Userevt 1525 on XP Machines

J

Jeff Smyrski

On a new XP Pro machine joined to a Windows 2000 domain with AD installed, I
am receiving the following error. I disabled the Offline Files option
located on the Offline Files tab for Folder Options, but the error still
comes up. It causes the machine to run very, very, very slow! But only
after user1 logs in, logs off and User2 logs in without rebooting in
between.

I have also enabled the FastUserSwitching HOTFIX in KB822786 to get rid of
this error as well.

Thanks
Jeff Smyrski

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1525
Date: 10/15/2003
Time: 2:41:55 PM
User: DOMAINNAME\Username
Computer: STATION_100
Description:
Windows has detected that Offline Caching is enabled on the Roaming Profile
share - to avoid potential profile corruption, Offline Caching must be
disabled on shares where roaming user profiles are stored.
 
J

Jack Wang [MSFT]

Hi Jeff,

This event may occur if the following conditions exist:

- A Windows XP-based computer is member of a Microsoft Windows NT
4.0-based domain or of a Microsoft Windows 2000-based domain.

- You put the roaming profile of a domain user on a Windows NT
4.0-based server.

- You log on as this user from a Windows XP-based computer.

The warning is recorded in the log to notify the administrator that it is
possible for the client to cache files from that share. Although you cannot
set caching on Windows NT 4.0-based shares, Client Side Caching (CSC)
interprets the lack of caching options as manual caching. Therefore, as far
as CSC is concerned, the Windows NT 4.0-based share is cacheable. This can
permit profiles to be cached. The warning notifies administrators of this
issue. It will not cause performance issue. You can ignore this warning.

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Jeff Smyrski" <[email protected]>
| Subject: Userevt 1525 on XP Machines
| Date: Fri, 31 Oct 2003 15:15:03 -0500
| Lines: 28
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <#vJlsu#[email protected]>
| Newsgroups: microsoft.public.windowsxp.help_and_support
| NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com 216.230.225.242
| Path:
cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.
phx.gbl
| Xref: cpmsftngxa06.phx.gbl
microsoft.public.windowsxp.help_and_support:345859
| X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
|
| On a new XP Pro machine joined to a Windows 2000 domain with AD
installed, I
| am receiving the following error. I disabled the Offline Files option
| located on the Offline Files tab for Folder Options, but the error still
| comes up. It causes the machine to run very, very, very slow! But only
| after user1 logs in, logs off and User2 logs in without rebooting in
| between.
|
| I have also enabled the FastUserSwitching HOTFIX in KB822786 to get rid of
| this error as well.
|
| Thanks
| Jeff Smyrski
|
| Event Type: Warning
| Event Source: Userenv
| Event Category: None
| Event ID: 1525
| Date: 10/15/2003
| Time: 2:41:55 PM
| User: DOMAINNAME\Username
| Computer: STATION_100
| Description:
| Windows has detected that Offline Caching is enabled on the Roaming
Profile
| share - to avoid potential profile corruption, Offline Caching must be
| disabled on shares where roaming user profiles are stored.
|
|
|
|
 
J

Jeff Smyrski

Thanks for the Reply Jack,
Here is what I did...I have already posted this once before, but after
this reply nobody ever got back to me...please do not leave me hanging.

Because the roaming profile is
designed and used for a specific reason, it seems reasonable to say that
there is an issue with XP and roaming profiles, when a user logs off instead
of rebooting. I removed the values on the Profile tab for a user who is
experiencing this issue. I left the existing user profile that was created
on the XP machine in tact, since this already had local favorites and
settings etc etc. I then performed the following steps...

1) Rebooted the machine
2) Logged in as administrator, checked a few machine settings
3) Logged off
4) Logged on as User
5) Slow...1524 and 1525 events generated in Application log.
6) Logged off
7) CTRL-ALT-DEL ---> Shutdown ---> Reboot option selected
8) After reboot, logged in as same user with trouble, everything works fine.

It seems to me that XP is not releasing the previous user logged on the
machine
It also seems ridiculous that the machine needs to be rebooted after each
user is done

1524 is generated during the logoff-see below

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 551
Date: 10/17/2003
Time: 9:46:01 AM
User: DOMAINNAME\User1
Computer: STATION_131
Description:
User initiated logoff:
User Name: user1
Domain: DOMAINNAME
Logon ID: (0x0,0x2af83b)

***** Logon as admin

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 528
Date: 10/17/2003
Time: 9:46:20 AM
User: DOMAINNAME\Administrator
Computer: STATION_131
Description:
Successful Logon:
User Name: Administrator
Domain: DOMAINNAME
Logon ID: (0x0,0x2DF2AD)
Logon Type: 11
Logon Process: User32
Authentication Package: Negotiate
Workstation Name: STATION_131
Logon GUID: {00000000-0000-0000-0000-000000000000}

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 528
Date: 10/17/2003
Time: 9:49:20 AM
User: DOMAINNAME/User1
Computer: STATION_131
Description:
Successful Logon:
User Name: User1
Domain: DOMAINNAME
Logon ID: (0x0,0xBF7A)
Logon Type: 11
Logon Process: User32
Authentication Package: Negotiate
Workstation Name: STATION_131
Logon GUID: {00000000-0000-0000-0000-000000000000}

*****Here are the two events once again...for the same times...

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 10/17/2003
Time: 9:46:05 AM
User: DOMAINNAME\User1
Computer: STATION_131
Description:
Windows cannot unload your classes registry file - it is still in use by
other applications or services. The file will be unloaded when it is no
longer in use.

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1525
Date: 10/17/2003
Time: 9:49:20 AM
User: DOMAINNAME\User1
Computer: STATION_131
Description:
Windows has detected that Offline Caching is enabled on the Roaming Profile
share - to avoid potential profile corruption, Offline Caching must be
disabled on shares where roaming user profiles are stored.
 
J

Jack Wang [MSFT]

Hi Jeff,

Thank you for your efforts. Since your changed the profile type from
roaming to local. The profile information need to be refreshed after the
user logs on and logs off. As we know, the local computer still has the
cache of the roaming profile. When the user logs on, the cached profile
will be loaded and the warning still appears. After the user logs off, the
profile is refreshed to a local profile and it should work fine.

To workaround the issue, you may try to delete the cached profile in the
Documents and Settings folder before the user logs on.

Also, I suggest you install Windows XP SP1a on the computer.

http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/default.as
p

Windows XP Service Pack 1a (SP1a) provides the latest security and
reliability updates to the Windows XP family of operating systems, and
includes Internet Explorer 6 SP1a. Windows XP SP1a is designed to ensure
Windows XP platform compatibility with newly released software and
hardware, and includes updates that resolve issues discovered by customers
or by Microsoft's internal testing team.

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Jeff Smyrski" <[email protected]>
| References: <#vJlsu#[email protected]>
<[email protected]>
| Subject: Re: Userevt 1525 on XP Machines
| Date: Mon, 3 Nov 2003 10:02:55 -0500
| Lines: 208
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.help_and_support
| NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com 216.230.225.242
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: cpmsftngxa06.phx.gbl
microsoft.public.windowsxp.help_and_support:346893
| X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
|
| Thanks for the Reply Jack,
| Here is what I did...I have already posted this once before, but after
| this reply nobody ever got back to me...please do not leave me hanging.
|
| Because the roaming profile is
| designed and used for a specific reason, it seems reasonable to say that
| there is an issue with XP and roaming profiles, when a user logs off
instead
| of rebooting. I removed the values on the Profile tab for a user who is
| experiencing this issue. I left the existing user profile that was
created
| on the XP machine in tact, since this already had local favorites and
| settings etc etc. I then performed the following steps...
|
| 1) Rebooted the machine
| 2) Logged in as administrator, checked a few machine settings
| 3) Logged off
| 4) Logged on as User
| 5) Slow...1524 and 1525 events generated in Application log.
| 6) Logged off
| 7) CTRL-ALT-DEL ---> Shutdown ---> Reboot option selected
| 8) After reboot, logged in as same user with trouble, everything works
fine.
|
| It seems to me that XP is not releasing the previous user logged on the
| machine
| It also seems ridiculous that the machine needs to be rebooted after each
| user is done
|
| 1524 is generated during the logoff-see below
|
| Event Type: Success Audit
| Event Source: Security
| Event Category: Logon/Logoff
| Event ID: 551
| Date: 10/17/2003
| Time: 9:46:01 AM
| User: DOMAINNAME\User1
| Computer: STATION_131
| Description:
| User initiated logoff:
| User Name: user1
| Domain: DOMAINNAME
| Logon ID: (0x0,0x2af83b)
|
| ***** Logon as admin
|
| Event Type: Success Audit
| Event Source: Security
| Event Category: Logon/Logoff
| Event ID: 528
| Date: 10/17/2003
| Time: 9:46:20 AM
| User: DOMAINNAME\Administrator
| Computer: STATION_131
| Description:
| Successful Logon:
| User Name: Administrator
| Domain: DOMAINNAME
| Logon ID: (0x0,0x2DF2AD)
| Logon Type: 11
| Logon Process: User32
| Authentication Package: Negotiate
| Workstation Name: STATION_131
| Logon GUID: {00000000-0000-0000-0000-000000000000}
|
| Event Type: Success Audit
| Event Source: Security
| Event Category: Logon/Logoff
| Event ID: 528
| Date: 10/17/2003
| Time: 9:49:20 AM
| User: DOMAINNAME/User1
| Computer: STATION_131
| Description:
| Successful Logon:
| User Name: User1
| Domain: DOMAINNAME
| Logon ID: (0x0,0xBF7A)
| Logon Type: 11
| Logon Process: User32
| Authentication Package: Negotiate
| Workstation Name: STATION_131
| Logon GUID: {00000000-0000-0000-0000-000000000000}
|
| *****Here are the two events once again...for the same times...
|
| Event Type: Warning
| Event Source: Userenv
| Event Category: None
| Event ID: 1524
| Date: 10/17/2003
| Time: 9:46:05 AM
| User: DOMAINNAME\User1
| Computer: STATION_131
| Description:
| Windows cannot unload your classes registry file - it is still in use by
| other applications or services. The file will be unloaded when it is no
| longer in use.
|
| Event Type: Warning
| Event Source: Userenv
| Event Category: None
| Event ID: 1525
| Date: 10/17/2003
| Time: 9:49:20 AM
| User: DOMAINNAME\User1
| Computer: STATION_131
| Description:
| Windows has detected that Offline Caching is enabled on the Roaming
Profile
| share - to avoid potential profile corruption, Offline Caching must be
| disabled on shares where roaming user profiles are stored.
|
|
|
| | > Hi Jeff,
| >
| > This event may occur if the following conditions exist:
| >
| > - A Windows XP-based computer is member of a Microsoft Windows NT
| > 4.0-based domain or of a Microsoft Windows 2000-based domain.
| >
| > - You put the roaming profile of a domain user on a Windows NT
| > 4.0-based server.
| >
| > - You log on as this user from a Windows XP-based computer.
| >
| > The warning is recorded in the log to notify the administrator that it
is
| > possible for the client to cache files from that share. Although you
| cannot
| > set caching on Windows NT 4.0-based shares, Client Side Caching (CSC)
| > interprets the lack of caching options as manual caching. Therefore, as
| far
| > as CSC is concerned, the Windows NT 4.0-based share is cacheable. This
can
| > permit profiles to be cached. The warning notifies administrators of
this
| > issue. It will not cause performance issue. You can ignore this warning.
| >
| > Have a nice day!
| >
| > Sincerely,
| > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > Microsoft Partner Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via
| > your newsreader so that others may learn and benefit
| > from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| > --------------------
| > | From: "Jeff Smyrski" <[email protected]>
| > | Subject: Userevt 1525 on XP Machines
| > | Date: Fri, 31 Oct 2003 15:15:03 -0500
| > | Lines: 28
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | Message-ID: <#vJlsu#[email protected]>
| > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| 216.230.225.242
| > | Path:
| >
|
cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.
| > phx.gbl
| > | Xref: cpmsftngxa06.phx.gbl
| > microsoft.public.windowsxp.help_and_support:345859
| > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > |
| > | On a new XP Pro machine joined to a Windows 2000 domain with AD
| > installed, I
| > | am receiving the following error. I disabled the Offline Files option
| > | located on the Offline Files tab for Folder Options, but the error
still
| > | comes up. It causes the machine to run very, very, very slow! But
only
| > | after user1 logs in, logs off and User2 logs in without rebooting in
| > | between.
| > |
| > | I have also enabled the FastUserSwitching HOTFIX in KB822786 to get
rid
| of
| > | this error as well.
| > |
| > | Thanks
| > | Jeff Smyrski
| > |
| > | Event Type: Warning
| > | Event Source: Userenv
| > | Event Category: None
| > | Event ID: 1525
| > | Date: 10/15/2003
| > | Time: 2:41:55 PM
| > | User: DOMAINNAME\Username
| > | Computer: STATION_100
| > | Description:
| > | Windows has detected that Offline Caching is enabled on the Roaming
| > Profile
| > | share - to avoid potential profile corruption, Offline Caching must be
| > | disabled on shares where roaming user profiles are stored.
| > |
| > |
| > |
| > |
| >
|
|
|
 
J

Jeff Smyrski

Hi Jack,
Although I can not see your posts, please continue to let me know your
thoughts. You can email them to me.

I think what I was trying to say is that I attempted to remove the
problem by eliminating the user profiles on the server. Which means that
the local profile, would remain in tact. My goal was to maintain the user
preferences, favorites, programs, etc etc. But doing this did not remove
the issue.

So, I put the profiles back using Active Directory and pointing back to
their user space, since it did not seem to matter. Ivan Sheng made a
similar remark about disabling the profiles, but I replied back that it was
not an acceptable answer since the profile is needed so that the user can
log into various machines and maintain the settings. I think this is
reasonable. But I never heard anything again.

Please let me know what it is that we can do to begin solving this.

Also as far as SP1a it would have installed when we did the windows update.
The machine came with SP1 pre-installed. We have done windows update
several times since then. Also, keep in mind that this happens on several
machines.

Here is the error message once again: I also think that I mentioned I
attempted to uncheck the Offline Caching in the Folder Options for the user,
but it did not seem to make the error go away.

Thanks
Jeff

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1525
Date: 11/18/2003
Time: 8:46:06 AM
User: DOMAINNAME\User Name
Computer: STATION_100
Description:
Windows has detected that Offline Caching is enabled on the Roaming Profile
share - to avoid potential profile corruption, Offline Caching must be
disabled on shares where roaming user profiles are stored.
 
J

Jack Wang [MSFT]

Hi Jeff,

Thank you for your reply.

I have replied to you on Nov 04. For your convenience, I have included it
as follow. If you have any update, feel free to let me know.

