Roaming User Profile Not Working Correctly

[Chris Guimbellot]

Hello,

I set up a roaming user profile for two users: myself and a test user. The
test user profile works correctly when I log onto multiple computers. Mine,
on the other hand, does not work on either computer. When I examine the
event logs, I get the following event:

Source: Userenv
Category: None
Event ID: 1000
User: NT AUTHORITY\SYSTEM
Description:
Windows cannot unload your registry file. If you have a roaming profile,
your settings are not replicated. Contact your administrator.
DETAIL - Access is denied. , Build number ((2195)).

After reading a little on EventID.net
(http://www.eventid.net/display.asp?eventid=1000&source=userenv). Of the
many things that are suggested, I have installed SP4, and my anti-virus
software is up to date.

The next response was to install IPSec Policy Agent
(http://support.microsoft.com/default.aspx?scid=kb;[LN];Q319909). What
exactly is IPSec Policy Agent, is this really the source of the problem, and
is there anything that I have to watch out for regarding this?

I appreciate the help. Thanks,

Chris

 

[Anshul Rawat [MS]]

Hi Chris,

This occurs when a certain application is holding your user registry open at
logoff and as a result your user hive cannot be unloaded and roaming fails.
Try playing around with the applications you have installed to see if you
can find the offending app. You may also want to use a 3rd party tool,
handleex i believe is the name, at your own risk to see if it can help you
figure out who is keeping the handle to the registry open.
In XP even if the handle is open to the user hive at logoff users can still
roam successfully off the machine. Hope this helps. Thanks

--
Anshul Rawat [MSFT]
Profiles

This posting is provided "AS IS" with no warranties and confers no rights.

For additional information on Profiles and Folder Re-direction please visit:
http://www.microsoft.com/windowsserver2003/community/centers/management/manage_faq.asp

 

[Chris Guimbellot]

Anshul,

I appreciate the help. I am looking at the GUI version of the tool you
mentioned. How do I use it? I would think that the only time the tool would
be of any use is if it was running when I shut down to isolate the thing
that cant close, but how would I do that? Thanks,

Chris

Hi Chris,

This occurs when a certain application is holding your user registry open at
logoff and as a result your user hive cannot be unloaded and roaming fails.
Try playing around with the applications you have installed to see if you
can find the offending app. You may also want to use a 3rd party tool,
handleex i believe is the name, at your own risk to see if it can help you
figure out who is keeping the handle to the registry open.
In XP even if the handle is open to the user hive at logoff users can still
roam successfully off the machine. Hope this helps. Thanks

--
Anshul Rawat [MSFT]
Profiles

This posting is provided "AS IS" with no warranties and confers no rights.

For additional information on Profiles and Folder Re-direction please visit:http://www.microsoft.com/windowsserver2003/community/centers/management/mana
ge_faq.asp

Hello,

I set up a roaming user profile for two users: myself and a test user. The
test user profile works correctly when I log onto multiple computers. Mine,
on the other hand, does not work on either computer. When I examine the
event logs, I get the following event:

Source: Userenv
Category: None
Event ID: 1000
User: NT AUTHORITY\SYSTEM
Description:
Windows cannot unload your registry file. If you have a roaming profile,
your settings are not replicated. Contact your administrator.
DETAIL - Access is denied. , Build number ((2195)).

After reading a little on EventID.net
(http://www.eventid.net/display.asp?eventid=1000&source=userenv). Of the
many things that are suggested, I have installed SP4, and my anti-virus
software is up to date.

The next response was to install IPSec Policy Agent
(http://support.microsoft.com/default.aspx?scid=kb;[LN];Q319909). What
exactly is IPSec Policy Agent, is this really the source of the problem, and
is there anything that I have to watch out for regarding this?

I appreciate the help. Thanks,

Chris

 

[Chris Guimbellot]

I have solved the problem:

I had uninstalled the hotfix 329170 before, but that didn't seem to help. I
also had tried the group olicy setting, but that didn't solve the problem
for me because I use roaming profiles. I did, however contact MS and got the
patch referred to in 814770. The call, by the way, is free.

