoadUserProfile: Impersonated user: 00000854, 00000000
USERENV(3ec.3f0) 12:43:06:837 LoadUserProfile: Reverted to user: 00000000
USERENV(3ec.3f0) 12:43:06:837 CancelCSCBypassedConnection: Cancelling connection of E:
USERENV(3ec.3f0) 12:43:06:837 CancelCSCBypassedConnection: Connection deleted.
USERENV(3ec.3f0) 12:43:06:837 LoadUserProfile: Leaving with a value of 1.
USERENV(3ec.3f0) 12:43:06:837 =========================================================
USERENV(3ec.3f0) 12:43:06:837 LoadUserProfile: LoadUserProfileP succeeded
USERENV(3ec.3f0) 12:43:06:837 LoadUserProfile: Returning success. Final Information follows:
USERENV(3ec.3f0) 12:43:06:837 lpProfileInfo->UserName = <TestUser1>
USERENV(3ec.3f0) 12:43:06:837 lpProfileInfo->lpProfilePath = <\\RB-FileADM\Profiles$\TestUser1>
USERENV(3ec.3f0) 12:43:06:837 lpProfileInfo->dwFlags = 0x0
USERENV(3ec.3f0) 12:43:06:837 LoadUserProfile: Returning TRUE. hProfile = <0x880>
USERENV(3ec.3f0) 12:43:06:890 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(3ec.dc8) 12:43:06:890 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(3ec.dc8) 12:43:07:232 ApplyGroupPolicy: Entering. Flags = 6
USERENV(3ec.dc8) 12:43:07:232 ProcessGPOs:
USERENV(3ec.dc8) 12:43:07:232 ProcessGPOs:
USERENV(3ec.dc8) 12:43:07:232 ProcessGPOs: Starting user Group Policy (Background) processing...
USERENV(3ec.dc8) 12:43:07:232 ProcessGPOs:
USERENV(3ec.dc8) 12:43:07:232 ProcessGPOs:
USERENV(3ec.dc8) 12:43:07:232 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
USERENV(3ec.dc8) 12:43:07:232 EnterCriticalPolicySectionEx: User critical section has been claimed. Handle = 0x87c
USERENV(3ec.dc8) 12:43:07:232 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(3ec.dc8) 12:43:07:232 ProcessGPOs: Machine role is 2.
USERENV(3ec.dc8) 12:43:07:232 PingComputer: PingBufferSize set as 2048
USERENV(3ec.dc8) 12:43:07:232 PingComputer: Adapter speed 1000000000 bps
USERENV(3ec.dc8) 12:43:07:232 PingComputer: First time: 0
USERENV(3ec.dc8) 12:43:07:232 PingComputer: Fast link. Exiting.
USERENV(3ec.dc8) 12:43:07:243 ProcessGPOs: User name is: CN=Jason Hughes,OU=NetAdmins,DC=TestDomainnet,DC=org, Domain name is: TestDomainNET
USERENV(3ec.dc8) 12:43:07:243 ProcessGPOs: Domain controller is: \\DC-2-TD.TestDomainnet.org Domain DN is TestDomainnet.org
USERENV(3ec.dc8) 12:43:07:243 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(3ec.dc8) 12:43:07:243 ReadGPExtensions: Rsop entry point not found for dskquota.dll.
USERENV(3ec.dc8) 12:43:07:243 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(3ec.dc8) 12:43:07:243 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\system32\iedkcs32.dll.
USERENV(3ec.dc8) 12:43:07:243 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\system32\iedkcs32.dll.
USERENV(3ec.dc8) 12:43:07:243 ReadGPExtensions: Rsop entry point not found for scecli.dll.
USERENV(3ec.dc8) 12:43:07:243 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\cscui.dll.
USERENV(3ec.dc8) 12:43:07:243 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\system32\iedkcs32.dll.
USERENV(3ec.dc8) 12:43:07:243 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(3ec.dc8) 12:43:07:243 ReadStatus: Read Extension's Previous status successfully.
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {0E28E245-9368-4853-AD84-6DA3BA35BB75}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {17D89FEC-5C44-4972-B12D-241CAEF74509}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {1A6364EB-776B-4120-ADE1-B63A406A76B5}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(3ec.dc8) 12:43:07:243 ReadStatus: Read Extension's Previous status successfully.
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {5794DAFD-BE60-433f-88A2-1A31939AC01F}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {6232C319-91AC-4931-9385-E70C2B099F0E}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {7150F9BF-48AD-4da4-A49C-29EF4A8369BA}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {728EE579-943C-4519-9EF7-AB56765798ED}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {74EE6C03-5363-4554-B161-627540339CAB}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {7B849a69-220F-451E-B3FE-2CB811AF94AE}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {91FBB303-0CD5-4055-BF42-E512A681B325}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {A3F3E39B-5D83-4940-B954-28315B82F0A8}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {AADCED64-746C-4633-A97C-D61349046527}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {B087BE9D-ED37-454f-AF9C-04291E351182}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(3ec.dc8) 12:43:07:243 ReadExtStatus: Reading Previous Status for extension {B587E2B1-4D59-4e7e-AED9-22B9DF11D053}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {C631DF4C-088F-4156-B058-4375F0853CD8}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {E47248BA-94CC-49c4-BBB5-9EB7F05183D0}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {E4F48E54-F38D-4884-BFB9-D4D2E5729C18}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {E5094040-C46C-4115-B030-04FB2E545B00}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {E62688F0-25FD-4c90-BFF5-F508B9D2E31F}
USERENV(3ec.dc8) 12:43:07:253 ReadExtStatus: Reading Previous Status for extension {F9C77450-3A41-477E-9310-9ACD617BD9E3}
USERENV(3ec.dc8) 12:43:07:253 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(3ec.dc8) 12:43:07:253 GetGPOInfo: ********************************
USERENV(3ec.dc8) 12:43:07:253 GetGPOInfo: Entering...
USERENV(3ec.dc8) 12:43:07:253 GetGPOInfo: Server connection established.
USERENV(3ec.dc8) 12:43:07:253 GetGPOInfo: Bound successfully.
USERENV(3ec.dc8) 12:43:07:253 SearchDSObject: Searching <OU=NetAdmins,DC=TestDomainnet,DC=org>
USERENV(3ec.dc8) 12:43:07:253 SearchDSObject: Found GPO(s): <[LDAP://cn={B129D16A-3A52-404B-AD7D-17E0F2AA4F82},cn=policies,cn=system,DC=TestDomainnet,DC=org;0][LDAP://cn={F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1},cn=policies,cn=system,DC=TestDomainnet,DC=org;0]>
USERENV(3ec.dc8) 12:43:07:253 ProcessGPO: ==============================
USERENV(3ec.dc8) 12:43:07:253 ProcessGPO: Deferring search for <LDAP://cn={B129D16A-3A52-404B-AD7D-17E0F2AA4F82},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3ec.dc8) 12:43:07:253 ProcessGPO: ==============================
USERENV(3ec.dc8) 12:43:07:253 ProcessGPO: Deferring search for <LDAP://cn={F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3ec.dc8) 12:43:07:253 SearchDSObject: Searching <DC=TestDomainnet,DC=org>
USERENV(3ec.dc8) 12:43:07:253 SearchDSObject: Found GPO(s): <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=TestDomainnet,DC=org;0]>
USERENV(3ec.dc8) 12:43:07:253 ProcessGPO: ==============================
USERENV(3ec.dc8) 12:43:07:253 ProcessGPO: Deferring search for <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3ec.dc8) 12:43:07:253 SearchDSObject: Searching <CN=Parrot,CN=Sites,CN=Configuration,DC=TestDomainnet,DC=org>
USERENV(3ec.dc8) 12:43:07:253 SearchDSObject: No GPO(s) for this object.
USERENV(3ec.dc8) 12:43:07:253 EvaluateDeferredGPOs: Searching for GPOs in cn=policies,cn=system,DC=TestDomainnet,DC=org
USERENV(3ec.dc8) 12:43:07:264 ProcessGPO: ==============================
USERENV(3ec.dc8) 12:43:07:264 ProcessGPO: Searching <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3ec.dc8) 12:43:07:264 ProcessGPO: User has access to this GPO.
USERENV(3ec.dc8) 12:43:07:264 FilterCheck: Found WMI Filter id of: < >
USERENV(3ec.dc8) 12:43:07:264 ProcessGPO: GPO passes the filter check.
USERENV(3ec.dc8) 12:43:07:264 ProcessGPO: Found functionality version of: 2
USERENV(3ec.dc8) 12:43:07:264 ProcessGPO: Found file system path of: <\\TestDomainnet.org\sysvol\TestDomainnet.org\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(3ec.dc8) 12:43:07:275 ProcessGPO: Found common name of: <{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(3ec.dc8) 12:43:07:275 ProcessGPO: Found display name of: <Default Domain Policy>
USERENV(3ec.dc8) 12:43:07:275 ProcessGPO: Found user version of: GPC is 1, GPT is 1
USERENV(3ec.dc8) 12:43:07:275 ProcessGPO: Found flags of: 0
USERENV(3ec.dc8) 12:43:07:275 ProcessGPO: Found extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
USERENV(3ec.dc8) 12:43:07:275 ProcessGPO: ==============================
USERENV(3ec.dc8) 12:43:07:275 ProcessGPO: ==============================
USERENV(3ec.dc8) 12:43:07:275 ProcessGPO: Searching <cn={B129D16A-3A52-404B-AD7D-17E0F2AA4F82},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3ec.dc8) 12:43:07:275 ProcessGPO: User has access to this GPO.
USERENV(3ec.dc8) 12:43:07:275 FilterCheck: Found WMI Filter id of: <[TestDomainnet.org;{6DB2522F-3C7C-4202-87F1-1266510180DC};0]>
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: The GPO does not pass the filter check and so will not be applied.
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: Found functionality version of: 2
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: Found file system path of: <\\TestDomainnet.org\sysvol\TestDomainnet.org\Policies\{B129D16A-3A52-404B-AD7D-17E0F2AA4F82}>
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: Sysvol access skipped because GPO is not getting applied.
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: Found common name of: <{B129D16A-3A52-404B-AD7D-17E0F2AA4F82}>
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: Found display name of: <Win7-NetAdmins>
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: Found user version of: GPC is 16, GPT is 65535
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: Found flags of: 0
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: Found extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: ==============================
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: ==============================
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: Searching <cn={F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3ec.dc8) 12:43:07:307 ProcessGPO: User has access to this GPO.
USERENV(3ec.dc8) 12:43:07:307 FilterCheck: Found WMI Filter id of: <[TestDomainnet.org;{B05ADC1E-57FF-4268-8E51-2DEE3D2B4371};0]>
USERENV(3ec.dc8) 12:43:07:328 ProcessGPO: GPO passes the filter check.
USERENV(3ec.dc8) 12:43:07:328 ProcessGPO: Found functionality version of: 2
USERENV(3ec.dc8) 12:43:07:328 ProcessGPO: Found file system path of: <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}>
USERENV(3ec.dc8) 12:43:07:328 ProcessGPO: Found common name of: <{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}>
USERENV(3ec.dc8) 12:43:07:328 ProcessGPO: Found display name of: <NetAdmins>
USERENV(3ec.dc8) 12:43:07:328 ProcessGPO: Found user version of: GPC is 67, GPT is 67
USERENV(3ec.dc8) 12:43:07:328 ProcessGPO: Found flags of: 0
USERENV(3ec.dc8) 12:43:07:328 ProcessGPO: Found extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
USERENV(3ec.dc8) 12:43:07:328 ProcessGPO: ==============================
USERENV(3ec.dc8) 12:43:07:328 GetGPOInfo: GPO Local Group Policy doesn't contain any data since the version number is 0. It will be skipped.
USERENV(3ec.dc8) 12:43:07:328 GetGPOInfo: Leaving with 1
USERENV(3ec.dc8) 12:43:07:328 GetGPOInfo: ********************************
USERENV(3ec.dc8) 12:43:07:328 ProcessGPOs: Logging Data for Target <TestUser1>.
USERENV(3ec.dc8) 12:43:07:328 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
USERENV(3ec.dc8) 12:43:07:328 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:328 ProcessGPOs: Processing extension Registry
USERENV(3ec.dc8) 12:43:07:328 ReadStatus: Read Extension's Previous status successfully.
USERENV(3ec.dc8) 12:43:07:328 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:328 ProcessGPOList: Entering for extension Registry
USERENV(3ec.dc8) 12:43:07:328 UserPolicyCallback: Setting status UI to Applying Registry policy...
USERENV(3ec.dc8) 12:43:07:328 ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
USERENV(3ec.dc8) 12:43:07:328 EnterCriticalPolicySectionEx: Entering with timeout 60000 and flags 0x2
USERENV(3ec.dc8) 12:43:07:328 EnterCriticalPolicySectionEx: User critical section has been claimed. Handle = 0x898
USERENV(3ec.dc8) 12:43:07:328 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(3ec.dc8) 12:43:07:328 ResetPolicies: Entering.
USERENV(3ec.dc8) 12:43:07:328 ParseRegistryFile: Entering with <C:\Documents and Settings\TestUser1\ntuser.pol>.
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\Internet Explorer\Restrictions\NoPopupManagement
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\access\settings\default database directory
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\common\toolbars\customuiroaming
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\excel\options\defaultpath
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\ms project\options\save\defaultprojectspath
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\outlook\options\general\check default client
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\outlook\preferences\disablemanualarchive
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\powerpoint\recentfolderlist\default
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\word\options\doc-path
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1001
USERENV(3ec.dc8) 12:43:07:360 DeleteRegistryValue: Deleted Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2201
USERENV(3ec.dc8) 12:43:07:360 ParseRegistryFile: Leaving.
USERENV(3ec.dc8) 12:43:07:360 ResetPolicies: Leaving.
USERENV(3ec.dc8) 12:43:07:360 ParseRegistryFile: Entering with <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\User\registry.pol>.
USERENV(3ec.dc8) 12:43:07:360 SetRegistryValue: InitialKeyboardIndicators => 0 [OK]
USERENV(3ec.dc8) 12:43:07:360 SetRegistryValue: Download Directory => H:\ [OK]
USERENV(3ec.dc8) 12:43:07:360 SetRegistryValue: Start Page => www.google.com [OK]
USERENV(3ec.dc8) 12:43:07:360 SetRegistryValue: Disable Script Debugger => yes [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: Personal => H:\My Documents [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: AppData => H:\Application Data [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: Favorites => H:\Favorites [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: Desktop => H:\Desktop [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: My Pictures => H:\My Documents\My Pictures [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: Templates => H:\Templates [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: Recent => %USERPROFILE%\Recent [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: Programs => C:\Local [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: Start Menu => %USERPROFILE%\Start Menu\Programs [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: Cookies => %USERPROFILE%\Cookies [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: History => %USERPROFILE%\History [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: 1001 => 1 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: 1004 => 3 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: 1200 => 0 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: 1201 => 3 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: 1400 => 0 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: 1402 => 0 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: 1405 => 0 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: NoPopupManagement => 1 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: default database directory => H:\My Documents [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: customuiroaming => 1 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: defaultpath => H:\My Documents [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: defaultprojectspath => H:\My Documents [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: check default client => 1 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: disablemanualarchive => 1 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: default => H:\My Documents [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: doc-path => H:\My Documents [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: 1001 => 1 [OK]
USERENV(3ec.dc8) 12:43:07:371 SetRegistryValue: 2201 => 0 [OK]
USERENV(3ec.dc8) 12:43:07:371 ParseRegistryFile: Leaving.
USERENV(3ec.dc8) 12:43:07:382 LeaveCriticalPolicySection: Critical section 0x898 has been released.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOList: Extension Registry status was not updated because there was no changes and no transition or rsop wasn't enabled
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Wireless
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Wireless's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Wireless skipped with flags 0x6.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Group Policy Environment
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Group Policy Environment's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Group Policy Environment skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Group Policy Local Users and Groups
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Group Policy Local Users and Groups's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Group Policy Local Users and Groups skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Group Policy Device Settings
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Group Policy Device Settings's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Group Policy Device Settings skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Folder Redirection
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Folder Redirection's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Folder Redirection skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Microsoft Disk Quota
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Microsoft Disk Quota's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Microsoft Disk Quota skipped with flags 0x6.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Group Policy Network Options
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Group Policy Network Options's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Group Policy Network Options skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension QoS Packet Scheduler
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension QoS Packet Scheduler's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension QoS Packet Scheduler skipped with flags 0x6.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Scripts
USERENV(3ec.dc8) 12:43:07:382 ReadStatus: Read Extension's Previous status successfully.
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes and no security group membership change and extension Scripts has NoGPOChanges set.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Internet Explorer Zonemapping
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Zonemapping's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Internet Explorer Zonemapping skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Group Policy Drive Maps
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Group Policy Drive Maps's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Group Policy Drive Maps skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Group Policy Folders
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Group Policy Folders's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Group Policy Folders skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Group Policy Network Shares
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Group Policy Network Shares's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Group Policy Network Shares skipped with flags 0x6.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Group Policy Files
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CheckGPOs: No GPO changes but couldn't read extension Group Policy Files's status or policy time.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Extension Group Policy Files skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:382 ProcessGPOs: Processing extension Group Policy Data Sources
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:382 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Data Sources's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Data Sources skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Ini Files
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Ini Files's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Ini Files skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Internet Explorer User Accelerators
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer User Accelerators's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Internet Explorer User Accelerators skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Security
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Security's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Security skipped with flags 0x6.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Services
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Services's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Services skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Internet Explorer Branding
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Branding's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Internet Explorer Branding skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Folder Options
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Folder Options's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Folder Options skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Scheduled Tasks
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Scheduled Tasks's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Scheduled Tasks skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Registry
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Registry's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Registry skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension EFS recovery
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension EFS recovery's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension EFS recovery skipped with flags 0x6.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension 802.3 Group Policy
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension 802.3 Group Policy's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension 802.3 Group Policy skipped with flags 0x6.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Printers
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Printers's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Printers skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Shortcuts
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Shortcuts's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Shortcuts skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Microsoft Offline Files
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Microsoft Offline Files's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Microsoft Offline Files skipped with flags 0x6.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Software Installation
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Software Installation's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Software Installation skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Internet Explorer Machine Accelerators
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Machine Accelerators's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Internet Explorer Machine Accelerators skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension IP Security
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension IP Security's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension IP Security skipped with flags 0x6.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Internet Settings
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Internet Settings's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Internet Settings skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Start Menu Settings
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Start Menu Settings's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Start Menu Settings skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Regional Options
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:392 CheckGPOs: No GPO changes but couldn't read extension Group Policy Regional Options's status or policy time.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Extension Group Policy Regional Options skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:392 ProcessGPOs: Processing extension Group Policy Power Options
USERENV(3ec.dc8) 12:43:07:403 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:403 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:403 CheckGPOs: No GPO changes but couldn't read extension Group Policy Power Options's status or policy time.
USERENV(3ec.dc8) 12:43:07:403 ProcessGPOs: Extension Group Policy Power Options skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:403 ProcessGPOs: -----------------------
USERENV(3ec.dc8) 12:43:07:403 ProcessGPOs: Processing extension Group Policy Applications
USERENV(3ec.dc8) 12:43:07:403 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:403 CompareGPOLists: The lists are the same.
USERENV(3ec.dc8) 12:43:07:403 CheckGPOs: No GPO changes but couldn't read extension Group Policy Applications's status or policy time.
USERENV(3ec.dc8) 12:43:07:403 ProcessGPOs: Extension Group Policy Applications skipped because both deleted and changed GPO lists are empty.
USERENV(3ec.dc8) 12:43:07:403 SetFgRefreshInfo: Previous User Fg policy Synchronous, Reason: SyncPolicy.
USERENV(3ec.dc8) 12:43:07:403 SetFgRefreshInfo: Next User Fg policy Synchronous, Reason: SyncPolicy.
USERENV(3ec.dc8) 12:43:07:403 ProcessGPOs: No WMI logging done in this policy cycle.
USERENV(3ec.dc8) 12:43:07:403 LeaveCriticalPolicySection: Critical section 0x87c has been released.
USERENV(3ec.dc8) 12:43:07:403 ProcessGPOs: User Group Policy has been applied.
USERENV(3ec.dc8) 12:43:07:403 ProcessGPOs: Leaving with 1.
USERENV(3ec.dc8) 12:43:07:403 ApplyGroupPolicy: Leaving successfully.
USERENV(3ec.eb4) 12:43:07:403 PolicyChangedThread: UpdateUser failed with 1008.
USERENV(3ec.eb4) 12:43:07:403 PolicyChangedThread: Broadcast message for 0.
USERENV(3ec.eb8) 12:43:07:403 GPOThread: Next refresh will happen in 96 minutes
USERENV(edc.ee4) 12:43:07:446 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(124.158) 12:43:07:488 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(124.158) 12:43:07:488 =========================================================
USERENV(124.158) 12:43:07:488 LoadUserProfile: Entering, hToken = <0x25c>, lpProfileInfo = 0x115fb50
USERENV(124.158) 12:43:07:488 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(124.158) 12:43:07:488 LoadUserProfile: lpProfileInfo->lpUserName = <TestUser1>
USERENV(124.158) 12:43:07:488 LoadUserProfile: NULL central profile path
USERENV(124.158) 12:43:07:488 LoadUserProfile: NULL default profile path
USERENV(124.158) 12:43:07:488 LoadUserProfile: NULL server name
USERENV(124.158) 12:43:07:488 GetInterface: Returning rpc binding handle
USERENV(3ec.3ac) 12:43:07:488 IProfileSecurityCallBack: client authenticated.
USERENV(3ec.3ac) 12:43:07:488 DropClientContext: Got client token 000009F8, sid = S-1-5-18
USERENV(3ec.3ac) 12:43:07:488 MIDL_user_allocate enter
USERENV(3ec.3ac) 12:43:07:488 DropClientContext: load profile object successfully made
USERENV(3ec.3ac) 12:43:07:488 DropClientContext: Returning 0
USERENV(124.158) 12:43:07:499 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(124.158) 12:43:07:531 CProfileDialog::Initialize : Cookie generated <645EA83E936BB28907D5EB290DF15AEC>
USERENV(124.158) 12:43:07:574 CProfileDialog::Initialize : Endpoint generated <IProfileDialog_A4A2A39369C591A83E256C49E8A8C118>
USERENV(3ec.54c) 12:43:07:574 IProfileSecurityCallBack: client authenticated.
USERENV(3ec.54c) 12:43:07:574 LoadUserProfileI: RPC end point IProfileDialog_A4A2A39369C591A83E256C49E8A8C118
USERENV(3ec.54c) 12:43:07:574 In LoadUserProfileP
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: Running as client
USERENV(3ec.54c) 12:43:07:574 =========================================================
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: Entering, hToken = <0x9d8>, lpProfileInfo = 0x11554e8
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: lpProfileInfo->lpUserName = <TestUser1>
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: NULL central profile path
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: NULL default profile path
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: NULL server name
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: User sid: S-1-5-21-2549970651-2034936752-3548929381-18026
USERENV(3ec.54c) 12:43:07:574 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3ec.54c) 12:43:07:574 CSyncManager::EnterLock: No existing entry found
USERENV(3ec.54c) 12:43:07:574 CSyncManager::EnterLock: New entry created
USERENV(3ec.54c) 12:43:07:574 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-18026 added in bucket 22
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: Wait succeeded. In critical section.
USERENV(3ec.54c) 12:43:07:574 TestIfUserProfileLoaded: Profile already loaded.
USERENV(3ec.54c) 12:43:07:574 Profile Ref Count is 2
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: Leaving critical Section.
USERENV(3ec.54c) 12:43:07:574 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3ec.54c) 12:43:07:574 CSyncManager::LeaveLock: Lock released
USERENV(3ec.54c) 12:43:07:574 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-18026 deleted
USERENV(3ec.54c) 12:43:07:574 CSyncManager::LeaveLock: Lock deleted
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: Impersonated user: 000009d8, 000008d0
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: Reverted to user: 00000000
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: Reverted back to user <00000000>
USERENV(3ec.54c) 12:43:07:574 LoadUserProfile: Leaving with a value of 1.
USERENV(3ec.54c) 12:43:07:574 =========================================================
USERENV(3ec.54c) 12:43:07:574 LoadUserProfileI: returning 0
USERENV(124.158) 12:43:07:574 LoadUserProfile: Running as self
USERENV(124.158) 12:43:07:574 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(124.158) 12:43:07:574 LoadUserProfile: Returning success. Final Information follows:
USERENV(124.158) 12:43:07:574 lpProfileInfo->UserName = <TestUser1>
USERENV(124.158) 12:43:07:574 lpProfileInfo->lpProfilePath = <>
USERENV(124.158) 12:43:07:574 lpProfileInfo->dwFlags = 0x0
USERENV(3ec.404) 12:43:07:574 IProfileSecurityCallBack: client authenticated.
USERENV(3ec.404) 12:43:07:574 ReleaseClientContext: Releasing context
USERENV(3ec.404) 12:43:07:574 ReleaseClientContext_s: Releasing context
USERENV(3ec.404) 12:43:07:574 MIDL_user_free enter
USERENV(124.158) 12:43:07:574 ReleaseInterface: Releasing rpc binding handle
USERENV(124.158) 12:43:07:574 LoadUserProfile: Returning TRUE. hProfile = <0x270>
USERENV(124.158) 12:43:07:574 UnloadUserProfile: Entering, hProfile = <0x270>
USERENV(124.158) 12:43:07:574 GetInterface: Returning rpc binding handle
USERENV(3ec.3ac) 12:43:07:584 IProfileSecurityCallBack: client authenticated.