--------------------------------------------------

From: (e-mail address removed) (Jack Wang [MSFT])
Date: Tue, 04 Nov 2003 09:00:48 GMT
Subject: Re: Userevt 1525 on XP Machines
Newsgroups: microsoft.public.windowsxp.help_and_support

Hi Jeff,

Thank you for your efforts. Since your changed the profile type from
roaming to local. The profile information need to be refreshed after the
user logs on and logs off. As we know, the local computer still has the
cache of the roaming profile. When the user logs on, the cached profile
will be loaded and the warning still appears. After the user logs off, the
profile is refreshed to a local profile and it should work fine.

To workaround the issue, you may try to delete the cached profile in the
Documents and Settings folder before the user logs on.

Also, I suggest you install Windows XP SP1a on the computer.

http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/default.as
p

Windows XP Service Pack 1a (SP1a) provides the latest security and
reliability updates to the Windows XP family of operating systems, and
includes Internet Explorer 6 SP1a. Windows XP SP1a is designed to ensure
Windows XP platform compatibility with newly released software and
hardware, and includes updates that resolve issues discovered by customers
or by Microsoft's internal testing team.

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

------------------------------------

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Jeff Smyrski" <[email protected]>
| References: <#vJlsu#[email protected]>
<[email protected]>
<[email protected]>
| Subject: Re: Userevt 1525 on XP Machines
| Date: Tue, 18 Nov 2003 12:27:10 -0500
| Lines: 268
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.help_and_support
| NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com 216.230.225.242
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: cpmsftngxa06.phx.gbl
microsoft.public.windowsxp.help_and_support:353176
| X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
|
| Hi Jack,
| Although I can not see your posts, please continue to let me know your
| thoughts. You can email them to me.
|
| I think what I was trying to say is that I attempted to remove the
| problem by eliminating the user profiles on the server. Which means that
| the local profile, would remain in tact. My goal was to maintain the user
| preferences, favorites, programs, etc etc. But doing this did not remove
| the issue.
|
| So, I put the profiles back using Active Directory and pointing back
to
| their user space, since it did not seem to matter. Ivan Sheng made a
| similar remark about disabling the profiles, but I replied back that it
was
| not an acceptable answer since the profile is needed so that the user can
| log into various machines and maintain the settings. I think this is
| reasonable. But I never heard anything again.
|
| Please let me know what it is that we can do to begin solving this.
|
| Also as far as SP1a it would have installed when we did the windows
update.
| The machine came with SP1 pre-installed. We have done windows update
| several times since then. Also, keep in mind that this happens on several
| machines.
|
| Here is the error message once again: I also think that I mentioned I
| attempted to uncheck the Offline Caching in the Folder Options for the
user,
| but it did not seem to make the error go away.
|
| Thanks
| Jeff
|
| Event Type: Warning
| Event Source: Userenv
| Event Category: None
| Event ID: 1525
| Date: 11/18/2003
| Time: 8:46:06 AM
| User: DOMAINNAME\User Name
| Computer: STATION_100
| Description:
| Windows has detected that Offline Caching is enabled on the Roaming
Profile
| share - to avoid potential profile corruption, Offline Caching must be
| disabled on shares where roaming user profiles are stored.
|
|
| | > Thanks for the Reply Jack,
| > Here is what I did...I have already posted this once before, but
after
| > this reply nobody ever got back to me...please do not leave me hanging.
| >
| > Because the roaming profile is
| > designed and used for a specific reason, it seems reasonable to say that
| > there is an issue with XP and roaming profiles, when a user logs off
| instead
| > of rebooting. I removed the values on the Profile tab for a user who is
| > experiencing this issue. I left the existing user profile that was
| created
| > on the XP machine in tact, since this already had local favorites and
| > settings etc etc. I then performed the following steps...
| >
| > 1) Rebooted the machine
| > 2) Logged in as administrator, checked a few machine settings
| > 3) Logged off
| > 4) Logged on as User
| > 5) Slow...1524 and 1525 events generated in Application log.
| > 6) Logged off
| > 7) CTRL-ALT-DEL ---> Shutdown ---> Reboot option selected
| > 8) After reboot, logged in as same user with trouble, everything works
| fine.
| >
| > It seems to me that XP is not releasing the previous user logged on the
| > machine
| > It also seems ridiculous that the machine needs to be rebooted after
each
| > user is done
| >
| > 1524 is generated during the logoff-see below
| >
| > Event Type: Success Audit
| > Event Source: Security
| > Event Category: Logon/Logoff
| > Event ID: 551
| > Date: 10/17/2003
| > Time: 9:46:01 AM
| > User: DOMAINNAME\User1
| > Computer: STATION_131
| > Description:
| > User initiated logoff:
| > User Name: user1
| > Domain: DOMAINNAME
| > Logon ID: (0x0,0x2af83b)
| >
| > ***** Logon as admin
| >
| > Event Type: Success Audit
| > Event Source: Security
| > Event Category: Logon/Logoff
| > Event ID: 528
| > Date: 10/17/2003
| > Time: 9:46:20 AM
| > User: DOMAINNAME\Administrator
| > Computer: STATION_131
| > Description:
| > Successful Logon:
| > User Name: Administrator
| > Domain: DOMAINNAME
| > Logon ID: (0x0,0x2DF2AD)
| > Logon Type: 11
| > Logon Process: User32
| > Authentication Package: Negotiate
| > Workstation Name: STATION_131
| > Logon GUID: {00000000-0000-0000-0000-000000000000}
| >
| > Event Type: Success Audit
| > Event Source: Security
| > Event Category: Logon/Logoff
| > Event ID: 528
| > Date: 10/17/2003
| > Time: 9:49:20 AM
| > User: DOMAINNAME/User1
| > Computer: STATION_131
| > Description:
| > Successful Logon:
| > User Name: User1
| > Domain: DOMAINNAME
| > Logon ID: (0x0,0xBF7A)
| > Logon Type: 11
| > Logon Process: User32
| > Authentication Package: Negotiate
| > Workstation Name: STATION_131
| > Logon GUID: {00000000-0000-0000-0000-000000000000}
| >
| > *****Here are the two events once again...for the same times...
| >
| > Event Type: Warning
| > Event Source: Userenv
| > Event Category: None
| > Event ID: 1524
| > Date: 10/17/2003
| > Time: 9:46:05 AM
| > User: DOMAINNAME\User1
| > Computer: STATION_131
| > Description:
| > Windows cannot unload your classes registry file - it is still in use by
| > other applications or services. The file will be unloaded when it is no
| > longer in use.
| >
| > Event Type: Warning
| > Event Source: Userenv
| > Event Category: None
| > Event ID: 1525
| > Date: 10/17/2003
| > Time: 9:49:20 AM
| > User: DOMAINNAME\User1
| > Computer: STATION_131
| > Description:
| > Windows has detected that Offline Caching is enabled on the Roaming
| Profile
| > share - to avoid potential profile corruption, Offline Caching must be
| > disabled on shares where roaming user profiles are stored.
| >
| >
| >
| > | > > Hi Jeff,
| > >
| > > This event may occur if the following conditions exist:
| > >
| > > - A Windows XP-based computer is member of a Microsoft Windows NT
| > > 4.0-based domain or of a Microsoft Windows 2000-based domain.
| > >
| > > - You put the roaming profile of a domain user on a Windows NT
| > > 4.0-based server.
| > >
| > > - You log on as this user from a Windows XP-based computer.
| > >
| > > The warning is recorded in the log to notify the administrator that it
| is
| > > possible for the client to cache files from that share. Although you
| > cannot
| > > set caching on Windows NT 4.0-based shares, Client Side Caching (CSC)
| > > interprets the lack of caching options as manual caching. Therefore,
as
| > far
| > > as CSC is concerned, the Windows NT 4.0-based share is cacheable. This
| can
| > > permit profiles to be cached. The warning notifies administrators of
| this
| > > issue. It will not cause performance issue. You can ignore this
warning.
| > >
| > > Have a nice day!
| > >
| > > Sincerely,
| > > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > > Microsoft Partner Support
| > >
| > > Get Secure! - www.microsoft.com/security
| > >
| > > =====================================================
| > > When responding to posts, please "Reply to Group" via
| > > your newsreader so that others may learn and benefit
| > > from your issue.
| > > =====================================================
| > >
| > > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > > --------------------
| > > | From: "Jeff Smyrski" <[email protected]>
| > > | Subject: Userevt 1525 on XP Machines
| > > | Date: Fri, 31 Oct 2003 15:15:03 -0500
| > > | Lines: 28
| > > | X-Priority: 3
| > > | X-MSMail-Priority: Normal
| > > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > > | Message-ID: <#vJlsu#[email protected]>
| > > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| > 216.230.225.242
| > > | Path:
| > >
| >
|
cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.
| > > phx.gbl
| > > | Xref: cpmsftngxa06.phx.gbl
| > > microsoft.public.windowsxp.help_and_support:345859
| > > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > > |
| > > | On a new XP Pro machine joined to a Windows 2000 domain with AD
| > > installed, I
| > > | am receiving the following error. I disabled the Offline Files
option
| > > | located on the Offline Files tab for Folder Options, but the error
| still
| > > | comes up. It causes the machine to run very, very, very slow! But
| only
| > > | after user1 logs in, logs off and User2 logs in without rebooting in
| > > | between.
| > > |
| > > | I have also enabled the FastUserSwitching HOTFIX in KB822786 to get
| rid
| > of
| > > | this error as well.
| > > |
| > > | Thanks
| > > | Jeff Smyrski
| > > |
| > > | Event Type: Warning
| > > | Event Source: Userenv
| > > | Event Category: None
| > > | Event ID: 1525
| > > | Date: 10/15/2003
| > > | Time: 2:41:55 PM
| > > | User: DOMAINNAME\Username
| > > | Computer: STATION_100
| > > | Description:
| > > | Windows has detected that Offline Caching is enabled on the Roaming
| > > Profile
| > > | share - to avoid potential profile corruption, Offline Caching must
be
| > > | disabled on shares where roaming user profiles are stored.
| > > |
| > > |
| > > |
| > > |
| > >
| >
| >
|
|
|
 
J

Jeff Smyrski

Hi Jack,
I have already replied to your last post on the 4th, it is dated Nov
18...please review.

Thanks.
Jeff

Jack Wang said:
Hi Jeff,

Thank you for your reply.

I have replied to you on Nov 04. For your convenience, I have included it
as follow. If you have any update, feel free to let me know.

--------------------------------------------------

From: (e-mail address removed) (Jack Wang [MSFT])
Date: Tue, 04 Nov 2003 09:00:48 GMT
Subject: Re: Userevt 1525 on XP Machines
Newsgroups: microsoft.public.windowsxp.help_and_support

Hi Jeff,

Thank you for your efforts. Since your changed the profile type from
roaming to local. The profile information need to be refreshed after the
user logs on and logs off. As we know, the local computer still has the
cache of the roaming profile. When the user logs on, the cached profile
will be loaded and the warning still appears. After the user logs off, the
profile is refreshed to a local profile and it should work fine.

To workaround the issue, you may try to delete the cached profile in the
Documents and Settings folder before the user logs on.

Also, I suggest you install Windows XP SP1a on the computer.

http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/default.as
p

Windows XP Service Pack 1a (SP1a) provides the latest security and
reliability updates to the Windows XP family of operating systems, and
includes Internet Explorer 6 SP1a. Windows XP SP1a is designed to ensure
Windows XP platform compatibility with newly released software and
hardware, and includes updates that resolve issues discovered by customers
or by Microsoft's internal testing team.

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

------------------------------------

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Jeff Smyrski" <[email protected]>
| References: <#vJlsu#[email protected]>
<[email protected]>
<[email protected]>
| Subject: Re: Userevt 1525 on XP Machines
| Date: Tue, 18 Nov 2003 12:27:10 -0500
| Lines: 268
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.help_and_support
| NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com 216.230.225.242
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: cpmsftngxa06.phx.gbl
microsoft.public.windowsxp.help_and_support:353176
| X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
|
| Hi Jack,
| Although I can not see your posts, please continue to let me know your
| thoughts. You can email them to me.
|
| I think what I was trying to say is that I attempted to remove the
| problem by eliminating the user profiles on the server. Which means that
| the local profile, would remain in tact. My goal was to maintain the user
| preferences, favorites, programs, etc etc. But doing this did not remove
| the issue.
|
| So, I put the profiles back using Active Directory and pointing back
to
| their user space, since it did not seem to matter. Ivan Sheng made a
| similar remark about disabling the profiles, but I replied back that it
was
| not an acceptable answer since the profile is needed so that the user can
| log into various machines and maintain the settings. I think this is
| reasonable. But I never heard anything again.
|
| Please let me know what it is that we can do to begin solving this.
|
| Also as far as SP1a it would have installed when we did the windows
update.
| The machine came with SP1 pre-installed. We have done windows update
| several times since then. Also, keep in mind that this happens on several
| machines.
|
| Here is the error message once again: I also think that I mentioned I
| attempted to uncheck the Offline Caching in the Folder Options for the
user,
| but it did not seem to make the error go away.
|
| Thanks
| Jeff
|
| Event Type: Warning
| Event Source: Userenv
| Event Category: None
| Event ID: 1525
| Date: 11/18/2003
| Time: 8:46:06 AM
| User: DOMAINNAME\User Name
| Computer: STATION_100
| Description:
| Windows has detected that Offline Caching is enabled on the Roaming
Profile
| share - to avoid potential profile corruption, Offline Caching must be
| disabled on shares where roaming user profiles are stored.
|
|
| | > Thanks for the Reply Jack,
| > Here is what I did...I have already posted this once before, but
after
| > this reply nobody ever got back to me...please do not leave me hanging.
| >
| > Because the roaming profile is
| > designed and used for a specific reason, it seems reasonable to say that
| > there is an issue with XP and roaming profiles, when a user logs off
| instead
| > of rebooting. I removed the values on the Profile tab for a user who is
| > experiencing this issue. I left the existing user profile that was
| created
| > on the XP machine in tact, since this already had local favorites and
| > settings etc etc. I then performed the following steps...
| >
| > 1) Rebooted the machine
| > 2) Logged in as administrator, checked a few machine settings
| > 3) Logged off
| > 4) Logged on as User
| > 5) Slow...1524 and 1525 events generated in Application log.
| > 6) Logged off
| > 7) CTRL-ALT-DEL ---> Shutdown ---> Reboot option selected
| > 8) After reboot, logged in as same user with trouble, everything works
| fine.
| >
| > It seems to me that XP is not releasing the previous user logged on the
| > machine
| > It also seems ridiculous that the machine needs to be rebooted after
each
| > user is done
| >
| > 1524 is generated during the logoff-see below
| >
| > Event Type: Success Audit
| > Event Source: Security
| > Event Category: Logon/Logoff
| > Event ID: 551
| > Date: 10/17/2003
| > Time: 9:46:01 AM
| > User: DOMAINNAME\User1
| > Computer: STATION_131
| > Description:
| > User initiated logoff:
| > User Name: user1
| > Domain: DOMAINNAME
| > Logon ID: (0x0,0x2af83b)
| >
| > ***** Logon as admin
| >
| > Event Type: Success Audit
| > Event Source: Security
| > Event Category: Logon/Logoff
| > Event ID: 528
| > Date: 10/17/2003
| > Time: 9:46:20 AM
| > User: DOMAINNAME\Administrator
| > Computer: STATION_131
| > Description:
| > Successful Logon:
| > User Name: Administrator
| > Domain: DOMAINNAME
| > Logon ID: (0x0,0x2DF2AD)
| > Logon Type: 11
| > Logon Process: User32
| > Authentication Package: Negotiate
| > Workstation Name: STATION_131
| > Logon GUID: {00000000-0000-0000-0000-000000000000}
| >
| > Event Type: Success Audit
| > Event Source: Security
| > Event Category: Logon/Logoff
| > Event ID: 528
| > Date: 10/17/2003
| > Time: 9:49:20 AM
| > User: DOMAINNAME/User1
| > Computer: STATION_131
| > Description:
| > Successful Logon:
| > User Name: User1
| > Domain: DOMAINNAME
| > Logon ID: (0x0,0xBF7A)
| > Logon Type: 11
| > Logon Process: User32
| > Authentication Package: Negotiate
| > Workstation Name: STATION_131
| > Logon GUID: {00000000-0000-0000-0000-000000000000}
| >
| > *****Here are the two events once again...for the same times...
| >
| > Event Type: Warning
| > Event Source: Userenv
| > Event Category: None
| > Event ID: 1524
| > Date: 10/17/2003
| > Time: 9:46:05 AM
| > User: DOMAINNAME\User1
| > Computer: STATION_131
| > Description:
| > Windows cannot unload your classes registry file - it is still in use by
| > other applications or services. The file will be unloaded when it is no
| > longer in use.
| >
| > Event Type: Warning
| > Event Source: Userenv
| > Event Category: None
| > Event ID: 1525
| > Date: 10/17/2003
| > Time: 9:49:20 AM
| > User: DOMAINNAME\User1
| > Computer: STATION_131
| > Description:
| > Windows has detected that Offline Caching is enabled on the Roaming
| Profile
| > share - to avoid potential profile corruption, Offline Caching must be
| > disabled on shares where roaming user profiles are stored.
| >
| >
| >
| > | > > Hi Jeff,
| > >
| > > This event may occur if the following conditions exist:
| > >
| > > - A Windows XP-based computer is member of a Microsoft Windows NT
| > > 4.0-based domain or of a Microsoft Windows 2000-based domain.
| > >
| > > - You put the roaming profile of a domain user on a Windows NT
| > > 4.0-based server.
| > >
| > > - You log on as this user from a Windows XP-based computer.
| > >
| > > The warning is recorded in the log to notify the administrator that it
| is
| > > possible for the client to cache files from that share. Although you
 
