Registry Handle Leaked - Internet Explorer LinksBar RRS feed

  • Question

  • We have a  large number of computers on the domain that a large number of people log onto every day.  In the event log we are seeing a Warning with event id: 1530.  The description is:

    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

     DETAIL - 
     1 user registry handles leaked from \Registry\User\S-1-5-21-731332549-44719175-629696583-30362:
    Process 1136 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-731332549-44719175-629696583-30362\Software\Microsoft\Internet Explorer\LinksBar

    This is occurring on all of the machines, but not on every user log off.  When this error message is in the Event Log, the user profile is not being deleted, which is our main concern, since they take up a lot of disk space.  Running tools like delprof are not options, since we do not want to delete all accounts, just the regular user accounts.

    The computers are all Vista Business SP2.  Any ideas would be greatly appreciated.
    Tuesday, October 13, 2009 7:47 PM


  • The solution to this problem was not related to the Registry File leaking, rather we had to add the users to the Domain Guests group. For some reason, only some of the users were in this group, so only some of the profiles were being deleted.  Still not sure why this message appears in the Event Viewer or if it is a problem, but it has gone away now.
    • Marked as answer by Gramma2005 Monday, October 26, 2009 4:29 PM
    Monday, October 26, 2009 4:28 PM