The patch will not run on SP4, so I did the following:

1. Ran Winnt32.exe upgrade from the disk to revert back to an install
without a service pack
2. Installed SP3
3. Installed the 814770 patch and verify it worked
4. Installed SP4

After all of that, it works great. I don't get the message and my roaming
profile works. Thought everyone would like to know.

Chris

Hi Chris,

This occurs when a certain application is holding your user registry open at
logoff and as a result your user hive cannot be unloaded and roaming fails.
Try playing around with the applications you have installed to see if you
can find the offending app. You may also want to use a 3rd party tool,
handleex i believe is the name, at your own risk to see if it can help you
figure out who is keeping the handle to the registry open.
In XP even if the handle is open to the user hive at logoff users can still
roam successfully off the machine. Hope this helps. Thanks

--
Anshul Rawat [MSFT]
Profiles

This posting is provided "AS IS" with no warranties and confers no rights.

For additional information on Profiles and Folder Re-direction please visit:http://www.microsoft.com/windowsserver2003/community/centers/management/mana
ge_faq.asp

Hello,

I set up a roaming user profile for two users: myself and a test user. The
test user profile works correctly when I log onto multiple computers. Mine,
on the other hand, does not work on either computer. When I examine the
event logs, I get the following event:

Source: Userenv
Category: None
Event ID: 1000
User: NT AUTHORITY\SYSTEM
Description:
Windows cannot unload your registry file. If you have a roaming profile,
your settings are not replicated. Contact your administrator.
DETAIL - Access is denied. , Build number ((2195)).

After reading a little on EventID.net
(http://www.eventid.net/display.asp?eventid=1000&source=userenv). Of the
many things that are suggested, I have installed SP4, and my anti-virus
software is up to date.

The next response was to install IPSec Policy Agent
(http://support.microsoft.com/default.aspx?scid=kb;[LN];Q319909). What
exactly is IPSec Policy Agent, is this really the source of the problem, and
is there anything that I have to watch out for regarding this?

I appreciate the help. Thanks,

Chris

 

[Steve Turner]

I was having the same problem. After reading the link that was posted
before at (http://www.eventid.net/display.asp?eventid=1000&source=userenv)
TightVNC turned out to be the program that was causing it. I read
through the bug reports on the tightvnc website and they know of the
problem and hope to have it fixed in the next release of TightVNC.

A work around for me, that also has a positive, is I deleted the
registry key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WinVNC

It removes the TightVNC icon from the task bar, but the server is
still running and also restarts, only difference is no icon, which is
good.

steve


Please save a copy of your registry before making any changes just to
be sure.

This occurs when a certain application is holding your user registry open at
logoff and as a result your user hive cannot be unloaded and roaming fails.
Try playing around with the applications you have installed to see if you
can find the offending app. You may also want to use a 3rd party tool,
handleex i believe is the name, at your own risk to see if it can help you
figure out who is keeping the handle to the registry open.
In XP even if the handle is open to the user hive at logoff users can still
roam successfully off the machine. Hope this helps. Thanks

--
Anshul Rawat [MSFT]
Profiles

This posting is provided "AS IS" with no warranties and confers no rights.

For additional information on Profiles and Folder Re-direction please visit:http://www.microsoft.com/windowsserver2003/community/centers/management/mana
ge_faq.asp

Hello,

I set up a roaming user profile for two users: myself and a test user. The
test user profile works correctly when I log onto multiple computers. Mine,
on the other hand, does not work on either computer. When I examine the
event logs, I get the following event:

Source: Userenv
Category: None
Event ID: 1000
User: NT AUTHORITY\SYSTEM
Description:
Windows cannot unload your registry file. If you have a roaming profile,
your settings are not replicated. Contact your administrator.
DETAIL - Access is denied. , Build number ((2195)).

After reading a little on EventID.net
(http://www.eventid.net/display.asp?eventid=1000&source=userenv). Of the
many things that are suggested, I have installed SP4, and my anti-virus
software is up to date.

The next response was to install IPSec Policy Agent
(http://support.microsoft.com/default.aspx?scid=kb;[LN];Q319909). What
exactly is IPSec Policy Agent, is this really the source of the problem, and
is there anything that I have to watch out for regarding this?

I appreciate the help. Thanks,

Chris