J

Jack Wang [MSFT]

Hi Jeff,

Thank you for your reply.

The Nov 18 post I found said that you could not see my posts. Did you send
another post to me on Nov 18?

Also, please let me know if your network enviroments are as follow:

- A Windows XP-based computer is member of a Microsoft Windows NT
4.0-based domain or of a Microsoft Windows 2000-based domain.

- You put the roaming profile of a domain user on a Windows NT
4.0-based server.

- You log on as this user from a Windows XP-based computer.

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Jeff Smyrski" <[email protected]>
| References: <#vJlsu#[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
| Subject: Re: Userevt 1525 on XP Machines
| Date: Thu, 20 Nov 2003 09:11:58 -0500
| Lines: 399
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.help_and_support
| NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com 216.230.225.242
| Path:
cpmsftngxa07.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP08
.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: cpmsftngxa07.phx.gbl
microsoft.public.windowsxp.help_and_support:353047
| X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
|
| Hi Jack,
| I have already replied to your last post on the 4th, it is dated Nov
| 18...please review.
|
| Thanks.
| Jeff
|
| | > Hi Jeff,
| >
| > Thank you for your reply.
| >
| > I have replied to you on Nov 04. For your convenience, I have included
it
| > as follow. If you have any update, feel free to let me know.
| >
| > --------------------------------------------------
| >
| > From: (e-mail address removed) (Jack Wang [MSFT])
| > Date: Tue, 04 Nov 2003 09:00:48 GMT
| > Subject: Re: Userevt 1525 on XP Machines
| > Newsgroups: microsoft.public.windowsxp.help_and_support
| >
| > Hi Jeff,
| >
| > Thank you for your efforts. Since your changed the profile type from
| > roaming to local. The profile information need to be refreshed after the
| > user logs on and logs off. As we know, the local computer still has the
| > cache of the roaming profile. When the user logs on, the cached profile
| > will be loaded and the warning still appears. After the user logs off,
the
| > profile is refreshed to a local profile and it should work fine.
| >
| > To workaround the issue, you may try to delete the cached profile in the
| > Documents and Settings folder before the user logs on.
| >
| > Also, I suggest you install Windows XP SP1a on the computer.
| >
| >
|
http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/default.as
| > p
| >
| > Windows XP Service Pack 1a (SP1a) provides the latest security and
| > reliability updates to the Windows XP family of operating systems, and
| > includes Internet Explorer 6 SP1a. Windows XP SP1a is designed to ensure
| > Windows XP platform compatibility with newly released software and
| > hardware, and includes updates that resolve issues discovered by
customers
| > or by Microsoft's internal testing team.
| >
| > Have a nice day!
| >
| > Sincerely,
| > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > Microsoft Partner Support
| >
| > ------------------------------------
| >
| > Have a nice day!
| >
| > Sincerely,
| > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > Microsoft Partner Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via
| > your newsreader so that others may learn and benefit
| > from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| > --------------------
| > | From: "Jeff Smyrski" <[email protected]>
| > | References: <#vJlsu#[email protected]>
| > <[email protected]>
| > <[email protected]>
| > | Subject: Re: Userevt 1525 on XP Machines
| > | Date: Tue, 18 Nov 2003 12:27:10 -0500
| > | Lines: 268
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | Message-ID: <[email protected]>
| > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| 216.230.225.242
| > | Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| > | Xref: cpmsftngxa06.phx.gbl
| > microsoft.public.windowsxp.help_and_support:353176
| > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > |
| > | Hi Jack,
| > | Although I can not see your posts, please continue to let me know
| your
| > | thoughts. You can email them to me.
| > |
| > | I think what I was trying to say is that I attempted to remove the
| > | problem by eliminating the user profiles on the server. Which means
| that
| > | the local profile, would remain in tact. My goal was to maintain the
| user
| > | preferences, favorites, programs, etc etc. But doing this did not
| remove
| > | the issue.
| > |
| > | So, I put the profiles back using Active Directory and pointing
back
| > to
| > | their user space, since it did not seem to matter. Ivan Sheng made a
| > | similar remark about disabling the profiles, but I replied back that
it
| > was
| > | not an acceptable answer since the profile is needed so that the user
| can
| > | log into various machines and maintain the settings. I think this is
| > | reasonable. But I never heard anything again.
| > |
| > | Please let me know what it is that we can do to begin solving this.
| > |
| > | Also as far as SP1a it would have installed when we did the windows
| > update.
| > | The machine came with SP1 pre-installed. We have done windows update
| > | several times since then. Also, keep in mind that this happens on
| several
| > | machines.
| > |
| > | Here is the error message once again: I also think that I mentioned I
| > | attempted to uncheck the Offline Caching in the Folder Options for the
| > user,
| > | but it did not seem to make the error go away.
| > |
| > | Thanks
| > | Jeff
| > |
| > | Event Type: Warning
| > | Event Source: Userenv
| > | Event Category: None
| > | Event ID: 1525
| > | Date: 11/18/2003
| > | Time: 8:46:06 AM
| > | User: DOMAINNAME\User Name
| > | Computer: STATION_100
| > | Description:
| > | Windows has detected that Offline Caching is enabled on the Roaming
| > Profile
| > | share - to avoid potential profile corruption, Offline Caching must be
| > | disabled on shares where roaming user profiles are stored.
| > |
| > |
| > | | > | > Thanks for the Reply Jack,
| > | > Here is what I did...I have already posted this once before, but
| > after
| > | > this reply nobody ever got back to me...please do not leave me
| hanging.
| > | >
| > | > Because the roaming profile is
| > | > designed and used for a specific reason, it seems reasonable to say
| that
| > | > there is an issue with XP and roaming profiles, when a user logs off
| > | instead
| > | > of rebooting. I removed the values on the Profile tab for a user
who
| is
| > | > experiencing this issue. I left the existing user profile that was
| > | created
| > | > on the XP machine in tact, since this already had local favorites
and
| > | > settings etc etc. I then performed the following steps...
| > | >
| > | > 1) Rebooted the machine
| > | > 2) Logged in as administrator, checked a few machine settings
| > | > 3) Logged off
| > | > 4) Logged on as User
| > | > 5) Slow...1524 and 1525 events generated in Application log.
| > | > 6) Logged off
| > | > 7) CTRL-ALT-DEL ---> Shutdown ---> Reboot option selected
| > | > 8) After reboot, logged in as same user with trouble, everything
works
| > | fine.
| > | >
| > | > It seems to me that XP is not releasing the previous user logged on
| the
| > | > machine
| > | > It also seems ridiculous that the machine needs to be rebooted after
| > each
| > | > user is done
| > | >
| > | > 1524 is generated during the logoff-see below
| > | >
| > | > Event Type: Success Audit
| > | > Event Source: Security
| > | > Event Category: Logon/Logoff
| > | > Event ID: 551
| > | > Date: 10/17/2003
| > | > Time: 9:46:01 AM
| > | > User: DOMAINNAME\User1
| > | > Computer: STATION_131
| > | > Description:
| > | > User initiated logoff:
| > | > User Name: user1
| > | > Domain: DOMAINNAME
| > | > Logon ID: (0x0,0x2af83b)
| > | >
| > | > ***** Logon as admin
| > | >
| > | > Event Type: Success Audit
| > | > Event Source: Security
| > | > Event Category: Logon/Logoff
| > | > Event ID: 528
| > | > Date: 10/17/2003
| > | > Time: 9:46:20 AM
| > | > User: DOMAINNAME\Administrator
| > | > Computer: STATION_131
| > | > Description:
| > | > Successful Logon:
| > | > User Name: Administrator
| > | > Domain: DOMAINNAME
| > | > Logon ID: (0x0,0x2DF2AD)
| > | > Logon Type: 11
| > | > Logon Process: User32
| > | > Authentication Package: Negotiate
| > | > Workstation Name: STATION_131
| > | > Logon GUID: {00000000-0000-0000-0000-000000000000}
| > | >
| > | > Event Type: Success Audit
| > | > Event Source: Security
| > | > Event Category: Logon/Logoff
| > | > Event ID: 528
| > | > Date: 10/17/2003
| > | > Time: 9:49:20 AM
| > | > User: DOMAINNAME/User1
| > | > Computer: STATION_131
| > | > Description:
| > | > Successful Logon:
| > | > User Name: User1
| > | > Domain: DOMAINNAME
| > | > Logon ID: (0x0,0xBF7A)
| > | > Logon Type: 11
| > | > Logon Process: User32
| > | > Authentication Package: Negotiate
| > | > Workstation Name: STATION_131
| > | > Logon GUID: {00000000-0000-0000-0000-000000000000}
| > | >
| > | > *****Here are the two events once again...for the same times...
| > | >
| > | > Event Type: Warning
| > | > Event Source: Userenv
| > | > Event Category: None
| > | > Event ID: 1524
| > | > Date: 10/17/2003
| > | > Time: 9:46:05 AM
| > | > User: DOMAINNAME\User1
| > | > Computer: STATION_131
| > | > Description:
| > | > Windows cannot unload your classes registry file - it is still in
use
| by
| > | > other applications or services. The file will be unloaded when it is
| no
| > | > longer in use.
| > | >
| > | > Event Type: Warning
| > | > Event Source: Userenv
| > | > Event Category: None
| > | > Event ID: 1525
| > | > Date: 10/17/2003
| > | > Time: 9:49:20 AM
| > | > User: DOMAINNAME\User1
| > | > Computer: STATION_131
| > | > Description:
| > | > Windows has detected that Offline Caching is enabled on the Roaming
| > | Profile
| > | > share - to avoid potential profile corruption, Offline Caching must
be
| > | > disabled on shares where roaming user profiles are stored.
| > | >
| > | >
| > | >
| > | > | > | > > Hi Jeff,
| > | > >
| > | > > This event may occur if the following conditions exist:
| > | > >
| > | > > - A Windows XP-based computer is member of a Microsoft Windows NT
| > | > > 4.0-based domain or of a Microsoft Windows 2000-based domain.
| > | > >
| > | > > - You put the roaming profile of a domain user on a Windows NT
| > | > > 4.0-based server.
| > | > >
| > | > > - You log on as this user from a Windows XP-based computer.
| > | > >
| > | > > The warning is recorded in the log to notify the administrator
that
| it
| > | is
| > | > > possible for the client to cache files from that share. Although
you
|
| > | > cannot
| > | > > set caching on Windows NT 4.0-based shares, Client Side Caching
| (CSC)
| > | > > interprets the lack of caching options as manual caching.
Therefore,
| > as
| > | > far
| > | > > as CSC is concerned, the Windows NT 4.0-based share is cacheable.
| This
| > | can
| > | > > permit profiles to be cached. The warning notifies administrators
of
| > | this
| > | > > issue. It will not cause performance issue. You can ignore this
| > warning.
| > | > >
| > | > > Have a nice day!
| > | > >
| > | > > Sincerely,
| > | > > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > > Microsoft Partner Support
| > | > >
| > | > > Get Secure! - www.microsoft.com/security
| > | > >
| > | > > =====================================================
| > | > > When responding to posts, please "Reply to Group" via
| > | > > your newsreader so that others may learn and benefit
| > | > > from your issue.
| > | > > =====================================================
| > | > >
| > | > > This posting is provided "AS IS" with no warranties, and confers
no
| > | > rights.
| > | > > --------------------
| > | > > | From: "Jeff Smyrski" <[email protected]>
| > | > > | Subject: Userevt 1525 on XP Machines
| > | > > | Date: Fri, 31 Oct 2003 15:15:03 -0500
| > | > > | Lines: 28
| > | > > | X-Priority: 3
| > | > > | X-MSMail-Priority: Normal
| > | > > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | > > | Message-ID: <#vJlsu#[email protected]>
| > | > > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| > | > 216.230.225.242
| > | > > | Path:
| > | > >
| > | >
| > |
| >
|
cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.
| > | > > phx.gbl
| > | > > | Xref: cpmsftngxa06.phx.gbl
| > | > > microsoft.public.windowsxp.help_and_support:345859
| > | > > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > | > > |
| > | > > | On a new XP Pro machine joined to a Windows 2000 domain with AD
| > | > > installed, I
| > | > > | am receiving the following error. I disabled the Offline Files
| > option
| > | > > | located on the Offline Files tab for Folder Options, but the
error
| > | still
| > | > > | comes up. It causes the machine to run very, very, very slow!
| But
| > | only
| > | > > | after user1 logs in, logs off and User2 logs in without
rebooting
| in
| > | > > | between.
| > | > > |
| > | > > | I have also enabled the FastUserSwitching HOTFIX in KB822786 to
| get
| > | rid
| > | > of
| > | > > | this error as well.
| > | > > |
| > | > > | Thanks
| > | > > | Jeff Smyrski
| > | > > |
| > | > > | Event Type: Warning
| > | > > | Event Source: Userenv
| > | > > | Event Category: None
| > | > > | Event ID: 1525
| > | > > | Date: 10/15/2003
| > | > > | Time: 2:41:55 PM
| > | > > | User: DOMAINNAME\Username
| > | > > | Computer: STATION_100
| > | > > | Description:
| > | > > | Windows has detected that Offline Caching is enabled on the
| Roaming
| > | > > Profile
| > | > > | share - to avoid potential profile corruption, Offline Caching
| must
| > be
| > | > > | disabled on shares where roaming user profiles are stored.
| > | > > |
| > | > > |
| > | > > |
| > | > > |
| > | > >
| > | >
| > | >
| > |
| > |
| > |
| >
|
|
|
 
J

Jeff Smyrski

Never saw the Nov 18th Post. Sorry

As for the questions below, this is an XP Pro machine as a member of a
Windows 2000 Domain with AD implemented, and one formerly known as (fka)
BDC.