USERENV(3ec.3ac) 12:43:07:584 DropClientContext: Got client token 000009F8, sid = S-1-5-18
USERENV(3ec.3ac) 12:43:07:584 MIDL_user_allocate enter
USERENV(3ec.3ac) 12:43:07:584 DropClientContext: load profile object successfully made
USERENV(3ec.3ac) 12:43:07:584 DropClientContext: Returning 0
USERENV(124.158) 12:43:07:584 UnLoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(3ec.54c) 12:43:07:584 IProfileSecurityCallBack: client authenticated.
USERENV(3ec.54c) 12:43:07:584 UnloadUserProfileP: Entering, hProfile = <0x888>
USERENV(3ec.54c) 12:43:07:584 UnloadUserProfileP: ImpersonateUser <000009f8>, old token is <00000000>
USERENV(3ec.54c) 12:43:07:584 AbleToBypassCSC: Try to bypass CSC
USERENV(3ec.54c) 12:43:07:584 AbleToBypassCSC: tried NPAddConnection3ForCSCAgent. Error 2109
USERENV(3ec.54c) 12:43:07:584 AbleToBypassCSC: Share \\RB-FileADM\Profiles$ mapped to drive E. Returned Path E:\TestUser1
USERENV(3ec.54c) 12:43:07:584 UnLoadUserProfileP: CSC bypassed.
USERENV(3ec.54c) 12:43:07:584 GetExclusionListFromRegistry: Policy list is empty, returning user list = <Local Settings;Temporary Internet Files;History;Temp>
USERENV(3ec.54c) 12:43:07:584 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3ec.54c) 12:43:07:584 CSyncManager::EnterLock: No existing entry found
USERENV(3ec.54c) 12:43:07:584 CSyncManager::EnterLock: New entry created
USERENV(3ec.54c) 12:43:07:584 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-18026 added in bucket 22
USERENV(3ec.54c) 12:43:07:584 UnloadUserProfileP: Wait succeeded. In critical section.
USERENV(3ec.54c) 12:43:07:798 UnloadUserProfileP: Didn't unload user profile, Ref Count is 1
USERENV(3ec.54c) 12:43:07:798 UnloadUserProfileP: Reverted back to user <00000000>
USERENV(3ec.54c) 12:43:07:798 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3ec.54c) 12:43:07:798 CSyncManager::LeaveLock: Lock released
USERENV(3ec.54c) 12:43:07:798 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-18026 deleted
USERENV(3ec.54c) 12:43:07:798 CSyncManager::LeaveLock: Lock deleted
USERENV(3ec.54c) 12:43:07:798 UnloadUserProfileP: Leave critical section.
USERENV(3ec.54c) 12:43:07:798 CancelCSCBypassedConnection: Cancelling connection of E:
USERENV(3ec.54c) 12:43:07:798 CancelCSCBypassedConnection: Connection deleted.
USERENV(3ec.54c) 12:43:07:798 UnloadUserProfileP: Leaving with a return value of 1
USERENV(3ec.54c) 12:43:07:798 UnloadUserProfileI: returning 0
USERENV(124.158) 12:43:07:798 UnloadUserProfile: Calling UnloadUserProfileI succeeded
USERENV(3ec.404) 12:43:07:798 IProfileSecurityCallBack: client authenticated.
USERENV(3ec.404) 12:43:07:798 ReleaseClientContext: Releasing context
USERENV(3ec.404) 12:43:07:798 ReleaseClientContext_s: Releasing context
USERENV(3ec.404) 12:43:07:798 MIDL_user_free enter
USERENV(124.158) 12:43:07:798 ReleaseInterface: Releasing rpc binding handle
USERENV(124.158) 12:43:07:798 UnloadUserProfile: returning 1
USERENV(3ec.3f0) 12:43:08:033 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(3ec.268) 12:43:08:076 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(4d8.274) 12:43:08:193 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(4d8.274) 12:43:08:396 GetProfileType: Profile already loaded.
USERENV(4d8.274) 12:43:08:396 GetProfileType: ProfileFlags is 2
USERENV(f64.334) 12:43:09:090 LibMain: Process Name: C:\WINDOWS\System32\WScript.exe
USERENV(c10.c14) 12:43:13:617 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(3ec.eb4) 12:43:13:627 PolicyChangedThread: Leaving
USERENV(c10.c14) 12:43:14:834 GetProfileType: Profile already loaded.
USERENV(c10.c14) 12:43:20:119 GetProfileType: ProfileFlags is 2
USERENV(8b0.8bc) 12:43:20:663 LibMain: Process Name: \\RB-DC1-HW\netlogon\Scan\AuditScanner.exe
USERENV(8b0.8bc) 12:43:20:663 ImpersonateUser: Failed to impersonate user with 5.
USERENV(8b0.8bc) 12:43:20:663 GetUserNameAndDomain Failed to impersonate user
USERENV(8b0.8bc) 12:43:20:663 ImpersonateUser: Failed to impersonate user with 5.
USERENV(8b0.8bc) 12:43:20:663 GetUserDNSDomainName: Failed to impersonate user
USERENV(8b0.8bc) 12:43:20:663 ImpersonateUser: Failed to impersonate user with 5.
USERENV(8b0.8bc) 12:43:20:663 GetUserNameAndDomain Failed to impersonate user
USERENV(8b0.8bc) 12:43:20:663 ImpersonateUser: Failed to impersonate user with 5.
USERENV(8b0.8bc) 12:43:20:663 GetUserDNSDomainName: Failed to impersonate user
USERENV(a0c.a10) 12:43:21:902 LibMain: Process Name: C:\WINDOWS\system32\reg.exe
USERENV(648.a1c) 12:43:21:955 LibMain: Process Name: C:\WINDOWS\system32\reg.exe
USERENV(a94.718) 12:43:21:977 LibMain: Process Name: C:\WINDOWS\system32\reg.exe
USERENV(a00.a90) 12:43:22:372 LibMain: Process Name: C:\WINDOWS\system32\hostname.exe
USERENV(424.524) 12:43:22:713 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.524) 12:43:22:713 GetUserNameAndDomain Failed to impersonate user
USERENV(424.524) 12:43:22:713 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.524) 12:43:22:713 GetUserDNSDomainName: Failed to impersonate user
USERENV(424.524) 12:43:22:735 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.524) 12:43:22:735 GetUserNameAndDomain Failed to impersonate user
USERENV(424.524) 12:43:22:735 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.524) 12:43:22:735 GetUserDNSDomainName: Failed to impersonate user
USERENV(424.524) 12:43:22:735 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.524) 12:43:22:735 GetUserNameAndDomain Failed to impersonate user
USERENV(424.524) 12:43:22:735 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.524) 12:43:22:735 GetUserDNSDomainName: Failed to impersonate user
USERENV(274.bb0) 12:43:23:728 LibMain: Process Name: C:\WINDOWS\Explorer.EXE
USERENV(274.c20) 12:43:24:518 GetProfileType: Profile already loaded.
USERENV(274.c20) 12:43:24:518 GetProfileType: ProfileFlags is 2
USERENV(274.ebc) 12:43:24:518 GetProfileType: Profile already loaded.
USERENV(274.ebc) 12:43:24:518 GetProfileType: ProfileFlags is 2
USERENV(274.c20) 12:43:24:560 GetProfileType: Profile already loaded.
USERENV(274.c20) 12:43:24:560 GetProfileType: ProfileFlags is 2
USERENV(da0.dac) 12:43:30:721 LibMain: Process Name: C:\WINDOWS\System32\imapi.exe
USERENV(284.26c) 12:43:38:056 LibMain: Process Name: C:\Program Files\Internet Explorer\iexplore.exe
USERENV(9f0.7ec) 12:43:38:301 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(284.26c) 12:43:38:440 ImpersonateUser: Failed to impersonate user with 5.
USERENV(284.26c) 12:43:38:440 GetUserNameAndDomain Failed to impersonate user
USERENV(284.26c) 12:43:38:440 ImpersonateUser: Failed to impersonate user with 5.
USERENV(284.26c) 12:43:38:440 GetUserDNSDomainName: Failed to impersonate user
USERENV(284.26c) 12:43:38:504 ImpersonateUser: Failed to impersonate user with 5.
USERENV(284.26c) 12:43:38:536 GetUserNameAndDomain Failed to impersonate user
USERENV(284.26c) 12:43:38:536 ImpersonateUser: Failed to impersonate user with 5.
USERENV(284.26c) 12:43:38:536 GetUserDNSDomainName: Failed to impersonate user
USERENV(a30.a1c) 12:43:39:155 LibMain: Process Name: C:\Program Files\Internet Explorer\iexplore.exe
USERENV(b58.7e0) 12:43:40:223 LibMain: Process Name: C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
USERENV(284.26c) 12:43:40:928 GetProfileType: Profile already loaded.
USERENV(284.26c) 12:43:40:928 GetProfileType: ProfileFlags is 2
USERENV(b58.7e0) 12:43:41:472 GetProfileType: Profile already loaded.
USERENV(b58.7e0) 12:43:41:472 GetProfileType: ProfileFlags is 2
USERENV(a90.af8) 12:43:41:568 LibMain: Process Name: C:\WINDOWS\system32\ctfmon.exe
USERENV(a90.af8) 12:43:41:664 GetProfileType: Profile already loaded.
USERENV(a90.af8) 12:43:41:664 GetProfileType: ProfileFlags is 2
USERENV(424.490) 12:43:42:401 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.490) 12:43:42:401 GetUserNameAndDomain Failed to impersonate user
USERENV(424.490) 12:43:42:401 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.490) 12:43:42:401 GetUserDNSDomainName: Failed to impersonate user
USERENV(424.490) 12:43:42:433 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.490) 12:43:42:433 GetUserNameAndDomain Failed to impersonate user
USERENV(424.490) 12:43:42:433 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.490) 12:43:42:433 GetUserDNSDomainName: Failed to impersonate user
USERENV(a30.b10) 12:44:00:648 ImpersonateUser: Failed to impersonate user with 5.
USERENV(a30.b10) 12:44:00:648 GetUserNameAndDomain Failed to impersonate user
USERENV(a30.b10) 12:44:00:658 ImpersonateUser: Failed to impersonate user with 5.
USERENV(a30.b10) 12:44:00:658 GetUserDNSDomainName: Failed to impersonate user
USERENV(a30.b10) 12:44:00:658 ImpersonateUser: Failed to impersonate user with 5.
USERENV(a30.b10) 12:44:00:658 GetUserNameAndDomain Failed to impersonate user
USERENV(a30.b10) 12:44:00:658 ImpersonateUser: Failed to impersonate user with 5.
USERENV(a30.b10) 12:44:00:658 GetUserDNSDomainName: Failed to impersonate user
USERENV(dd0.ddc) 12:44:07:619 LibMain: Process Name: C:\WINDOWS\system32\ctfmon.exe
USERENV(3ec.3ac) 12:44:07:982 Profile Ref Count is 5
USERENV(3ec.3ac) 12:44:07:982 LoadUserProfile: Leaving critical Section.
USERENV(3ec.3ac) 12:44:07:982 CSyncManager::LeaveLock <S-1-5-19>
USERENV(3ec.3ac) 12:44:07:982 CSyncManager::LeaveLock: Lock released
USERENV(3ec.3ac) 12:44:07:982 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(3ec.3ac) 12:44:07:982 CSyncManager::LeaveLock: Lock deleted
USERENV(3ec.3ac) 12:44:07:982 LoadUserProfile: Impersonated user: 00000944, 000007f8
USERENV(3ec.3ac) 12:44:07:982 LoadUserProfile: Reverted to user: 00000000
USERENV(3ec.3ac) 12:44:07:982 LoadUserProfile: Reverted back to user <00000000>
USERENV(3ec.3ac) 12:44:07:982 LoadUserProfile: Leaving with a value of 1.
USERENV(3ec.3ac) 12:44:07:982 =========================================================
USERENV(3ec.3ac) 12:44:07:982 LoadUserProfileI: returning 0
USERENV(418.cf0) 12:44:07:982 LoadUserProfile: Running as self
USERENV(418.cf0) 12:44:07:982 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(418.cf0) 12:44:07:982 LoadUserProfile: Returning success. Final Information follows:
USERENV(418.cf0) 12:44:07:982 lpProfileInfo->UserName = <LocalService>
USERENV(418.cf0) 12:44:07:982 lpProfileInfo->lpProfilePath = <>
USERENV(418.cf0) 12:44:07:982 lpProfileInfo->dwFlags = 0x9
USERENV(3ec.54c) 12:44:07:982 IProfileSecurityCallBack: client authenticated.
USERENV(3ec.54c) 12:44:07:982 ReleaseClientContext: Releasing context
USERENV(3ec.54c) 12:44:07:982 ReleaseClientContext_s: Releasing context
USERENV(3ec.54c) 12:44:07:982 MIDL_user_free enter
USERENV(418.cf0) 12:44:07:982 ReleaseInterface: Releasing rpc binding handle
USERENV(418.cf0) 12:44:07:982 LoadUserProfile: Returning TRUE. hProfile = <0x538>
USERENV(418.cf0) 12:44:07:982 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(424.b28) 12:44:56:775 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.b28) 12:44:56:775 GetUserNameAndDomain Failed to impersonate user
USERENV(424.b28) 12:44:56:775 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.b28) 12:44:56:775 GetUserDNSDomainName: Failed to impersonate user
USERENV(424.964) 12:44:56:775 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.964) 12:44:56:775 GetUserNameAndDomain Failed to impersonate user
USERENV(424.964) 12:44:56:775 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.964) 12:44:56:775 GetUserDNSDomainName: Failed to impersonate user
USERENV(424.490) 12:44:56:786 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.490) 12:44:56:786 GetUserNameAndDomain Failed to impersonate user
USERENV(424.490) 12:44:56:786 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.490) 12:44:56:786 GetUserDNSDomainName: Failed to impersonate user
USERENV(424.b28) 12:45:00:106 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.b28) 12:45:00:106 GetUserNameAndDomain Failed to impersonate user
USERENV(424.b28) 12:45:00:106 ImpersonateUser: Failed to impersonate user with 5.
USERENV(424.b28) 12:45:00:106 GetUserDNSDomainName: Failed to impersonate user
USERENV(f48.f60) 12:45:02:679 LibMain: Process Name: c:\Program Files\Microsoft Silverlight\5.1.30214.0\agcp.exe
USERENV(a30.e9c) 12:45:02:711 GetProfileType: Profile already loaded.
USERENV(a30.e9c) 12:45:02:711 GetProfileType: ProfileFlags is 2

Computer 2

USERENV(cbc.588) 16:23:50:264 LibMain: Process Name: C:\WINDOWS\system32\cmd.exe
USERENV(334.a58) 16:23:53:920 LibMain: Process Name: C:\WINDOWS\system32\shutdown.exe
USERENV(d4c.124) 16:24:49:774 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(d4c.124) 16:24:50:461 GetProfileType: Profile already loaded.
USERENV(d4c.124) 16:24:50:461 GetProfileType: Profile is to be deleted
USERENV(d4c.124) 16:24:50:477 GetProfileType: ProfileFlags is 3
USERENV(97c.8bc) 16:24:50:492 LibMain: Process Name: C:\WINDOWS\System32\WScript.exe
USERENV(86c.920) 16:24:58:648 LibMain: Process Name: C:\WINDOWS\system32\regsvr32.exe
USERENV(908.670) 16:24:58:694 LibMain: Process Name: C:\WINDOWS\system32\regsvr32.exe
USERENV(a1c.b58) 16:24:58:710 LibMain: Process Name: C:\WINDOWS\system32\regsvr32.exe
USERENV(e5c.adc) 16:24:58:726 LibMain: Process Name: C:\WINDOWS\system32\regsvr32.exe
USERENV(fbc.40c) 16:24:58:757 LibMain: Process Name: C:\WINDOWS\system32\regsvr32.exe
USERENV(3e8.3ec) 16:25:04:569 ReconcileFile: Unable to open temporary file
USERENV(3e8.3ec) 16:25:05:147 DeleteProfile: Failed to delete the appmgmt dir C:\WINDOWS\system32\appmgmt\S-1-5-21-2549970651-2034936752-3548929381-18026, error 2
USERENV(3e8.ffc) 16:25:10:193 DropClientContext: Got client token 00000A90, sid = S-1-5-18
USERENV(3e8.ffc) 16:25:10:193 MIDL_user_allocate enter
USERENV(3e8.ffc) 16:25:10:193 DropClientContext: load profile object successfully made
USERENV(3e8.ffc) 16:25:10:193 DropClientContext: Returning 0
USERENV(3e8.f84) 16:25:10:193 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.f84) 16:25:10:193 UnloadUserProfileP: Entering, hProfile = <0x90c>
USERENV(3e8.f84) 16:25:10:193 UnloadUserProfileP: ImpersonateUser <00000a90>, old token is <00000000>
USERENV(3e8.f84) 16:25:10:193 GetExclusionListFromRegistry: Policy list is empty, returning user list = <Local Settings;Temporary Internet Files;History;Temp>
USERENV(3e8.f84) 16:25:10:193 CSyncManager::EnterLock <S-1-5-19>
USERENV(3e8.f84) 16:25:10:193 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.f84) 16:25:10:209 CSyncManager::EnterLock: New entry created
USERENV(3e8.f84) 16:25:10:209 CHashTable::HashAdd: S-1-5-19 added in bucket 12
USERENV(3e8.f84) 16:25:10:209 UnloadUserProfileP: Wait succeeded. In critical section.
USERENV(3e8.f84) 16:25:12:225 UnloadUserProfileP: Failed to flush the current user key, error = 1016
USERENV(3e8.f84) 16:25:12:225 DecrementProfileRefCount: Failed to open profile mapping key with error 19
USERENV(3e8.f84) 16:25:12:225 MyRegUnLoadKey: Failed to unmount hive 00000005
USERENV(3e8.f84) 16:25:12:225 DumpOpenRegistryHandle: 0 user registry Handles leaked from \Registry\User\S-1-5-19
USERENV(3e8.f84) 16:25:12:240 UnloadUserProfileP: Didn't unload user profile <err = 5>
USERENV(3e8.f84) 16:25:12:240 UnLoadClassHive: failed to unload classes key with 13
USERENV(3e8.f84) 16:25:12:240 DumpOpenRegistryHandle: 0 user registry Handles leaked from \Registry\User\S-1-5-19_Classes
USERENV(3e8.f84) 16:25:12:240 ReportError: Impersonating user.
USERENV(3e8.f84) 16:25:12:240 CEvents::Report: ReportEvent failed. Error = 1717
USERENV(3e8.f84) 16:25:12:240 HandleRegKeyLeak: RegOpenKeyEx failed with 00000013
USERENV(3e8.f84) 16:25:12:240 CUserProfile::WatchHiveRefCount: NtUnloadKeyEx failed with c000003a
USERENV(3e8.f84) 16:25:12:240 HandleRegKeyLeak: Calling WatchHiveRefCount failed. err = c000003a
USERENV(3e8.ffc) 16:25:12:365 IProfileSecurityCallBack: RpcBindingInqAuthClient failed with 534
USERENV(414.d04) 16:25:12:365 UnLoadUserProfile: ReleaseClientContext took exception.
USERENV(3e8.3ec) 16:25:40:828 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(3e8.3ec) 16:25:40:843 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(3e8.3ec) 16:25:42:062 LibMain: Process Name: \??\C:\WINDOWS\system32\winlogon.exe
USERENV(3e8.3ec) 16:25:44:171 Entering CUserProfile::Initialize ...
