| Event Id | 1517 |
| Source | Userenv |
| Description | Windows saved user <domain\user> registry while an application or service was still using the registry during log off. The memory used by the users registry has not been freed. This is often caused by services running as a user account, try configuring the services to run in the local system account. |
| Event Information | Cause1: If a program or service has the Registry open while Windows XP is logging off. Cause 2: This issue may occur if Microsoft Windows or third-party programs such as printer drivers or virus scanners do not stop and release resources when you log off your computer. RESOLUTION: To resolve this issue, use the Microsoft User Profile Hive Cleanup Service (UPHClean). UPHClean monitors the computer while Windows is unloading user profiles and forces resources that are open to close. Therefore, the computer can unload and reconcile user profiles. To Download UPHClean service click the following link. |
| Reference Links | Download User Profile Hive Cleanup Service Troubleshooting profile unload issues |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.