Users signing into this machine have roaming profiles. The users also log
into windows 95 machines at various times, and may be logged in to both at
the same time.

Profiles are stored on a network share that is part of the Windows 2000
Op.Master.
Thanks
Jeff



Jack Wang said:
Hi Jeff,

Thank you for your reply.

The Nov 18 post I found said that you could not see my posts. Did you send
another post to me on Nov 18?

Also, please let me know if your network enviroments are as follow:

- A Windows XP-based computer is member of a Microsoft Windows NT
4.0-based domain or of a Microsoft Windows 2000-based domain.

- You put the roaming profile of a domain user on a Windows NT
4.0-based server.

- You log on as this user from a Windows XP-based computer.

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Jeff Smyrski" <[email protected]>
| References: <#vJlsu#[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
| Subject: Re: Userevt 1525 on XP Machines
| Date: Thu, 20 Nov 2003 09:11:58 -0500
| Lines: 399
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.help_and_support
| NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com 216.230.225.242
| Path:
cpmsftngxa07.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP08
phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: cpmsftngxa07.phx.gbl
microsoft.public.windowsxp.help_and_support:353047
| X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
|
| Hi Jack,
| I have already replied to your last post on the 4th, it is dated Nov
| 18...please review.
|
| Thanks.
| Jeff
|
| | > Hi Jeff,
| >
| > Thank you for your reply.
| >
| > I have replied to you on Nov 04. For your convenience, I have included
it
| > as follow. If you have any update, feel free to let me know.
| >
| > --------------------------------------------------
| >
| > From: (e-mail address removed) (Jack Wang [MSFT])
| > Date: Tue, 04 Nov 2003 09:00:48 GMT
| > Subject: Re: Userevt 1525 on XP Machines
| > Newsgroups: microsoft.public.windowsxp.help_and_support
| >
| > Hi Jeff,
| >
| > Thank you for your efforts. Since your changed the profile type from
| > roaming to local. The profile information need to be refreshed after the
| > user logs on and logs off. As we know, the local computer still has the
| > cache of the roaming profile. When the user logs on, the cached profile
| > will be loaded and the warning still appears. After the user logs off,
the
| > profile is refreshed to a local profile and it should work fine.
| >
| > To workaround the issue, you may try to delete the cached profile in the
| > Documents and Settings folder before the user logs on.
| >
| > Also, I suggest you install Windows XP SP1a on the computer.
| >
| >
|
http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/default.as
| > p
| >
| > Windows XP Service Pack 1a (SP1a) provides the latest security and
| > reliability updates to the Windows XP family of operating systems, and
| > includes Internet Explorer 6 SP1a. Windows XP SP1a is designed to ensure
| > Windows XP platform compatibility with newly released software and
| > hardware, and includes updates that resolve issues discovered by
customers
| > or by Microsoft's internal testing team.
| >
| > Have a nice day!
| >
| > Sincerely,
| > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > Microsoft Partner Support
| >
| > ------------------------------------
| >
| > Have a nice day!
| >
| > Sincerely,
| > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > Microsoft Partner Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via
| > your newsreader so that others may learn and benefit
| > from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| > --------------------
| > | From: "Jeff Smyrski" <[email protected]>
| > | References: <#vJlsu#[email protected]>
| > <[email protected]>
| > <[email protected]>
| > | Subject: Re: Userevt 1525 on XP Machines
| > | Date: Tue, 18 Nov 2003 12:27:10 -0500
| > | Lines: 268
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | Message-ID: <[email protected]>
| > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| 216.230.225.242
| > | Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| > | Xref: cpmsftngxa06.phx.gbl
| > microsoft.public.windowsxp.help_and_support:353176
| > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > |
| > | Hi Jack,
| > | Although I can not see your posts, please continue to let me know
| your
| > | thoughts. You can email them to me.
| > |
| > | I think what I was trying to say is that I attempted to remove the
| > | problem by eliminating the user profiles on the server. Which means
| that
| > | the local profile, would remain in tact. My goal was to maintain the
| user
| > | preferences, favorites, programs, etc etc. But doing this did not
| remove
| > | the issue.
| > |
| > | So, I put the profiles back using Active Directory and pointing
back
| > to
| > | their user space, since it did not seem to matter. Ivan Sheng made a
| > | similar remark about disabling the profiles, but I replied back that
it
| > was
| > | not an acceptable answer since the profile is needed so that the user
| can
| > | log into various machines and maintain the settings. I think this is
| > | reasonable. But I never heard anything again.
| > |
| > | Please let me know what it is that we can do to begin solving this.
| > |
| > | Also as far as SP1a it would have installed when we did the windows
| > update.
| > | The machine came with SP1 pre-installed. We have done windows update
| > | several times since then. Also, keep in mind that this happens on
| several
| > | machines.
| > |
| > | Here is the error message once again: I also think that I mentioned I
| > | attempted to uncheck the Offline Caching in the Folder Options for the
| > user,
| > | but it did not seem to make the error go away.
| > |
| > | Thanks
| > | Jeff
| > |
| > | Event Type: Warning
| > | Event Source: Userenv
| > | Event Category: None
| > | Event ID: 1525
| > | Date: 11/18/2003
| > | Time: 8:46:06 AM
| > | User: DOMAINNAME\User Name
| > | Computer: STATION_100
| > | Description:
| > | Windows has detected that Offline Caching is enabled on the Roaming
| > Profile
| > | share - to avoid potential profile corruption, Offline Caching must be
| > | disabled on shares where roaming user profiles are stored.
| > |
| > |
| > | | > | > Thanks for the Reply Jack,
| > | > Here is what I did...I have already posted this oncebefore, but
| > after
| > | > this reply nobody ever got back to me...please do not leave me
| hanging.
| > | >
| > | > Because the roaming profile is
| > | > designed and used for a specific reason, it seems reasonable to say
| that
| > | > there is an issue with XP and roaming profiles, when a user logs off
| > | instead
| > | > of rebooting. I removed the values on the Profile tab for a user
who
| is
| > | > experiencing this issue. I left the existing user profile that was
| > | created
| > | > on the XP machine in tact, since this already had local favorites
and
| > | > settings etc etc. I then performed the following steps...
| > | >
| > | > 1) Rebooted the machine
| > | > 2) Logged in as administrator, checked a few machine settings
| > | > 3) Logged off
| > | > 4) Logged on as User
| > | > 5) Slow...1524 and 1525 events generated in Application log.
| > | > 6) Logged off
| > | > 7) CTRL-ALT-DEL ---> Shutdown ---> Reboot option selected
| > | > 8) After reboot, logged in as same user with trouble, everything
works
| > | fine.
| > | >
| > | > It seems to me that XP is not releasing the previous user logged on
| the
| > | > machine
| > | > It also seems ridiculous that the machine needs to be rebooted after
| > each
| > | > user is done
| > | >
| > | > 1524 is generated during the logoff-see below
| > | >
| > | > Event Type: Success Audit
| > | > Event Source: Security
| > | > Event Category: Logon/Logoff
| > | > Event ID: 551
| > | > Date: 10/17/2003
| > | > Time: 9:46:01 AM
| > | > User: DOMAINNAME\User1
| > | > Computer: STATION_131
| > | > Description:
| > | > User initiated logoff:
| > | > User Name: user1
| > | > Domain: DOMAINNAME
| > | > Logon ID: (0x0,0x2af83b)
| > | >
| > | > ***** Logon as admin
| > | >
| > | > Event Type: Success Audit
| > | > Event Source: Security
| > | > Event Category: Logon/Logoff
| > | > Event ID: 528
| > | > Date: 10/17/2003
| > | > Time: 9:46:20 AM
| > | > User: DOMAINNAME\Administrator
| > | > Computer: STATION_131
| > | > Description:
| > | > Successful Logon:
| > | > User Name: Administrator
| > | > Domain: DOMAINNAME
| > | > Logon ID: (0x0,0x2DF2AD)
| > | > Logon Type: 11
| > | > Logon Process: User32
| > | > Authentication Package: Negotiate
| > | > Workstation Name: STATION_131
| > | > Logon GUID: {00000000-0000-0000-0000-000000000000}
| > | >
| > | > Event Type: Success Audit
| > | > Event Source: Security
| > | > Event Category: Logon/Logoff
| > | > Event ID: 528
| > | > Date: 10/17/2003
| > | > Time: 9:49:20 AM
| > | > User: DOMAINNAME/User1
| > | > Computer: STATION_131
| > | > Description:
| > | > Successful Logon:
| > | > User Name: User1
| > | > Domain: DOMAINNAME
| > | > Logon ID: (0x0,0xBF7A)
| > | > Logon Type: 11
| > | > Logon Process: User32
| > | > Authentication Package: Negotiate
| > | > Workstation Name: STATION_131
| > | > Logon GUID: {00000000-0000-0000-0000-000000000000}
| > | >
| > | > *****Here are the two events once again...for the same times...
| > | >
| > | > Event Type: Warning
| > | > Event Source: Userenv
| > | > Event Category: None
| > | > Event ID: 1524
| > | > Date: 10/17/2003
| > | > Time: 9:46:05 AM
| > | > User: DOMAINNAME\User1
| > | > Computer: STATION_131
| > | > Description:
| > | > Windows cannot unload your classes registry file - it is still in
use
| by
| > | > other applications or services. The file will be unloaded when it is
| no
| > | > longer in use.
| > | >
| > | > Event Type: Warning
| > | > Event Source: Userenv
| > | > Event Category: None
| > | > Event ID: 1525
| > | > Date: 10/17/2003
| > | > Time: 9:49:20 AM
| > | > User: DOMAINNAME\User1
| > | > Computer: STATION_131
| > | > Description:
| > | > Windows has detected that Offline Caching is enabled on the Roaming
| > | Profile
| > | > share - to avoid potential profile corruption, Offline Caching must
be
| > | > disabled on shares where roaming user profiles are stored.
| > | >
| > | >
| > | >
| > | > | > | > > Hi Jeff,
| > | > >
| > | > > This event may occur if the following conditions exist:
| > | > >
| > | > > - A Windows XP-based computer is member of a Microsoft Windows NT
| > | > > 4.0-based domain or of a Microsoft Windows 2000-based domain.
| > | > >
| > | > > - You put the roaming profile of a domain user on a Windows NT
| > | > > 4.0-based server.
| > | > >
| > | > > - You log on as this user from a Windows XP-based computer.
| > | > >
| > | > > The warning is recorded in the log to notify the administrator
that
| it
| > | is
| > | > > possible for the client to cache files from that share. Although
you
|
| > | > cannot
| > | > > set caching on Windows NT 4.0-based shares, Client Side Caching
| (CSC)
| > | > > interprets the lack of caching options as manual caching.
Therefore,
| > as
| > | > far
| > | > > as CSC is concerned, the Windows NT 4.0-based share is cacheable.
| This
| > | can
| > | > > permit profiles to be cached. The warning notifies administrators
of
| > | this
| > | > > issue. It will not cause performance issue. You can ignore this
| > warning.
| > | > >
| > | > > Have a nice day!
| > | > >
| > | > > Sincerely,
| > | > > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > > Microsoft Partner Support
| > | > >
| > | > > Get Secure! - www.microsoft.com/security
| > | > >
| > | > > =====================================================
| > | > > When responding to posts, please "Reply to Group" via
| > | > > your newsreader so that others may learn and benefit
| > | > > from your issue.
| > | > > =====================================================
| > | > >
| > | > > This posting is provided "AS IS" with no warranties, and confers
no
| > | > rights.
| > | > > --------------------
| > | > > | From: "Jeff Smyrski" <[email protected]>
| > | > > | Subject: Userevt 1525 on XP Machines
| > | > > | Date: Fri, 31 Oct 2003 15:15:03 -0500
| > | > > | Lines: 28
| > | > > | X-Priority: 3
| > | > > | X-MSMail-Priority: Normal
| > | > > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | > > | Message-ID: <#vJlsu#[email protected]>
| > | > > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| > | > 216.230.225.242
| > | > > | Path:
| > | > >
| > | >
| > |
| >
|
cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.
| > | > > phx.gbl
| > | > > | Xref: cpmsftngxa06.phx.gbl
| > | > > microsoft.public.windowsxp.help_and_support:345859
| > | > > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > | > > |
| > | > > | On a new XP Pro machine joined to a Windows 2000 domain with AD
| > | > > installed, I
| > | > > | am receiving the following error. I disabled the Offline Files
| > option
| > | > > | located on the Offline Files tab for Folder Options, but the
error
| > | still
| > | > > | comes up. It causes the machine to run very, very, very slow!
| But
| > | only
| > | > > | after user1 logs in, logs off and User2 logs in without
rebooting
| in
| > | > > | between.
| > | > > |
| > | > > | I have also enabled the FastUserSwitching HOTFIX in KB822786 to
| get
| > | rid
| > | > of
| > | > > | this error as well.
| > | > > |
| > | > > | Thanks
| > | > > | Jeff Smyrski
| > | > > |
| > | > > | Event Type: Warning
| > | > > | Event Source: Userenv
| > | > > | Event Category: None
| > | > > | Event ID: 1525
| > | > > | Date: 10/15/2003
| > | > > | Time: 2:41:55 PM
| > | > > | User: DOMAINNAME\Username
| > | > > | Computer: STATION_100
| > | > > | Description:
| > | > > | Windows has detected that Offline Caching is enabled on the
| Roaming
| > | > > Profile
| > | > > | share - to avoid potential profile corruption, Offline Caching
| must
| > be
| > | > > | disabled on shares where roaming user profiles are stored.
| > | > > |
| > | > > |
| > | > > |
| > | > > |
| > | > >
| > | >
| > | >
| > |
| > |
| > |
| >
|
|
|
 
J

Jack Wang [MSFT]

Hi Jeff,

Thank you for your reply.