USERENV(3e8.3ec) 16:25:44:171 CUserProfile::Initialize called by winlogon
USERENV(3e8.3ec) 16:25:44:171 CUserProfile::Initialize: critical section initialized
USERENV(3e8.3ec) 16:25:44:171 CSyncManager::Initialize: critical section initialized
USERENV(3e8.3ec) 16:25:44:171 CUserProfile::Initialize: registry key Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
USERENV(3e8.3ec) 16:25:44:171 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-9794
USERENV(3e8.3ec) 16:25:44:171 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-9794>
USERENV(3e8.3ec) 16:25:44:171 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:187 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:187 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-9794 added in bucket 9
USERENV(3e8.3ec) 16:25:44:187 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:187 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:187 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-9794>
USERENV(3e8.3ec) 16:25:44:187 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:187 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-9794 deleted
USERENV(3e8.3ec) 16:25:44:187 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:187 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:187 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-9435
USERENV(3e8.3ec) 16:25:44:187 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-9435>
USERENV(3e8.3ec) 16:25:44:187 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:203 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:203 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-9435 added in bucket 1
USERENV(3e8.3ec) 16:25:44:203 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:203 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:203 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-9435>
USERENV(3e8.3ec) 16:25:44:203 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:203 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-9435 deleted
USERENV(3e8.3ec) 16:25:44:203 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:203 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:203 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-9424
USERENV(3e8.3ec) 16:25:44:203 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-9424>
USERENV(3e8.3ec) 16:25:44:218 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:218 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:218 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-9424 added in bucket 22
USERENV(3e8.3ec) 16:25:44:218 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:218 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000114
USERENV(3e8.3ec) 16:25:44:218 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-9424>
USERENV(3e8.3ec) 16:25:44:218 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:218 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-9424 deleted
USERENV(3e8.3ec) 16:25:44:218 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:234 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:234 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-8744
USERENV(3e8.3ec) 16:25:44:234 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-8744>
USERENV(3e8.3ec) 16:25:44:234 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:234 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:234 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-8744 added in bucket 3
USERENV(3e8.3ec) 16:25:44:234 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:234 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:234 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-8744>
USERENV(3e8.3ec) 16:25:44:234 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:234 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-8744 deleted
USERENV(3e8.3ec) 16:25:44:250 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:250 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:250 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-8732
USERENV(3e8.3ec) 16:25:44:250 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-8732>
USERENV(3e8.3ec) 16:25:44:250 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:250 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:250 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-8732 added in bucket 0
USERENV(3e8.3ec) 16:25:44:250 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:250 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000010
USERENV(3e8.3ec) 16:25:44:250 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-8732>
USERENV(3e8.3ec) 16:25:44:250 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:265 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-8732 deleted
USERENV(3e8.3ec) 16:25:44:265 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:265 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:265 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-8731
USERENV(3e8.3ec) 16:25:44:265 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-8731>
USERENV(3e8.3ec) 16:25:44:265 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:265 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:265 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-8731 added in bucket 22
USERENV(3e8.3ec) 16:25:44:265 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:265 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:265 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-8731>
USERENV(3e8.3ec) 16:25:44:265 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:265 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-8731 deleted
USERENV(3e8.3ec) 16:25:44:281 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:281 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:281 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-8730
USERENV(3e8.3ec) 16:25:44:281 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-8730>
USERENV(3e8.3ec) 16:25:44:281 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:281 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:281 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-8730 added in bucket 21
USERENV(3e8.3ec) 16:25:44:281 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:281 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000010
USERENV(3e8.3ec) 16:25:44:281 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-8730>
USERENV(3e8.3ec) 16:25:44:281 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:281 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-8730 deleted
USERENV(3e8.3ec) 16:25:44:281 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:281 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:296 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-6223
USERENV(3e8.3ec) 16:25:44:296 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-6223>
USERENV(3e8.3ec) 16:25:44:296 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:296 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:296 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-6223 added in bucket 16
USERENV(3e8.3ec) 16:25:44:296 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:296 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00020001
USERENV(3e8.3ec) 16:25:44:296 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-6223>
USERENV(3e8.3ec) 16:25:44:296 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:296 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-6223 deleted
USERENV(3e8.3ec) 16:25:44:296 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:296 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:296 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-4888
USERENV(3e8.3ec) 16:25:44:296 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-4888>
USERENV(3e8.3ec) 16:25:44:312 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:312 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:312 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-4888 added in bucket 8
USERENV(3e8.3ec) 16:25:44:312 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:312 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000114
USERENV(3e8.3ec) 16:25:44:312 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-4888>
USERENV(3e8.3ec) 16:25:44:312 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:312 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-4888 deleted
USERENV(3e8.3ec) 16:25:44:312 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:328 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:328 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-4771
USERENV(3e8.3ec) 16:25:44:328 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-4771>
USERENV(3e8.3ec) 16:25:44:328 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:328 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:328 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-4771 added in bucket 22
USERENV(3e8.3ec) 16:25:44:328 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:328 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00020001
USERENV(3e8.3ec) 16:25:44:328 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-4771>
USERENV(3e8.3ec) 16:25:44:328 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:328 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-4771 deleted
USERENV(3e8.3ec) 16:25:44:328 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:343 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:343 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-4451
USERENV(3e8.3ec) 16:25:44:343 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-4451>
USERENV(3e8.3ec) 16:25:44:343 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:343 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:343 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-4451 added in bucket 17
USERENV(3e8.3ec) 16:25:44:343 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:343 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:343 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-4451>
USERENV(3e8.3ec) 16:25:44:343 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:343 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-4451 deleted
USERENV(3e8.3ec) 16:25:44:343 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:343 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:343 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-4324
USERENV(3e8.3ec) 16:25:44:343 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-4324>
USERENV(3e8.3ec) 16:25:44:359 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:359 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:359 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-4324 added in bucket 16
USERENV(3e8.3ec) 16:25:44:359 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:359 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:359 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-4324>
USERENV(3e8.3ec) 16:25:44:359 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:359 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-4324 deleted
USERENV(3e8.3ec) 16:25:44:359 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:359 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:359 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-3270
USERENV(3e8.3ec) 16:25:44:375 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-3270>
USERENV(3e8.3ec) 16:25:44:375 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:375 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:375 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-3270 added in bucket 15
USERENV(3e8.3ec) 16:25:44:375 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:375 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00020001
USERENV(3e8.3ec) 16:25:44:375 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-3270>
USERENV(3e8.3ec) 16:25:44:375 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:375 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-3270 deleted
USERENV(3e8.3ec) 16:25:44:375 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:375 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:375 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-2950
USERENV(3e8.3ec) 16:25:44:375 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-2950>
USERENV(3e8.3ec) 16:25:44:375 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:375 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:390 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-2950 added in bucket 19
USERENV(3e8.3ec) 16:25:44:390 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:390 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000005
USERENV(3e8.3ec) 16:25:44:390 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-2950>
USERENV(3e8.3ec) 16:25:44:390 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:390 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-2950 deleted
USERENV(3e8.3ec) 16:25:44:390 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:390 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:390 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-2250
USERENV(3e8.3ec) 16:25:44:390 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-2250>
USERENV(3e8.3ec) 16:25:44:390 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:390 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:390 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-2250 added in bucket 12
USERENV(3e8.3ec) 16:25:44:390 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:390 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:406 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-2250>
USERENV(3e8.3ec) 16:25:44:406 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:406 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-2250 deleted
USERENV(3e8.3ec) 16:25:44:406 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:406 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:406 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-2215
USERENV(3e8.3ec) 16:25:44:406 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-2215>
USERENV(3e8.3ec) 16:25:44:406 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:406 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:406 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-2215 added in bucket 13
USERENV(3e8.3ec) 16:25:44:406 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:406 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:406 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-2215>
USERENV(3e8.3ec) 16:25:44:406 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:406 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-2215 deleted
USERENV(3e8.3ec) 16:25:44:421 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:421 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:421 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-2183
USERENV(3e8.3ec) 16:25:44:421 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-2183>
USERENV(3e8.3ec) 16:25:44:421 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:421 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:421 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-2183 added in bucket 17
USERENV(3e8.3ec) 16:25:44:421 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:421 CUserProfile::GetRefCountAndFlags: Ref count is 1, state is 00000010
USERENV(3e8.3ec) 16:25:44:421 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(3e8.3ec) 16:25:44:421 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-2183>
USERENV(3e8.3ec) 16:25:44:421 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:421 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-2183 deleted
USERENV(3e8.3ec) 16:25:44:421 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:421 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:437 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-2173
USERENV(3e8.3ec) 16:25:44:437 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-2173>
USERENV(3e8.3ec) 16:25:44:437 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:437 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:437 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-2173 added in bucket 16
USERENV(3e8.3ec) 16:25:44:437 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:437 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:437 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-2173>
USERENV(3e8.3ec) 16:25:44:437 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:437 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-2173 deleted
USERENV(3e8.3ec) 16:25:44:437 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:437 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:437 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-2171
USERENV(3e8.3ec) 16:25:44:437 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-2171>
USERENV(3e8.3ec) 16:25:44:437 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:453 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:453 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-2171 added in bucket 14
USERENV(3e8.3ec) 16:25:44:453 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:453 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:453 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-2171>
USERENV(3e8.3ec) 16:25:44:453 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:453 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-2171 deleted
USERENV(3e8.3ec) 16:25:44:453 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:453 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:453 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-2168
USERENV(3e8.3ec) 16:25:44:453 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-2168>
USERENV(3e8.3ec) 16:25:44:453 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:468 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:468 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-2168 added in bucket 20
USERENV(3e8.3ec) 16:25:44:468 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:468 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000010
USERENV(3e8.3ec) 16:25:44:468 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-2168>
USERENV(3e8.3ec) 16:25:44:468 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:468 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-2168 deleted
USERENV(3e8.3ec) 16:25:44:468 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:468 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:468 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-2160
USERENV(3e8.3ec) 16:25:44:468 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-2160>
USERENV(3e8.3ec) 16:25:44:468 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:468 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:468 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-2160 added in bucket 12
USERENV(3e8.3ec) 16:25:44:468 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:484 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000010
USERENV(3e8.3ec) 16:25:44:484 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-2160>
USERENV(3e8.3ec) 16:25:44:484 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:484 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-2160 deleted
USERENV(3e8.3ec) 16:25:44:484 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:484 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:484 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-2146
USERENV(3e8.3ec) 16:25:44:484 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-2146>
USERENV(3e8.3ec) 16:25:44:484 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:484 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:484 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-2146 added in bucket 16
USERENV(3e8.3ec) 16:25:44:484 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:484 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:484 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-2146>
USERENV(3e8.3ec) 16:25:44:484 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:500 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-2146 deleted
USERENV(3e8.3ec) 16:25:44:500 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:500 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:500 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-2134
USERENV(3e8.3ec) 16:25:44:500 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-2134>
USERENV(3e8.3ec) 16:25:44:500 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:500 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:500 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-2134 added in bucket 13
USERENV(3e8.3ec) 16:25:44:500 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:500 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:500 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-2134>
USERENV(3e8.3ec) 16:25:44:515 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:515 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-2134 deleted
USERENV(3e8.3ec) 16:25:44:515 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:515 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:515 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-17603
USERENV(3e8.3ec) 16:25:44:515 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-17603>
USERENV(3e8.3ec) 16:25:44:515 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:515 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:515 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-17603 added in bucket 22
USERENV(3e8.3ec) 16:25:44:515 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:515 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000010
USERENV(3e8.3ec) 16:25:44:515 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-17603>
USERENV(3e8.3ec) 16:25:44:515 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:531 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-17603 deleted
USERENV(3e8.3ec) 16:25:44:531 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:531 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:531 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-14755
USERENV(3e8.3ec) 16:25:44:531 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-14755>
USERENV(3e8.3ec) 16:25:44:531 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:531 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:531 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-14755 added in bucket 4
USERENV(3e8.3ec) 16:25:44:531 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:531 CUserProfile::GetRefCountAndFlags: RegQueryValueEx failed, key = S-1-5-21-2549970651-2034936752-3548929381-14755, error = 00000002
USERENV(3e8.3ec) 16:25:44:562 CUserProfile::CleanupUserProfile: Can not get ref count and flags
USERENV(3e8.3ec) 16:25:44:562 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-14755>
USERENV(3e8.3ec) 16:25:44:562 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:562 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-14755 deleted
USERENV(3e8.3ec) 16:25:44:562 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:562 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:562 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-1451
USERENV(3e8.3ec) 16:25:44:562 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-1451>
USERENV(3e8.3ec) 16:25:44:562 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:562 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:562 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-1451 added in bucket 14
USERENV(3e8.3ec) 16:25:44:562 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:562 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:562 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-1451>
USERENV(3e8.3ec) 16:25:44:562 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:578 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-1451 deleted
USERENV(3e8.3ec) 16:25:44:578 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:578 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:578 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-13618
USERENV(3e8.3ec) 16:25:44:578 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-13618>
USERENV(3e8.3ec) 16:25:44:578 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:578 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:578 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-13618 added in bucket 1
USERENV(3e8.3ec) 16:25:44:578 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:578 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:578 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-13618>
USERENV(3e8.3ec) 16:25:44:578 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:578 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-13618 deleted
USERENV(3e8.3ec) 16:25:44:578 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:593 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:593 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-13617
USERENV(3e8.3ec) 16:25:44:593 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-13617>
USERENV(3e8.3ec) 16:25:44:593 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:593 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:593 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-13617 added in bucket 0
USERENV(3e8.3ec) 16:25:44:593 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:593 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:593 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-13617>
USERENV(3e8.3ec) 16:25:44:593 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:593 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-13617 deleted
USERENV(3e8.3ec) 16:25:44:593 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:593 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:593 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-13608
USERENV(3e8.3ec) 16:25:44:593 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-13608>
USERENV(3e8.3ec) 16:25:44:609 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:609 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:609 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-13608 added in bucket 0
USERENV(3e8.3ec) 16:25:44:609 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:609 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000014
USERENV(3e8.3ec) 16:25:44:609 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-13608>
USERENV(3e8.3ec) 16:25:44:609 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:609 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-13608 deleted
USERENV(3e8.3ec) 16:25:44:609 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:609 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:609 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-13287
USERENV(3e8.3ec) 16:25:44:609 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-13287>
USERENV(3e8.3ec) 16:25:44:609 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:609 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:609 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-13287 added in bucket 3
USERENV(3e8.3ec) 16:25:44:625 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:625 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000010
USERENV(3e8.3ec) 16:25:44:625 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-13287>
USERENV(3e8.3ec) 16:25:44:625 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:625 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-13287 deleted
USERENV(3e8.3ec) 16:25:44:625 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:625 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:625 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-11603
USERENV(3e8.3ec) 16:25:44:625 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-11603>
USERENV(3e8.3ec) 16:25:44:625 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:625 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:625 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-11603 added in bucket 16
USERENV(3e8.3ec) 16:25:44:640 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:640 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000010
USERENV(3e8.3ec) 16:25:44:640 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-11603>
USERENV(3e8.3ec) 16:25:44:640 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:640 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-11603 deleted
USERENV(3e8.3ec) 16:25:44:640 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:640 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:640 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-1109
USERENV(3e8.3ec) 16:25:44:640 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-1109>
USERENV(3e8.3ec) 16:25:44:640 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:640 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:640 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-1109 added in bucket 14
USERENV(3e8.3ec) 16:25:44:640 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:640 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00020101
USERENV(3e8.3ec) 16:25:44:656 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-1109>
USERENV(3e8.3ec) 16:25:44:656 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:656 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-1109 deleted
USERENV(3e8.3ec) 16:25:44:656 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:656 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:656 CUserProfile::Initialize: Proccessing S-1-5-21-2549970651-2034936752-3548929381-10029
USERENV(3e8.3ec) 16:25:44:656 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-10029>
USERENV(3e8.3ec) 16:25:44:656 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:656 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:656 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-10029 added in bucket 17
USERENV(3e8.3ec) 16:25:44:656 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:656 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000010
USERENV(3e8.3ec) 16:25:44:656 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-10029>
USERENV(3e8.3ec) 16:25:44:656 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:656 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-10029 deleted
USERENV(3e8.3ec) 16:25:44:671 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:671 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:671 CUserProfile::Initialize: Proccessing S-1-5-21-2209231425-374023231-2214384571-1003
USERENV(3e8.3ec) 16:25:44:671 CSyncManager::EnterLock <S-1-5-21-2209231425-374023231-2214384571-1003>
USERENV(3e8.3ec) 16:25:44:671 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:671 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:671 CHashTable::HashAdd: S-1-5-21-2209231425-374023231-2214384571-1003 added in bucket 2
USERENV(3e8.3ec) 16:25:44:671 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:671 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000100
USERENV(3e8.3ec) 16:25:44:671 CSyncManager::LeaveLock <S-1-5-21-2209231425-374023231-2214384571-1003>
USERENV(3e8.3ec) 16:25:44:671 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:687 CHashTable::HashDelete: S-1-5-21-2209231425-374023231-2214384571-1003 deleted
USERENV(3e8.3ec) 16:25:44:687 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:687 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:687 CUserProfile::Initialize: Proccessing S-1-5-20
USERENV(3e8.3ec) 16:25:44:687 CSyncManager::EnterLock <S-1-5-20>
USERENV(3e8.3ec) 16:25:44:687 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:687 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:687 CHashTable::HashAdd: S-1-5-20 added in bucket 4
USERENV(3e8.3ec) 16:25:44:687 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:687 CUserProfile::GetRefCountAndFlags: Ref count is 3, state is 00000000
USERENV(3e8.3ec) 16:25:44:687 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(3e8.3ec) 16:25:44:687 CSyncManager::LeaveLock <S-1-5-20>
USERENV(3e8.3ec) 16:25:44:687 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:687 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(3e8.3ec) 16:25:44:687 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:687 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:687 CUserProfile::Initialize: Proccessing S-1-5-19
USERENV(3e8.3ec) 16:25:44:703 CSyncManager::EnterLock <S-1-5-19>
USERENV(3e8.3ec) 16:25:44:703 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:703 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:703 CHashTable::HashAdd: S-1-5-19 added in bucket 12
USERENV(3e8.3ec) 16:25:44:703 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:703 CUserProfile::GetRefCountAndFlags: Ref count is 2, state is 00000000
USERENV(3e8.3ec) 16:25:44:703 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(3e8.3ec) 16:25:44:703 CSyncManager::LeaveLock <S-1-5-19>
USERENV(3e8.3ec) 16:25:44:703 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:703 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(3e8.3ec) 16:25:44:703 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:703 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:718 CUserProfile::Initialize: Proccessing S-1-5-18
USERENV(3e8.3ec) 16:25:44:718 CSyncManager::EnterLock <S-1-5-18>
USERENV(3e8.3ec) 16:25:44:718 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:25:44:718 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:25:44:718 CHashTable::HashAdd: S-1-5-18 added in bucket 11
USERENV(3e8.3ec) 16:25:44:718 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(3e8.3ec) 16:25:44:718 CUserProfile::GetRefCountAndFlags: Ref count is 1, state is 00000000
USERENV(3e8.3ec) 16:25:44:718 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(3e8.3ec) 16:25:44:718 CSyncManager::LeaveLock <S-1-5-18>
USERENV(3e8.3ec) 16:25:44:718 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:25:44:718 CHashTable::HashDelete: S-1-5-18 deleted
USERENV(3e8.3ec) 16:25:44:718 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:25:44:718 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(3e8.3ec) 16:25:44:750 CUserProfile::Initialize: RpcServerRegisterIfEx successful
USERENV(3e8.3ec) 16:25:44:750 Exiting CUserProfile::Initialize, successful
USERENV(414.418) 16:25:45:453 LibMain: Process Name: C:\WINDOWS\system32\services.exe
USERENV(420.424) 16:25:45:781 LibMain: Process Name: C:\WINDOWS\system32\lsass.exe
USERENV(3e8.3ec) 16:25:46:359 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(4fc.500) 16:25:49:953 LibMain: Process Name: C:\WINDOWS\system32\Ati2evxx.exe
USERENV(510.514) 16:25:50:218 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
USERENV(414.418) 16:25:51:015 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(414.418) 16:25:51:015 =========================================================
USERENV(414.418) 16:25:51:015 LoadUserProfile: Entering, hToken = <0x2b8>, lpProfileInfo = 0x7fca8
USERENV(414.418) 16:25:51:015 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(414.418) 16:25:51:031 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(414.418) 16:25:51:031 LoadUserProfile: NULL central profile path
USERENV(414.418) 16:25:51:031 LoadUserProfile: NULL default profile path
USERENV(414.418) 16:25:51:031 LoadUserProfile: NULL server name
USERENV(414.418) 16:25:51:031 GetInterface: Returning rpc binding handle
USERENV(3e8.400) 16:25:51:031 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.400) 16:25:51:031 DropClientContext: Got client token 0000060C, sid = S-1-5-18
USERENV(3e8.400) 16:25:51:031 MIDL_user_allocate enter
USERENV(3e8.400) 16:25:51:031 DropClientContext: load profile object successfully made
USERENV(3e8.400) 16:25:51:031 DropClientContext: Returning 0
USERENV(414.418) 16:25:51:031 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(3e8.568) 16:25:51:031 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.568) 16:25:51:031 In LoadUserProfileP
USERENV(3e8.568) 16:25:51:031 LoadUserProfile: Running as client
USERENV(3e8.568) 16:25:51:031 =========================================================
USERENV(3e8.568) 16:25:51:046 LoadUserProfile: Entering, hToken = <0x610>, lpProfileInfo = 0xeefb18
USERENV(3e8.568) 16:25:51:046 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(3e8.568) 16:25:51:046 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(3e8.568) 16:25:51:046 LoadUserProfile: NULL central profile path
USERENV(3e8.568) 16:25:51:046 LoadUserProfile: NULL default profile path
USERENV(3e8.568) 16:25:51:046 LoadUserProfile: NULL server name
USERENV(3e8.568) 16:25:51:046 LoadUserProfile: User sid: S-1-5-20
USERENV(3e8.568) 16:25:51:046 CSyncManager::EnterLock <S-1-5-20>
USERENV(3e8.568) 16:25:51:046 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.568) 16:25:51:046 CSyncManager::EnterLock: New entry created
USERENV(3e8.568) 16:25:51:046 CHashTable::HashAdd: S-1-5-20 added in bucket 4
USERENV(3e8.568) 16:25:51:046 LoadUserProfile: Wait succeeded. In critical section.
USERENV(3e8.568) 16:25:51:046 RestoreUserProfile: Entering
USERENV(3e8.568) 16:25:51:046 IsCentralProfileReachable: Entering
USERENV(3e8.568) 16:25:51:046 IsCentralProfileReachable: Null path. Leaving
USERENV(3e8.568) 16:25:51:046 RestoreUserProfile: Profile path = <>
USERENV(3e8.568) 16:25:51:062 ExtractProfileFromBackup: A profile already exists
USERENV(3e8.568) 16:25:51:062 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(3e8.568) 16:25:51:062 CreateLocalProfileKey: Not setting additional Security
USERENV(3e8.568) 16:25:51:062 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(3e8.568) 16:25:51:062 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\NetworkService>
USERENV(3e8.568) 16:25:51:062 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\NetworkService>
USERENV(3e8.568) 16:25:51:140 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(3e8.568) 16:25:51:140 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\NetworkService\ntuser.dat>
USERENV(3e8.568) 16:25:51:156 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
USERENV(3e8.568) 16:25:51:156 Local Existing Profile Image is reachable
USERENV(3e8.568) 16:25:51:156 Local profile name is <C:\Documents and Settings\NetworkService>
USERENV(3e8.568) 16:25:51:156 RestoreUserProfile: No central profile. Attempting to load local profile.
USERENV(3e8.568) 16:25:51:171 MyRegLoadKey: Returning 00000000
USERENV(3e8.568) 16:25:51:187 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(3e8.568) 16:25:51:296 MyRegLoadKey: Returning 00000000
USERENV(3e8.568) 16:25:51:296 CreateClassHive: existing user classes hive found
USERENV(3e8.568) 16:25:51:296 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(3e8.568) 16:25:51:296 Profile was successfully loaded.
USERENV(3e8.568) 16:25:51:296 lpProfile->lpRoamingProfile = <>
USERENV(3e8.568) 16:25:51:296 lpProfile->lpLocalProfile = <C:\Documents and Settings\NetworkService>
USERENV(3e8.568) 16:25:51:312 lpProfile->dwInternalFlags = 0x0
USERENV(3e8.568) 16:25:51:312 RestoreUserProfile: Leaving.
USERENV(3e8.568) 16:25:51:343 UpgradeProfile: Entering
USERENV(3e8.568) 16:25:51:343 UpgradeProfile: Build numbers match
USERENV(3e8.568) 16:25:51:343 UpgradeProfile: Leaving Successfully
USERENV(3e8.568) 16:25:51:390 GetProfileType: Profile already loaded.
USERENV(3e8.568) 16:25:51:390 LoadProfileInfo: Failed to query central profile with error 2
USERENV(3e8.568) 16:25:51:390 GetProfileType: ProfileFlags is 0
USERENV(3e8.568) 16:25:51:453 Profile Ref Count is 1
USERENV(3e8.568) 16:25:51:453 LoadUserProfile: Leaving critical Section.
USERENV(3e8.568) 16:25:51:453 CSyncManager::LeaveLock <S-1-5-20>
USERENV(3e8.568) 16:25:51:453 CSyncManager::LeaveLock: Lock released
USERENV(3e8.568) 16:25:51:453 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(3e8.568) 16:25:51:453 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.568) 16:25:51:453 LoadUserProfile: Impersonated user: 00000610, 0000061c
USERENV(420.46c) 16:25:51:453 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(420.46c) 16:25:51:484 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(3e8.568) 16:25:51:484 LoadUserProfile: Reverted to user: 00000000
USERENV(3e8.568) 16:25:51:500 LoadUserProfile: Reverted back to user <00000000>
USERENV(3e8.568) 16:25:51:500 LoadUserProfile: Leaving with a value of 1.
USERENV(3e8.568) 16:25:51:500 =========================================================
USERENV(3e8.568) 16:25:51:500 LoadUserProfileI: returning 0
USERENV(414.418) 16:25:51:500 LoadUserProfile: Running as self
USERENV(414.418) 16:25:51:500 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(414.418) 16:25:51:500 LoadUserProfile: Returning success. Final Information follows:
USERENV(414.418) 16:25:51:500 lpProfileInfo->UserName = <NetworkService>
USERENV(414.418) 16:25:51:500 lpProfileInfo->lpProfilePath = <>
USERENV(414.418) 16:25:51:500 lpProfileInfo->dwFlags = 0x9
USERENV(3e8.400) 16:25:51:500 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.400) 16:25:51:500 ReleaseClientContext: Releasing context
USERENV(3e8.400) 16:25:51:500 ReleaseClientContext_s: Releasing context
USERENV(3e8.400) 16:25:51:500 MIDL_user_free enter
USERENV(414.418) 16:25:51:500 ReleaseInterface: Releasing rpc binding handle
USERENV(414.418) 16:25:51:515 LoadUserProfile: Returning TRUE. hProfile = <0x370>
USERENV(414.418) 16:25:51:515 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(570.574) 16:25:51:562 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
USERENV(5ec.5f0) 16:25:52:015 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
USERENV(3e8.3ec) 16:25:52:109 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(630.634) 16:25:55:703 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
USERENV(414.418) 16:25:57:218 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(414.418) 16:25:57:218 =========================================================
USERENV(414.418) 16:25:57:234 LoadUserProfile: Entering, hToken = <0x3c0>, lpProfileInfo = 0x7fca8
USERENV(414.418) 16:25:57:234 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(414.418) 16:25:57:234 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(414.418) 16:25:57:234 LoadUserProfile: NULL central profile path
USERENV(414.418) 16:25:57:234 LoadUserProfile: NULL default profile path
USERENV(414.418) 16:25:57:234 LoadUserProfile: NULL server name
USERENV(414.418) 16:25:57:234 GetInterface: Returning rpc binding handle
USERENV(3e8.568) 16:25:57:234 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.568) 16:25:57:234 DropClientContext: Got client token 0000063C, sid = S-1-5-18
USERENV(3e8.568) 16:25:57:234 MIDL_user_allocate enter
USERENV(3e8.568) 16:25:57:234 DropClientContext: load profile object successfully made
USERENV(3e8.568) 16:25:57:234 DropClientContext: Returning 0
USERENV(414.418) 16:25:57:250 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(3e8.400) 16:25:57:250 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.400) 16:25:57:250 In LoadUserProfileP
USERENV(3e8.400) 16:25:57:250 LoadUserProfile: Running as client
USERENV(3e8.400) 16:25:57:250 =========================================================
USERENV(3e8.400) 16:25:57:250 LoadUserProfile: Entering, hToken = <0x630>, lpProfileInfo = 0xef3d10
USERENV(3e8.400) 16:25:57:250 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(3e8.400) 16:25:57:250 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(3e8.400) 16:25:57:250 LoadUserProfile: NULL central profile path
USERENV(3e8.400) 16:25:57:250 LoadUserProfile: NULL default profile path
USERENV(3e8.400) 16:25:57:250 LoadUserProfile: NULL server name
USERENV(3e8.400) 16:25:57:250 LoadUserProfile: User sid: S-1-5-20
USERENV(3e8.400) 16:25:57:250 CSyncManager::EnterLock <S-1-5-20>
USERENV(3e8.400) 16:25:57:250 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.400) 16:25:57:250 CSyncManager::EnterLock: New entry created
USERENV(3e8.400) 16:25:57:265 CHashTable::HashAdd: S-1-5-20 added in bucket 4
USERENV(3e8.400) 16:25:57:265 LoadUserProfile: Wait succeeded. In critical section.
USERENV(3e8.400) 16:25:57:265 TestIfUserProfileLoaded: Profile already loaded.
USERENV(3e8.400) 16:25:57:265 Profile Ref Count is 2
USERENV(3e8.400) 16:25:57:265 LoadUserProfile: Leaving critical Section.
USERENV(3e8.400) 16:25:57:265 CSyncManager::LeaveLock <S-1-5-20>
USERENV(3e8.400) 16:25:57:265 CSyncManager::LeaveLock: Lock released
USERENV(3e8.400) 16:25:57:265 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(3e8.400) 16:25:57:265 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.400) 16:25:57:265 LoadUserProfile: Impersonated user: 00000630, 0000064c
USERENV(3e8.400) 16:25:57:265 LoadUserProfile: Reverted to user: 00000000
USERENV(3e8.400) 16:25:57:265 LoadUserProfile: Reverted back to user <00000000>
USERENV(3e8.400) 16:25:57:265 LoadUserProfile: Leaving with a value of 1.
