This seems to be a fairly common event viewer notice that I have come across on various computers, mine being one of them. I can not trace what program is accessing the registry while Windows XP is attempting to shut down. Do any of you guys receive this error in the event log?
Details
Product: Windows Operating System
Event ID: 1517
Source: Userenv
Version: 5.2
Symbolic Name: EVENT_HIVE_SAVED
Message: Windows saved user %1 registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Explanation
Windows unloads each user's profile and user's section of the registry when the user logs off. This message indicates that Windows could not unload the user's profile because a program was referencing the user's section of the registry. This locked the profile. The registry cannot unload profiles that are locked and in use. When the program that is locking the profile is no longer referencing the registry, the profile will be unloaded.
User Action
No user action is required.--------------------------------------------------------------------------------
Related Knowledge Base articles
You can find additional information on this topic in the following Microsoft Knowledge Base articles:
Warning error 1517 in Event Viewer after first restart
Explains the presence of an event log warning that appears when you first restart the computer after you install Windows XP.
The DNS suffix of the computer name of a new domain controller may not match the name of the domain after you upgrade a Windows NT 4.0 primary domain controller to Windows 2000
Describes a problem where a domain controller's domain name system suffix does not match the domain name. To resolve this issue, install the latest service pack for Windows 2000, or upgrade the domain controller to Windows Server 2003.
Troubleshooting profile unload issues
When you log off a computer that is running Microsoft Windows Server 2003, Windows XP, Windows 2000, or Windows NT 4.0, you may experience one or more of the following symptoms: A user profile does not unload.A roaming profile does not...
How to troubleshoot RPC Endpoint Mapper errors
Describes how to recognize and troubleshoot RPC Endpoint Mapper errors when you use the Windows Server 2003 Resource Kit Tools and the Windows Server 2003 Support Utilities that are available on the Windows Server 2003 CD-ROM.
===
But there is a solution... And I have found it to eliminate the error. However, remove the UPHClean program/service, and the errors return. I have performed countless re-installs of XP and after loading my programs and tweaking my settings it re-appears in the event log. Only UPHClean seems to resolve the issue.
RESOLUTION:To resolve this issue, use the "Microsoft User Profile Hive Cleanup Service" (UPHClean). UPHClean monitors the computer while Windows is unloading user profiles and forces resources that are open to close. Therefore, the computer can unload and reconcile user profiles.
To download and install UPHClean, visit the following Microsoft Web site:
»
www.microsoft.com/downlo ··· 0E2F3582===