I suggest you check if you have the following program. If so, please
uninstall it and try again.

1. Anti-virus program such as Norton AV.

2. Disable the WebDav service.

3. Novell Client.

If the issue still exists, please contact Microsoft Product Support
Services by telephone so that a dedicated Support Professional can assist
you further with your request. We may need to enabled userenv debug logging
to trace the issue.

To obtain the telephone numbers for specific technology, please review this
web site:

http://support.microsoft.com/default.aspx?scid=sz;en-us;top

If you are outside the US, you can find regional telephone support numbers
at http://support.microsoft.com.

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Jeff Smyrski" <[email protected]>
| References: <#vJlsu#[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<63c0#[email protected]>
| Subject: Re: Userevt 1525 on XP Machines
| Date: Tue, 25 Nov 2003 13:47:14 -0500
| Lines: 532
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.help_and_support
| NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com 216.230.225.242
| Path:
cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGXA06.phx.gbl!TK2MSFTNGXA0
5.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
| Xref: cpmsftngxa07.phx.gbl
microsoft.public.windowsxp.help_and_support:355016
| X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
|
| Never saw the Nov 18th Post. Sorry
|
| As for the questions below, this is an XP Pro machine as a member of a
| Windows 2000 Domain with AD implemented, and one formerly known as (fka)
| BDC.
|
| Users signing into this machine have roaming profiles. The users also log
| into windows 95 machines at various times, and may be logged in to both at
| the same time.
|
| Profiles are stored on a network share that is part of the Windows 2000
| Op.Master.
| Thanks
| Jeff
|
|
|
| | > Hi Jeff,
| >
| > Thank you for your reply.
| >
| > The Nov 18 post I found said that you could not see my posts. Did you
send
| > another post to me on Nov 18?
| >
| > Also, please let me know if your network enviroments are as follow:
| >
| > - A Windows XP-based computer is member of a Microsoft Windows NT
| > 4.0-based domain or of a Microsoft Windows 2000-based domain.
| >
| > - You put the roaming profile of a domain user on a Windows NT
| > 4.0-based server.
| >
| > - You log on as this user from a Windows XP-based computer.
| >
| > Have a nice day!
| >
| > Sincerely,
| > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > Microsoft Partner Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via
| > your newsreader so that others may learn and benefit
| > from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| > --------------------
| > | From: "Jeff Smyrski" <[email protected]>
| > | References: <#vJlsu#[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > | Subject: Re: Userevt 1525 on XP Machines
| > | Date: Thu, 20 Nov 2003 09:11:58 -0500
| > | Lines: 399
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | Message-ID: <[email protected]>
| > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| 216.230.225.242
| > | Path:
| >
|
cpmsftngxa07.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP08
| > phx.gbl!TK2MSFTNGP09.phx.gbl
| > | Xref: cpmsftngxa07.phx.gbl
| > microsoft.public.windowsxp.help_and_support:353047
| > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > |
| > | Hi Jack,
| > | I have already replied to your last post on the 4th, it is dated
Nov
| > | 18...please review.
| > |
| > | Thanks.
| > | Jeff
| > |
| > | | > | > Hi Jeff,
| > | >
| > | > Thank you for your reply.
| > | >
| > | > I have replied to you on Nov 04. For your convenience, I have
included
| > it
| > | > as follow. If you have any update, feel free to let me know.
| > | >
| > | > --------------------------------------------------
| > | >
| > | > From: (e-mail address removed) (Jack Wang [MSFT])
| > | > Date: Tue, 04 Nov 2003 09:00:48 GMT
| > | > Subject: Re: Userevt 1525 on XP Machines
| > | > Newsgroups: microsoft.public.windowsxp.help_and_support
| > | >
| > | > Hi Jeff,
| > | >
| > | > Thank you for your efforts. Since your changed the profile type from
| > | > roaming to local. The profile information need to be refreshed after
| the
| > | > user logs on and logs off. As we know, the local computer still has
| the
| > | > cache of the roaming profile. When the user logs on, the cached
| profile
| > | > will be loaded and the warning still appears. After the user logs
off,
| > the
| > | > profile is refreshed to a local profile and it should work fine.
| > | >
| > | > To workaround the issue, you may try to delete the cached profile in
| the
| > | > Documents and Settings folder before the user logs on.
| > | >
| > | > Also, I suggest you install Windows XP SP1a on the computer.
| > | >
| > | >
| > |
| >
|
http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/default.as
| > | > p
| > | >
| > | > Windows XP Service Pack 1a (SP1a) provides the latest security and
| > | > reliability updates to the Windows XP family of operating systems,
and
| > | > includes Internet Explorer 6 SP1a. Windows XP SP1a is designed to
| ensure
| > | > Windows XP platform compatibility with newly released software and
| > | > hardware, and includes updates that resolve issues discovered by
| > customers
| > | > or by Microsoft's internal testing team.
| > | >
| > | > Have a nice day!
| > | >
| > | > Sincerely,
| > | > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > Microsoft Partner Support
| > | >
| > | > ------------------------------------
| > | >
| > | > Have a nice day!
| > | >
| > | > Sincerely,
| > | > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > Microsoft Partner Support
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | >
| > | > =====================================================
| > | > When responding to posts, please "Reply to Group" via
| > | > your newsreader so that others may learn and benefit
| > | > from your issue.
| > | > =====================================================
| > | >
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > | rights.
| > | > --------------------
| > | > | From: "Jeff Smyrski" <[email protected]>
| > | > | References: <#vJlsu#[email protected]>
| > | > <[email protected]>
| > | > <[email protected]>
| > | > | Subject: Re: Userevt 1525 on XP Machines
| > | > | Date: Tue, 18 Nov 2003 12:27:10 -0500
| > | > | Lines: 268
| > | > | X-Priority: 3
| > | > | X-MSMail-Priority: Normal
| > | > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | > | Message-ID: <[email protected]>
| > | > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| > | 216.230.225.242
| > | > | Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| > | > | Xref: cpmsftngxa06.phx.gbl
| > | > microsoft.public.windowsxp.help_and_support:353176
| > | > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > | > |
| > | > | Hi Jack,
| > | > | Although I can not see your posts, please continue to let me
| know
| > | your
| > | > | thoughts. You can email them to me.
| > | > |
| > | > | I think what I was trying to say is that I attempted to remove
| the
| > | > | problem by eliminating the user profiles on the server. Which
means
| > | that
| > | > | the local profile, would remain in tact. My goal was to maintain
| the
| > | user
| > | > | preferences, favorites, programs, etc etc. But doing this did not
| > | remove
| > | > | the issue.
| > | > |
| > | > | So, I put the profiles back using Active Directory and
pointing
| > back
| > | > to
| > | > | their user space, since it did not seem to matter. Ivan Sheng
made
| a
| > | > | similar remark about disabling the profiles, but I replied back
that
| > it
| > | > was
| > | > | not an acceptable answer since the profile is needed so that the
| user
| > | can
| > | > | log into various machines and maintain the settings. I think this
| is
| > | > | reasonable. But I never heard anything again.
| > | > |
| > | > | Please let me know what it is that we can do to begin solving
this.
| > | > |
| > | > | Also as far as SP1a it would have installed when we did the
windows
| > | > update.
| > | > | The machine came with SP1 pre-installed. We have done windows
| update
| > | > | several times since then. Also, keep in mind that this appens on
| > | several
| > | > | machines.
| > | > |
| > | > | Here is the error message once again: I also think that I
mentioned
| I
| > | > | attempted to uncheck the Offline Caching in the Folder Options for
| the
| > | > user,
| > | > | but it did not seem to make the error go away.
| > | > |
| > | > | Thanks
| > | > | Jeff
| > | > |
| > | > | Event Type: Warning
| > | > | Event Source: Userenv
| > | > | Event Category: None
| > | > | Event ID: 1525
| > | > | Date: 11/18/2003
| > | > | Time: 8:46:06 AM
| > | > | User: DOMAINNAME\User Name
| > | > | Computer: STATION_100
| > | > | Description:
| > | > | Windows has detected that Offline Caching is enabled on the
Roaming
| > | > Profile
| > | > | share - to avoid potential profile corruption, Offline Caching
must
| be
| > | > | disabled on shares where roaming user profiles are stored.
| > | > |
| > | > |
| > | > | | > | > | > Thanks for the Reply Jack,
| > | > | > Here is what I did...I have already posted this once before,
| but
| > | > after
| > | > | > this reply nobody ever got back to me...please do not leave me
| > | hanging.
| > | > | >
| > | > | > Because the roaming profile is
| > | > | > designed and used for a specific reason, it seems reasonable to
| say
| > | that
| > | > | > there is an issue with XP and roaming profiles, when a user logs
| off
| > | > | instead
| > | > | > of rebooting. I removed the values on the Profile tab for a
user
| > who
| > | is
| > | > | > experiencing this issue. I left the existing user profile that
| was
| > | > | created
| > | > | > on the XP machine in tact, since this already had local
favorites
| > and
| > | > | > settings etc etc. I then performed the following steps...
| > | > | >
| > | > | > 1) Rebooted the machine
| > | > | > 2) Logged in as administrator, checked a few machine settings
| > | > | > 3) Logged off
| > | > | > 4) Logged on as User
| > | > | > 5) Slow...1524 and 1525 events generated in Application log.
| > | > | > 6) Logged off
| > | > | > 7) CTRL-ALT-DEL ---> Shutdown ---> Reboot option selected
| > | > | > 8) After reboot, logged in as same user with trouble, everything
| > works
| > | > | fine.
| > | > | >
| > | > | > It seems to me that XP is not releasing the previous user logged
| on
| > | the
| > | > | > machine
| > | > | > It also seems ridiculous that the machine needs to be rebooted
| after
| > | > each
| > | > | > user is done
| > | > | >
| > | > | > 1524 is generated during the logoff-see below
| > | > | >
| > | > | > Event Type: Success Audit
| > | > | > Event Source: Security
| > | > | > Event Category: Logon/Logoff
| > | > | > Event ID: 551
| > | > | > Date: 10/17/2003
| > | > | > Time: 9:46:01 AM
| > | > | > User: DOMAINNAME\User1
| > | > | > Computer: STATION_131
| > | > | > Description:
| > | > | > User initiated logoff:
| > | > | > User Name: user1
| > | > | > Domain: DOMAINNAME
| > | > | > Logon ID: (0x0,0x2af83b)
| > | > | >
| > | > | > ***** Logon as admin
| > | > | >
| > | > | > Event Type: Success Audit
| > | > | > Event Source: Security
| > | > | > Event Category: Logon/Logoff
| > | > | > Event ID: 528
| > | > | > Date: 10/17/2003
| > | > | > Time: 9:46:20 AM
| > | > | > User: DOMAINNAME\Administrator
| > | > | > Computer: STATION_131
| > | > | > Description:
| > | > | > Successful Logon:
| > | > | > User Name: Administrator
| > | > | > Domain: DOMAINNAME
| > | > | > Logon ID: (0x0,0x2DF2AD)
| > | > | > Logon Type: 11
| > | > | > Logon Process: User32
| > | > | > Authentication Package: Negotiate
| > | > | > Workstation Name: STATION_131
| > | > | > Logon GUID: {00000000-0000-0000-0000-000000000000}
| > | > | >
| > | > | > Event Type: Success Audit
| > | > | > Event Source: Security
| > | > | > Event Category: Logon/Logoff
| > | > | > Event ID: 528
| > | > | > Date: 10/17/2003
| > | > | > Time: 9:49:20 AM
| > | > | > User: DOMAINNAME/User1
| > | > | > Computer: STATION_131
| > | > | > Description:
| > | > | > Successful Logon:
| > | > | > User Name: User1
| > | > | > Domain: DOMAINNAME
| > | > | > Logon ID: (0x0,0xBF7A)
| > | > | > Logon Type: 11
| > | > | > Logon Process: User32
| > | > | > Authentication Package: Negotiate
| > | > | > Workstation Name: STATION_131
| > | > | > Logon GUID: {00000000-0000-0000-0000-000000000000}
| > | > | >
| > | > | > *****Here are the two events once again...for the same times...
| > | > | >
| > | > | > Event Type: Warning
| > | > | > Event Source: Userenv
| > | > | > Event Category: None
| > | > | > Event ID: 1524
| > | > | > Date: 10/17/2003
| > | > | > Time: 9:46:05 AM
| > | > | > User: DOMAINNAME\User1
| > | > | > Computer: STATION_131
| > | > | > Description:
| > | > | > Windows cannot unload your classes registry file - it is still
in
| > use
| > | by
| > | > | > other applications or services. The file will be unloaded when
it
| is
| > | no
| > | > | > longer in use.
| > | > | >
| > | > | > Event Type: Warning
| > | > | > Event Source: Userenv
| > | > | > Event Category: None
| > | > | > Event ID: 1525
| > | > | > Date: 10/17/2003
| > | > | > Time: 9:49:20 AM
| > | > | > User: DOMAINNAME\User1
| > | > | > Computer: STATION_131
| > | > | > Description:
| > | > | > Windows has detected that Offline Caching is enabled on the
| Roaming
| > | > | Profile
| > | > | > share - to avoid potential profile corruption, Offline Caching
| must
| > be
| > | > | > disabled on shares where roaming user profiles are stored.
| > | > | >
| > | > | >
| > | > | >
message
| > | > | > | > | > | > > Hi Jeff,
| > | > | > >
| > | > | > > This event may occur if the following conditions exist:
| > | > | > >
| > | > | > > - A Windows XP-based computer is member of a Microsoft Windows
| NT
| > | > | > > 4.0-based domain or of a Microsoft Windows 2000-based
domain.
| > | > | > >
| > | > | > > - You put the roaming profile of a domain user on a Windows NT
| > | > | > > 4.0-based server.
| > | > | > >
| > | > | > > - You log on as this user from a Windows XP-based computer.
| > | > | > >
| > | > | > > The warning is recorded in the log to notify the administrator
| > that
| > | it
| > | > | is
| > | > | > > possible for the client to cache files from that share.
Although
| > you
| > |
| > | > | > cannot
| > | > | > > set caching on Windows NT 4.0-based shares, Client Side
Caching
| > | (CSC)
| > | > | > > interprets the lack of caching options as manual caching.
| > Therefore,
| > | > as
| > | > | > far
| > | > | > > as CSC is concerned, the Windows NT 4.0-based share is
| cacheable.
| > | This
| > | > | can
| > | > | > > permit profiles to be cached. The warning notifies
| administrators
| > of
| > | > | this
| > | > | > > issue. It will not cause performance issue. You can ignore
this
| > | > warning.
| > | > | > >
| > | > | > > Have a nice day!
| > | > | > >
| > | > | > > Sincerely,
| > | > | > > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > | > > Microsoft Partner Support
| > | > | > >
| > | > | > > Get Secure! - www.microsoft.com/security
| > | > | > >
| > | > | > > =====================================================
| > | > | > > When responding to posts, please "Reply to Group" via
| > | > | > > your newsreader so that others may learn and benefit
| > | > | > > from your issue.
| > | > | > > =====================================================
| > | > | > >
| > | > | > > This posting is provided "AS IS" with no warranties, and
confers
| > no
| > | > | > rights.
| > | > | > > --------------------
| > | > | > > | From: "Jeff Smyrski" <[email protected]>
| > | > | > > | Subject: Userevt 1525 on XP Machines
| > | > | > > | Date: Fri, 31 Oct 2003 15:15:03 -0500
| > | > | > > | Lines: 28
| > | > | > > | X-Priority: 3
| > | > | > > | X-MSMail-Priority: Normal
| > | > | > > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | > | > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | > | > > | Message-ID: <#vJlsu#[email protected]>
| > | > | > > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > | > > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| > | > | > 216.230.225.242
| > | > | > > | Path:
| > | > | > >
| > | > | >
| > | > |
| > | >
| > |
| >
|
cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.
| > | > | > > phx.gbl
| > | > | > > | Xref: cpmsftngxa06.phx.gbl
| > | > | > > microsoft.public.windowsxp.help_and_support:345859
| > | > | > > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > | > | > > |
| > | > | > > | On a new XP Pro machine joined to a Windows 2000 domain with
| AD
| > | > | > > installed, I
| > | > | > > | am receiving the following error. I disabled the Offline
| Files
| > | > option
| > | > | > > | located on the Offline Files tab for Folder Options, but the
| > error
| > | > | still
| > | > | > > | comes up. It causes the machine to run very, very, very
slow!
| > | But
| > | > | only
| > | > | > > | after user1 logs in, logs off and User2 logs in without
| > rebooting
| > | in
| > | > | > > | between.
| > | > | > > |
| > | > | > > | I have also enabled the FastUserSwitching HOTFIX in KB822786
| to
| > | get
| > | > | rid
| > | > | > of
| > | > | > > | this error as well.
| > | > | > > |
| > | > | > > | Thanks
| > | > | > > | Jeff Smyrski
| > | > | > > |
| > | > | > > | Event Type: Warning
| > | > | > > | Event Source: Userenv
| > | > | > > | Event Category: None
| > | > | > > | Event ID: 1525
| > | > | > > | Date: 10/15/2003
| > | > | > > | Time: 2:41:55 PM
| > | > | > > | User: DOMAINNAME\Username
| > | > | > > | Computer: STATION_100
| > | > | > > | Description:
| > | > | > > | Windows has detected that Offline Caching is enabled on the
| > | Roaming
| > | > | > > Profile
| > | > | > > | share - to avoid potential profile corruption, Offline
Caching
| > | must
| > | > be
| > | > | > > | disabled on shares where roaming user profiles are stored.
| > | > | > > |
| > | > | > > |
| > | > | > > |
| > | > | > > |
| > | > | > >
| > | > | >
| > | > | >
| > | > |
| > | > |
| > | > |
| > | >
| > |
| > |
| > |
| >
|
|
|
 
