Event ID 1000 Source Userenv

[M P]

Hi!

I am experiencing intermitent problem with my shared folders on my DCSERVER
that act also as a file server. When this event ID occur, my users are
unable to connect to their files on the shared folder resides on DCSERVER.
What I frequent do is I restart the machine and it works fine. Can you help
me resolve the problem? Here is the exact Event Log from Application EVL.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: date
Time: time
User: NT AUTHORITY\SYSTEM
Computer: DCSERVER
Description:
Windows cannot unload your registry file. If you have a roaming profile,
your settings are not replicated. Contact your administrator.

DETAIL - Access is denied. , Build number ((2195)).

 

[Jim Howes]

I am experiencing intermitent problem with my shared folders on my DCSERVER
that act also as a file server. When this event ID occur, my users are
unable to connect to their files on the shared folder resides on DCSERVER.
What I frequent do is I restart the machine and it works fine. Can you help
me resolve the problem? Here is the exact Event Log from Application EVL.

I'm not convinced that the two events are linked. Ev1000 is typically caused by
something holding open registry keys in the current user profile, and when you
try and log off, the system takes about a minute to actually log out.
McAfee VirusScan seems to cause this. It can be alleviated using the UPHClean
service, available from Microsoft, which forcibly unloads the user profle hive
at logout.

Are there any other events in the system log that are more related to server
processes?

 

[Jmnts]

Hi

I've been checking about this error and it seems that has to do with some type of software that you may have installed in the machines that experience this problem.

This problem can occur if a handle to a registry key is not closed correctly. This "locks" the registry files so when Windows attempts to copy these files as part of the roaming profile synchronization process it fails (and this event is recorded). Several users have reported this problem as occuring after the installation of various software packages. In most cases, this indicates a bug in those applications.


Check for installed software.

 

[Steve Parry]

Hi!

I am experiencing intermitent problem with my shared folders on my
DCSERVER that act also as a file server. When this event ID occur, my
users are unable to connect to their files on the shared folder resides on
DCSERVER. What I frequent do is I restart the machine and it works fine.
Can you help me resolve the problem? Here is the exact Event Log from
Application EVL.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: date
Time: time
User: NT AUTHORITY\SYSTEM
Computer: DCSERVER
Description:
Windows cannot unload your registry file. If you have a roaming profile,
your settings are not replicated. Contact your administrator.

DETAIL - Access is denied. , Build number ((2195)).

Try this

http://www.microsoft.com/downloads/...6D-8912-4E18-B570-42470E2F3582&displaylang=en

 

[M P]

what application that possibly locks my OS? My machine is a HP Proliant ML
370 G4 running AD, DNS, DHCP, ILS services and have Symantec Antivirus
Corporate Edition v10, Symantec System Center, HP Management Agents, Adobe
Acrobat Reader 7. I dont know what makes this happens. Hope you might help.

Hi

I've been checking about this error and it seems that has to do with some
type of software that you may have installed in the machines that experience
this problem.

This problem can occur if a handle to a registry key is not closed
correctly. This "locks" the registry files so when Windows attempts to copy
these files as part of the roaming profile synchronization process it fails
(and this event is recorded). Several users have reported this problem as
occuring after the installation of various software packages. In most cases,
this indicates a bug in those applications.


Check for installed software.

 

[Jmnts]

check this link and you can see that most of the problems are related to
software problems.
http://www.eventid.net/display.asp?eventid=1000&eventno=64&source=Userenv&phase=1

the User Profile Hive Cleanup Service normaly resolves this type of problems

 

[M P]

I have installed it on my server and still monitoring if error will still
occur. Will let you know the results.

 

[Florian Frommherz]

Howdy!

I have installed it on my server and still monitoring if error will still
occur. Will let you know the results.

You need to install it on the clients!

cheers,

Florian

 

[Steve Parry]

I have installed it on my server and still monitoring if error will still
occur. Will let you know the results.

No ... you'll need to put it on the client PC's.

 

[Jmnts]

Don't put on the server...
Place on the clients workst.

 

[M P]

I have installed UPHC Service on my clients except windows NT workstations.
It give Event ID 1031. Is it applicable on Windows NT workstations?