USERENV(3e8.400) 16:25:57:265 =========================================================
USERENV(3e8.400) 16:25:57:265 LoadUserProfileI: returning 0
USERENV(414.418) 16:25:57:281 LoadUserProfile: Running as self
USERENV(414.418) 16:25:57:281 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(414.418) 16:25:57:281 LoadUserProfile: Returning success. Final Information follows:
USERENV(414.418) 16:25:57:281 lpProfileInfo->UserName = <NetworkService>
USERENV(414.418) 16:25:57:281 lpProfileInfo->lpProfilePath = <>
USERENV(414.418) 16:25:57:281 lpProfileInfo->dwFlags = 0x9
USERENV(3e8.568) 16:25:57:281 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.568) 16:25:57:281 ReleaseClientContext: Releasing context
USERENV(3e8.568) 16:25:57:281 ReleaseClientContext_s: Releasing context
USERENV(3e8.568) 16:25:57:281 MIDL_user_free enter
USERENV(414.418) 16:25:57:281 ReleaseInterface: Releasing rpc binding handle
USERENV(414.418) 16:25:57:281 LoadUserProfile: Returning TRUE. hProfile = <0x384>
USERENV(414.418) 16:25:57:296 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(654.658) 16:25:57:328 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
USERENV(414.418) 16:25:57:328 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(414.418) 16:25:57:328 =========================================================
USERENV(414.418) 16:25:57:328 LoadUserProfile: Entering, hToken = <0x3d0>, lpProfileInfo = 0x7fca8
USERENV(414.418) 16:25:57:343 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(414.418) 16:25:57:343 LoadUserProfile: lpProfileInfo->lpUserName = <LocalService>
USERENV(414.418) 16:25:57:343 LoadUserProfile: NULL central profile path
USERENV(414.418) 16:25:57:343 LoadUserProfile: NULL default profile path
USERENV(414.418) 16:25:57:343 LoadUserProfile: NULL server name
USERENV(414.418) 16:25:57:343 GetInterface: Returning rpc binding handle
USERENV(3e8.400) 16:25:57:343 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.400) 16:25:57:359 DropClientContext: Got client token 0000063C, sid = S-1-5-18
USERENV(3e8.400) 16:25:57:359 MIDL_user_allocate enter
USERENV(3e8.400) 16:25:57:359 DropClientContext: load profile object successfully made
USERENV(3e8.400) 16:25:57:359 DropClientContext: Returning 0
USERENV(414.418) 16:25:57:359 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(3e8.568) 16:25:57:359 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.568) 16:25:57:359 In LoadUserProfileP
USERENV(3e8.568) 16:25:57:359 LoadUserProfile: Running as client
USERENV(3e8.568) 16:25:57:359 =========================================================
USERENV(3e8.568) 16:25:57:359 LoadUserProfile: Entering, hToken = <0x630>, lpProfileInfo = 0xef3d10
USERENV(3e8.568) 16:25:57:359 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(3e8.568) 16:25:57:359 LoadUserProfile: lpProfileInfo->lpUserName = <LocalService>
USERENV(3e8.568) 16:25:57:359 LoadUserProfile: NULL central profile path
USERENV(3e8.568) 16:25:57:359 LoadUserProfile: NULL default profile path
USERENV(3e8.568) 16:25:57:375 LoadUserProfile: NULL server name
USERENV(3e8.568) 16:25:57:375 LoadUserProfile: User sid: S-1-5-19
USERENV(3e8.568) 16:25:57:375 CSyncManager::EnterLock <S-1-5-19>
USERENV(3e8.568) 16:25:57:375 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.568) 16:25:57:375 CSyncManager::EnterLock: New entry created
USERENV(3e8.568) 16:25:57:375 CHashTable::HashAdd: S-1-5-19 added in bucket 12
USERENV(3e8.568) 16:25:57:375 LoadUserProfile: Wait succeeded. In critical section.
USERENV(3e8.568) 16:25:57:375 RestoreUserProfile: Entering
USERENV(3e8.568) 16:25:57:375 IsCentralProfileReachable: Entering
USERENV(3e8.568) 16:25:57:375 IsCentralProfileReachable: Null path. Leaving
USERENV(3e8.568) 16:25:57:375 RestoreUserProfile: Profile path = <>
USERENV(3e8.568) 16:25:57:375 ExtractProfileFromBackup: A profile already exists
USERENV(3e8.568) 16:25:57:375 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(3e8.568) 16:25:57:375 CreateLocalProfileKey: Not setting additional Security
USERENV(3e8.568) 16:25:57:375 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(3e8.568) 16:25:57:375 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\LocalService>
USERENV(3e8.568) 16:25:57:390 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\LocalService>
USERENV(3e8.568) 16:25:57:468 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(3e8.568) 16:25:57:500 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\LocalService\ntuser.dat>
USERENV(3e8.568) 16:25:57:500 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
USERENV(3e8.568) 16:25:57:500 Local Existing Profile Image is reachable
USERENV(3e8.568) 16:25:57:500 Local profile name is <C:\Documents and Settings\LocalService>
USERENV(3e8.568) 16:25:57:500 RestoreUserProfile: No central profile. Attempting to load local profile.
USERENV(3e8.568) 16:25:57:546 MyRegLoadKey: Returning 00000000
USERENV(3e8.568) 16:25:58:828 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(3e8.568) 16:25:59:421 MyRegLoadKey: Returning 00000000
USERENV(3e8.568) 16:25:59:484 CreateClassHive: existing user classes hive found
USERENV(3e8.568) 16:25:59:562 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(3e8.568) 16:25:59:562 Profile was successfully loaded.
USERENV(3e8.568) 16:25:59:562 lpProfile->lpRoamingProfile = <>
USERENV(3e8.568) 16:25:59:562 lpProfile->lpLocalProfile = <C:\Documents and Settings\LocalService>
USERENV(3e8.568) 16:25:59:562 lpProfile->dwInternalFlags = 0x0
USERENV(3e8.568) 16:25:59:562 RestoreUserProfile: Leaving.
USERENV(3e8.568) 16:25:59:609 UpgradeProfile: Entering
USERENV(3e8.568) 16:25:59:671 UpgradeProfile: Build numbers match
USERENV(3e8.568) 16:25:59:718 UpgradeProfile: Leaving Successfully
USERENV(3e8.568) 16:25:59:718 GetProfileType: Profile already loaded.
USERENV(3e8.568) 16:25:59:734 LoadProfileInfo: Failed to query central profile with error 2
USERENV(3e8.568) 16:25:59:734 GetProfileType: ProfileFlags is 0
USERENV(3e8.568) 16:25:59:812 Profile Ref Count is 1
USERENV(3e8.568) 16:25:59:812 LoadUserProfile: Leaving critical Section.
USERENV(3e8.568) 16:25:59:812 CSyncManager::LeaveLock <S-1-5-19>
USERENV(3e8.568) 16:25:59:812 CSyncManager::LeaveLock: Lock released
USERENV(3e8.568) 16:25:59:812 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(3e8.568) 16:25:59:812 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.568) 16:25:59:812 LoadUserProfile: Impersonated user: 00000630, 0000064c
USERENV(420.494) 16:25:59:812 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(420.494) 16:26:00:078 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(3e8.568) 16:26:00:484 LoadUserProfile: Reverted to user: 00000000
USERENV(3e8.568) 16:26:00:484 LoadUserProfile: Reverted back to user <00000000>
USERENV(3e8.568) 16:26:00:484 LoadUserProfile: Leaving with a value of 1.
USERENV(3e8.568) 16:26:00:484 =========================================================
USERENV(3e8.568) 16:26:00:484 LoadUserProfileI: returning 0
USERENV(414.418) 16:26:00:484 LoadUserProfile: Running as self
USERENV(414.418) 16:26:00:484 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(414.418) 16:26:00:484 LoadUserProfile: Returning success. Final Information follows:
USERENV(414.418) 16:26:00:500 lpProfileInfo->UserName = <LocalService>
USERENV(414.418) 16:26:00:500 lpProfileInfo->lpProfilePath = <>
USERENV(414.418) 16:26:00:500 lpProfileInfo->dwFlags = 0x9
USERENV(3e8.400) 16:26:00:500 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.400) 16:26:00:500 ReleaseClientContext: Releasing context
USERENV(3e8.400) 16:26:00:500 ReleaseClientContext_s: Releasing context
USERENV(3e8.400) 16:26:00:500 MIDL_user_free enter
USERENV(414.418) 16:26:00:500 ReleaseInterface: Releasing rpc binding handle
USERENV(414.418) 16:26:00:500 LoadUserProfile: Returning TRUE. hProfile = <0x3e0>
USERENV(414.418) 16:26:00:500 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(6ec.6f0) 16:26:00:656 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
USERENV(708.70c) 16:26:03:328 LibMain: Process Name: C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
USERENV(630.714) 16:26:03:437 ImpersonateUser: Failed to impersonate user with 5.
USERENV(630.714) 16:26:03:437 GetUserNameAndDomain Failed to impersonate user
USERENV(630.714) 16:26:03:437 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(7b4.7c0) 16:26:10:562 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\SescLU.exe
USERENV(1f8.1fc) 16:26:15:843 LibMain: Process Name: C:\WINDOWS\system32\spoolsv.exe
USERENV(414.418) 16:26:21:625 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(414.418) 16:26:21:625 =========================================================
USERENV(414.418) 16:26:21:625 LoadUserProfile: Entering, hToken = <0x290>, lpProfileInfo = 0x7fca8
USERENV(414.418) 16:26:21:625 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(414.418) 16:26:21:625 LoadUserProfile: lpProfileInfo->lpUserName = <LocalService>
USERENV(414.418) 16:26:21:625 LoadUserProfile: NULL central profile path
USERENV(414.418) 16:26:21:640 LoadUserProfile: NULL default profile path
USERENV(414.418) 16:26:21:640 LoadUserProfile: NULL server name
USERENV(414.418) 16:26:21:640 GetInterface: Returning rpc binding handle
USERENV(3e8.568) 16:26:21:640 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.568) 16:26:21:640 DropClientContext: Got client token 00000648, sid = S-1-5-18
USERENV(3e8.568) 16:26:21:640 MIDL_user_allocate enter
USERENV(3e8.568) 16:26:21:640 DropClientContext: load profile object successfully made
USERENV(3e8.568) 16:26:21:640 DropClientContext: Returning 0
USERENV(414.418) 16:26:21:640 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(3e8.400) 16:26:21:640 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.400) 16:26:21:640 In LoadUserProfileP
USERENV(3e8.400) 16:26:21:640 LoadUserProfile: Running as client
USERENV(3e8.400) 16:26:21:640 =========================================================
USERENV(3e8.400) 16:26:21:640 LoadUserProfile: Entering, hToken = <0x64c>, lpProfileInfo = 0xef9908
USERENV(3e8.400) 16:26:21:656 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(3e8.400) 16:26:21:656 LoadUserProfile: lpProfileInfo->lpUserName = <LocalService>
USERENV(3e8.400) 16:26:21:656 LoadUserProfile: NULL central profile path
USERENV(3e8.400) 16:26:21:656 LoadUserProfile: NULL default profile path
USERENV(3e8.400) 16:26:21:656 LoadUserProfile: NULL server name
USERENV(3e8.400) 16:26:21:656 LoadUserProfile: User sid: S-1-5-19
USERENV(3e8.400) 16:26:21:656 CSyncManager::EnterLock <S-1-5-19>
USERENV(3e8.400) 16:26:21:656 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.400) 16:26:21:656 CSyncManager::EnterLock: New entry created
USERENV(3e8.400) 16:26:21:656 CHashTable::HashAdd: S-1-5-19 added in bucket 12
USERENV(3e8.400) 16:26:21:656 LoadUserProfile: Wait succeeded. In critical section.
USERENV(3e8.400) 16:26:21:671 TestIfUserProfileLoaded: Profile already loaded.
USERENV(3e8.400) 16:26:21:671 Profile Ref Count is 2
USERENV(3e8.400) 16:26:21:671 LoadUserProfile: Leaving critical Section.
USERENV(3e8.400) 16:26:21:671 CSyncManager::LeaveLock <S-1-5-19>
USERENV(3e8.400) 16:26:21:671 CSyncManager::LeaveLock: Lock released
USERENV(3e8.400) 16:26:21:671 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(3e8.400) 16:26:21:671 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.400) 16:26:21:671 LoadUserProfile: Impersonated user: 0000064c, 00000658
USERENV(3e8.400) 16:26:21:671 LoadUserProfile: Reverted to user: 00000000
USERENV(3e8.400) 16:26:21:671 LoadUserProfile: Reverted back to user <00000000>
USERENV(3e8.400) 16:26:21:671 LoadUserProfile: Leaving with a value of 1.
USERENV(3e8.400) 16:26:21:671 =========================================================
USERENV(3e8.400) 16:26:21:671 LoadUserProfileI: returning 0
USERENV(414.418) 16:26:21:671 LoadUserProfile: Running as self
USERENV(414.418) 16:26:21:687 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(414.418) 16:26:21:687 LoadUserProfile: Returning success. Final Information follows:
USERENV(414.418) 16:26:21:687 lpProfileInfo->UserName = <LocalService>
USERENV(414.418) 16:26:21:687 lpProfileInfo->lpProfilePath = <>
USERENV(414.418) 16:26:21:687 lpProfileInfo->dwFlags = 0x9
USERENV(3e8.568) 16:26:21:687 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.568) 16:26:21:687 ReleaseClientContext: Releasing context
USERENV(3e8.568) 16:26:21:687 ReleaseClientContext_s: Releasing context
USERENV(3e8.568) 16:26:21:687 MIDL_user_free enter
USERENV(414.418) 16:26:21:687 ReleaseInterface: Releasing rpc binding handle
USERENV(414.418) 16:26:21:687 LoadUserProfile: Returning TRUE. hProfile = <0x288>
USERENV(414.418) 16:26:21:687 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(2c8.2cc) 16:26:21:828 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
USERENV(3e8.610) 16:26:25:718 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(3e8.610) 16:26:25:718 ApplyGroupPolicy: Entering. Flags = 7
USERENV(3e8.610) 16:26:25:828 ProcessGPOs:
USERENV(3e8.610) 16:26:25:828 ProcessGPOs:
USERENV(3e8.610) 16:26:25:828 ProcessGPOs: Starting computer Group Policy (Background) processing...
USERENV(3e8.610) 16:26:25:828 ProcessGPOs:
USERENV(3e8.610) 16:26:25:828 ProcessGPOs:
USERENV(3e8.610) 16:26:25:828 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
USERENV(3e8.610) 16:26:25:843 EnterCriticalPolicySectionEx: Machine critical section has been claimed. Handle = 0x6a0
USERENV(3e8.610) 16:26:25:843 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(3e8.610) 16:26:25:843 ProcessGPOs: Machine role is 2.
USERENV(3e8.610) 16:26:26:062 PingComputer: PingBufferSize set as 2048
USERENV(3e8.610) 16:26:26:484 PingComputer: Adapter speed 100000000 bps
USERENV(3e8.610) 16:26:26:484 PingComputer: First time: 0
USERENV(3e8.610) 16:26:26:484 PingComputer: Fast link. Exiting.
USERENV(a4.d0) 16:26:34:281 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\SescLU.exe
USERENV(5a0.5d4) 16:26:34:656 LibMain: Process Name: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
USERENV(310.338) 16:26:45:093 LibMain: Process Name: C:\Program Files\Skype\Updater\Updater.exe
USERENV(37c.384) 16:26:47:078 LibMain: Process Name: C:\Program Files\SMART Technologies\Education Software\SMARTBoardService.exe
USERENV(6fc.700) 16:26:51:515 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
USERENV(720.71c) 16:26:54:250 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
USERENV(56c.3fc) 16:27:01:625 LibMain: Process Name: C:\Program Files\Lightspeed Systems\User Agent\UAService.exe
USERENV(850.854) 16:27:02:390 LibMain: Process Name: C:\WINDOWS\system32\wuauclt.exe
USERENV(3e8.610) 16:27:03:671 ProcessGPOs: network name is TestDomainnet.org
USERENV(3e8.610) 16:27:03:687 ProcessGPOs: User name is: CN=98-B10-PDC-CNFB,OU=Building10,OU=RBComputers,OU=MainCampus,OU=Computers,OU=TestD,DC=TestDomainnet,DC=org, Domain name is: TestDomainNET
USERENV(3e8.610) 16:27:03:687 ProcessGPOs: Domain controller is: \\RB-DC1-HW.TestDomainnet.org Domain DN is TestDomainnet.org
USERENV(3e8.610) 16:27:03:703 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(3e8.610) 16:27:03:703 ReadGPExtensions: Rsop entry point not found for dskquota.dll.
USERENV(3e8.610) 16:27:03:703 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(3e8.610) 16:27:03:703 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\system32\iedkcs32.dll.
USERENV(3e8.610) 16:27:03:703 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\system32\iedkcs32.dll.
USERENV(3e8.610) 16:27:03:703 ReadGPExtensions: Rsop entry point not found for scecli.dll.
USERENV(3e8.610) 16:27:03:703 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\cscui.dll.
USERENV(3e8.610) 16:27:03:703 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\system32\iedkcs32.dll.
USERENV(3e8.610) 16:27:03:703 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(3e8.610) 16:27:03:703 ReadExtStatus: Reading Previous Status for extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(3e8.610) 16:27:03:703 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:03:703 ReadExtStatus: Reading Previous Status for extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(3e8.610) 16:27:03:703 ReadExtStatus: Reading Previous Status for extension {0E28E245-9368-4853-AD84-6DA3BA35BB75}
USERENV(3e8.610) 16:27:03:703 ReadExtStatus: Reading Previous Status for extension {17D89FEC-5C44-4972-B12D-241CAEF74509}
USERENV(3e8.610) 16:27:03:718 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {1A6364EB-776B-4120-ADE1-B63A406A76B5}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(3e8.610) 16:27:03:718 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {5794DAFD-BE60-433f-88A2-1A31939AC01F}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {6232C319-91AC-4931-9385-E70C2B099F0E}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {7150F9BF-48AD-4da4-A49C-29EF4A8369BA}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {728EE579-943C-4519-9EF7-AB56765798ED}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {74EE6C03-5363-4554-B161-627540339CAB}
USERENV(3e8.610) 16:27:03:718 ReadExtStatus: Reading Previous Status for extension {7B849a69-220F-451E-B3FE-2CB811AF94AE}
USERENV(3e8.610) 16:27:03:734 ReadExtStatus: Reading Previous Status for extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(3e8.610) 16:27:03:734 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:03:734 ReadExtStatus: Reading Previous Status for extension {91FBB303-0CD5-4055-BF42-E512A681B325}
USERENV(3e8.610) 16:27:03:734 ReadExtStatus: Reading Previous Status for extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(3e8.610) 16:27:03:734 ReadExtStatus: Reading Previous Status for extension {A3F3E39B-5D83-4940-B954-28315B82F0A8}
USERENV(3e8.610) 16:27:03:734 ReadExtStatus: Reading Previous Status for extension {AADCED64-746C-4633-A97C-D61349046527}
USERENV(3e8.610) 16:27:03:734 ReadExtStatus: Reading Previous Status for extension {B087BE9D-ED37-454f-AF9C-04291E351182}
USERENV(3e8.610) 16:27:03:734 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:03:734 ReadExtStatus: Reading Previous Status for extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(3e8.610) 16:27:03:734 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:03:734 ReadExtStatus: Reading Previous Status for extension {B587E2B1-4D59-4e7e-AED9-22B9DF11D053}
USERENV(3e8.610) 16:27:03:734 ReadExtStatus: Reading Previous Status for extension {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}
USERENV(3e8.610) 16:27:03:750 ReadExtStatus: Reading Previous Status for extension {C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}
USERENV(3e8.610) 16:27:03:750 ReadExtStatus: Reading Previous Status for extension {C631DF4C-088F-4156-B058-4375F0853CD8}
USERENV(3e8.610) 16:27:03:750 ReadExtStatus: Reading Previous Status for extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(3e8.610) 16:27:03:750 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:03:750 ReadExtStatus: Reading Previous Status for extension {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
USERENV(3e8.610) 16:27:03:750 ReadExtStatus: Reading Previous Status for extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(3e8.610) 16:27:03:750 ReadExtStatus: Reading Previous Status for extension {E47248BA-94CC-49c4-BBB5-9EB7F05183D0}
USERENV(3e8.610) 16:27:03:750 ReadExtStatus: Reading Previous Status for extension {E4F48E54-F38D-4884-BFB9-D4D2E5729C18}
USERENV(3e8.610) 16:27:03:750 ReadExtStatus: Reading Previous Status for extension {E5094040-C46C-4115-B030-04FB2E545B00}
USERENV(3e8.610) 16:27:03:750 ReadExtStatus: Reading Previous Status for extension {E62688F0-25FD-4c90-BFF5-F508B9D2E31F}
USERENV(3e8.610) 16:27:03:750 ReadExtStatus: Reading Previous Status for extension {F9C77450-3A41-477E-9310-9ACD617BD9E3}
USERENV(3e8.610) 16:27:03:750 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(3e8.610) 16:27:03:750 GetGPOInfo: ********************************
USERENV(3e8.610) 16:27:03:750 GetGPOInfo: Entering...
USERENV(3e8.610) 16:27:03:875 GetGPOInfo: Server connection established.
USERENV(3e8.610) 16:27:03:890 GetGPOInfo: Bound successfully.
USERENV(3e8.610) 16:27:04:000 SearchDSObject: Searching <OU=Building10,OU=RBComputers,OU=MainCampus,OU=Computers,OU=TestD,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:000 SearchDSObject: Found GPO(s): < >
USERENV(3e8.610) 16:27:04:000 SearchDSObject: Searching <OU=RBComputers,OU=MainCampus,OU=Computers,OU=TestD,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:000 SearchDSObject: Found GPO(s): <[LDAP://CN={96DD8873-5110-4BE7-8B16-B24B29E42600},CN=Policies,CN=System,DC=TestDomainnet,DC=org;0]>
USERENV(3e8.610) 16:27:04:000 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:000 ProcessGPO: Deferring search for <LDAP://CN={96DD8873-5110-4BE7-8B16-B24B29E42600},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:000 SearchDSObject: Searching <OU=MainCampus,OU=Computers,OU=TestD,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:000 SearchDSObject: No GPO(s) for this object.
USERENV(3e8.610) 16:27:04:000 SearchDSObject: Searching <OU=Computers,OU=TestD,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:000 SearchDSObject: Found GPO(s): <[LDAP://cn={76EB1CCF-17E8-453A-B0DE-5EF378846D6E},cn=policies,cn=system,DC=TestDomainnet,DC=org;0]>
USERENV(3e8.610) 16:27:04:000 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:015 ProcessGPO: Deferring search for <LDAP://cn={76EB1CCF-17E8-453A-B0DE-5EF378846D6E},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:015 SearchDSObject: Searching <OU=TestD,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:015 SearchDSObject: Found GPO(s): <[LDAP://cn={D6F19442-6B38-4393-8D22-AD8E0269E314},cn=policies,cn=system,DC=TestDomainnet,DC=org;0][LDAP://cn={D5B48915-4DC1-418B-A8DD-4F5CE8907624},cn=policies,cn=system,DC=TestDomainnet,DC=org;2][LDAP://cn={2680C1AA-109B-473C-AE3E-0D48EC7DB06B},cn=policies,cn=system,DC=TestDomainnet,DC=org;0][LDAP://cn={365EFC33-B6A5-4D10-BF48-3214D7CA47B5},cn=policies,cn=system,DC=TestDomainnet,DC=org;0][LDAP://cn={7900FF9C-AB2E-469B-ABF5-B221CD065DB2},cn=policies,cn=system,DC=TestDomainnet,DC=org;0][LDAP://CN={4D2DE652-FFF0-4BD1-9D77-A9DC6C1A681B},CN=Policies,CN=System,DC=TestDomainnet,DC=org;0][LDAP://CN={04B28B6E-CF5E-4E20-9A3F-A99963ED5EC9},CN=Policies,CN=System,DC=TestDomainnet,DC=org;0][LDAP://cn={F0D08F5F-4755-41B2-8040-73AF69FA9E4A},cn=policies,cn=system,DC=TestDomainnet,DC=org;0]>
USERENV(3e8.610) 16:27:04:015 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:015 ProcessGPO: Deferring search for <LDAP://cn={D6F19442-6B38-4393-8D22-AD8E0269E314},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:015 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:015 ProcessGPO: Deferring search for <LDAP://cn={D5B48915-4DC1-418B-A8DD-4F5CE8907624},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:015 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:015 ProcessGPO: Deferring search for <LDAP://cn={2680C1AA-109B-473C-AE3E-0D48EC7DB06B},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:015 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:015 ProcessGPO: Deferring search for <LDAP://cn={365EFC33-B6A5-4D10-BF48-3214D7CA47B5},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:015 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:015 ProcessGPO: Deferring search for <LDAP://cn={7900FF9C-AB2E-469B-ABF5-B221CD065DB2},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:015 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:031 ProcessGPO: Deferring search for <LDAP://CN={4D2DE652-FFF0-4BD1-9D77-A9DC6C1A681B},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:031 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:031 ProcessGPO: Deferring search for <LDAP://CN={04B28B6E-CF5E-4E20-9A3F-A99963ED5EC9},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:031 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:031 ProcessGPO: Deferring search for <LDAP://cn={F0D08F5F-4755-41B2-8040-73AF69FA9E4A},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:031 SearchDSObject: Searching <DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:031 SearchDSObject: Found GPO(s): <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=TestDomainnet,DC=org;0]>
USERENV(3e8.610) 16:27:04:031 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:031 ProcessGPO: Deferring search for <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:046 SearchDSObject: Searching <CN=Parrot,CN=Sites,CN=Configuration,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:046 SearchDSObject: No GPO(s) for this object.
USERENV(3e8.610) 16:27:04:062 EvaluateDeferredGPOs: Searching for GPOs in cn=policies,cn=system,DC=TestDomainnet,DC=org
USERENV(3e8.610) 16:27:04:062 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:062 ProcessGPO: Searching <cn={D5B48915-4DC1-418B-A8DD-4F5CE8907624},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:062 ProcessGPO: Machine has access to this GPO.
USERENV(3e8.610) 16:27:04:062 ProcessGPO: GPO passes the filter check.