J

Jeff Smyrski

Thanks Jack,
I have read the Technet Article on the Norton AV, this software did come
with the d530 but was not installed by default. HP support even had me
reinstall the image from scratch for XP but that did not work either. What
is the WebDav service? I have not tried anything with that. And as for
Novell, this is a Windows 2000 domain, and no Novell anywhere. Thanks

Jeff


Jack Wang said:
Hi Jeff,

Thank you for your reply.

I suggest you check if you have the following program. If so, please
uninstall it and try again.

1. Anti-virus program such as Norton AV.

2. Disable the WebDav service.

3. Novell Client.

If the issue still exists, please contact Microsoft Product Support
Services by telephone so that a dedicated Support Professional can assist
you further with your request. We may need to enabled userenv debug logging
to trace the issue.

To obtain the telephone numbers for specific technology, please review this
web site:

http://support.microsoft.com/default.aspx?scid=sz;en-us;top

If you are outside the US, you can find regional telephone support numbers
at http://support.microsoft.com.

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Jeff Smyrski" <[email protected]>
| References: <#vJlsu#[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<63c0#[email protected]>
| Subject: Re: Userevt 1525 on XP Machines
| Date: Tue, 25 Nov 2003 13:47:14 -0500
| Lines: 532
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.help_and_support
| NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com 216.230.225.242
| Path:
cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGXA06.phx.gbl!TK2MSFTNGXA0
5.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
| Xref: cpmsftngxa07.phx.gbl
microsoft.public.windowsxp.help_and_support:355016
| X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
|
| Never saw the Nov 18th Post. Sorry
|
| As for the questions below, this is an XP Pro machine as a member of a
| Windows 2000 Domain with AD implemented, and one formerly known as (fka)
| BDC.
|
| Users signing into this machine have roaming profiles. The users also log
| into windows 95 machines at various times, and may be logged in to both at
| the same time.
|
| Profiles are stored on a network share that is part of the Windows 2000
| Op.Master.
| Thanks
| Jeff
|
|
|
| | > Hi Jeff,
| >
| > Thank you for your reply.
| >
| > The Nov 18 post I found said that you could not see my posts. Did you
send
| > another post to me on Nov 18?
| >
| > Also, please let me know if your network enviroments are as follow:
| >
| > - A Windows XP-based computer is member of a Microsoft Windows NT
| > 4.0-based domain or of a Microsoft Windows 2000-based domain.
| >
| > - You put the roaming profile of a domain user on a Windows NT
| > 4.0-based server.
| >
| > - You log on as this user from a Windows XP-based computer.
| >
| > Have a nice day!
| >
| > Sincerely,
| > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > Microsoft Partner Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via
| > your newsreader so that others may learn and benefit
| > from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| > --------------------
| > | From: "Jeff Smyrski" <[email protected]>
| > | References: <#vJlsu#[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > | Subject: Re: Userevt 1525 on XP Machines
| > | Date: Thu, 20 Nov 2003 09:11:58 -0500
| > | Lines: 399
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | Message-ID: <[email protected]>
| > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| 216.230.225.242
| > | Path:
| >
|
cpmsftngxa07.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP08
| > phx.gbl!TK2MSFTNGP09.phx.gbl
| > | Xref: cpmsftngxa07.phx.gbl
| > microsoft.public.windowsxp.help_and_support:353047
| > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > |
| > | Hi Jack,
| > | I have already replied to your last post on the 4th, it is dated
Nov
| > | 18...please review.
| > |
| > | Thanks.
| > | Jeff
| > |
| > | | > | > Hi Jeff,
| > | >
| > | > Thank you for your reply.
| > | >
| > | > I have replied to you on Nov 04. For your convenience, I have
included
| > it
| > | > as follow. If you have any update, feel free to let me know.
| > | >
| > | > --------------------------------------------------
| > | >
| > | > From: (e-mail address removed) (Jack Wang [MSFT])
| > | > Date: Tue, 04 Nov 2003 09:00:48 GMT
| > | > Subject: Re: Userevt 1525 on XP Machines
| > | > Newsgroups: microsoft.public.windowsxp.help_and_support
| > | >
| > | > Hi Jeff,
| > | >
| > | > Thank you for your efforts. Since your changed the profile type from
| > | > roaming to local. The profile information need to be refreshed after
| the
| > | > user logs on and logs off. As we know, the local computer still has
| the
| > | > cache of the roaming profile. When the user logs on, the cached
| profile
| > | > will be loaded and the warning still appears. After the user logs
off,
| > the
| > | > profile is refreshed to a local profile and it should work fine.
| > | >
| > | > To workaround the issue, you may try to delete the cached profile in
| the
| > | > Documents and Settings folder before the user logs on.
| > | >
| > | > Also, I suggest you install Windows XP SP1a on the computer.
| > | >
| > | >
| > |
| >
|
http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/default.as
| > | > p
| > | >
| > | > Windows XP Service Pack 1a (SP1a) provides the latest security and
| > | > reliability updates to the Windows XP family of operating systems,
and
| > | > includes Internet Explorer 6 SP1a. Windows XP SP1a is designed to
| ensure
| > | > Windows XP platform compatibility with newly released software and
| > | > hardware, and includes updates that resolve issues discovered by
| > customers
| > | > or by Microsoft's internal testing team.
| > | >
| > | > Have a nice day!
| > | >
| > | > Sincerely,
| > | > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > Microsoft Partner Support
| > | >
| > | > ------------------------------------
| > | >
| > | > Have a nice day!
| > | >
| > | > Sincerely,
| > | > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > Microsoft Partner Support
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | >
| > | > =====================================================
| > | > When responding to posts, please "Reply to Group" via
| > | > your newsreader so that others may learn and benefit
| > | > from your issue.
| > | > =====================================================
| > | >
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > | rights.
| > | > --------------------
| > | > | From: "Jeff Smyrski" <[email protected]>
| > | > | References: <#vJlsu#[email protected]>
| > | > <[email protected]>
| > | > <[email protected]>
| > | > | Subject: Re: Userevt 1525 on XP Machines
| > | > | Date: Tue, 18 Nov 2003 12:27:10 -0500
| > | > | Lines: 268
| > | > | X-Priority: 3
| > | > | X-MSMail-Priority: Normal
| > | > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | > | Message-ID: <[email protected]>
| > | > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| > | 216.230.225.242
| > | > | Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| > | > | Xref: cpmsftngxa06.phx.gbl
| > | > microsoft.public.windowsxp.help_and_support:353176
| > | > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > | > |
| > | > | Hi Jack,
| > | > | Although I can not see your posts, please continue to let me
| know
| > | your
| > | > | thoughts. You can email them to me.
| > | > |
| > | > | I think what I was trying to say is that I attempted to remove
| the
| > | > | problem by eliminating the user profiles on the server. Which
means
| > | that
| > | > | the local profile, would remain in tact. My goal was to maintain
| the
| > | user
| > | > | preferences, favorites, programs, etc etc. But doing this did not
| > | remove
| > | > | the issue.
| > | > |
| > | > | So, I put the profiles back using Active Directory and
pointing
| > back
| > | > to
| > | > | their user space, since it did not seem to matter. Ivan Sheng
made
| a
| > | > | similar remark about disabling the profiles, but I replied back
that
| > it
| > | > was
| > | > | not an acceptable answer since the profile is needed so that the
| user
| > | can
| > | > | log into various machines and maintain the settings. I think this
| is
| > | > | reasonable. But I never heard anything again.
| > | > |
| > | > | Please let me know what it is that we can do to begin solving
this.
| > | > |
| > | > | Also as far as SP1a it would have insalled when we did the
windows
| > | > update.
| > | > | The machine came with SP1 pre-installed. We have done windows
| update
| > | > | several times since then. Also, keep in mind that this happens on
| > | several
| > | > | machines.
| > | > |
| > | > | Here is the error message once again: I also think that I
mentioned
| I
| > | > | attempted to uncheck the Offline Caching in the Folder Options for
| the
| > | > user,
| > | > | but it did not seem to make the error go away.
| > | > |
| > | > | Thanks
| > | > | Jeff
| > | > |
| > | > | Event Type: Warning
| > | > | Event Source: Userenv
| > | > | Event Category: None
| > | > | Event ID: 1525
| > | > | Date: 11/18/2003
| > | > | Time: 8:46:06 AM
| > | > | User: DOMAINNAME\User Name
| > | > | Computer: STATION_100
| > | > | Description:
| > | > | Windows has detected that Offline Caching is enabled on the
Roaming
| > | > Profile
| > | > | share - to avoid potential profile corruption, Offline Caching
must
| be
| > | > | disabled on shares where roaming user profiles are stored.
| > | > |
| > | > |
| > | > | | > | > | > Thanks for the Reply Jack,
| > | > | > Here is what I did...I have already posted this once before,
| but
| > | > after
| > | > | > this reply nobody ever got back to me...please do not leave me
| > | hanging.
| > | > | >
| > | > | > Because the roaming profile is
| > | > | > designed and used for a specific reason, it seems reasonable to
| say
| > | that
| > | > | > there is an issue with XP and roaming profiles, when a user logs
| off
| > | > | instead
| > | > | > of rebooting. I removed the values on the Profile tab for a
user
| > who
| > | is
| > | > | > experiencing this issue. I left the existing user profile that
| was
| > | > | created
| > | > | > on the XP machine in tact, since this already had local
favorites
| > and
| > | > | > settings etc etc. I then performed the following steps...
| > | > | >
| > | > | > 1) Rebooted the machine
| > | > | > 2) Logged in as administrator, checked a few machine settings
| > | > | > 3) Logged off
| > | > | > 4) Logged on as User
| > | > | > 5) Slow...1524 and 1525 events generated in Application log.
| > | > | > 6) Logged off
| > | > | > 7) CTRL-ALT-DEL ---> Shutdown ---> Reboot option selected
| > | > | > 8) After reboot, logged in as same user with trouble, everything
| > works
| > | > | fine.
| > | > | >
| > | > | > It seems to me that XP is not releasing the previous user logged
| on
| > | the
| > | > | > machine
| > | > | > It also seems ridiculous that the machine needs to be rebooted
| after
| > | > each
| > | > | > user is done
| > | > | >
| > | > | > 1524 is generated during the logoff-see below
| > | > | >
| > | > | > Event Type: Success Audit
| > | > | > Event Source: Security
| > | > | > Event Category: Logon/Logoff
| > | > | > Event ID: 551
| > | > | > Date: 10/17/2003
| > | > | > Time: 9:46:01 AM
| > | > | > User: DOMAINNAME\User1
| > | > | > Computer: STATION_131
| > | > | > Description:
| > | > | > User initiated logoff:
| > | > | > User Name: user1
| > | > | > Domain: DOMAINNAME
| > | > | > Logon ID: (0x0,0x2af83b)
| > | > | >
| > | > | > ***** Logon as admin
| > | > | >
| > | > | > Event Type: Success Audit
| > | > | > Event Source: Security
| > | > | > Event Category: Logon/Logoff
| > | > | > Event ID: 528
| > | > | > Date: 10/17/2003
| > | > | > Time: 9:46:20 AM
| > | > | > User: DOMAINNAME\Administrator
| > | > | > Computer: STATION_131
| > | > | > Description:
| > | > | > Successful Logon:
| > | > | > User Name: Administrator
| > | > | > Domain: DOMAINNAME
| > | > | > Logon ID: (0x0,0x2DF2AD)
| > | > | > Logon Type: 11
| > | > | > Logon Process: User32
| > | > | > Authentication Package: Negotiate
| > | > | > Workstation Name: STATION_131
| > | > | > Logon GUID: {00000000-0000-0000-0000-000000000000}
| > | > | >
| > | > | > Event Type: Success Audit
| > | > | > Event Source: Security
| > | > | > Event Category: Logon/Logoff
| > | > | > Event ID: 528
| > | > | > Date: 10/17/2003
| > | > | > Time: 9:49:20 AM
| > | > | > User: DOMAINNAME/User1
| > | > | > Computer: STATION_131
| > | > | > Description:
| > | > | > Successful Logon:
| > | > | > User Name: User1
| > | > | > Domain: DOMAINNAME
| > | > | > Logon ID: (0x0,0xBF7A)
| > | > | > Logon Type: 11
| > | > | > Logon Process: User32
| > | > | > Authentication Package: Negotiate
| > | > | > Workstation Name: STATION_131
| > | > | > Logon GUID: {00000000-0000-0000-0000-000000000000}
| > | > | >
| > | > | > *****Here are the two events once again...for the same times...
| > | > | >
| > | > | > Event Type: Warning
| > | > | > Event Source: Userenv
| > | > | > Event Category: None
| > | > | > Event ID: 1524
| > | > | > Date: 10/17/2003
| > | > | > Time: 9:46:05 AM
| > | > | > User: DOMAINNAME\User1
| > | > | > Computer: STATION_131
| > | > | > Description:
| > | > | > Windows cannot unload your classes registry file - it is still
in
| > use
| > | by
| > | > | > other applications or services. The file will be unloaded when
it
| is
| > | no
| > | > | > longer in use.
| > | > | >
| > | > | > Event Type: Warning
| > | > | > Event Source: Userenv
| > | > | > Event Category: None
| > | > | > Event ID: 1525
| > | > | > Date: 10/17/2003
| > | > | > Time: 9:49:20 AM
| > | > | > User: DOMAINNAME\User1
| > | > | > Computer: STATION_131
| > | > | > Description:
| > | > | > Windows has detected that Offline Caching is enabled on the
| Roaming
| > | > | Profile
| > | > | > share - to avoid potential profile corruption, Offline Caching
| must
| > be
| > | > | > disabled on shares where roaming user profiles are stored.
| > | > | >
| > | > | >
| > | > | >
message
| > | > | > | > | > | > > Hi Jeff,
| > | > | > >
| > | > | > > This event may occur if the following conditions exist:
| > | > | > >
| > | > | > > - A Windows XP-based computer is member of a Microsoft Windows
| NT
| > | > | > > 4.0-based domain or of a Microsoft Windows 2000-based
domain.
| > | > | > >
| > | > | > > - You put the roaming profile of a domain user on a Windows NT
| > | > | > > 4.0-based server.
| > | > | > >
| > | > | > > - You log on as this user from a Windows XP-based computer.
| > | > | > >
| > | > | > > The warning is recorded in the log to notify the administrator
| > that
| > | it
| > | > | is
| > | > | > > possible for the client to cache files from that share.
Although
| > you
| > |
| > | > | > cannot
| > | > | > > set caching on Windows NT 4.0-based shares, Client Side
Caching
| > | (CSC)
| > | > | > > interprets the lack of caching options as manual caching.
| > Therefore,
| > | > as
| > | > | > far
| > | > | > > as CSC is concerned, the Windows NT 4.0-based share is
| cacheable.
| > | This
| > | > | can
| > | > | > > permit profiles to be cached. The warning notifies
| administrators
| > of
| > | > | this
| > | > | > > issue. It will not cause performance issue. You can ignore
this
| > | > warning.
| > | > | > >
| > | > | > > Have a nice day!
| > | > | > >
| > | > | > > Sincerely,
| > | > | > > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > | > > Microsoft Partner Support
| > | > | > >
| > | > | > > Get Secure! - www.microsoft.com/security
| > | > | > >
| > | > | > > =====================================================
| > | > | > > When responding to posts, please "Reply to Group" via
| > | > | > > your newsreader so that others may learn and benefit
| > | > | > > from your issue.
| > | > | > > =====================================================
| > | > | > >
| > | > | > > This posting is provided "AS IS" with no warranties, and
confers
| > no
| > | > | > rights.
| > | > | > > --------------------
| > | > | > > | From: "Jeff Smyrski" <[email protected]>
| > | > | > > | Subject: Userevt 1525 on XP Machines
| > | > | > > | Date: Fri, 31 Oct 2003 15:15:03 -0500
| > | > | > > | Lines: 28
| > | > | > > | X-Priority: 3
| > | > | > > | X-MSMail-Priority: Normal
| > | > | > > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | > | > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | > | > > | Message-ID: <#vJlsu#[email protected]>
| > | > | > > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > | > > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| > | > | > 216.230.225.242
| > | > | > > | Path:
| > | > | > >
| > | > | >
| > | > |
| > | >
| > |
| >
|
cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.
| > | > | > > phx.gbl
| > | > | > > | Xref: cpmsftngxa06.phx.gbl
| > | > | > > microsoft.public.windowsxp.help_and_support:345859
| > | > | > > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > | > | > > |
| > | > | > > | On a new XP Pro machine joined to a Windows 2000 domain with
| AD
| > | > | > > installed, I
| > | > | > > | am receiving the following error. I disabled the Offline
| Files
| > | > option
| > | > | > > | located on the Offline Files tab for Folder Options, but the
| > error
| > | > | still
| > | > | > > | comes up. It causes the machine to run very, very, very
slow!
| > | But
| > | > | only
| > | > | > > | after user1 logs in, logs off and User2 logs in without
| > rebooting
| > | in
| > | > | > > | between.
| > | > | > > |
| > | > | > > | I have also enabled the FastUserSwitching HOTFIX in KB822786
| to
| > | get
| > | > | rid
| > | > | > of
| > | > | > > | this error as well.
| > | > | > > |
| > | > | > > | Thanks
| > | > | > > | Jeff Smyrski
| > | > | > > |
| > | > | > > | Event Type: Warning
| > | > | > > | Event Source: Userenv
| > | > | > > | Event Category: None
| > | > | > > | Event ID: 1525
| > | > | > > | Date: 10/15/2003
| > | > | > > | Time: 2:41:55 PM
| > | > | > > | User: DOMAINNAME\Username
| > | > | > > | Computer: STATION_100
| > | > | > > | Description:
| > | > | > > | Windows has detected that Offline Caching is enabled on the
| > | Roaming
| > | > | > > Profile
| > | > | > > | share - to avoid potential profile corruption, Offline
Caching
| > | must
| > | > be
| > | > | > > | disabled on shares where roaming user profiles are stored.
| > | > | > > |
| > | > | > > |
| > | > | > > |
| > | > | > > |
| > | > | > >
| > | > | >
| > | > | >
| > | > |
| > | > |
| > | > |
| > | >
| > |
| > |
| > |
| >
|
|
|
 
