hotfix 827825 and 828153 details

[Mark Curtin]

I had seen these two Q #'s referenced in a post regarding Win2k Terminal
Services and post SP4 problems. I cannot, however, locate the
corresponding Q article on MS site. I have the hotfixes themselves, but
I am hesitant to apply them until I know for sure what they are doing.
Does anyone have any more details?

 

[Matthew Harris [MVP]]

How did you get the hotfixes if you don't know what they
do in the first place?

-M

 

[Mark Curtin]

How did you get the hotfixes if you don't know what they
do in the first place?

-M



Win2k Terminal


themselves, but


they are doing.

Like I said, I had seen another post describing similar post-SP4
problems and the poster mentioned these 2 hotfixes as having solved his
particular issues. I am trying to find that post to respond directly to
the author for more details. In the meantime I called MS and requested
the hotfixes for Win2k TS with these Q #'s. I was told there were no Q
articles published for them yet. So, I thought I would ask here if
anyone else any more info.

 

[Daniel Hawthorne]

Hi guys,

827825 fixes the roaming profile issue whereby the
profile cannot be saved back properly due to open files.
This leaves the profile hanging about on the server and
it can't be deleted until a reboot of the server.

I've installed it and it does fix the problem with no
side-effects.

Not sure about the other one. They did send me through
828153 but I didn't install it.

Hope this helps

Daniel.

 

[EvilPeppard]

You cannot fing any info regarding kb827825 from Microsoft because it
is not publicly published from them (yet).

I called MS because my romaing profiles had stopped working after the
MS Blaster patch was released and installed. It affected both my
servers with SP3 and the Blaster hotfixes, as well as the servers with
SP4. I opened an incident with them and they issued me the 827825
hotfix to install on each TS server (actually I'm running Citrix
MetaFram XP).

It appears it has fixed my problems.

 

[Jim LaRosa]

Can you let me know what phone number you called at Microsoft to
request this patch? Was there a charge for this incident? I am
having the same problem on my TS servers that are used for Citrix.

Thanks!

 

[Daniel Hawthorne]

Hi Jim,

The phone numbers vary depending on what country you are
calling from. I would go to support.microsoft.com and
follow the contact us options. This is how I get the
number.

Hotfixes are free of charge.

Daniel.

 

[Fred Doogle]

Hi All,

Could someone confirm that the (unreleased) hotfit solves this problem?

Regards,
Fred "Got Profiles up the ying yang" Doogles.

 

[Anders Olsson]

Could someone confirm that the (unreleased) hotfit solves this problem?

We applied 827825 a week ago, but the profile problems reappeared a
couple a days ago like they always do. Note that we're NOT using
roaming profiles.

It always works for x number of days after a reboot (depending on how
many logins are made), but then the profile problems reappear again.

Have reopened my case with MS. We'll see if they've got anything else
up their sleeves.

Event viewer - Application log - Source: Userenv - Event ID: 1000 -
User: NT AUTHORITY\SYSTEM - "Windows cannot unload your registry file.
If you have a roaming profile, your settings are not replicated.
Contact your administrator.

DETAIL - Access is denied. , Build number ((2195))."

C:\WINNT\Debug\UserMode\userenv.log says:
---
USERENV(a50.a24) 09:58:19:142 MyRegUnLoadKey: Hive unload for
S-1-5-21-565907432-1645565239-725345543-1328 failed due to open
registry key. Windows will try unloading the registry hive once a
second for the next 60 seconds (max).
USERENV(a50.a24) 09:59:19:141 MyRegUnLoadKey: Windows was not able to
unload the registry hive.
USERENV(a50.a24) 09:59:19:141 MyRegUnLoadKey: Failed to unmount hive 5
USERENV(a50.a24) 09:59:19:141 UnloadUserProfile: Didn't unload user
profile <err = 5>
USERENV(a50.a24) 09:59:19:141 DumpOpenRegistryHandle: 2 user registry
Handles leaked from \Registry\User\S-1-5-21-565907432-1645565239-725345543-1328
---

 

[Anders Olsson]

Today I did a DebugView on the server, and it said something like:

---
Subkeys open inside the hive (e38776e8) (s and
Settings\roglar\ntuser.dat) :

Process 851604c0 (PID = 764 ImageFileName = WINLOGON.EXE) (KCB =
e366c1a8) :: Key \REGISTRY\USER\S-1-5-21-583907252-1645672239-725345843-1298
Process 851604c0 (PID = 764 ImageFileName = WINLOGON.EXE) (KCB =
e3233c28) :: Key \REGISTRY\USER\S-1-5-21-583907252-1645672239-725345843-1298\Printers\DevModePerUser

 

[Anders Olsson]

MS sent us a new hotfix (http://support.microsoft.com/?id=828326 -

"Terminal Services: Logoff of a Client Is Slower Than Expected"). I'm
gonna try it out and see if it works.

Okey, a new update:

828326 didn't solve the problem, neither did 828153. Now, I have
received a MS "unsupported" utility called "UPHClean" which installs
itself as a service and supposedly eliminates all profile unloading
problems.

We'll see if it works. I'll try to post back here with the results.

/Anders