USERENV(3e8.610) 16:27:04:062 ProcessGPO: Found functionality version of: 2
USERENV(3e8.610) 16:27:04:062 ProcessGPO: Found file system path of: <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{D5B48915-4DC1-418B-A8DD-4F5CE8907624}>
USERENV(3e8.610) 16:27:04:109 ProcessGPO: Found common name of: <{D5B48915-4DC1-418B-A8DD-4F5CE8907624}>
USERENV(3e8.610) 16:27:04:109 ProcessGPO: Found display name of: <Default TestD>
USERENV(3e8.610) 16:27:04:109 ProcessGPO: Found machine version of: GPC is 27, GPT is 27
USERENV(3e8.610) 16:27:04:109 ProcessGPO: Found flags of: 0
USERENV(3e8.610) 16:27:04:109 ProcessGPO: Found extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{942A8E4F-A261-11D1-A760-00C04FB9603F}]
USERENV(3e8.610) 16:27:04:109 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:125 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:125 ProcessGPO: Searching <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:125 ProcessGPO: Machine has access to this GPO.
USERENV(3e8.610) 16:27:04:125 FilterCheck: Found WMI Filter id of: < >
USERENV(3e8.610) 16:27:04:125 ProcessGPO: GPO passes the filter check.
USERENV(3e8.610) 16:27:04:125 ProcessGPO: Found functionality version of: 2
USERENV(3e8.610) 16:27:04:125 ProcessGPO: Found file system path of: <\\TestDomainnet.org\sysvol\TestDomainnet.org\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(3e8.610) 16:27:04:140 ProcessGPO: Found common name of: <{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(3e8.610) 16:27:04:140 ProcessGPO: Found display name of: <Default Domain Policy>
USERENV(3e8.610) 16:27:04:140 ProcessGPO: Found machine version of: GPC is 27, GPT is 27
USERENV(3e8.610) 16:27:04:140 ProcessGPO: Found flags of: 0
USERENV(3e8.610) 16:27:04:140 ProcessGPO: Found extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
USERENV(3e8.610) 16:27:04:140 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:140 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:04:140 ProcessGPO: Searching <cn={D6F19442-6B38-4393-8D22-AD8E0269E314},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:04:140 ProcessGPO: Machine has access to this GPO.
USERENV(3e8.610) 16:27:04:140 FilterCheck: Found WMI Filter id of: <[TestDomainnet.org;{B05ADC1E-57FF-4268-8E51-2DEE3D2B4371};0]>
USERENV(938.93c) 16:27:04:437 LibMain: Process Name: C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
USERENV(af0.b58) 16:27:06:718 LibMain: Process Name: C:\WINDOWS\system32\wbem\wmiprvse.exe
USERENV(3e8.610) 16:27:11:640 ProcessGPO: GPO passes the filter check.
USERENV(3e8.610) 16:27:11:656 ProcessGPO: Found functionality version of: 2
USERENV(3e8.610) 16:27:11:656 ProcessGPO: Found file system path of: <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{D6F19442-6B38-4393-8D22-AD8E0269E314}>
USERENV(3e8.610) 16:27:11:671 ProcessGPO: Found common name of: <{D6F19442-6B38-4393-8D22-AD8E0269E314}>
USERENV(3e8.610) 16:27:11:671 ProcessGPO: Found display name of: <MachinePostImaging>
USERENV(3e8.610) 16:27:11:671 ProcessGPO: Found machine version of: GPC is 39, GPT is 39
USERENV(3e8.610) 16:27:11:671 ProcessGPO: Found flags of: 1
USERENV(3e8.610) 16:27:11:671 ProcessGPO: Found extensions: [{00000000-0000-0000-0000-000000000000}{79F92669-4224-476C-9C5C-6EFB4D87DF4A}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}][{17D89FEC-5C44-4972-B12D-241CAEF74509}{79F92669-4224-476C-9C5C-6EFB4D87DF4A}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{B087BE9D-ED37-454F-AF9C-04291E351182}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}]
USERENV(3e8.610) 16:27:11:671 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:671 EvalList: Object <cn={2680C1AA-109B-473C-AE3E-0D48EC7DB06B},cn=policies,cn=system,DC=TestDomainnet,DC=org> cannot be accessed
USERENV(3e8.610) 16:27:11:671 EvalList: Object <cn={365EFC33-B6A5-4D10-BF48-3214D7CA47B5},cn=policies,cn=system,DC=TestDomainnet,DC=org> cannot be accessed
USERENV(3e8.610) 16:27:11:671 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:671 ProcessGPO: Searching <cn={7900FF9C-AB2E-469B-ABF5-B221CD065DB2},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:11:671 ProcessGPO: Machine has access to this GPO.
USERENV(3e8.610) 16:27:11:687 ProcessGPO: GPO passes the filter check.
USERENV(3e8.610) 16:27:11:687 ProcessGPO: Found functionality version of: 2
USERENV(3e8.610) 16:27:11:687 ProcessGPO: Found file system path of: <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{7900FF9C-AB2E-469B-ABF5-B221CD065DB2}>
USERENV(3e8.610) 16:27:11:687 ProcessGPO: Found common name of: <{7900FF9C-AB2E-469B-ABF5-B221CD065DB2}>
USERENV(3e8.610) 16:27:11:687 ProcessGPO: Found display name of: <WSUS>
USERENV(3e8.610) 16:27:11:687 ProcessGPO: Found machine version of: GPC is 35, GPT is 35
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Found flags of: 1
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Found extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}{D02B1F72-3407-48AE-BA88-E8213C6761F1}]
USERENV(3e8.610) 16:27:11:703 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:703 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Searching <CN={4D2DE652-FFF0-4BD1-9D77-A9DC6C1A681B},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Machine does not have access to the GPO and so will not be applied.
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Found functionality version of: 2
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Found file system path of: <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{4D2DE652-FFF0-4BD1-9D77-A9DC6C1A681B}>
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Sysvol access skipped because GPO is not getting applied.
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Found common name of: <{4D2DE652-FFF0-4BD1-9D77-A9DC6C1A681B}>
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Found display name of: <SoftwareRestrictions>
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Found machine version of: GPC is 2, GPT is 65535
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Found flags of: 2
USERENV(3e8.610) 16:27:11:703 ProcessGPO: Found extensions: [{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1D-2488-11D1-A28C-00C04FB94F17}]
USERENV(3e8.610) 16:27:11:718 ProcessGPO: GPO SoftwareRestrictions is disabled. It will be skipped.
USERENV(3e8.610) 16:27:11:718 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:718 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:718 ProcessGPO: Searching <CN={04B28B6E-CF5E-4E20-9A3F-A99963ED5EC9},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:11:718 ProcessGPO: Machine does not have access to the GPO and so will not be applied.
USERENV(3e8.610) 16:27:11:718 ProcessGPO: Found functionality version of: 2
USERENV(3e8.610) 16:27:11:734 ProcessGPO: Found file system path of: <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{04B28B6E-CF5E-4E20-9A3F-A99963ED5EC9}>
USERENV(3e8.610) 16:27:11:734 ProcessGPO: Sysvol access skipped because GPO is not getting applied.
USERENV(3e8.610) 16:27:11:734 ProcessGPO: Found common name of: <{04B28B6E-CF5E-4E20-9A3F-A99963ED5EC9}>
USERENV(3e8.610) 16:27:11:734 ProcessGPO: Found display name of: <KaplanDisplayProps>
USERENV(3e8.610) 16:27:11:734 ProcessGPO: Found machine version of: GPC is 0, GPT is 65535
USERENV(3e8.610) 16:27:11:734 ProcessGPO: Found flags of: 0
USERENV(3e8.610) 16:27:11:734 ProcessGPO: No client-side extensions for this object.
USERENV(3e8.610) 16:27:11:734 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:734 EvalList: Object <cn={F0D08F5F-4755-41B2-8040-73AF69FA9E4A},cn=policies,cn=system,DC=TestDomainnet,DC=org> cannot be accessed
USERENV(3e8.610) 16:27:11:734 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:734 ProcessGPO: Searching <cn={76EB1CCF-17E8-453A-B0DE-5EF378846D6E},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:11:750 ProcessGPO: Machine has access to this GPO.
USERENV(3e8.610) 16:27:11:750 FilterCheck: Found WMI Filter id of: <[TestDomainnet.org;{B05ADC1E-57FF-4268-8E51-2DEE3D2B4371};0]>
USERENV(3e8.610) 16:27:11:765 ProcessGPO: GPO passes the filter check.
USERENV(3e8.610) 16:27:11:765 ProcessGPO: Found functionality version of: 2
USERENV(3e8.610) 16:27:11:765 ProcessGPO: Found file system path of: <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{76EB1CCF-17E8-453A-B0DE-5EF378846D6E}>
USERENV(3e8.610) 16:27:11:781 ProcessGPO: Found common name of: <{76EB1CCF-17E8-453A-B0DE-5EF378846D6E}>
USERENV(3e8.610) 16:27:11:781 ProcessGPO: Found display name of: <WinXP - Fix Publisher Association>
USERENV(3e8.610) 16:27:11:781 ProcessGPO: Found machine version of: GPC is 2, GPT is 2
USERENV(3e8.610) 16:27:11:781 ProcessGPO: Found flags of: 1
USERENV(3e8.610) 16:27:11:781 ProcessGPO: Found extensions: [{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B6664F-4972-11D1-A7CA-0000F87571E3}]
USERENV(3e8.610) 16:27:11:781 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:796 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:796 ProcessGPO: Searching <CN={96DD8873-5110-4BE7-8B16-B24B29E42600},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3e8.610) 16:27:11:796 ProcessGPO: Machine has access to this GPO.
USERENV(3e8.610) 16:27:11:796 ProcessGPO: GPO passes the filter check.
USERENV(3e8.610) 16:27:11:796 ProcessGPO: Found functionality version of: 2
USERENV(3e8.610) 16:27:11:796 ProcessGPO: Found file system path of: <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{96DD8873-5110-4BE7-8B16-B24B29E42600}>
USERENV(3e8.610) 16:27:11:812 ProcessGPO: Found common name of: <{96DD8873-5110-4BE7-8B16-B24B29E42600}>
USERENV(3e8.610) 16:27:11:812 ProcessGPO: Found display name of: <DefaultComputers>
USERENV(3e8.610) 16:27:11:812 ProcessGPO: Found machine version of: GPC is 154, GPT is 154
USERENV(3e8.610) 16:27:11:812 ProcessGPO: Found flags of: 1
USERENV(3e8.610) 16:27:11:812 ProcessGPO: Found extensions: [{00000000-0000-0000-0000-000000000000}{79F92669-4224-476C-9C5C-6EFB4D87DF4A}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}][{17D89FEC-5C44-4972-B12D-241CAEF74509}{79F92669-4224-476C-9C5C-6EFB4D87DF4A}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B6664F-4972-11D1-A7CA-0000F87571E3}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B087BE9D-ED37-454F-AF9C-04291E351182}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}]
USERENV(3e8.610) 16:27:11:812 ProcessGPO: ==============================
USERENV(3e8.610) 16:27:11:812 GetGPOInfo: GPO Local Group Policy doesn't contain any data since the version number is 0. It will be skipped.
USERENV(3e8.610) 16:27:11:812 GetGPOInfo: Leaving with 1
USERENV(3e8.610) 16:27:11:812 GetGPOInfo: ********************************
USERENV(3e8.610) 16:27:11:828 ProcessGPOs: Logging Data for Target <98-B10-PDC-CNFB>.
USERENV(3e8.610) 16:27:11:828 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
USERENV(3e8.610) 16:27:11:828 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:11:828 ProcessGPOs: Processing extension Registry
USERENV(3e8.610) 16:27:11:828 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:11:828 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:11:828 CheckGPOs: No GPO changes and no security group membership change and extension Registry has NoGPOChanges set.
USERENV(3e8.610) 16:27:11:828 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:11:828 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:11:828 ProcessGPOs: Processing extension Wireless
USERENV(3e8.610) 16:27:11:843 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:11:843 CheckGPOs: No GPO changes but couldn't read extension Wireless's status or policy time.
USERENV(3e8.610) 16:27:11:843 ProcessGPOs: Extension Wireless skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:11:843 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:11:843 ProcessGPOs: Processing extension Group Policy Environment
USERENV(3e8.610) 16:27:11:843 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:11:843 CheckGPOs: No GPO changes but couldn't read extension Group Policy Environment's status or policy time.
USERENV(3e8.610) 16:27:11:843 ProcessGPOs: Extension Group Policy Environment skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:11:843 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:11:843 ProcessGPOs: Processing extension Group Policy Local Users and Groups
USERENV(3e8.610) 16:27:11:843 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:11:843 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:11:859 ProcessGPOList: Entering for extension Group Policy Local Users and Groups
USERENV(3e8.610) 16:27:11:859 MachinePolicyCallback: Setting status UI to Applying Group Policy Local Users and Groups policy...
USERENV(3e8.610) 16:27:11:859 ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
USERENV(3e8.610) 16:27:15:015 ProcessGroupPolicyCompleted: Entering. Extension = {17D89FEC-5C44-4972-B12D-241CAEF74509}, dwStatus = 0x0
USERENV(3e8.610) 16:27:15:031 GetWbemServices: CoCreateInstance succeeded
USERENV(3e8.610) 16:27:15:265 ConnectToNameSpace: ConnectServer returned 0x0
USERENV(3e8.610) 16:27:15:265 ProcessGroupPolicyCompletedEx: Extension {17D89FEC-5C44-4972-B12D-241CAEF74509} was able to log data. Error = 0x0, dwRet = 0. Clearing the dirty bit
USERENV(3e8.610) 16:27:15:875 ProcessGroupPolicyCompleted: Leaving. Extension = {17D89FEC-5C44-4972-B12D-241CAEF74509}, Return status dwRet = 0x0
USERENV(3e8.610) 16:27:15:875 ProcessGPOList: Extension Group Policy Local Users and Groups returned 0x0.
USERENV(3e8.610) 16:27:15:875 ProcessGPOList: Extension Group Policy Local Users and Groups status was not updated because there was no changes and no transition or rsop wasn't enabled
USERENV(3e8.610) 16:27:15:890 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:890 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:890 ProcessGPOs: Processing extension Group Policy Device Settings
USERENV(3e8.610) 16:27:15:890 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:890 CheckGPOs: No GPO changes but couldn't read extension Group Policy Device Settings's status or policy time.
USERENV(3e8.610) 16:27:15:890 ProcessGPOs: Extension Group Policy Device Settings skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:890 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:890 ProcessGPOs: Processing extension Folder Redirection
USERENV(3e8.610) 16:27:15:890 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:890 CheckGPOs: No GPO changes but couldn't read extension Folder Redirection's status or policy time.
USERENV(3e8.610) 16:27:15:890 ProcessGPOs: Extension Folder Redirection skipped with flags 0x7.
USERENV(3e8.610) 16:27:15:906 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:906 ProcessGPOs: Processing extension Microsoft Disk Quota
USERENV(3e8.610) 16:27:15:906 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:906 CheckGPOs: No GPO changes but couldn't read extension Microsoft Disk Quota's status or policy time.
USERENV(3e8.610) 16:27:15:906 ProcessGPOs: Extension Microsoft Disk Quota skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:906 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:906 ProcessGPOs: Processing extension Group Policy Network Options
USERENV(3e8.610) 16:27:15:906 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:906 CheckGPOs: No GPO changes but couldn't read extension Group Policy Network Options's status or policy time.
USERENV(3e8.610) 16:27:15:906 ProcessGPOs: Extension Group Policy Network Options skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:906 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:906 ProcessGPOs: Processing extension QoS Packet Scheduler
USERENV(3e8.610) 16:27:15:906 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:921 CheckGPOs: No GPO changes but couldn't read extension QoS Packet Scheduler's status or policy time.
USERENV(3e8.610) 16:27:15:921 ProcessGPOs: Extension QoS Packet Scheduler skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:921 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:921 ProcessGPOs: Processing extension Scripts
USERENV(3e8.610) 16:27:15:921 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:15:921 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:921 CheckGPOs: No GPO changes and no security group membership change and extension Scripts has NoGPOChanges set.
USERENV(3e8.610) 16:27:15:921 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:921 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:921 ProcessGPOs: Processing extension Internet Explorer Zonemapping
USERENV(3e8.610) 16:27:15:921 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:921 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Zonemapping's status or policy time.
USERENV(3e8.610) 16:27:15:921 ProcessGPOs: Extension Internet Explorer Zonemapping skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:921 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:921 ProcessGPOs: Processing extension Group Policy Drive Maps
USERENV(3e8.610) 16:27:15:921 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:937 CheckGPOs: No GPO changes but couldn't read extension Group Policy Drive Maps's status or policy time.
USERENV(3e8.610) 16:27:15:937 ProcessGPOs: Extension Group Policy Drive Maps skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:937 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:937 ProcessGPOs: Processing extension Group Policy Folders
USERENV(3e8.610) 16:27:15:937 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:937 CheckGPOs: No GPO changes but couldn't read extension Group Policy Folders's status or policy time.
USERENV(3e8.610) 16:27:15:937 ProcessGPOs: Extension Group Policy Folders skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:937 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:937 ProcessGPOs: Processing extension Group Policy Network Shares
USERENV(3e8.610) 16:27:15:937 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:937 CheckGPOs: No GPO changes but couldn't read extension Group Policy Network Shares's status or policy time.
USERENV(3e8.610) 16:27:15:937 ProcessGPOs: Extension Group Policy Network Shares skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:953 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:953 ProcessGPOs: Processing extension Group Policy Files
USERENV(3e8.610) 16:27:15:953 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:953 CheckGPOs: No GPO changes but couldn't read extension Group Policy Files's status or policy time.
USERENV(3e8.610) 16:27:15:953 ProcessGPOs: Extension Group Policy Files skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:953 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:953 ProcessGPOs: Processing extension Group Policy Data Sources
USERENV(3e8.610) 16:27:15:953 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:953 CheckGPOs: No GPO changes but couldn't read extension Group Policy Data Sources's status or policy time.
USERENV(3e8.610) 16:27:15:953 ProcessGPOs: Extension Group Policy Data Sources skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:953 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:953 ProcessGPOs: Processing extension Group Policy Ini Files
USERENV(3e8.610) 16:27:15:953 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:953 CheckGPOs: No GPO changes but couldn't read extension Group Policy Ini Files's status or policy time.
USERENV(3e8.610) 16:27:15:953 ProcessGPOs: Extension Group Policy Ini Files skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:968 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:968 ProcessGPOs: Processing extension Internet Explorer User Accelerators
USERENV(3e8.610) 16:27:15:968 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:968 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer User Accelerators's status or policy time.
USERENV(3e8.610) 16:27:15:968 ProcessGPOs: Extension Internet Explorer User Accelerators skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:968 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:968 ProcessGPOs: Processing extension Security
USERENV(3e8.610) 16:27:15:968 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:15:968 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:968 CheckGPOs: No GPO changes and no security group membership change and extension Security has NoGPOChanges set.
USERENV(3e8.610) 16:27:15:968 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:984 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:984 ProcessGPOs: Processing extension Group Policy Services
USERENV(3e8.610) 16:27:15:984 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:984 CheckGPOs: No GPO changes but couldn't read extension Group Policy Services's status or policy time.
USERENV(3e8.610) 16:27:15:984 ProcessGPOs: Extension Group Policy Services skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:15:984 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:984 ProcessGPOs: Processing extension Internet Explorer Branding
USERENV(3e8.610) 16:27:15:984 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:15:984 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Branding's status or policy time.
USERENV(3e8.610) 16:27:15:984 ProcessGPOs: Extension Internet Explorer Branding skipped with flags 0x7.
USERENV(3e8.610) 16:27:15:984 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:15:984 ProcessGPOs: Processing extension Group Policy Folder Options
USERENV(3e8.610) 16:27:16:000 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:16:000 CheckGPOs: No GPO changes but couldn't read extension Group Policy Folder Options's status or policy time.
USERENV(3e8.610) 16:27:16:000 ProcessGPOs: Extension Group Policy Folder Options skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:16:000 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:16:000 ProcessGPOs: Processing extension Group Policy Scheduled Tasks
USERENV(3e8.610) 16:27:16:000 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:16:000 CheckGPOs: No GPO changes but couldn't read extension Group Policy Scheduled Tasks's status or policy time.
USERENV(3e8.610) 16:27:16:000 ProcessGPOs: Extension Group Policy Scheduled Tasks skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:16:000 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:16:000 ProcessGPOs: Processing extension Group Policy Registry
USERENV(3e8.610) 16:27:16:000 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:16:000 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:16:015 ProcessGPOList: Entering for extension Group Policy Registry
USERENV(3e8.610) 16:27:16:015 MachinePolicyCallback: Setting status UI to Applying Group Policy Registry policy...
USERENV(3e8.610) 16:27:16:015 ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
USERENV(3e8.610) 16:27:16:453 ProcessGroupPolicyCompleted: Entering. Extension = {B087BE9D-ED37-454F-AF9C-04291E351182}, dwStatus = 0x0
USERENV(3e8.610) 16:27:16:468 GetWbemServices: CoCreateInstance succeeded
USERENV(3e8.610) 16:27:17:201 ConnectToNameSpace: ConnectServer returned 0x0
USERENV(3e8.610) 16:27:17:201 ProcessGroupPolicyCompletedEx: Extension {B087BE9D-ED37-454F-AF9C-04291E351182} was able to log data. Error = 0x0, dwRet = 0. Clearing the dirty bit
USERENV(3e8.610) 16:27:17:233 ProcessGroupPolicyCompleted: Leaving. Extension = {B087BE9D-ED37-454F-AF9C-04291E351182}, Return status dwRet = 0x0
USERENV(3e8.610) 16:27:17:233 ProcessGPOList: Extension Group Policy Registry returned 0x0.
USERENV(3e8.610) 16:27:17:233 ProcessGPOList: Extension Group Policy Registry status was not updated because there was no changes and no transition or rsop wasn't enabled
USERENV(3e8.610) 16:27:17:233 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:249 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:249 ProcessGPOs: Processing extension EFS recovery
USERENV(3e8.610) 16:27:17:249 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:17:249 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:17:249 CheckGPOs: No GPO changes and no security group membership change and extension EFS recovery has NoGPOChanges set.
USERENV(3e8.610) 16:27:17:249 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:249 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:249 ProcessGPOs: Processing extension 802.3 Group Policy
USERENV(3e8.610) 16:27:17:249 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:17:249 CheckGPOs: No GPO changes but couldn't read extension 802.3 Group Policy's status or policy time.
USERENV(3e8.610) 16:27:17:249 ProcessGPOs: Extension 802.3 Group Policy skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:17:249 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:249 ProcessGPOs: Processing extension Group Policy Printers
USERENV(3e8.610) 16:27:17:249 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:17:249 CheckGPOs: No GPO changes but couldn't read extension Group Policy Printers's status or policy time.
USERENV(3e8.610) 16:27:17:249 ProcessGPOs: Extension Group Policy Printers skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:17:265 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:265 ProcessGPOs: Processing extension Group Policy Shortcuts
USERENV(3e8.610) 16:27:17:265 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:17:265 CheckGPOs: No GPO changes but couldn't read extension Group Policy Shortcuts's status or policy time.
USERENV(3e8.610) 16:27:17:265 ProcessGPOs: Extension Group Policy Shortcuts skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:17:265 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:265 ProcessGPOs: Processing extension Microsoft Offline Files
USERENV(3e8.610) 16:27:17:265 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:17:265 CheckGPOs: No GPO changes but couldn't read extension Microsoft Offline Files's status or policy time.
USERENV(3e8.610) 16:27:17:265 ProcessGPOs: Extension Microsoft Offline Files skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:17:265 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:265 ProcessGPOs: Processing extension Software Installation
USERENV(3e8.610) 16:27:17:265 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.610) 16:27:17:265 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:17:265 ProcessGPOList: Entering for extension Software Installation
USERENV(3e8.610) 16:27:17:265 MachinePolicyCallback: Setting status UI to Applying Software Installation policy...
USERENV(3e8.610) 16:27:17:281 ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
USERENV(3e8.610) 16:27:17:975 ProcessGPOList: Extension Software Installation returned 0x0.
USERENV(3e8.610) 16:27:17:975 ProcessGPOList: Extension Software Installation status was not updated because there was no changes and no transition or rsop wasn't enabled
USERENV(3e8.610) 16:27:17:975 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:991 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:991 ProcessGPOs: Processing extension Internet Explorer Machine Accelerators
USERENV(3e8.610) 16:27:17:991 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:17:991 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Machine Accelerators's status or policy time.
USERENV(3e8.610) 16:27:17:991 ProcessGPOs: Extension Internet Explorer Machine Accelerators skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:17:991 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:991 ProcessGPOs: Processing extension IP Security
USERENV(3e8.610) 16:27:17:991 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:17:991 CheckGPOs: No GPO changes but couldn't read extension IP Security's status or policy time.
USERENV(3e8.610) 16:27:17:991 ProcessGPOs: Extension IP Security skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:17:991 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:17:991 ProcessGPOs: Processing extension Group Policy Internet Settings
USERENV(3e8.610) 16:27:18:007 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:18:007 CheckGPOs: No GPO changes but couldn't read extension Group Policy Internet Settings's status or policy time.
USERENV(3e8.610) 16:27:18:007 ProcessGPOs: Extension Group Policy Internet Settings skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:18:007 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:18:007 ProcessGPOs: Processing extension Group Policy Start Menu Settings
USERENV(3e8.610) 16:27:18:007 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:18:007 CheckGPOs: No GPO changes but couldn't read extension Group Policy Start Menu Settings's status or policy time.
