Suddenly getting USERENV errors everywhere?

[Gerry Hickman]

Hi,

Not really a deployment issue, but we use roaming profiles and in recent
weeks we're getting a ton of USERENV errors in the event logs of the
local machines saying it "can't unload the registry hive". It makes
everyone's log-off very slow.

Permissions are as they always were (Admin, User and SYSTEM all have
full control of the user's profile).

The main changes I've made in the last few weeks have been adding SP4
and the post SP4 security fixes.

I'm also getting USERENV on my home computer, and this is related to
leaking handles in the .NET Framework 1.1 MDM.EXE (Machine Debug
Manager), and yet strangely on other machines it seems fine.

 

[Brendon Rogers]

Gerry,

Is this problem happening across the board - workstations, servers and DC's?
Have you modified a Group Policy lately?

 

[Gerry Hickman]

Hi Brendon,

Is this problem happening across the board - workstations, servers and DC's?
Have you modified a Group Policy lately?

It's not happening on the servers, and I'm not aware of any GPO that's
been applied; it's possible head office have been playing with GPOs
without telling me.

It's happening on all my Win2k SP4 workstations. It used to happen on
the odd machine under SP3. I guess I'll have to enable USERENV logging
and run OH.EXE (or whatever), but it's such a pain.

 

[Matt Hendrix]

Hi Gerry,

Thank you for using the Microsoft Newsgroups for you technical needs.
I have reviewed your post and found the following documentation that matches
the description of your issue. There is also some documentation on this
occurring for Citrix Clients. If you are running Citrix Metaframe XP or any
other version please indicate this in your next reply. There are hotfixes
available to address this issue. Here are the Knowledge base articles that
address the problem:

253820 Roaming User Profiles Do Not Unload
http://support.microsoft.com/?id=253820

281267 Registry Handle Leak in Winlogon Causes Roaming Profiles to Not
Unload
http://support.microsoft.com/?id=281267

329718 Terminal Server Roaming Profiles Are Not Saved
http://support.microsoft.com/?id=329718

Thank you,
Matt Hendrix, MCSE
Windows 2000 Platforms Support Group

 

[Gerry Hickman]

Hi Matt,

Thanks for taking the time to get back to me on this. Unfortunately, I
don't think either article helps in this instance. Here are my most
recent findings:

1. I'm not running "terminal services" or "metaframe".
2. I don't think it's "Winlogon", we're running SP4 anyway
3. My network is pure Win2k-SP4 AD native.
4. My home PC is Win2k-SP4

One service that causes this (both at home and at work) is MDM.EXE -
since installing Visual Studio 2003, I've had problems with MDM leaking
handles in HKCU. If I "stop" the Machine Debug Manager service before
logging off, it loggs off perfectly. My home PC has an Athlon processor
and the machines at work have Pentiums; same issue on both. It makes no
difference whether I've been doing any "debugging" or not.

An other service that I'm keeping an eye on is the post-SP4 "print
spooler". I've not confirmed this is a problem though.

I've reviewed the UserEng log files in WinNT\Debug, and it always says
"can't unload profile due to 2 open registry handles". Unfortunately,
even with VERBOSE logging enabled it does not tell me WHICH handles are
open!

If anyone knows how to get reliable info as to which handles are open,
I'll give it a try. I have OH.EXE at the ready with object tagging in
effect, but OH.EXE is only st up on one PC and I don't know how to check
the exact handle that's causing the issue. Maybe if I log on as local
admin afterwards or something? I can't keep OH.EXE running as I'm
logging off and it don't support remote connections!

Hi Gerry,

Thank you for using the Microsoft Newsgroups for you technical needs.
I have reviewed your post and found the following documentation that matches
the description of your issue. There is also some documentation on this
occurring for Citrix Clients. If you are running Citrix Metaframe XP or any
other version please indicate this in your next reply. There are hotfixes
available to address this issue. Here are the Knowledge base articles that
address the problem:

253820 Roaming User Profiles Do Not Unload
http://support.microsoft.com/?id=253820

281267 Registry Handle Leak in Winlogon Causes Roaming Profiles to Not
Unload
http://support.microsoft.com/?id=281267

329718 Terminal Server Roaming Profiles Are Not Saved
http://support.microsoft.com/?id=329718

Thank you,
Matt Hendrix, MCSE
Windows 2000 Platforms Support Group