J

Jack Wang [MSFT]

Hi Jeff,

Thank you for the reply.

To check the services, please refer to the following steps.

1. Click Start and select Run.

2. Type Services.msc in the Open box and click OK.

3. If you find the webdav service, please disable it.

Also, you may perform a Clean Boot.

A Clean Boot will allow us to isolate any device drivers or programs that
are loading at startup that may be causing a conflict with other device
drivers or programs that are installed in the computer.

Step 1: Click Start and select Run.

Step 2: Type msconfig in Open box and click OK.

Step 3: Select Selective Startup and remove the checks from each item below
the Selective Startup option.

Step 4: Select the Services tab, check all the Microsoft services and click
the OK button.

Step 5: Reboot the computer.

If the issue is solved at this point, repeat the process, but add one check
back each time to the list of files listed under the "Selective Startup"
menu until the issue reappears again.

310353 How to Perform a Clean Boot in Windows XP
http://support.microsoft.com/?id=310353

Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Jeff Smyrski" <[email protected]_SPAM>
| References: <#vJlsu#[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<63c0#[email protected]>
<[email protected]>
<[email protected]>
| Subject: Re: Userevt 1525 on XP Machines
| Date: Fri, 28 Nov 2003 08:51:38 -0500
| Lines: 680
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.windowsxp.help_and_support
| NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com 216.230.225.242
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
| Xref: cpmsftngxa06.phx.gbl
microsoft.public.windowsxp.help_and_support:356688
| X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
|
| Thanks Jack,
| I have read the Technet Article on the Norton AV, this software did
come
| with the d530 but was not installed by default. HP support even had me
| reinstall the image from scratch for XP but that did not work either.
What
| is the WebDav service? I have not tried anything with that. And as for
| Novell, this is a Windows 2000 domain, and no Novell anywhere. Thanks
|
| Jeff
|
|
| | > Hi Jeff,
| >
| > Thank you for your reply.
| >
| > I suggest you check if you have the following program. If so, please
| > uninstall it and try again.
| >
| > 1. Anti-virus program such as Norton AV.
| >
| > 2. Disable the WebDav service.
| >
| > 3. Novell Client.
| >
| > If the issue still exists, please contact Microsoft Product Support
| > Services by telephone so that a dedicated Support Professional can
assist
| > you further with your request. We may need to enabled userenv debug
| logging
| > to trace the issue.
| >
| > To obtain the telephone numbers for specific technology, please review
| this
| > web site:
| >
| > http://support.microsoft.com/default.aspx?scid=sz;en-us;top
| >
| > If you are outside the US, you can find regional telephone support
numbers
| > at http://support.microsoft.com.
| >
| > Have a nice day!
| >
| > Sincerely,
| > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > Microsoft Partner Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via
| > your newsreader so that others may learn and benefit
| > from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| > --------------------
| > | From: "Jeff Smyrski" <[email protected]>
| > | References: <#vJlsu#[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <[email protected]>
| > <63c0#[email protected]>
| > | Subject: Re: Userevt 1525 on XP Machines
| > | Date: Tue, 25 Nov 2003 13:47:14 -0500
| > | Lines: 532
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | Message-ID: <[email protected]>
| > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| 216.230.225.242
| > | Path:
| >
|
cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGXA06.phx.gbl!TK2MSFTNGXA0
| > 5.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
| > | Xref: cpmsftngxa07.phx.gbl
| > microsoft.public.windowsxp.help_and_support:355016
| > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > |
| > | Never saw the Nov 18th Post. Sorry
| > |
| > | As for the questions below, this is an XP Pro machine as a member of a
| > | Windows 2000 Domain with AD implemented, and one formerly known as
(fka)
| > | BDC.
| > |
| > | Users signing into this machine have roaming profiles. The users also
| log
| > | into windows 95 machines at various times, and may be logged in to
both
| at
| > | the same time.
| > |
| > | Profiles are stored on a network share that is part of the Windows
2000
| > | Op.Master.
| > | Thanks
| > | Jeff
| > |
| > |
| > |
| > | | > | > Hi Jeff,
| > | >
| > | > Thank you for your reply.
| > | >
| > | > The Nov 18 post I found said that you could not see my posts. Did
you
| > send
| > | > another post to me on Nov 18?
| > | >
| > | > Also, please let me know if your network enviroments are as follow:
| > | >
| > | > - A Windows XP-based computer is member of a Microsoft Windows NT
| > | > 4.0-based domain or of a Microsoft Windows 2000-based domain.
| > | >
| > | > - You put the roaming profile of a domain user on a Windows NT
| > | > 4.0-based server.
| > | >
| > | > - You log on as this user from a Windows XP-based computer.
| > | >
| > | > Have a nice day!
| > | >
| > | > Sincerely,
| > | > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > Microsoft Partner Support
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | >
| > | > =====================================================
| > | > When responding to posts, please "Reply to Group" via
| > | > your newsreader so that others may learn and benefit
| > | > from your issue.
| > | > =====================================================
| > | >
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > | rights.
| > | > --------------------
| > | > | From: "Jeff Smyrski" <[email protected]>
| > | > | References: <#vJlsu#[email protected]>
| > | > <[email protected]>
| > | > <[email protected]>
| > | > <[email protected]>
| > | > <[email protected]>
| > | > | Subject: Re: Userevt 1525 on XP Machines
| > | > | Date: Thu, 20 Nov 2003 09:11:58 -0500
| > | > | Lines: 399
| > | > | X-Priority: 3
| > | > | X-MSMail-Priority: Normal
| > | > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | > | Message-ID: <[email protected]>
| > | > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| > | 216.230.225.242
| > | > | Path:
| > | >
| > |
| >
|
cpmsftngxa07.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP08
| > | > phx.gbl!TK2MSFTNGP09.phx.gbl
| > | > | Xref: cpmsftngxa07.phx.gbl
| > | > microsoft.public.windowsxp.help_and_support:353047
| > | > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > | > |
| > | > | Hi Jack,
| > | > | I have already replied to your last post on the 4th, it is
dated
| > Nov
| > | > | 18...please review.
| > | > |
| > | > | Thanks.
| > | > | Jeff
| > | > |
| > | > | | > | > | > Hi Jeff,
| > | > | >
| > | > | > Thank you for your reply.
| > | > | >
| > | > | > I have replied to you on Nov 04. For your convenience, I have
| > included
| > | > it
| > | > | > as follow. If you have any update, feel free to let me know.
| > | > | >
| > | > | > --------------------------------------------------
| > | > | >
| > | > | > From: (e-mail address removed) (Jack Wang [MSFT])
| > | > | > Date: Tue, 04 Nov 2003 09:00:48 GMT
| > | > | > Subject: Re: Userevt 1525 on XP Machines
| > | > | > Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > | >
| > | > | > Hi Jeff,
| > | > | >
| > | > | > Thank you for your efforts. Since your changed the profile type
| from
| > | > | > roaming to local. The profile information need to be refreshed
| after
| > | the
| > | > | > user logs on and logs off. As we know, the local computer still
| has
| > | the
| > | > | > cache of the roaming profile. When the user logs on, the cached
| > | profile
| > | > | > will be loaded and the warning still appears. After the user
logs
| > off,
| > | > the
| > | > | > profile is refreshed to a local profile and it should work fine.
| > | > | >
| > | > | > To workaround the issue, you may try to delete the cached
profile
| in
| > | the
| > | > | > Documents and Settings folder before the user logs on.
| > | > | >
| > | > | > Also, I suggest you install Windows XP SP1a on the computer.
| > | > | >
| > | > | >
| > | > |
| > | >
| > |
| >
|
http://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1/default.as
| > | > | > p
| > | > | >
| > | > | > Windows XP Service Pack 1a (SP1a) provides the latest security
and
| > | > | > reliability updates to the Windows XP family of operating
systems,
| > and
| > | > | > includes Internet Explorer 6 SP1a. Windows XP SP1a is designed
to
| > | ensure
| > | > | > Windows XP platform compatibility with newly released software
and
| > | > | > hardware, and includes updates that resolve issues discovered by
| > | > customers
| > | > | > or by Microsoft's internal testing team.
| > | > | >
| > | > | > Have a nice day!
| > | > | >
| > | > | > Sincerely,
| > | > | > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > | > Microsoft Partner Support
| > | > | >
| > | > | > ------------------------------------
| > | > | >
| > | > | > Have a nice day!
| > | > | >
| > | > | > Sincerely,
| > | > | > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > | > Microsoft Partner Support
| > | > | >
| > | > | > Get Secure! - www.microsoft.com/security
| > | > | >
| > | > | > =====================================================
| > | > | > When responding to posts, please "Reply to Group" via
| > | > | > your newsreader so that others may learn and benefit
| > | > | > from your issue.
| > | > | > =====================================================
| > | > | >
| > | > | > This posting is provided "AS IS" with no warranties, and confers
| no
| > | > | rights.
| > | > | > --------------------
| > | > | > | From: "Jeff Smyrski" <[email protected]>
| > | > | > | References: <#vJlsu#[email protected]>
| > | > | > <[email protected]>
| > | > | > <[email protected]>
| > | > | > | Subject: Re: Userevt 1525 on XP Machines
| > | > | > | Date: Tue, 18 Nov 2003 12:27:10 -0500
| > | > | > | Lines: 268
| > | > | > | X-Priority: 3
| > | > | > | X-MSMail-Priority: Normal
| > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | > | > | Message-ID: <[email protected]>
| > | > | > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > | > | NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com
| > | > | 216.230.225.242
| > | > | > | Path:
| > cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| > | > | > | Xref: cpmsftngxa06.phx.gbl
| > | > | > microsoft.public.windowsxp.help_and_support:353176
| > | > | > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > | > | > |
| > | > | > | Hi Jack,
| > | > | > | Although I can not see your posts, please contiue to let
me
| > | know
| > | > | your
| > | > | > | thoughts. You can email them to me.
| > | > | > |
| > | > | > | I think what I was trying to say is that I attempted to
| remove
| > | the
| > | > | > | problem by eliminating the user profiles on the server. Which
| > means
| > | > | that
| > | > | > | the local profile, would remain in tact. My goal was to
| maintain
| > | the
| > | > | user
| > | > | > | preferences, favorites, programs, etc etc. But doing this did
| not
| > | > | remove
| > | > | > | the issue.
| > | > | > |
| > | > | > | So, I put the profiles back using Active Directory and
| > pointing
| > | > back
| > | > | > to
| > | > | > | their user space, since it did not seem to matter. Ivan Sheng
| > made
| > | a
| > | > | > | similar remark about disabling the profiles, but I replied
back
| > that
| > | > it
| > | > | > was
| > | > | > | not an acceptable answer since the profile is needed so that
the
| > | user
| > | > | can
| > | > | > | log into various machines and maintain the settings. I think
