locked
Microsoft-Windows-User Profiles Service RRS feed

  • Question

  • - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    
    - <System>
    
     <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" /> 
    
     <EventID>1530</EventID> 
    
     <Version>0</Version> 
    
     <Level>3</Level> 
    
     <Task>0</Task> 
    
     <Opcode>0</Opcode> 
    
     <Keywords>0x8000000000000000</Keywords> 
    
     <TimeCreated SystemTime="2010-07-30T05:25:57.626055200Z" /> 
    
     <EventRecordID>356</EventRecordID> 
    
     <Correlation /> 
    
     <Execution ProcessID="832" ThreadID="1660" /> 
    
     <Channel>Application</Channel> 
    
     <Computer>HADES01</Computer> 
    
     <Security UserID="S-1-5-18" /> 
    
     </System>
    
    - <EventData Name="EVENT_HIVE_LEAK">
    
     <Data Name="Detail">5 user registry handles leaked from \Registry\User\S-1-5-21-1743754045-1288170743-3854794214-1001: Process 504 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1743754045-1288170743-3854794214-1001 Process 504 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1743754045-1288170743-3854794214-1001 Process 504 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1743754045-1288170743-3854794214-1001\Software\Microsoft\SystemCertificates\My Process 504 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1743754045-1288170743-3854794214-1001\Software\Microsoft\SystemCertificates\CA Process 504 (\Device\HarddiskVolume5\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1743754045-1288170743-3854794214-1001\Software\Microsoft\SystemCertificates\Disallowed</Data> 
    
     </EventData>
    
     </Event>
    
    
    
    I dont know why this error keeps popping up havn't been able to find a solution please help!
    Friday, July 30, 2010 6:31 PM

Answers

  • When this issue first occurred? Did it occur after installing some software or changing some hardware?

    When does the issue occur? Does the error occur when starting up the computer?

     

    Please refer to this knowledge base (KB) article for more information: Event ID: 1530 may be logged in the Application log on a Windows 7-based or Windows Vista-based client computer

     

    Also, you can access Clean Boot to check the issue. If the issue disappears in the Clean Boot environment, you can continue to narrow down which entry is causing the issue.

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    • Marked as answer by Linda Yan Friday, August 6, 2010 1:27 AM
    Monday, August 2, 2010 8:17 AM

All replies