USERENV(3e8.610) 16:27:18:007 ProcessGPOs: Extension Group Policy Start Menu Settings skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:18:007 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:18:007 ProcessGPOs: Processing extension Group Policy Regional Options
USERENV(3e8.610) 16:27:18:007 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:18:007 CheckGPOs: No GPO changes but couldn't read extension Group Policy Regional Options's status or policy time.
USERENV(3e8.610) 16:27:18:007 ProcessGPOs: Extension Group Policy Regional Options skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:18:007 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:18:007 ProcessGPOs: Processing extension Group Policy Power Options
USERENV(3e8.610) 16:27:18:024 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:18:024 CheckGPOs: No GPO changes but couldn't read extension Group Policy Power Options's status or policy time.
USERENV(3e8.610) 16:27:18:024 ProcessGPOs: Extension Group Policy Power Options skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:18:024 ProcessGPOs: -----------------------
USERENV(3e8.610) 16:27:18:024 ProcessGPOs: Processing extension Group Policy Applications
USERENV(3e8.610) 16:27:18:024 CompareGPOLists: The lists are the same.
USERENV(3e8.610) 16:27:18:024 CheckGPOs: No GPO changes but couldn't read extension Group Policy Applications's status or policy time.
USERENV(3e8.610) 16:27:18:024 ProcessGPOs: Extension Group Policy Applications skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.610) 16:27:18:024 SetFgRefreshInfo: Previous Machine Fg policy Synchronous, Reason: SyncPolicy.
USERENV(3e8.610) 16:27:18:024 SetFgRefreshInfo: Next Machine Fg policy Synchronous, Reason: SyncPolicy.
USERENV(3e8.610) 16:27:18:024 ProcessGPOs: No WMI logging done in this policy cycle.
USERENV(3e8.610) 16:27:18:104 LeaveCriticalPolicySection: Critical section 0x6a0 has been released.
USERENV(3e8.610) 16:27:18:104 ProcessGPOs: Computer Group Policy has been applied.
USERENV(3e8.610) 16:27:18:104 ProcessGPOs: Leaving with 1.
USERENV(3e8.ebc) 16:27:18:169 PolicyChangedThread: Leaving
USERENV(3e8.610) 16:27:18:185 ApplyGroupPolicy: Leaving successfully.
USERENV(ec8.ecc) 16:27:18:346 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(ec8.ecc) 16:27:20:234 GetProfileType: Profile already loaded.
USERENV(ec8.ecc) 16:27:20:234 LoadProfileInfo: Failed to query central profile with error 2
USERENV(ec8.ecc) 16:27:20:234 GetProfileType: ProfileFlags is 0
USERENV(f38.f3c) 16:27:22:315 LibMain: Process Name: C:\WINDOWS\system32\Reg.exe
USERENV(f54.f58) 16:27:24:203 LibMain: Process Name: \\TestDomainnet.org\netlogon\AWFolder\AuditScanner.exe
USERENV(f54.f58) 16:27:24:203 ImpersonateUser: Failed to impersonate user with 5.
USERENV(f54.f58) 16:27:24:203 GetUserNameAndDomain Failed to impersonate user
USERENV(f54.f58) 16:27:24:203 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(f54.f58) 16:27:24:203 ImpersonateUser: Failed to impersonate user with 5.
USERENV(f54.f58) 16:27:24:203 GetUserNameAndDomain Failed to impersonate user
USERENV(f54.f58) 16:27:24:203 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(5ec.f88) 16:27:24:413 GetProfileType: Profile already loaded.
USERENV(5ec.f88) 16:27:24:413 LoadProfileInfo: Failed to query central profile with error 2
USERENV(5ec.f88) 16:27:24:413 GetProfileType: ProfileFlags is 0
USERENV(6b4.6bc) 16:27:31:996 LibMain: Process Name: C:\WINDOWS\system32\Ati2evxx.exe
USERENV(7c0.dc) 16:27:32:464 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(630.150) 16:29:31:020 ImpersonateUser: Failed to impersonate user with 5.
USERENV(630.150) 16:29:31:020 GetUserNameAndDomain Failed to impersonate user
USERENV(630.150) 16:29:31:020 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(a8c.a30) 16:29:41:346 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\SescLU.exe
USERENV(5b0.5b8) 16:32:23:789 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(5b0.5b8) 16:32:23:789 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(5b0.5b8) 16:32:23:789 LibMain: Process Name: \??\C:\WINDOWS\system32\winlogon.exe
USERENV(7c8.7cc) 16:32:24:676 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(7c8.7cc) 16:32:24:676 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(7c8.7cc) 16:32:24:692 LibMain: Process Name: \??\C:\WINDOWS\system32\winlogon.exe
USERENV(8d4.8d8) 16:32:24:982 LibMain: Process Name: C:\WINDOWS\system32\Ati2evxx.exe
USERENV(b10.b18) 16:32:31:005 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(b10.b18) 16:32:31:005 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(b10.b18) 16:32:31:005 LibMain: Process Name: \??\C:\WINDOWS\system32\winlogon.exe
USERENV(5e0.674) 16:32:32:586 LibMain: Process Name: C:\WINDOWS\system32\mpnotify.exe
USERENV(3e8.3ec) 16:32:32:602 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(3e8.3ec) 16:32:32:602 =========================================================
USERENV(3e8.3ec) 16:32:32:602 LoadUserProfile: Entering, hToken = <0x860>, lpProfileInfo = 0x6e3e0
USERENV(3e8.3ec) 16:32:32:602 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(3e8.3ec) 16:32:32:602 LoadUserProfile: lpProfileInfo->lpUserName = <TestUser2>
USERENV(3e8.3ec) 16:32:32:602 LoadUserProfile: lpProfileInfo->lpProfilePath = <\\RB-FileADM\Profiles$\TestUser2>
USERENV(3e8.3ec) 16:32:32:602 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\RB-DC1-HW\netlogon\Default User>
USERENV(3e8.3ec) 16:32:32:602 LoadUserProfile: NULL server name
USERENV(3e8.3ec) 16:32:32:602 LoadUserProfile: In console winlogon process
USERENV(3e8.3ec) 16:32:32:618 In LoadUserProfileP
USERENV(3e8.3ec) 16:32:32:618 =========================================================
USERENV(3e8.3ec) 16:32:32:618 LoadUserProfile: Entering, hToken = <0x860>, lpProfileInfo = 0x6e3e0
USERENV(3e8.3ec) 16:32:32:618 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(3e8.3ec) 16:32:32:618 LoadUserProfile: lpProfileInfo->lpUserName = <TestUser2>
USERENV(3e8.3ec) 16:32:32:618 LoadUserProfile: lpProfileInfo->lpProfilePath = <\\RB-FileADM\Profiles$\TestUser2>
USERENV(3e8.3ec) 16:32:32:618 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\RB-DC1-HW\netlogon\Default User>
USERENV(3e8.3ec) 16:32:32:618 LoadUserProfile: NULL server name
USERENV(3e8.3ec) 16:32:32:618 LoadUserProfile: User sid: S-1-5-21-2549970651-2034936752-3548929381-18026
USERENV(3e8.3ec) 16:32:32:618 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3e8.3ec) 16:32:32:618 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.3ec) 16:32:32:634 CSyncManager::EnterLock: New entry created
USERENV(3e8.3ec) 16:32:32:634 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-18026 added in bucket 22
USERENV(3e8.3ec) 16:32:32:634 LoadUserProfile: Wait succeeded. In critical section.
USERENV(3e8.3ec) 16:32:32:650 GetOldSidString: Failed to open profile profile guid key with error 2
USERENV(3e8.3ec) 16:32:32:650 GetProfileSid: No Guid -> Sid Mapping available
USERENV(3e8.3ec) 16:32:32:650 GetOldSidString: Failed to open profile profile guid key with error 2
USERENV(3e8.3ec) 16:32:32:650 GetProfileSid: No Guid -> Sid Mapping available
USERENV(3e8.3ec) 16:32:32:650 LoadUserProfile: Expanded profile path is \\RB-FileADM\Profiles$\TestUser2
USERENV(3e8.3ec) 16:32:32:650 ParseProfilePath: Entering, lpProfilePath = <\\RB-FileADM\Profiles$\TestUser2>
USERENV(3e8.3ec) 16:32:32:665 CheckXForestLogon: checking x-forest logon, user handle = 2144
USERENV(3e8.3ec) 16:32:32:665 CheckXForestLogon: not XForest logon.
USERENV(3e8.3ec) 16:32:32:681 AbleToBypassCSC: Try to bypass CSC
USERENV(3e8.3ec) 16:32:32:729 AbleToBypassCSC: tried NPAddConnection3ForCSCAgent. Error 2109
USERENV(3e8.3ec) 16:32:32:729 AbleToBypassCSC: Share \\RB-FileADM\Profiles$ mapped to drive E. Returned Path E:\TestUser2
USERENV(3e8.3ec) 16:32:32:729 ParseProfilePath: CSC bypassed. Profile path E:\TestUser2
USERENV(3e8.3ec) 16:32:32:744 ParseProfilePath: Tick Count = 0
USERENV(3e8.3ec) 16:32:32:744 ParseProfilePath: GetFileAttributes found something with attributes <0x10>
USERENV(3e8.3ec) 16:32:32:744 ParseProfilePath: Found a directory
USERENV(3e8.3ec) 16:32:32:744 LoadUserProfile: ParseProfilePath returned a directory of <E:\TestUser2>
USERENV(3e8.3ec) 16:32:32:744 RestoreUserProfile: Entering
USERENV(3e8.3ec) 16:32:32:744 RestoreUserProfile: User is a Admin
USERENV(3e8.3ec) 16:32:32:744 IsCentralProfileReachable: Entering
USERENV(3e8.3ec) 16:32:32:744 CheckRoamingShareOwnership: checking ownership for E:\TestUser2
USERENV(3e8.3ec) 16:32:32:744 CheckRoamingShareOwnership: policy set to disable ownership check
USERENV(3e8.3ec) 16:32:32:744 IsCentralProfileReachable: Testing <E:\TestUser2\ntuser.man>
USERENV(3e8.3ec) 16:32:32:776 IsCentralProfileReachable: Profile is not reachable, error = 2
USERENV(3e8.3ec) 16:32:32:776 IsCentralProfileReachable: Testing <E:\TestUser2\ntuser.dat>
USERENV(3e8.3ec) 16:32:32:776 IsCentralProfileReachable: Found a user profile.
USERENV(3e8.3ec) 16:32:32:776 RestoreUserProfile: Central Profile is reachable
USERENV(3e8.3ec) 16:32:32:776 RestoreUserProfile: Central Profile is roaming
USERENV(3e8.3ec) 16:32:32:776 RestoreUserProfile: Profile path = <E:\TestUser2>
USERENV(3e8.3ec) 16:32:32:776 ExtractProfileFromBackup: Failed to open key Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2549970651-2034936752-3548929381-18026 with error 2
USERENV(3e8.3ec) 16:32:32:776 ExtractProfileFromBackup: Couldn't open backup profile key. Error = 2
USERENV(3e8.3ec) 16:32:32:776 GetOldSidString: Failed to open profile profile guid key with error 2
USERENV(3e8.3ec) 16:32:32:792 PatchNewProfileIfRequred: No OldSidString found
USERENV(3e8.3ec) 16:32:32:792 CreateLocalProfileKey: Not setting additional Security
USERENV(3e8.3ec) 16:32:32:792 CreateLocalProfileImage: One way or another we haven't got an existing local profile, try and create one
USERENV(3e8.3ec) 16:32:32:792 CreateSecureDirectory: Entering with <C:\Documents and Settings\TestUser2>
USERENV(3e8.3ec) 16:32:32:823 CreateSecureDirectory: Created the directory <C:\Documents and Settings\TestUser2>
USERENV(3e8.3ec) 16:32:32:823 ComputeLocalProfileName: generated the profile directory <C:\Documents and Settings\TestUser2>
USERENV(3e8.3ec) 16:32:32:823 Creating Local Profile
USERENV(3e8.3ec) 16:32:32:823 Local profile name is <C:\Documents and Settings\TestUser2>
USERENV(3e8.3ec) 16:32:32:823 RestoreUserProfile: Reconciling roaming profile with local profile
USERENV(3e8.3ec) 16:32:32:839 GetExclusionList: Failed to get file size of <C:\Documents and Settings\TestUser2\ntuser.ini>
USERENV(3e8.3ec) 16:32:32:839 TouchLocalHive: Failed to query central profile with error 2
USERENV(3e8.3ec) 16:32:32:839 CopyProfileDirectoryEx: Entering, lpSourceDir = <E:\TestUser2>, lpDestinationDir = <C:\Documents and Settings\TestUser2>, dwFlags = 0x4000
USERENV(3e8.3ec) 16:32:32:855 RecurseDirectory: Adding E:\TestUser2\Application Data\Apple Computer\Logs\ to the list of directories
USERENV(3e8.3ec) 16:32:32:855 RecurseDirectory: Adding E:\TestUser2\Application Data\Apple Computer\ to the list of directories
USERENV(3e8.3ec) 16:32:32:871 RecurseDirectory: Adding E:\TestUser2\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\ to the list of directories
USERENV(3e8.3ec) 16:32:32:871 RecurseDirectory: Adding E:\TestUser2\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\ to the list of directories
USERENV(3e8.3ec) 16:32:32:871 RecurseDirectory: Adding E:\TestUser2\Application Data\Macromedia\Flash Player\www.macromedia.com\ to the list of directories
USERENV(3e8.3ec) 16:32:32:871 RecurseDirectory: Adding E:\TestUser2\Application Data\Macromedia\Flash Player\ to the list of directories
USERENV(3e8.3ec) 16:32:32:871 RecurseDirectory: Adding E:\TestUser2\Application Data\Macromedia\ to the list of directories
USERENV(3e8.3ec) 16:32:32:887 RecurseDirectory: Adding E:\TestUser2\Application Data\Microsoft\Credentials\S-1-5-21-2549970651-2034936752-3548929381-18026\ to the list of directories
USERENV(3e8.3ec) 16:32:32:887 RecurseDirectory: Adding E:\TestUser2\Application Data\Microsoft\Credentials\ to the list of directories
USERENV(3e8.3ec) 16:32:32:887 RecurseDirectory: Adding E:\TestUser2\Application Data\Microsoft\Internet Explorer\ to the list of directories
USERENV(3e8.3ec) 16:32:32:903 RecurseDirectory: Adding E:\TestUser2\Application Data\Microsoft\SystemCertificates\My\Certificates\ to the list of directories
USERENV(3e8.3ec) 16:32:32:903 RecurseDirectory: Adding E:\TestUser2\Application Data\Microsoft\SystemCertificates\My\CRLs\ to the list of directories
USERENV(3e8.3ec) 16:32:32:903 RecurseDirectory: Adding E:\TestUser2\Application Data\Microsoft\SystemCertificates\My\CTLs\ to the list of directories
USERENV(3e8.3ec) 16:32:32:903 RecurseDirectory: Adding E:\TestUser2\Application Data\Microsoft\SystemCertificates\My\ to the list of directories
USERENV(3e8.3ec) 16:32:32:903 RecurseDirectory: Adding E:\TestUser2\Application Data\Microsoft\SystemCertificates\ to the list of directories
USERENV(3e8.3ec) 16:32:32:918 RecurseDirectory: Adding E:\TestUser2\Application Data\Microsoft\ to the list of directories
USERENV(3e8.3ec) 16:32:32:918 RecurseDirectory: Adding E:\TestUser2\Application Data\ to the list of directories
USERENV(3e8.3ec) 16:32:32:918 RecurseDirectory: Adding E:\TestUser2\Cookies\ to the list of directories
USERENV(3e8.3ec) 16:32:32:918 RecurseDirectory: Adding E:\TestUser2\Desktop\ to the list of directories
USERENV(3e8.3ec) 16:32:32:918 RecurseDirectory: Adding E:\TestUser2\Favorites\ to the list of directories
USERENV(3e8.3ec) 16:32:32:934 RecurseDirectory: Adding E:\TestUser2\IETldCache\ to the list of directories
USERENV(3e8.3ec) 16:32:32:934 RecurseDirectory: Adding E:\TestUser2\My Documents\ to the list of directories
USERENV(3e8.3ec) 16:32:32:934 RecurseDirectory: Adding E:\TestUser2\NetHood\ to the list of directories
USERENV(3e8.3ec) 16:32:32:934 RecurseDirectory: Adding E:\TestUser2\PrintHood\ to the list of directories
USERENV(3e8.3ec) 16:32:32:950 RecurseDirectory: Adding E:\TestUser2\PrivacIE\ to the list of directories
USERENV(3e8.3ec) 16:32:32:950 RecurseDirectory: Adding E:\TestUser2\Recent\ to the list of directories
USERENV(3e8.3ec) 16:32:32:950 RecurseDirectory: Adding E:\TestUser2\SendTo\ to the list of directories
USERENV(3e8.3ec) 16:32:32:966 RecurseDirectory: Adding E:\TestUser2\Start Menu\Programs\Accessories\Accessibility\ to the list of directories
USERENV(3e8.3ec) 16:32:32:966 RecurseDirectory: Adding E:\TestUser2\Start Menu\Programs\Accessories\Entertainment\ to the list of directories
USERENV(3e8.3ec) 16:32:32:966 RecurseDirectory: Adding E:\TestUser2\Start Menu\Programs\Accessories\ to the list of directories
USERENV(3e8.3ec) 16:32:32:966 RecurseDirectory: Adding E:\TestUser2\Start Menu\Programs\Administrative Tools\ to the list of directories
USERENV(3e8.3ec) 16:32:32:982 RecurseDirectory: Adding E:\TestUser2\Start Menu\Programs\Startup\ to the list of directories
USERENV(3e8.3ec) 16:32:32:982 RecurseDirectory: Adding E:\TestUser2\Start Menu\Programs\ to the list of directories
USERENV(3e8.3ec) 16:32:32:982 RecurseDirectory: Adding E:\TestUser2\Start Menu\ to the list of directories
USERENV(3e8.3ec) 16:32:32:982 RecurseDirectory: Adding E:\TestUser2\Templates\ to the list of directories
USERENV(3e8.3ec) 16:32:32:982 FindTotalDiskSpaceNeeded: Largest 7 file size is 436829
USERENV(3e8.3ec) 16:32:32:982 Available            1369350144
USERENV(3e8.3ec) 16:32:32:982 Needed            3426117
USERENV(3e8.3ec) 16:32:32:982 Src size            1803932
USERENV(3e8.3ec) 16:32:32:982 Dest size            0
USERENV(3e8.3ec) 16:32:32:997 Largest hive file            1310720
USERENV(3e8.3ec) 16:32:32:997 CopyProfileDirectoryEx: Found hive file NTUSER.DAT
USERENV(920.924) 16:32:33:725 LibMain: Process Name: C:\WINDOWS\system32\Ati2evxx.exe
USERENV(3e8.3ec) 16:32:33:867 ReconcileFile: E:\TestUser2\NTUSER.DAT ==> C:\Documents and Settings\TestUser2\NTUSER.DAT [OK]
USERENV(3e8.3ec) 16:32:33:867 CopyProfileDirectoryEx: Found hive file NTUSER.DAT.LOG
USERENV(3e8.3ec) 16:32:33:883 ReconcileFile: E:\TestUser2\NTUSER.DAT.LOG ==> C:\Documents and Settings\TestUser2\NTUSER.DAT.LOG [OK]
USERENV(3e8.3ec) 16:32:33:883 CopyProfileDirectoryEx: Found hive file ntuser.ini
USERENV(3e8.3ec) 16:32:33:898 ReconcileFile: E:\TestUser2\ntuser.ini ==> C:\Documents and Settings\TestUser2\ntuser.ini [OK]
USERENV(3e8.3ec) 16:32:33:898 CopyProfileDirectoryEx: Found hive file ntuser.pol
USERENV(3e8.3ec) 16:32:33:914 ReconcileFile: Unable to open temporary file
USERENV(3e8.3ec) 16:32:33:914 ReconcileFile: E:\TestUser2\ntuser.pol ==> C:\Documents and Settings\TestUser2\ntuser.pol [OK]
USERENV(3e8.3ec) 16:32:33:914 CopyProfileDirectoryEx: Calling ReconcileDirectory for all Directories
USERENV(3e8.3ec) 16:32:34:246 CopyProfileDirectoryEx: Reconcile Directory Done for all Directories
USERENV(3e8.c94) 16:32:34:278 ReconcileFile: E:\TestUser2\Templates\quattro.wb2 ==> C:\Documents and Settings\TestUser2\Templates\quattro.wb2 [OK]
USERENV(3e8.ca0) 16:32:34:294 ReconcileFile: E:\TestUser2\Templates\sndrec.wav ==> C:\Documents and Settings\TestUser2\Templates\sndrec.wav [OK]
USERENV(3e8.ca8) 16:32:34:294 ReconcileFile: E:\TestUser2\Templates\lotus.wk4 ==> C:\Documents and Settings\TestUser2\Templates\lotus.wk4 [OK]
USERENV(3e8.c90) 16:32:34:294 ReconcileFile: E:\TestUser2\Templates\powerpnt.ppt ==> C:\Documents and Settings\TestUser2\Templates\powerpnt.ppt [OK]
USERENV(3e8.ca4) 16:32:34:294 ReconcileFile: E:\TestUser2\Templates\excel4.xls ==> C:\Documents and Settings\TestUser2\Templates\excel4.xls [OK]
USERENV(3e8.ca0) 16:32:34:294 ReconcileFile: E:\TestUser2\Start Menu\Programs\Startup\desktop.ini ==> C:\Documents and Settings\TestUser2\Start Menu\Programs\Startup\desktop.ini [OK]
USERENV(3e8.c90) 16:32:34:309 ReconcileFile: E:\TestUser2\Start Menu\Programs\desktop.ini ==> C:\Documents and Settings\TestUser2\Start Menu\Programs\desktop.ini [OK]
USERENV(3e8.c94) 16:32:34:325 ReconcileFile: E:\TestUser2\Start Menu\Programs\Accessories\Tour Windows XP.lnk ==> C:\Documents and Settings\TestUser2\Start Menu\Programs\Accessories\Tour Windows XP.lnk [OK]
USERENV(3e8.ca4) 16:32:34:325 ReconcileFile: E:\TestUser2\Start Menu\Programs\Accessories\Entertainment\desktop.ini ==> C:\Documents and Settings\TestUser2\Start Menu\Programs\Accessories\Entertainment\desktop.ini [OK]
USERENV(3e8.c9c) 16:32:34:341 ReconcileFile: E:\TestUser2\Start Menu\Programs\Accessories\Synchronize.lnk ==> C:\Documents and Settings\TestUser2\Start Menu\Programs\Accessories\Synchronize.lnk [OK]
USERENV(3e8.ca0) 16:32:34:341 ReconcileFile: E:\TestUser2\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk ==> C:\Documents and Settings\TestUser2\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk [OK]
USERENV(3e8.c90) 16:32:34:341 ReconcileFile: E:\TestUser2\Start Menu\Programs\Accessories\Accessibility\desktop.ini ==> C:\Documents and Settings\TestUser2\Start Menu\Programs\Accessories\Accessibility\desktop.ini [OK]
USERENV(3e8.c9c) 16:32:34:341 ReconcileFile: E:\TestUser2\SendTo\Mail Recipient.MAPIMail ==> C:\Documents and Settings\TestUser2\SendTo\Mail Recipient.MAPIMail [OK]
USERENV(3e8.c90) 16:32:34:341 ReconcileFile: E:\TestUser2\SendTo\Compressed (zipped) Folder.ZFSendToTarget ==> C:\Documents and Settings\TestUser2\SendTo\Compressed (zipped) Folder.ZFSendToTarget [OK]
USERENV(3e8.ca0) 16:32:34:357 ReconcileFile: E:\TestUser2\Recent\Temp.lnk ==> C:\Documents and Settings\TestUser2\Recent\Temp.lnk [OK]
USERENV(3e8.c98) 16:32:34:357 ReconcileFile: E:\TestUser2\PrivacIE\index.dat ==> C:\Documents and Settings\TestUser2\PrivacIE\index.dat [OK]
USERENV(3e8.ca4) 16:32:34:373 ReconcileFile: E:\TestUser2\Cookies\ZJYC7Z4V.txt ==> C:\Documents and Settings\TestUser2\Cookies\ZJYC7Z4V.txt [OK]
USERENV(3e8.ca8) 16:32:34:373 ReconcileFile: E:\TestUser2\Cookies\UPASQ8NF.txt ==> C:\Documents and Settings\TestUser2\Cookies\UPASQ8NF.txt [OK]
USERENV(3e8.ca0) 16:32:34:373 ReconcileFile: E:\TestUser2\Cookies\SYGIGDZH.txt ==> C:\Documents and Settings\TestUser2\Cookies\SYGIGDZH.txt [OK]
USERENV(3e8.c98) 16:32:34:388 ReconcileFile: E:\TestUser2\Cookies\RKVJ8SMO.txt ==> C:\Documents and Settings\TestUser2\Cookies\RKVJ8SMO.txt [OK]
USERENV(3e8.c9c) 16:32:34:388 ReconcileFile: E:\TestUser2\Cookies\RVVUFOJK.txt ==> C:\Documents and Settings\TestUser2\Cookies\RVVUFOJK.txt [OK]
USERENV(3e8.c90) 16:32:34:404 ReconcileFile: E:\TestUser2\Cookies\O3RIQSGJ.txt ==> C:\Documents and Settings\TestUser2\Cookies\O3RIQSGJ.txt [OK]
USERENV(3e8.c94) 16:32:34:404 ReconcileFile: E:\TestUser2\IETldCache\index.dat ==> C:\Documents and Settings\TestUser2\IETldCache\index.dat [OK]
USERENV(3e8.ca4) 16:32:34:420 ReconcileFile: E:\TestUser2\Cookies\97YKV8D6.txt ==> C:\Documents and Settings\TestUser2\Cookies\97YKV8D6.txt [OK]
USERENV(3e8.ca8) 16:32:34:420 ReconcileFile: E:\TestUser2\Cookies\4M4Y12Y0.txt ==> C:\Documents and Settings\TestUser2\Cookies\4M4Y12Y0.txt [OK]
USERENV(3e8.c90) 16:32:34:420 ReconcileFile: E:\TestUser2\Application Data\Microsoft\Internet Explorer\brndlog.bak ==> C:\Documents and Settings\TestUser2\Application Data\Microsoft\Internet Explorer\brndlog.bak [OK]
USERENV(3e8.ca4) 16:32:34:436 ReconcileFile: E:\TestUser2\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\digest.s ==> C:\Documents and Settings\TestUser2\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\digest.s [OK]
USERENV(3e8.c9c) 16:32:34:436 ReconcileFile: E:\TestUser2\Application Data\desktop.ini ==> C:\Documents and Settings\TestUser2\Application Data\desktop.ini [OK]
USERENV(3e8.c94) 16:32:34:436 ReconcileFile: E:\TestUser2\Application Data\Apple Computer\Logs\asl.102214_25Mar14.log ==> C:\Documents and Settings\TestUser2\Application Data\Apple Computer\Logs\asl.102214_25Mar14.log [OK]
USERENV(3e8.c98) 16:32:34:436 ReconcileFile: E:\TestUser2\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe ==> C:\Documents and Settings\TestUser2\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe [OK]
USERENV(3e8.3ec) 16:32:34:436 CopyProfileDirectoryEx: Setting Directory TimeStamps all Directories
USERENV(3e8.3ec) 16:32:34:452 CopyProfileDirectoryEx: Set times on all directories
USERENV(3e8.3ec) 16:32:34:452 CopyProfileDirectoryEx: Leaving with a return value of 1
USERENV(3e8.3ec) 16:32:34:452 MyRegLoadKey: Returning 00000000
USERENV(3e8.3ec) 16:32:34:547 MyRegLoadKey: Returning 00000000
USERENV(3e8.3ec) 16:32:34:547 CreateClassHive: existing user classes hive not found
USERENV(3e8.3ec) 16:32:34:547 SetDefaultUserHiveSecurity: Entering
USERENV(3e8.3ec) 16:32:34:547 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(3e8.3ec) 16:32:34:547 Profile was successfully loaded.
