| Event Id | 1525 |
| Source | Userenv |
| Description | Windows has detected that Offline Caching is enabled on the Roaming Profile share - to avoid potential profile corruption, Offline Caching must be disabled on shares where roaming user profiles are stored. |
| Event Information | If you do not disable the cache option for Offline Files on a user profile share, the profile will become unstable, as both the Offline Files and roaming profile attempt to synchronize the files in the profile. The cache option is SMB share based. If you enable the cache option on a share, and roaming profiles are below that share, Offline Files caches files in the profile. NOTE: Whenever possible, store roaming profiles and offline-enabled shares on different servers. To resolve the problem: Create a separate share for user profiles and disable the cache option on the new share by opening a CMD prompt and typing: net share \\Server\Sharename /cache:no You can use Windows Explorer to disable the cache by right-clicking the shared folder and press Properties. On the Sharing tab, press the Caching button and clear the Allow caching of files in this folder box. |
| Reference Links | The Cache Option for Offline Files Must Be Disabled on Roaming User Profile Shares Userenv Event 1525 Is Logged Windows Operating System (Userenv) |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.