locked
Microsoft-Windows-User Profiles Service RRS feed

  • Question

  • Log Name:      Application
    Source:        Microsoft-Windows-User Profiles Service
    Date:          8/21/2012 3:23:06 PM
    Event ID:      1530
    Task Category: None
    Level:         Warning
    Keywords:     
    User:          SYSTEM
    Computer:      DWUSCHACX27.americas.gap.com
    Description:
    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

     DETAIL -
     1 user registry handles leaked from \Registry\User\S-1-5-21-2025429265-688789844-682003330-306668:
    Process 1188 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2025429265-688789844-682003330-306668\Printers\DevModePerUser

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
        <EventID>1530</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2012-08-21T22:23:06.221126400Z" />
        <EventRecordID>16817</EventRecordID>
        <Correlation />
        <Execution ProcessID="1092" ThreadID="2216" />
        <Channel>Application</Channel>
        <Computer>DWUSCHACX27.americas.gap.com</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="EVENT_HIVE_LEAK">
        <Data Name="Detail">1 user registry handles leaked from \Registry\User\S-1-5-21-2025429265-688789844-682003330-306668:
    Process 1188 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2025429265-688789844-682003330-306668\Printers\DevModePerUser
    </Data>
      </EventData>
    </Event>

    Can you please help me on this.

    Wednesday, August 22, 2012 10:20 AM

Answers