| this
| > | is
| > | > | > | reasonable. But I never heard anything again.
| > | > | > |
| > | > | > | Please let me know what it is that we can do to begin solving
| > this.
| > | > | > |
| > | > | > | Also as far as SP1a it would have installed when we did the
| > windows
| > | > | > update.
| > | > | > | The machine came with SP1 pre-installed. We have done windows
| > | update
| > | > | > | several times since then. Also, keep in mind that this
happens
| on
| > | > | several
| > | > | > | machines.
| > | > | > |
| > | > | > | Here is the error message once again: I also think that I
| > mentioned
| > | I
| > | > | > | attempted to uncheck the Offline Caching in the Folder Options
| for
| > | the
| > | > | > user,
| > | > | > | but it did not seem to make the error go away.
| > | > | > |
| > | > | > | Thanks
| > | > | > | Jeff
| > | > | > |
| > | > | > | Event Type: Warning
| > | > | > | Event Source: Userenv
| > | > | > | Event Category: None
| > | > | > | Event ID: 1525
| > | > | > | Date: 11/18/2003
| > | > | > | Time: 8:46:06 AM
| > | > | > | User: DOMAINNAME\User Name
| > | > | > | Computer: STATION_100
| > | > | > | Description:
| > | > | > | Windows has detected that Offline Caching is enabled on the
| > Roaming
| > | > | > Profile
| > | > | > | share - to avoid potential profile corruption, Offline Caching
| > must
| > | be
| > | > | > | disabled on shares where roaming user profiles are stored.
| > | > | > |
| > | > | > |
| > | > | > | | > | > | > | > Thanks for the Reply Jack,
| > | > | > | > Here is what I did...I have already posted this once
| before,
| > | but
| > | > | > after
| > | > | > | > this reply nobody ever got back to me...please do not leave
me
| > | > | hanging.
| > | > | > | >
| > | > | > | > Because the roaming profile is
| > | > | > | > designed and used for a specific reason, it seems reasonable
| to
| > | say
| > | > | that
| > | > | > | > there is an issue with XP and roaming profiles, when a user
| logs
| > | off
| > | > | > | instead
| > | > | > | > of rebooting. I removed the values on the Profile tab for a
| > user
| > | > who
| > | > | is
| > | > | > | > experiencing this issue. I left the existing user profile
| that
| > | was
| > | > | > | created
| > | > | > | > on the XP machine in tact, since this already had local
| > favorites
| > | > and
| > | > | > | > settings etc etc. I then performed the following steps...
| > | > | > | >
| > | > | > | > 1) Rebooted the machine
| > | > | > | > 2) Logged in as administrator, checked a few machine
settings
| > | > | > | > 3) Logged off
| > | > | > | > 4) Logged on as User
| > | > | > | > 5) Slow...1524 and 1525 events generated in Application log.
| > | > | > | > 6) Logged off
| > | > | > | > 7) CTRL-ALT-DEL ---> Shutdown ---> Reboot option selected
| > | > | > | > 8) After reboot, logged in as same user with trouble,
| everything
| > | > works
| > | > | > | fine.
| > | > | > | >
| > | > | > | > It seems to me that XP is not releasing the previous user
| logged
| > | on
| > | > | the
| > | > | > | > machine
| > | > | > | > It also seems ridiculous that the machine needs to be
rebooted
| > | after
| > | > | > each
| > | > | > | > user is done
| > | > | > | >
| > | > | > | > 1524 is generated during the logoff-see below
| > | > | > | >
| > | > | > | > Event Type: Success Audit
| > | > | > | > Event Source: Security
| > | > | > | > Event Category: Logon/Logoff
| > | > | > | > Event ID: 551
| > | > | > | > Date: 10/17/2003
| > | > | > | > Time: 9:46:01 AM
| > | > | > | > User: DOMAINNAME\User1
| > | > | > | > Computer: STATION_131
| > | > | > | > Description:
| > | > | > | > User initiated logoff:
| > | > | > | > User Name: user1
| > | > | > | > Domain: DOMAINNAME
| > | > | > | > Logon ID: (0x0,0x2af83b)
| > | > | > | >
| > | > | > | > ***** Logon as admin
| > | > | > | >
| > | > | > | > Event Type: Success Audit
| > | > | > | > Event Source: Security
| > | > | > | > Event Category: Logon/Logoff
| > | > | > | > Event ID: 528
| > | > | > | > Date: 10/17/2003
| > | > | > | > Time: 9:46:20 AM
| > | > | > | > User: DOMAINNAME\Administrator
| > | > | > | > Computer: STATION_131
| > | > | > | > Description:
| > | > | > | > Successful Logon:
| > | > | > | > User Name: Administrator
| > | > | > | > Domain: DOMAINNAME
| > | > | > | > Logon ID: (0x0,0x2DF2AD)
| > | > | > | > Logon Type: 11
| > | > | > | > Logon Process: User32
| > | > | > | > Authentication Package: Negotiate
| > | > | > | > Workstation Name: STATION_131
| > | > | > | > Logon GUID: {00000000-0000-0000-0000-000000000000}
| > | > | > | >
| > | > | > | > Event Type: Success Audit
| > | > | > | > Event Source: Security
| > | > | > | > Event Category: Logon/Logoff
| > | > | > | > Event ID: 528
| > | > | > | > Date: 10/17/2003
| > | > | > | > Time: 9:49:20 AM
| > | > | > | > User: DOMAINNAME/User1
| > | > | > | > Computer: STATION_131
| > | > | > | > Description:
| > | > | > | > Successful Logon:
| > | > | > | > User Name: User1
| > | > | > | > Domain: DOMAINNAME
| > | > | > | > Logon ID: (0x0,0xBF7A)
| > | > | > | > Logon Type: 11
| > | > | > | > Logon Process: User32
| > | > | > | > Authentication Package: Negotiate
| > | > | > | > Workstation Name: STATION_131
| > | > | > | > Logon GUID: {00000000-0000-0000-0000-000000000000}
| > | > | > | >
| > | > | > | > *****Here are the two events once again...for the same
| times...
| > | > | > | >
| > | > | > | > Event Type: Warning
| > | > | > | > Event Source: Userenv
| > | > | > | > Event Category: None
| > | > | > | > Event ID: 1524
| > | > | > | > Date: 10/17/2003
| > | > | > | > Time: 9:46:05 AM
| > | > | > | > User: DOMAINNAME\User1
| > | > | > | > Computer: STATION_131
| > | > | > | > Description:
| > | > | > | > Windows cannot unload your classes registry file - it is
still
| > in
| > | > use
| > | > | by
| > | > | > | > other applications or services. The file will be unloaded
when
| > it
| > | is
| > | > | no
| > | > | > | > longer in use.
| > | > | > | >
| > | > | > | > Event Type: Warning
| > | > | > | > Event Source: Userenv
| > | > | > | > Event Category: None
| > | > | > | > Event ID: 1525
| > | > | > | > Date: 10/17/2003
| > | > | > | > Time: 9:49:20 AM
| > | > | > | > User: DOMAINNAME\User1
| > | > | > | > Computer: STATION_131
| > | > | > | > Description:
| > | > | > | > Windows has detected that Offline Caching is enabled on the
| > | Roaming
| > | > | > | Profile
| > | > | > | > share - to avoid potential profile corruption, Offline
Caching
| > | must
| > | > be
| > | > | > | > disabled on shares where roaming user profiles are stored.
| > | > | > | >
| > | > | > | >
| > | > | > | >
| > message
| > | > | > | > | > | > | > | > > Hi Jeff,
| > | > | > | > >
| > | > | > | > > This event may occur if the following conditions exist:
| > | > | > | > >
| > | > | > | > > - A Windows XP-based computer is member of a Microsoft
| Windows
| > | NT
| > | > | > | > > 4.0-based domain or of a Microsoft Windows 2000-based
| > domain.
| > | > | > | > >
| > | > | > | > > - You put the roaming profile of a domain user on a
Windows
| NT
| > | > | > | > > 4.0-based server.
| > | > | > | > >
| > | > | > | > > - You log on as this user from a Windows XP-based
computer.
| > | > | > | > >
| > | > | > | > > The warning is recorded in the log to notify the
| administrator
| > | > that
| > | > | it
| > | > | > | is
| > | > | > | > > possible for the client to cache files from that share.
| > Although
| > | > you
| > | > |
| > | > | > | > cannot
| > | > | > | > > set caching on Windows NT 4.0-based shares, Client Side
| > Caching
| > | > | (CSC)
| > | > | > | > > interprets the lack of caching options as manual caching.
| > | > Therefore,
| > | > | > as
| > | > | > | > far
| > | > | > | > > as CSC is concerned, the Windows NT 4.0-based share is
| > | cacheable.
| > | > | This
| > | > | > | can
| > | > | > | > > permit profiles to be cached. The warning notifies
| > | administrators
| > | > of
| > | > | > | this
| > | > | > | > > issue. It will not cause performance issue. You can ignore
| > this
| > | > | > warning.
| > | > | > | > >
| > | > | > | > > Have a nice day!
| > | > | > | > >
| > | > | > | > > Sincerely,
| > | > | > | > > Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| > | > | > | > > Microsoft Partner Support
| > | > | > | > >
| > | > | > | > > Get Secure! - www.microsoft.com/security
| > | > | > | > >
| > | > | > | > > =====================================================
| > | > | > | > > When responding to posts, please "Reply to Group" via
| > | > | > | > > your newsreader so that others may learn and benefit
| > | > | > | > > from your issue.
| > | > | > | > > =====================================================
| > | > | > | > >
| > | > | > | > > This posting is provided "AS IS" with no warranties, and
| > confers
| > | > no
| > | > | > | > rights.
| > | > | > | > > --------------------
| > | > | > | > > | From: "Jeff Smyrski" <[email protected]>
| > | > | > | > > | Subject: Userevt 1525 on XP Machines
| > | > | > | > > | Date: Fri, 31 Oct 2003 15:15:03 -0500
| > | > | > | > > | Lines: 28
| > | > | > | > > | X-Priority: 3
| > | > | > | > > | X-MSMail-Priority: Normal
| > | > | > | > > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| > | > | > | > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| > | > | > | > > | Message-ID: <#vJlsu#[email protected]>
| > | > | > | > > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > | > | > > | NNTP-Posting-Host:
bankofutica-gate-line-r.bankofutica.com
| > | > | > | > 216.230.225.242
| > | > | > | > > | Path:
| > | > | > | > >
| > | > | > | >
| > | > | > |
| > | > | >
| > | > |
| > | >
| > |
| >
|
cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.
| > | > | > | > > phx.gbl
| > | > | > | > > | Xref: cpmsftngxa06.phx.gbl
| > | > | > | > > microsoft.public.windowsxp.help_and_support:345859
| > | > | > | > > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > | > | > | > > |
| > | > | > | > > | On a new XP Pro machine joined to a Windows 2000 domain
| with
| > | AD
| > | > | > | > > installed, I
| > | > | > | > > | am receiving the following error. I disabled the
Offline
| > | Files
| > | > | > option
| > | > | > | > > | located on the Offline Files tab for Folder Options, but
| the
| > | > error
| > | > | > | still
| > | > | > | > > | comes up. It causes the machine to run very, very, very
| > slow!
| > | > | But
| > | > | > | only
| > | > | > | > > | after user1 logs in, logs off and User2 logs in without
| > | > rebooting
| > | > | in
| > | > | > | > > | between.
| > | > | > | > > |
| > | > | > | > > | I have also enabled the FastUserSwitching HOTFIX in
| KB822786
| > | to
| > | > | get
| > | > | > | rid
| > | > | > | > of
| > | > | > | > > | this error as well.
| > | > | > | > > |
| > | > | > | > > | Thanks
| > | > | > | > > | Jeff Smyrski
| > | > | > | > > |
| > | > | > | > > | Event Type: Warning
| > | > | > | > > | Event Source: Userenv
| > | > | > | > > | Event Category: None
| > | > | > | > > | Event ID: 1525
| > | > | > | > > | Date: 10/15/2003
| > | > | > | > > | Time: 2:41:55 PM
| > | > | > | > > | User: DOMAINNAME\Username
| > | > | > | > > | Computer: STATION_100
| > | > | > | > > | Description:
| > | > | > | > > | Windows has detected that Offline Caching is enabled on
| the
| > | > | Roaming
| > | > | > | > > Profile
| > | > | > | > > | share - to avoid potential profile corruption, Offline
| > Caching
| > | > | must
| > | > | > be
| > | > | > | > > | disabled on shares where roaming user profiles are
stored.
| > | > | > | > > |
| > | > | > | > > |
| > | > | > | > > |
| > | > | > | > > |
| > | > | > | > >
| > | > | > | >
| > | > | > | >
| > | > | > |
| > | > | > |
| > | > | > |
| > | > | >
| > | > |
| > | > |
| > | > |
| > | >
| > |
| > |
| > |
| >
|
|
|
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top