USERENV(3e8.3ec) 16:32:34:547 lpProfile->lpRoamingProfile = <E:\TestUser2>
USERENV(3e8.3ec) 16:32:34:547 lpProfile->lpLocalProfile = <C:\Documents and Settings\TestUser2>
USERENV(3e8.3ec) 16:32:34:547 lpProfile->dwInternalFlags = 0x114
USERENV(3e8.3ec) 16:32:34:547 RestoreUserProfile: Leaving.
USERENV(3e8.3ec) 16:32:34:562 UpgradeProfile: Entering
USERENV(3e8.3ec) 16:32:34:562 UpgradeProfile: Build numbers match
USERENV(3e8.3ec) 16:32:34:562 UpgradeProfile: Leaving Successfully
USERENV(3e8.3ec) 16:32:34:562 GetProfileType: Profile already loaded.
USERENV(3e8.3ec) 16:32:34:562 LoadProfileInfo: Failed to query central profile with error 2
USERENV(3e8.3ec) 16:32:34:562 GetProfileType: ProfileFlags is 0
USERENV(3e8.3ec) 16:32:34:657 Profile Ref Count is 1
USERENV(3e8.3ec) 16:32:34:657 LoadUserProfile: Leaving critical Section.
USERENV(3e8.3ec) 16:32:34:657 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3e8.3ec) 16:32:34:657 CSyncManager::LeaveLock: Lock released
USERENV(3e8.3ec) 16:32:34:657 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-18026 deleted
USERENV(3e8.3ec) 16:32:34:657 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.3ec) 16:32:34:657 LoadUserProfile: Impersonated user: 00000860, 00000000
USERENV(3e8.3ec) 16:32:34:657 LoadUserProfile: Reverted to user: 00000000
USERENV(3e8.3ec) 16:32:34:657 CancelCSCBypassedConnection: Cancelling connection of E:
USERENV(3e8.3ec) 16:32:34:689 CancelCSCBypassedConnection: Connection deleted.
USERENV(3e8.3ec) 16:32:34:689 LoadUserProfile: Leaving with a value of 1.
USERENV(3e8.3ec) 16:32:34:689 =========================================================
USERENV(3e8.3ec) 16:32:34:689 LoadUserProfile: LoadUserProfileP succeeded
USERENV(3e8.3ec) 16:32:34:689 LoadUserProfile: Returning success. Final Information follows:
USERENV(3e8.3ec) 16:32:34:689 lpProfileInfo->UserName = <TestUser2>
USERENV(3e8.3ec) 16:32:34:689 lpProfileInfo->lpProfilePath = <\\RB-FileADM\Profiles$\TestUser2>
USERENV(3e8.3ec) 16:32:34:705 lpProfileInfo->dwFlags = 0x0
USERENV(3e8.3ec) 16:32:34:705 LoadUserProfile: Returning TRUE. hProfile = <0x918>
USERENV(3e8.3ec) 16:32:34:752 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(3e8.e94) 16:32:34:768 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(3e8.e94) 16:32:35:258 ApplyGroupPolicy: Entering. Flags = 6
USERENV(3e8.e94) 16:32:35:258 ProcessGPOs:
USERENV(3e8.e94) 16:32:35:258 ProcessGPOs:
USERENV(3e8.e94) 16:32:35:258 ProcessGPOs: Starting user Group Policy (Background) processing...
USERENV(3e8.e94) 16:32:35:258 ProcessGPOs:
USERENV(3e8.e94) 16:32:35:258 ProcessGPOs:
USERENV(3e8.e94) 16:32:35:258 EnterCriticalPolicySectionEx: Entering with timeout 600000 and flags 0x0
USERENV(3e8.e94) 16:32:35:258 EnterCriticalPolicySectionEx: User critical section has been claimed. Handle = 0x888
USERENV(3e8.e94) 16:32:35:258 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(3e8.e94) 16:32:35:369 ProcessGPOs: Machine role is 2.
USERENV(3e8.e94) 16:32:35:384 PingComputer: PingBufferSize set as 2048
USERENV(3e8.e94) 16:32:35:384 PingComputer: Adapter speed 100000000 bps
USERENV(3e8.e94) 16:32:35:384 PingComputer: First time: 0
USERENV(3e8.e94) 16:32:35:384 PingComputer: Fast link. Exiting.
USERENV(3e8.e94) 16:32:35:384 ProcessGPOs: User name is: CN=Jason Hughes,OU=NetAdmins,DC=TestDomainnet,DC=org, Domain name is: TestDomainNET
USERENV(3e8.e94) 16:32:35:384 ProcessGPOs: Domain controller is: \\RB-DC1-HW.TestDomainnet.org Domain DN is TestDomainnet.org
USERENV(3e8.e94) 16:32:35:400 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(3e8.e94) 16:32:35:400 ReadGPExtensions: Rsop entry point not found for dskquota.dll.
USERENV(3e8.e94) 16:32:35:400 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(3e8.e94) 16:32:35:400 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\system32\iedkcs32.dll.
USERENV(3e8.e94) 16:32:35:400 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\system32\iedkcs32.dll.
USERENV(3e8.e94) 16:32:35:400 ReadGPExtensions: Rsop entry point not found for scecli.dll.
USERENV(3e8.e94) 16:32:35:400 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\cscui.dll.
USERENV(3e8.e94) 16:32:35:400 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\system32\iedkcs32.dll.
USERENV(3e8.e94) 16:32:35:400 ReadGPExtensions: Rsop entry point not found for gptext.dll.
USERENV(3e8.e94) 16:32:35:400 ReadExtStatus: Reading Previous Status for extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(3e8.e94) 16:32:35:400 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.e94) 16:32:35:400 ReadExtStatus: Reading Previous Status for extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(3e8.e94) 16:32:35:400 ReadExtStatus: Reading Previous Status for extension {0E28E245-9368-4853-AD84-6DA3BA35BB75}
USERENV(3e8.e94) 16:32:35:416 ReadExtStatus: Reading Previous Status for extension {17D89FEC-5C44-4972-B12D-241CAEF74509}
USERENV(3e8.e94) 16:32:35:416 ReadExtStatus: Reading Previous Status for extension {1A6364EB-776B-4120-ADE1-B63A406A76B5}
USERENV(3e8.e94) 16:32:35:416 ReadExtStatus: Reading Previous Status for extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(3e8.e94) 16:32:35:416 ReadExtStatus: Reading Previous Status for extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(3e8.e94) 16:32:35:416 ReadExtStatus: Reading Previous Status for extension {3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}
USERENV(3e8.e94) 16:32:35:416 ReadExtStatus: Reading Previous Status for extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(3e8.e94) 16:32:35:416 ReadExtStatus: Reading Previous Status for extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(3e8.e94) 16:32:35:416 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.e94) 16:32:35:416 ReadExtStatus: Reading Previous Status for extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {5794DAFD-BE60-433f-88A2-1A31939AC01F}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {6232C319-91AC-4931-9385-E70C2B099F0E}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {7150F9BF-48AD-4da4-A49C-29EF4A8369BA}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {728EE579-943C-4519-9EF7-AB56765798ED}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {74EE6C03-5363-4554-B161-627540339CAB}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {7B849a69-220F-451E-B3FE-2CB811AF94AE}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {91FBB303-0CD5-4055-BF42-E512A681B325}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {A3F3E39B-5D83-4940-B954-28315B82F0A8}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {AADCED64-746C-4633-A97C-D61349046527}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {B087BE9D-ED37-454f-AF9C-04291E351182}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {B587E2B1-4D59-4e7e-AED9-22B9DF11D053}
USERENV(3e8.e94) 16:32:35:432 ReadExtStatus: Reading Previous Status for extension {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}
USERENV(3e8.e94) 16:32:35:448 ReadExtStatus: Reading Previous Status for extension {C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}
USERENV(3e8.e94) 16:32:35:448 ReadExtStatus: Reading Previous Status for extension {C631DF4C-088F-4156-B058-4375F0853CD8}
USERENV(3e8.e94) 16:32:35:448 ReadExtStatus: Reading Previous Status for extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(3e8.e94) 16:32:35:448 ReadExtStatus: Reading Previous Status for extension {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
USERENV(3e8.e94) 16:32:35:448 ReadExtStatus: Reading Previous Status for extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(3e8.e94) 16:32:35:448 ReadExtStatus: Reading Previous Status for extension {E47248BA-94CC-49c4-BBB5-9EB7F05183D0}
USERENV(3e8.e94) 16:32:35:448 ReadExtStatus: Reading Previous Status for extension {E4F48E54-F38D-4884-BFB9-D4D2E5729C18}
USERENV(3e8.e94) 16:32:35:448 ReadExtStatus: Reading Previous Status for extension {E5094040-C46C-4115-B030-04FB2E545B00}
USERENV(3e8.e94) 16:32:35:448 ReadExtStatus: Reading Previous Status for extension {E62688F0-25FD-4c90-BFF5-F508B9D2E31F}
USERENV(3e8.e94) 16:32:35:448 ReadExtStatus: Reading Previous Status for extension {F9C77450-3A41-477E-9310-9ACD617BD9E3}
USERENV(3e8.e94) 16:32:35:448 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(3e8.e94) 16:32:35:448 GetGPOInfo: ********************************
USERENV(3e8.e94) 16:32:35:463 GetGPOInfo: Entering...
USERENV(3e8.e94) 16:32:35:463 GetGPOInfo: Server connection established.
USERENV(3e8.e94) 16:32:35:463 GetGPOInfo: Bound successfully.
USERENV(3e8.e94) 16:32:35:463 SearchDSObject: Searching <OU=NetAdmins,DC=TestDomainnet,DC=org>
USERENV(3e8.e94) 16:32:35:463 SearchDSObject: Found GPO(s): <[LDAP://cn={B129D16A-3A52-404B-AD7D-17E0F2AA4F82},cn=policies,cn=system,DC=TestDomainnet,DC=org;0][LDAP://cn={F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1},cn=policies,cn=system,DC=TestDomainnet,DC=org;0]>
USERENV(3e8.e94) 16:32:35:463 ProcessGPO: ==============================
USERENV(3e8.e94) 16:32:35:463 ProcessGPO: Deferring search for <LDAP://cn={B129D16A-3A52-404B-AD7D-17E0F2AA4F82},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.e94) 16:32:35:463 ProcessGPO: ==============================
USERENV(3e8.e94) 16:32:35:479 ProcessGPO: Deferring search for <LDAP://cn={F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.e94) 16:32:35:479 SearchDSObject: Searching <DC=TestDomainnet,DC=org>
USERENV(3e8.e94) 16:32:35:479 SearchDSObject: Found GPO(s): <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=TestDomainnet,DC=org;0]>
USERENV(3e8.e94) 16:32:35:479 ProcessGPO: ==============================
USERENV(3e8.e94) 16:32:35:479 ProcessGPO: Deferring search for <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3e8.e94) 16:32:35:479 SearchDSObject: Searching <CN=Parrot,CN=Sites,CN=Configuration,DC=TestDomainnet,DC=org>
USERENV(3e8.e94) 16:32:35:479 SearchDSObject: No GPO(s) for this object.
USERENV(3e8.e94) 16:32:35:479 EvaluateDeferredGPOs: Searching for GPOs in cn=policies,cn=system,DC=TestDomainnet,DC=org
USERENV(3e8.e94) 16:32:35:495 ProcessGPO: ==============================
USERENV(3e8.e94) 16:32:35:495 ProcessGPO: Searching <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=TestDomainnet,DC=org>
USERENV(3e8.e94) 16:32:35:495 ProcessGPO: User has access to this GPO.
USERENV(3e8.e94) 16:32:35:495 FilterCheck: Found WMI Filter id of: < >
USERENV(3e8.e94) 16:32:35:495 ProcessGPO: GPO passes the filter check.
USERENV(3e8.e94) 16:32:35:495 ProcessGPO: Found functionality version of: 2
USERENV(3e8.e94) 16:32:35:495 ProcessGPO: Found file system path of: <\\TestDomainnet.org\sysvol\TestDomainnet.org\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(3e8.e94) 16:32:35:511 ProcessGPO: Found common name of: <{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(3e8.e94) 16:32:35:511 ProcessGPO: Found display name of: <Default Domain Policy>
USERENV(3e8.e94) 16:32:35:511 ProcessGPO: Found user version of: GPC is 1, GPT is 1
USERENV(3e8.e94) 16:32:35:511 ProcessGPO: Found flags of: 0
USERENV(3e8.e94) 16:32:35:511 ProcessGPO: Found extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
USERENV(3e8.e94) 16:32:35:527 ProcessGPO: ==============================
USERENV(3e8.e94) 16:32:35:527 ProcessGPO: ==============================
USERENV(3e8.e94) 16:32:35:527 ProcessGPO: Searching <cn={B129D16A-3A52-404B-AD7D-17E0F2AA4F82},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.e94) 16:32:35:527 ProcessGPO: User has access to this GPO.
USERENV(3e8.e94) 16:32:35:527 FilterCheck: Found WMI Filter id of: <[TestDomainnet.org;{6DB2522F-3C7C-4202-87F1-1266510180DC};0]>
USERENV(ef8.efc) 16:32:35:637 LibMain: Process Name: C:\WINDOWS\system32\wbem\wmiprvse.exe
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: The GPO does not pass the filter check and so will not be applied.
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: Found functionality version of: 2
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: Found file system path of: <\\TestDomainnet.org\sysvol\TestDomainnet.org\Policies\{B129D16A-3A52-404B-AD7D-17E0F2AA4F82}>
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: Sysvol access skipped because GPO is not getting applied.
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: Found common name of: <{B129D16A-3A52-404B-AD7D-17E0F2AA4F82}>
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: Found display name of: <Win7-NetAdmins>
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: Found user version of: GPC is 17, GPT is 65535
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: Found flags of: 0
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: Found extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: ==============================
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: ==============================
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: Searching <cn={F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1},cn=policies,cn=system,DC=TestDomainnet,DC=org>
USERENV(3e8.e94) 16:32:35:985 ProcessGPO: User has access to this GPO.
USERENV(3e8.e94) 16:32:35:985 FilterCheck: Found WMI Filter id of: <[TestDomainnet.org;{B05ADC1E-57FF-4268-8E51-2DEE3D2B4371};0]>
USERENV(3e8.e94) 16:32:36:017 ProcessGPO: GPO passes the filter check.
USERENV(3e8.e94) 16:32:36:017 ProcessGPO: Found functionality version of: 2
USERENV(3e8.e94) 16:32:36:017 ProcessGPO: Found file system path of: <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}>
USERENV(3e8.e94) 16:32:36:033 ProcessGPO: Found common name of: <{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}>
USERENV(3e8.e94) 16:32:36:033 ProcessGPO: Found display name of: <NetAdmins>
USERENV(3e8.e94) 16:32:36:033 ProcessGPO: Found user version of: GPC is 67, GPT is 67
USERENV(3e8.e94) 16:32:36:033 ProcessGPO: Found flags of: 0
USERENV(3e8.e94) 16:32:36:033 ProcessGPO: Found extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
USERENV(3e8.e94) 16:32:36:033 ProcessGPO: ==============================
USERENV(3e8.e94) 16:32:36:033 GetGPOInfo: GPO Local Group Policy doesn't contain any data since the version number is 0. It will be skipped.
USERENV(3e8.e94) 16:32:36:033 GetGPOInfo: Leaving with 1
USERENV(3e8.e94) 16:32:36:033 GetGPOInfo: ********************************
USERENV(3e8.e94) 16:32:36:048 ProcessGPOs: Logging Data for Target <TestUser2>.
USERENV(3e8.e94) 16:32:36:048 GetWbemServices: CoCreateInstance succeeded
USERENV(3e8.e94) 16:32:36:064 ConnectToNameSpace: ConnectServer returned 0x8004100e
USERENV(3e8.e94) 16:32:36:064 ConnectToNameSpace: ConnectServer failed with 0x8004100e, trying to recreate the name space
USERENV(3e8.e94) 16:32:36:254 LogExtSessionStatus: Successfully logged Extension Session data
USERENV(3e8.e94) 16:32:36:254 CSessionLogger::Log: Get failed. hr=0x00000000.
USERENV(3e8.e94) 16:32:36:254 CSessionLogger::Log: logging new security grps
USERENV(3e8.e94) 16:32:36:301 LogRsopData: Successfully logged Rsop data
USERENV(3e8.e94) 16:32:36:301 ProcessGPOs: Logged Rsop Data successfully.
USERENV(3e8.e94) 16:32:36:365 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
USERENV(3e8.e94) 16:32:36:365 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:365 ProcessGPOs: Processing extension Registry
USERENV(3e8.e94) 16:32:36:365 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.e94) 16:32:36:365 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:365 ProcessGPOList: Entering for extension Registry
USERENV(3e8.e94) 16:32:36:365 UserPolicyCallback: Setting status UI to Applying Registry policy...
USERENV(3e8.e94) 16:32:36:380 LogExtSessionStatus: Successfully logged Extension Session data
USERENV(3e8.e94) 16:32:36:380 EnterCriticalPolicySectionEx: Entering with timeout 60000 and flags 0x2
USERENV(3e8.e94) 16:32:36:380 EnterCriticalPolicySectionEx: User critical section has been claimed. Handle = 0x9a0
USERENV(3e8.e94) 16:32:36:380 EnterCriticalPolicySectionEx: Leaving successfully.
USERENV(3e8.e94) 16:32:36:380 ResetPolicies: Entering.
USERENV(3e8.e94) 16:32:36:380 ParseRegistryFile: Entering with <C:\Documents and Settings\TestUser2\ntuser.pol>.
USERENV(3e8.e94) 16:32:36:380 DeleteRegistryValue: Deleted Software\Policies\Microsoft\Internet Explorer\Restrictions\NoPopupManagement
USERENV(3e8.e94) 16:32:36:380 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\access\settings\default database directory
USERENV(3e8.e94) 16:32:36:380 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\common\toolbars\customuiroaming
USERENV(3e8.e94) 16:32:36:380 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\excel\options\defaultpath
USERENV(3e8.e94) 16:32:36:380 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\ms project\options\save\defaultprojectspath
USERENV(3e8.e94) 16:32:36:396 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\outlook\options\general\check default client
USERENV(3e8.e94) 16:32:36:396 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\outlook\preferences\disablemanualarchive
USERENV(3e8.e94) 16:32:36:396 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\powerpoint\recentfolderlist\default
USERENV(3e8.e94) 16:32:36:396 DeleteRegistryValue: Deleted Software\Policies\Microsoft\office\14.0\word\options\doc-path
USERENV(3e8.e94) 16:32:36:396 DeleteRegistryValue: Deleted Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1001
USERENV(3e8.e94) 16:32:36:396 DeleteRegistryValue: Deleted Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2201
USERENV(3e8.e94) 16:32:36:396 ParseRegistryFile: Leaving.
USERENV(3e8.e94) 16:32:36:396 ResetPolicies: Leaving.
USERENV(3e8.e94) 16:32:36:396 ParseRegistryFile: Entering with <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\User\registry.pol>.
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: InitialKeyboardIndicators => 0 [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: Download Directory => H:\ [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: Start Page => www.google.com [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: Disable Script Debugger => yes [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: Personal => H:\My Documents [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: AppData => H:\Application Data [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: Favorites => H:\Favorites [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: Desktop => H:\Desktop [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: My Pictures => H:\My Documents\My Pictures [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: Templates => H:\Templates [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: Recent => %USERPROFILE%\Recent [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: Programs => C:\Local [OK]
USERENV(3e8.e94) 16:32:36:586 SetRegistryValue: Start Menu => %USERPROFILE%\Start Menu\Programs [OK]
USERENV(3e8.e94) 16:32:36:602 SetRegistryValue: Cookies => %USERPROFILE%\Cookies [OK]
USERENV(3e8.e94) 16:32:36:602 SetRegistryValue: History => %USERPROFILE%\History [OK]
USERENV(3e8.e94) 16:32:36:602 SetRegistryValue: 1001 => 1 [OK]
USERENV(3e8.e94) 16:32:36:602 SetRegistryValue: 1004 => 3 [OK]
USERENV(3e8.e94) 16:32:36:602 SetRegistryValue: 1200 => 0 [OK]
USERENV(3e8.e94) 16:32:36:602 SetRegistryValue: 1201 => 3 [OK]
USERENV(3e8.e94) 16:32:36:602 SetRegistryValue: 1400 => 0 [OK]
USERENV(3e8.e94) 16:32:36:602 SetRegistryValue: 1402 => 0 [OK]
USERENV(3e8.e94) 16:32:36:602 SetRegistryValue: 1405 => 0 [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: NoPopupManagement => 1 [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: default database directory => H:\My Documents [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: customuiroaming => 1 [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: defaultpath => H:\My Documents [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: defaultprojectspath => H:\My Documents [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: check default client => 1 [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: disablemanualarchive => 1 [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: default => H:\My Documents [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: doc-path => H:\My Documents [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: 1001 => 1 [OK]
USERENV(3e8.e94) 16:32:36:617 SetRegistryValue: 2201 => 0 [OK]
USERENV(3e8.e94) 16:32:36:633 ParseRegistryFile: Leaving.
USERENV(3e8.e94) 16:32:36:633 AllocAdmFileInfo: Adding File name <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\domain.adm> to the Adm list.
USERENV(3e8.e94) 16:32:36:633 AllocAdmFileInfo: Adding File name <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\conf.adm> to the Adm list.
USERENV(3e8.e94) 16:32:36:649 AllocAdmFileInfo: Adding File name <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\inetres.adm> to the Adm list.
USERENV(3e8.e94) 16:32:36:649 AllocAdmFileInfo: Adding File name <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\system.adm> to the Adm list.
USERENV(3e8.e94) 16:32:36:649 AllocAdmFileInfo: Adding File name <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\wmplayer.adm> to the Adm list.
USERENV(3e8.e94) 16:32:36:649 AllocAdmFileInfo: Adding File name <\\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\wuau.adm> to the Adm list.
USERENV(3e8.e94) 16:32:36:697 LogRegistry RsopData: Successfully logged registry Rsop data
USERENV(3e8.e94) 16:32:36:697 CAdmFileLogger::Log: Logging \\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\wuau.adm
USERENV(3e8.e94) 16:32:36:697 CAdmFileLogger::Log: Logging \\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\wmplayer.adm
USERENV(3e8.e94) 16:32:36:697 CAdmFileLogger::Log: Logging \\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\system.adm
USERENV(3e8.e94) 16:32:36:697 CAdmFileLogger::Log: Logging \\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\inetres.adm
USERENV(3e8.e94) 16:32:36:712 CAdmFileLogger::Log: Logging \\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\conf.adm
USERENV(3e8.e94) 16:32:36:712 CAdmFileLogger::Log: Logging \\TestDomainnet.org\SysVol\TestDomainnet.org\Policies\{F6C6DAC4-8598-42B6-9690-F2BE4F0F9FC1}\Adm\domain.adm
USERENV(3e8.e94) 16:32:36:712 LogAdmRsopData: Successfully logged Adm data
USERENV(3e8.e94) 16:32:36:712 LeaveCriticalPolicySection: Critical section 0x9a0 has been released.
USERENV(3e8.e94) 16:32:36:712 ProcessGPOList: Extension Registry was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
USERENV(3e8.e94) 16:32:36:712 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:712 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:712 ProcessGPOs: Processing extension Wireless
USERENV(3e8.e94) 16:32:36:728 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:728 ProcessGPOs: Extension Wireless skipped with flags 0x6.
USERENV(3e8.e94) 16:32:36:728 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:728 ProcessGPOs: Processing extension Group Policy Environment
USERENV(3e8.e94) 16:32:36:728 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:728 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:728 ProcessGPOs: Extension Group Policy Environment skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:728 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:728 ProcessGPOs: Processing extension Group Policy Local Users and Groups
USERENV(3e8.e94) 16:32:36:728 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:728 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:728 ProcessGPOs: Extension Group Policy Local Users and Groups skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:728 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:728 ProcessGPOs: Processing extension Group Policy Device Settings
USERENV(3e8.e94) 16:32:36:728 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:728 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:744 ProcessGPOs: Extension Group Policy Device Settings skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:744 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:744 ProcessGPOs: Processing extension Folder Redirection
USERENV(3e8.e94) 16:32:36:744 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:744 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:744 ProcessGPOs: Extension Folder Redirection skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:744 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:744 ProcessGPOs: Processing extension Microsoft Disk Quota
USERENV(3e8.e94) 16:32:36:744 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:744 ProcessGPOs: Extension Microsoft Disk Quota skipped with flags 0x6.
USERENV(3e8.e94) 16:32:36:744 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:760 ProcessGPOs: Processing extension Group Policy Network Options
USERENV(3e8.e94) 16:32:36:760 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:760 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:760 ProcessGPOs: Extension Group Policy Network Options skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:760 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:760 ProcessGPOs: Processing extension QoS Packet Scheduler
USERENV(3e8.e94) 16:32:36:760 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:760 ProcessGPOs: Extension QoS Packet Scheduler skipped with flags 0x6.
USERENV(3e8.e94) 16:32:36:760 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:776 ProcessGPOs: Processing extension Scripts
USERENV(3e8.e94) 16:32:36:776 ReadStatus: Read Extension's Previous status successfully.
USERENV(3e8.e94) 16:32:36:776 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:776 ProcessGPOList: Entering for extension Scripts
USERENV(3e8.e94) 16:32:36:776 UserPolicyCallback: Setting status UI to Applying Scripts policy...
USERENV(3e8.e94) 16:32:36:776 LogExtSessionStatus: Successfully logged Extension Session data
USERENV(3e8.e94) 16:32:36:902 ProcessGPOList: Extension Scripts returned 0x0.
USERENV(3e8.e94) 16:32:36:902 ProcessGPOList: Extension Scripts was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
USERENV(3e8.e94) 16:32:36:918 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:918 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:918 ProcessGPOs: Processing extension Internet Explorer Zonemapping
USERENV(3e8.e94) 16:32:36:918 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:918 ProcessGPOs: Extension Internet Explorer Zonemapping skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:918 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:918 ProcessGPOs: Processing extension Group Policy Drive Maps
USERENV(3e8.e94) 16:32:36:918 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:918 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:918 ProcessGPOs: Extension Group Policy Drive Maps skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:918 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:918 ProcessGPOs: Processing extension Group Policy Folders
USERENV(3e8.e94) 16:32:36:918 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:934 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:934 ProcessGPOs: Extension Group Policy Folders skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:934 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:934 ProcessGPOs: Processing extension Group Policy Network Shares
USERENV(3e8.e94) 16:32:36:934 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:934 ProcessGPOs: Extension Group Policy Network Shares skipped with flags 0x6.
USERENV(3e8.e94) 16:32:36:934 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:934 ProcessGPOs: Processing extension Group Policy Files
USERENV(3e8.e94) 16:32:36:934 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:934 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:934 ProcessGPOs: Extension Group Policy Files skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:934 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:934 ProcessGPOs: Processing extension Group Policy Data Sources
USERENV(3e8.e94) 16:32:36:934 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:934 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:934 ProcessGPOs: Extension Group Policy Data Sources skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: Processing extension Group Policy Ini Files
USERENV(3e8.e94) 16:32:36:949 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:949 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: Extension Group Policy Ini Files skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: Processing extension Internet Explorer User Accelerators
USERENV(3e8.e94) 16:32:36:949 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: Extension Internet Explorer User Accelerators skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: Processing extension Security
USERENV(3e8.e94) 16:32:36:949 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: Extension Security skipped with flags 0x6.
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:949 ProcessGPOs: Processing extension Group Policy Services
USERENV(3e8.e94) 16:32:36:965 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:965 ProcessGPOs: Extension Group Policy Services skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:965 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:965 ProcessGPOs: Processing extension Internet Explorer Branding
USERENV(3e8.e94) 16:32:36:965 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:965 ProcessGPOs: Extension Internet Explorer Branding skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:965 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:965 ProcessGPOs: Processing extension Group Policy Folder Options
USERENV(3e8.e94) 16:32:36:965 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:981 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:981 ProcessGPOs: Extension Group Policy Folder Options skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:981 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:981 ProcessGPOs: Processing extension Group Policy Scheduled Tasks
USERENV(3e8.e94) 16:32:36:981 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:981 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:981 ProcessGPOs: Extension Group Policy Scheduled Tasks skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:981 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:981 ProcessGPOs: Processing extension Group Policy Registry
USERENV(3e8.e94) 16:32:36:981 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:981 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:981 ProcessGPOs: Extension Group Policy Registry skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: Processing extension EFS recovery
USERENV(3e8.e94) 16:32:36:997 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: Extension EFS recovery skipped with flags 0x6.
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: Processing extension 802.3 Group Policy
USERENV(3e8.e94) 16:32:36:997 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: Extension 802.3 Group Policy skipped with flags 0x6.
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: Processing extension Group Policy Printers
USERENV(3e8.e94) 16:32:36:997 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:997 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: Extension Group Policy Printers skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:36:997 ProcessGPOs: Processing extension Group Policy Shortcuts
USERENV(3e8.e94) 16:32:36:997 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:36:997 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:013 ProcessGPOs: Extension Group Policy Shortcuts skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:37:013 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:37:013 ProcessGPOs: Processing extension Microsoft Offline Files
USERENV(3e8.e94) 16:32:37:013 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:013 ProcessGPOs: Extension Microsoft Offline Files skipped with flags 0x6.
USERENV(3e8.e94) 16:32:37:013 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:37:013 ProcessGPOs: Processing extension Software Installation
USERENV(3e8.e94) 16:32:37:013 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:013 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:013 ProcessGPOs: Extension Software Installation skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:37:013 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:37:013 ProcessGPOs: Processing extension Internet Explorer Machine Accelerators
USERENV(3e8.e94) 16:32:37:028 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: Extension Internet Explorer Machine Accelerators skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: Processing extension IP Security
USERENV(3e8.e94) 16:32:37:028 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: Extension IP Security skipped with flags 0x6.
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: Processing extension Group Policy Internet Settings
USERENV(3e8.e94) 16:32:37:028 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:028 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: Extension Group Policy Internet Settings skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: Processing extension Group Policy Start Menu Settings
USERENV(3e8.e94) 16:32:37:028 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:028 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: Extension Group Policy Start Menu Settings skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:37:028 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:37:044 ProcessGPOs: Processing extension Group Policy Regional Options
USERENV(3e8.e94) 16:32:37:044 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:044 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:044 ProcessGPOs: Extension Group Policy Regional Options skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:37:044 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:37:044 ProcessGPOs: Processing extension Group Policy Power Options
USERENV(3e8.e94) 16:32:37:044 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:044 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:044 ProcessGPOs: Extension Group Policy Power Options skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:37:044 ProcessGPOs: -----------------------
USERENV(3e8.e94) 16:32:37:044 ProcessGPOs: Processing extension Group Policy Applications
USERENV(3e8.e94) 16:32:37:044 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:044 CompareGPOLists: The lists are the same.
USERENV(3e8.e94) 16:32:37:044 ProcessGPOs: Extension Group Policy Applications skipped because both deleted and changed GPO lists are empty.
USERENV(3e8.e94) 16:32:37:060 SetFgRefreshInfo: Previous User Fg policy Synchronous, Reason: FirstPolicyRefresh.
USERENV(3e8.e94) 16:32:37:060 SetFgRefreshInfo: Next User Fg policy Synchronous, Reason: SyncPolicy.
USERENV(3e8.e94) 16:32:37:060 LeaveCriticalPolicySection: Critical section 0x888 has been released.
USERENV(3e8.e94) 16:32:37:060 ProcessGPOs: User Group Policy has been applied.
USERENV(3e8.e94) 16:32:37:060 ProcessGPOs: Leaving with 1.
USERENV(3e8.e94) 16:32:37:060 ApplyGroupPolicy: Leaving successfully.
USERENV(bcc.bd0) 16:32:37:139 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(3e8.9f4) 16:32:37:218 PolicyChangedThread: Leaving
USERENV(5a0.288) 16:32:37:281 CProfileDialog::Initialize : Cookie generated <507C7863948734D8E34CB80877D118F6>
USERENV(5a0.288) 16:32:37:281 CProfileDialog::Initialize : Endpoint generated <IProfileDialog_00868130A593BA2E50B9311B0061D12F>
USERENV(3e8.400) 16:32:37:281 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.400) 16:32:37:281 LoadUserProfileI: RPC end point IProfileDialog_00868130A593BA2E50B9311B0061D12F
USERENV(3e8.400) 16:32:37:281 In LoadUserProfileP
USERENV(3e8.400) 16:32:37:297 LoadUserProfile: Running as client
USERENV(3e8.400) 16:32:37:297 =========================================================
USERENV(3e8.400) 16:32:37:297 LoadUserProfile: Entering, hToken = <0x988>, lpProfileInfo = 0xefe7c8
USERENV(3e8.400) 16:32:37:297 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(3e8.400) 16:32:37:297 LoadUserProfile: lpProfileInfo->lpUserName = <TestUser2>
USERENV(3e8.400) 16:32:37:297 LoadUserProfile: NULL central profile path
USERENV(3e8.400) 16:32:37:297 LoadUserProfile: NULL default profile path
USERENV(3e8.400) 16:32:37:297 LoadUserProfile: NULL server name
USERENV(3e8.400) 16:32:37:297 LoadUserProfile: User sid: S-1-5-21-2549970651-2034936752-3548929381-18026
USERENV(3e8.400) 16:32:37:297 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3e8.400) 16:32:37:297 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.400) 16:32:37:297 CSyncManager::EnterLock: New entry created
USERENV(3e8.400) 16:32:37:297 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-18026 added in bucket 22
USERENV(3e8.400) 16:32:37:297 LoadUserProfile: Wait succeeded. In critical section.
USERENV(3e8.400) 16:32:37:297 TestIfUserProfileLoaded: Profile already loaded.
USERENV(3e8.400) 16:32:37:313 Profile Ref Count is 2
USERENV(3e8.400) 16:32:37:313 LoadUserProfile: Leaving critical Section.
USERENV(3e8.400) 16:32:37:313 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3e8.400) 16:32:37:313 CSyncManager::LeaveLock: Lock released
USERENV(3e8.400) 16:32:37:313 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-18026 deleted
USERENV(3e8.400) 16:32:37:313 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.400) 16:32:37:313 LoadUserProfile: Impersonated user: 00000988, 00000884
USERENV(3e8.400) 16:32:37:313 LoadUserProfile: Reverted to user: 00000000
USERENV(3e8.400) 16:32:37:313 LoadUserProfile: Reverted back to user <00000000>
USERENV(3e8.400) 16:32:37:313 LoadUserProfile: Leaving with a value of 1.
USERENV(3e8.400) 16:32:37:313 =========================================================
USERENV(3e8.400) 16:32:37:313 LoadUserProfileI: returning 0
USERENV(5a0.288) 16:32:37:329 LoadUserProfile: Running as self
USERENV(5a0.288) 16:32:37:329 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(5a0.288) 16:32:37:329 LoadUserProfile: Returning success. Final Information follows:
USERENV(5a0.288) 16:32:37:329 lpProfileInfo->UserName = <TestUser2>
USERENV(5a0.288) 16:32:37:329 lpProfileInfo->lpProfilePath = <>
USERENV(5a0.288) 16:32:37:329 lpProfileInfo->dwFlags = 0x0
USERENV(3e8.f34) 16:32:37:329 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.f34) 16:32:37:329 ReleaseClientContext: Releasing context
USERENV(3e8.f34) 16:32:37:329 ReleaseClientContext_s: Releasing context
USERENV(3e8.f34) 16:32:37:329 MIDL_user_free enter
USERENV(5a0.288) 16:32:37:329 ReleaseInterface: Releasing rpc binding handle
USERENV(5a0.288) 16:32:37:329 LoadUserProfile: Returning TRUE. hProfile = <0x270>
USERENV(5a0.288) 16:32:37:329 UnloadUserProfile: Entering, hProfile = <0x270>
USERENV(5a0.288) 16:32:37:329 GetInterface: Returning rpc binding handle
USERENV(3e8.568) 16:32:37:345 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.568) 16:32:37:345 DropClientContext: Got client token 000009B0, sid = S-1-5-18
USERENV(3e8.568) 16:32:37:345 MIDL_user_allocate enter
USERENV(3e8.568) 16:32:37:345 DropClientContext: load profile object successfully made
USERENV(3e8.568) 16:32:37:345 DropClientContext: Returning 0
USERENV(5a0.288) 16:32:37:345 UnLoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(3e8.400) 16:32:37:345 IProfileSecurityCallBack: client authenticated.
USERENV(3e8.400) 16:32:37:345 UnloadUserProfileP: Entering, hProfile = <0x7cc>
USERENV(3e8.400) 16:32:37:345 UnloadUserProfileP: ImpersonateUser <000009b0>, old token is <00000000>
USERENV(3e8.400) 16:32:37:345 AbleToBypassCSC: Try to bypass CSC
USERENV(3e8.400) 16:32:37:345 AbleToBypassCSC: tried NPAddConnection3ForCSCAgent. Error 2109
USERENV(3e8.400) 16:32:37:345 AbleToBypassCSC: Share \\RB-FileADM\Profiles$ mapped to drive E. Returned Path E:\TestUser2
USERENV(3e8.400) 16:32:37:345 UnLoadUserProfileP: CSC bypassed.
USERENV(3e8.400) 16:32:37:345 GetExclusionListFromRegistry: Policy list is empty, returning user list = <Local Settings;Temporary Internet Files;History;Temp>
USERENV(3e8.400) 16:32:37:360 CSyncManager::EnterLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3e8.400) 16:32:37:360 CSyncManager::EnterLock: No existing entry found
USERENV(3e8.400) 16:32:37:360 CSyncManager::EnterLock: New entry created
USERENV(3e8.400) 16:32:37:360 CHashTable::HashAdd: S-1-5-21-2549970651-2034936752-3548929381-18026 added in bucket 22
USERENV(3e8.400) 16:32:37:360 UnloadUserProfileP: Wait succeeded. In critical section.
USERENV(3e8.400) 16:32:37:566 UnloadUserProfileP: Didn't unload user profile, Ref Count is 1
USERENV(3e8.400) 16:32:37:566 UnloadUserProfileP: Reverted back to user <00000000>
USERENV(3e8.400) 16:32:37:566 CSyncManager::LeaveLock <S-1-5-21-2549970651-2034936752-3548929381-18026>
USERENV(3e8.400) 16:32:37:566 CSyncManager::LeaveLock: Lock released
USERENV(3e8.400) 16:32:37:566 CHashTable::HashDelete: S-1-5-21-2549970651-2034936752-3548929381-18026 deleted
USERENV(3e8.400) 16:32:37:566 CSyncManager::LeaveLock: Lock deleted
USERENV(3e8.400) 16:32:37:566 UnloadUserProfileP: Leave critical section.
USERENV(3e8.400) 16:32:37:566 CancelCSCBypassedConnection: Cancelling connection of E:
USERENV(488.134) 16:32:37:566 LibMain: Process Name: C:\WINDOWS\system32\rdpclip.exe
USERENV(3e8.3ec) 16:32:37:582 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(3e8.52c) 16:32:37:582 IsSyncForegroundPolicyRefresh: Synchronous, Reason: policy set to SYNC
USERENV(648.5c0) 16:32:37:598 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(648.5c0) 16:32:37:645 GetProfileType: Profile already loaded.
USERENV(648.5c0) 16:32:37:645 GetProfileType: Profile is to be deleted
USERENV(648.5c0) 16:32:37:645 GetProfileType: ProfileFlags is 3
USERENV(8ac.8c8) 16:32:38:056 LibMain: Process Name: C:\WINDOWS\System32\WScript.exe
USERENV(b94.ba0) 16:32:43:621 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(b94.ba0) 16:32:43:652 CheckXForestLogon: checking x-forest logon, user handle = 120
USERENV(b94.ba0) 16:32:43:652 CheckXForestLogon: not XForest logon.
USERENV(b74.ac8) 16:32:44:206 LibMain: Process Name: C:\Program Files\Google\Update\GoogleUpdate.exe
USERENV(bf4.f1c) 16:32:44:285 LibMain: Process Name: C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe
USERENV(b94.ba0) 16:32:45:122 GetProfileType: Profile already loaded.
USERENV(b94.ba0) 16:32:45:122 GetProfileType: Profile is to be deleted
USERENV(b94.ba0) 16:32:45:138 GetProfileType: ProfileFlags is 3
USERENV(c70.c88) 16:32:46:371 LibMain: Process Name: \\RB-DC1-HW\netlogon\Scan\AuditScanner.exe
USERENV(c70.c88) 16:32:47:699 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c70.c88) 16:32:47:715 GetUserNameAndDomain Failed to impersonate user
USERENV(c70.c88) 16:32:47:715 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c70.c88) 16:32:47:715 GetUserDNSDomainName: Failed to impersonate user
USERENV(c70.c88) 16:32:47:715 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c70.c88) 16:32:47:731 GetUserNameAndDomain Failed to impersonate user
USERENV(c70.c88) 16:32:47:731 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c70.c88) 16:32:47:731 GetUserDNSDomainName: Failed to impersonate user
USERENV(318.e38) 16:32:47:747 LibMain: Process Name: C:\WINDOWS\system32\reg.exe
USERENV(788.a48) 16:32:48:252 LibMain: Process Name: C:\WINDOWS\system32\hostname.exe
USERENV(420.440) 16:32:48:426 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.440) 16:32:48:426 GetUserNameAndDomain Failed to impersonate user
USERENV(420.440) 16:32:48:426 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.440) 16:32:48:442 GetUserDNSDomainName: Failed to impersonate user
USERENV(420.440) 16:32:48:521 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.440) 16:32:48:521 GetUserNameAndDomain Failed to impersonate user
USERENV(420.440) 16:32:48:521 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.440) 16:32:48:521 GetUserDNSDomainName: Failed to impersonate user
USERENV(420.440) 16:32:48:537 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.440) 16:32:48:537 GetUserNameAndDomain Failed to impersonate user
USERENV(420.440) 16:32:48:537 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.440) 16:32:48:537 GetUserDNSDomainName: Failed to impersonate user
USERENV(f3c.f9c) 16:32:50:402 LibMain: Process Name: C:\WINDOWS\Explorer.EXE
USERENV(ab8.ee0) 16:32:50:529 LibMain: Process Name: C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
USERENV(f3c.8d4) 16:32:51:114 GetProfileType: Profile already loaded.
USERENV(f3c.8d4) 16:32:51:114 GetProfileType: Profile is to be deleted
USERENV(f3c.8d4) 16:32:51:114 GetProfileType: ProfileFlags is 3
USERENV(f3c.51c) 16:32:51:114 GetProfileType: Profile already loaded.
USERENV(f3c.51c) 16:32:51:114 GetProfileType: Profile is to be deleted
USERENV(f3c.51c) 16:32:51:114 GetProfileType: ProfileFlags is 3
USERENV(f3c.8d4) 16:32:51:145 GetProfileType: Profile already loaded.
USERENV(f3c.8d4) 16:32:51:145 GetProfileType: Profile is to be deleted
USERENV(f3c.8d4) 16:32:51:145 GetProfileType: ProfileFlags is 3
USERENV(9a8.928) 16:32:56:631 LibMain: Process Name: C:\WINDOWS\system32\ctfmon.exe
USERENV(9a8.928) 16:32:56:631 GetProfileType: Profile already loaded.
USERENV(9a8.928) 16:32:56:631 GetProfileType: Profile is to be deleted
USERENV(9a8.928) 16:32:56:631 GetProfileType: ProfileFlags is 3
USERENV(ad8.adc) 16:32:58:322 LibMain: Process Name: C:\WINDOWS\System32\imapi.exe
USERENV(d0c.d08) 16:33:07:475 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(cf8.ca0) 16:33:28:627 LibMain: Process Name: C:\Program Files\TechSmith\Snagit 10\snagiteditor.exe
USERENV(bd8.d30) 16:35:36:375 LibMain: Process Name: C:\Program Files\Internet Explorer\iexplore.exe
USERENV(bd8.d30) 16:35:36:659 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd8.d30) 16:35:36:659 GetUserNameAndDomain Failed to impersonate user
USERENV(bd8.d30) 16:35:36:659 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd8.d30) 16:35:36:659 GetUserDNSDomainName: Failed to impersonate user
USERENV(bd8.d30) 16:35:36:659 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd8.d30) 16:35:36:659 GetUserNameAndDomain Failed to impersonate user
USERENV(bd8.d30) 16:35:36:659 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd8.d30) 16:35:36:659 GetUserDNSDomainName: Failed to impersonate user
USERENV(a4.aa8) 16:35:36:675 LibMain: Process Name: C:\Program Files\Internet Explorer\iexplore.exe
USERENV(a4.93c) 16:35:38:572 ImpersonateUser: Failed to impersonate user with 5.
USERENV(a4.93c) 16:35:38:572 GetUserNameAndDomain Failed to impersonate user
USERENV(a4.93c) 16:35:38:572 ImpersonateUser: Failed to impersonate user with 5.
USERENV(a4.93c) 16:35:38:572 GetUserDNSDomainName: Failed to impersonate user
USERENV(a4.93c) 16:35:38:572 ImpersonateUser: Failed to impersonate user with 5.
USERENV(a4.93c) 16:35:38:588 GetUserNameAndDomain Failed to impersonate user
USERENV(a4.93c) 16:35:38:588 ImpersonateUser: Failed to impersonate user with 5.
USERENV(a4.93c) 16:35:38:588 GetUserDNSDomainName: Failed to impersonate user
USERENV(a4.93c) 16:35:40:754 GetProfileType: Profile already loaded.
USERENV(a4.93c) 16:35:40:754 GetProfileType: Profile is to be deleted
USERENV(a4.93c) 16:35:40:754 GetProfileType: ProfileFlags is 3
USERENV(420.7d4) 16:35:48:405 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.7d4) 16:35:48:405 GetUserNameAndDomain Failed to impersonate user
USERENV(420.7d4) 16:35:48:405 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.7d4) 16:35:48:405 GetUserDNSDomainName: Failed to impersonate user
USERENV(420.7d4) 16:35:48:421 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.7d4) 16:35:48:421 GetUserNameAndDomain Failed to impersonate user
USERENV(420.7d4) 16:35:48:421 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.7d4) 16:35:48:421 GetUserDNSDomainName: Failed to impersonate user
USERENV(420.490) 16:35:48:437 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.490) 16:35:48:437 GetUserNameAndDomain Failed to impersonate user
USERENV(420.490) 16:35:48:437 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.490) 16:35:48:437 GetUserDNSDomainName: Failed to impersonate user
USERENV(420.7d4) 16:35:48:437 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.7d4) 16:35:48:452 GetUserNameAndDomain Failed to impersonate user
USERENV(420.7d4) 16:35:48:452 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.7d4) 16:35:48:452 GetUserDNSDomainName: Failed to impersonate user
USERENV(420.7d4) 16:36:04:150 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.7d4) 16:36:04:150 GetUserNameAndDomain Failed to impersonate user
USERENV(420.7d4) 16:36:04:150 ImpersonateUser: Failed to impersonate user with 5.
USERENV(420.7d4) 16:36:04:166 GetUserDNSDomainName: Failed to impersonate user
USERENV(cbc.cd0) 16:36:07:343 LibMain: Process Name: c:\Program Files\Microsoft Silverlight\5.1.30214.0\agcp.exe

Mahesh

On affected client computer open run windows and enter %logonserver%

Now this command should resolve to NetBIOS name of local authenticating DC
Here if you get error or it resolves to wrong DC in any another site, that is the 1st thing you need to check
may be your AD subnet to site assignment is wrong ib that case in AD site and services

On affected computer please open Advanced Tcp/IP settings and check DNS Tab.
In DNS tab, check below settings.
ensure that "Append Primary and connection specific dns suffixes" radio button is selected
Ensure that "Append parent suffixes of primary dns suffix" checkbox is selected
Ensure that "register this connection addresses in Dns" checkbox is selected
If there is any deviation in the above settings, its probably you will face issues as it will face issues to connect to domain controller

Mahesh.

Gerald Connolly

Or is it just a case of Resetting the profile, locally on the workstation (we just renamed the user) and centrally on the server?

Just be working in a large organisation and Profile resets would improve logon and logoff performance dramatically

ASKER CERTIFIED SOLUTION

joharder

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial