Re: Group Policy Software Uninstalls on XP PCs



Userenv Part 3 (see additonal posts for rest of log):
(28c.290) 08:44:57:647 CUserProfile::Initialize: Proccessing S-1-5-20
(28c.290) 08:44:57:647 CSyncManager::EnterLock <S-1-5-20>
(28c.290) 08:44:57:647 CSyncManager::EnterLock: No existing entry found
(28c.290) 08:44:57:647 CSyncManager::EnterLock: New entry created
(28c.290) 08:44:57:647 CHashTable::HashAdd: S-1-5-20 added in bucket 4
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Enter critical
section.
(28c.290) 08:44:57:647 CUserProfile::GetRefCountAndFlags: Ref count is 2,
state is 00000000
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Ref Count is not 0
(28c.290) 08:44:57:647 CSyncManager::LeaveLock <S-1-5-20>
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock released
(28c.290) 08:44:57:647 CHashTable::HashDelete: S-1-5-20 deleted
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock deleted
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Leave critical
section
(28c.290) 08:44:57:647 CUserProfile::Initialize: Proccessing S-1-5-19
(28c.290) 08:44:57:647 CSyncManager::EnterLock <S-1-5-19>
(28c.290) 08:44:57:647 CSyncManager::EnterLock: No existing entry found
(28c.290) 08:44:57:647 CSyncManager::EnterLock: New entry created
(28c.290) 08:44:57:647 CHashTable::HashAdd: S-1-5-19 added in bucket 12
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Enter critical
section.
(28c.290) 08:44:57:647 CUserProfile::GetRefCountAndFlags: Ref count is 2,
state is 00000000
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Ref Count is not 0
(28c.290) 08:44:57:647 CSyncManager::LeaveLock <S-1-5-19>
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock released
(28c.290) 08:44:57:647 CHashTable::HashDelete: S-1-5-19 deleted
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock deleted
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Leave critical
section
(28c.290) 08:44:57:647 CUserProfile::Initialize: Proccessing S-1-5-18
(28c.290) 08:44:57:647 CSyncManager::EnterLock <S-1-5-18>
(28c.290) 08:44:57:647 CSyncManager::EnterLock: No existing entry found
(28c.290) 08:44:57:647 CSyncManager::EnterLock: New entry created
(28c.290) 08:44:57:647 CHashTable::HashAdd: S-1-5-18 added in bucket 11
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Enter critical
section.
(28c.290) 08:44:57:647 CUserProfile::GetRefCountAndFlags: Ref count is 1,
state is 00000000
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Ref Count is not 0
(28c.290) 08:44:57:647 CSyncManager::LeaveLock <S-1-5-18>
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock released
(28c.290) 08:44:57:647 CHashTable::HashDelete: S-1-5-18 deleted
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock deleted
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Leave critical
section
(28c.290) 08:44:57:647 CUserProfile::Initialize: RpcServerRegisterIfEx
successful
(28c.290) 08:44:57:647 Exiting CUserProfile::Initialize, successful
(2c4.2c8) 08:44:57:717 LibMain: Process Name: C:\WINDOWS\system32\lsass.exe
(28c.290) 08:44:57:757 IsSyncForegroundPolicyRefresh: Synchronous, Reason:
policy set to SYNC
(2b8.2bc) 08:44:57:797 LibMain: Process Name:
C:\WINDOWS\system32\services.exe
(358.35c) 08:44:58:238 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
(2b8.2bc) 08:44:58:358 LoadUserProfile: Yes, we can impersonate the user.
Running as self
(2b8.2bc) 08:44:58:358
=========================================================
(2b8.2bc) 08:44:58:358 LoadUserProfile: Entering, hToken = <0x2b8>,
lpProfileInfo = 0x7fcf8
(2b8.2bc) 08:44:58:358 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(2b8.2bc) 08:44:58:358 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
(2b8.2bc) 08:44:58:358 LoadUserProfile: NULL central profile path
(2b8.2bc) 08:44:58:358 LoadUserProfile: NULL default profile path
(2b8.2bc) 08:44:58:358 LoadUserProfile: NULL server name
(2b8.2bc) 08:44:58:358 GetInterface: Returning rpc binding handle
(28c.380) 08:44:58:358 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:44:58:358 DropClientContext: Got client token 000003E4, sid =
S-1-5-18
(28c.380) 08:44:58:358 MIDL_user_allocate enter
(28c.380) 08:44:58:358 DropClientContext: load profile object successfully
made
(28c.380) 08:44:58:358 DropClientContext: Returning 0
(2b8.2bc) 08:44:58:358 LoadUserProfile: Calling DropClientToken (as self)
succeeded
(28c.2a4) 08:44:58:358 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:44:58:358 In LoadUserProfileP
(28c.2a4) 08:44:58:358 LoadUserProfile: Running as client
(28c.2a4) 08:44:58:358
=========================================================
(28c.2a4) 08:44:58:358 LoadUserProfile: Entering, hToken = <0x3e8>,
lpProfileInfo = 0xe757c0
(28c.2a4) 08:44:58:358 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(28c.2a4) 08:44:58:358 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
(28c.2a4) 08:44:58:358 LoadUserProfile: NULL central profile path
(28c.2a4) 08:44:58:358 LoadUserProfile: NULL default profile path
(28c.2a4) 08:44:58:358 LoadUserProfile: NULL server name
(28c.2a4) 08:44:58:358 LoadUserProfile: User sid: S-1-5-20
(28c.2a4) 08:44:58:358 CSyncManager::EnterLock <S-1-5-20>
(28c.2a4) 08:44:58:358 CSyncManager::EnterLock: No existing entry found
(28c.2a4) 08:44:58:358 CSyncManager::EnterLock: New entry created
(28c.2a4) 08:44:58:358 CHashTable::HashAdd: S-1-5-20 added in bucket 4
(28c.2a4) 08:44:58:358 LoadUserProfile: Wait succeeded. In critical section.
(28c.2a4) 08:44:58:358 RestoreUserProfile: Entering
(28c.2a4) 08:44:58:358 IsCentralProfileReachable: Entering
(28c.2a4) 08:44:58:358 IsCentralProfileReachable: Null path. Leaving
(28c.2a4) 08:44:58:358 RestoreUserProfile: Profile path = <>
(28c.2a4) 08:44:58:358 ExtractProfileFromBackup: A profile already exists
(28c.2a4) 08:44:58:358 PatchNewProfileIfRequred: A profile already exists
with the current sid, exitting
(28c.2a4) 08:44:58:358 CreateLocalProfileKey: Not setting additional Security
(28c.2a4) 08:44:58:358 GetExistingLocalProfileImage: Found entry in profile
list for existing local profile
(28c.2a4) 08:44:58:358 GetExistingLocalProfileImage: Local profile image
filename = <%SystemDrive%\Documents and Settings\NetworkService>
(28c.2a4) 08:44:58:358 GetExistingLocalProfileImage: Expanded local profile
image filename = <C:\Documents and Settings\NetworkService>
(28c.2a4) 08:44:58:368 GetExistingLocalProfileImage: No local mandatory
profile. Error = 2
(28c.2a4) 08:44:58:368 GetExistingLocalProfileImage: Found local profile
image file ok <C:\Documents and Settings\NetworkService\ntuser.dat>
(28c.2a4) 08:44:58:368 GetExistingLocalProfileImage: Failed to query low
profile unload time with error 2
(28c.2a4) 08:44:58:368 Local Existing Profile Image is reachable
(28c.2a4) 08:44:58:368 Local profile name is <C:\Documents and
Settings\NetworkService>
(28c.2a4) 08:44:58:368 RestoreUserProfile: No central profile. Attempting
to load local profile.
(28c.2a4) 08:44:58:368 MyRegLoadKey: Returning 00000000
(28c.2a4) 08:44:58:368 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(28c.2a4) 08:44:58:368 MyRegLoadKey: Returning 00000000
(28c.2a4) 08:44:58:368 CreateClassHive: existing user classes hive found
(28c.2a4) 08:44:58:368 RestoreUserProfile: About to Leave. Final
Information follows:
(28c.2a4) 08:44:58:368 Profile was successfully loaded.
(28c.2a4) 08:44:58:368 lpProfile->lpRoamingProfile = <>
(28c.2a4) 08:44:58:368 lpProfile->lpLocalProfile = <C:\Documents and
Settings\NetworkService>
(28c.2a4) 08:44:58:368 lpProfile->dwInternalFlags = 0x0
(28c.2a4) 08:44:58:368 RestoreUserProfile: Leaving.
(28c.2a4) 08:44:58:368 UpgradeProfile: Entering
(28c.2a4) 08:44:58:368 UpgradeProfile: Build numbers match
(28c.2a4) 08:44:58:368 UpgradeProfile: Leaving Successfully
(28c.2a4) 08:44:58:478 Profile Ref Count is 1
(28c.2a4) 08:44:58:478 LoadUserProfile: Leaving critical Section.
(28c.2a4) 08:44:58:478 CSyncManager::LeaveLock <S-1-5-20>
(28c.2a4) 08:44:58:478 CSyncManager::LeaveLock: Lock released
(28c.2a4) 08:44:58:478 CHashTable::HashDelete: S-1-5-20 deleted
(28c.2a4) 08:44:58:478 CSyncManager::LeaveLock: Lock deleted
(28c.2a4) 08:44:58:478 LoadUserProfile: Impersonated user: 000003e8, 000003f4
(2c4.2f8) 08:44:58:478 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(2c4.2f8) 08:44:58:488 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(28c.2a4) 08:44:58:498 LoadUserProfile: Reverted to user: 00000000
(28c.2a4) 08:44:58:498 LoadUserProfile: Reverted back to user <00000000>
(28c.2a4) 08:44:58:498 LoadUserProfile: Leaving with a value of 1.
(28c.2a4) 08:44:58:498
=========================================================
(28c.2a4) 08:44:58:498 LoadUserProfileI: returning 0
(2b8.2bc) 08:44:58:498 LoadUserProfile: Running as self
(2b8.2bc) 08:44:58:498 LoadUserProfile: Calling LoadUserProfileI (as user)
succeeded
(2b8.2bc) 08:44:58:498 LoadUserProfile: Returning success. Final
Information follows:
(2b8.2bc) 08:44:58:498 lpProfileInfo->UserName = <NetworkService>
(2b8.2bc) 08:44:58:498 lpProfileInfo->lpProfilePath = <>
(2b8.2bc) 08:44:58:498 lpProfileInfo->dwFlags = 0x9
(28c.380) 08:44:58:498 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:44:58:498 ReleaseClientContext: Releasing context
(28c.380) 08:44:58:498 ReleaseClientContext_s: Releasing context
(28c.380) 08:44:58:498 MIDL_user_free enter
(2b8.2bc) 08:44:58:498 ReleaseInterface: Releasing rpc binding handle
(2b8.2bc) 08:44:58:498 LoadUserProfile: Returning TRUE. hProfile = <0x31c>
(2b8.2bc) 08:44:58:498 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(398.39c) 08:44:58:528 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
(3c0.3c4) 08:44:58:588 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
(2b8.2bc) 08:44:58:598 LoadUserProfile: Yes, we can impersonate the user.
Running as self
(2b8.2bc) 08:44:58:598
=========================================================
(2b8.2bc) 08:44:58:598 LoadUserProfile: Entering, hToken = <0x35c>,
lpProfileInfo = 0x7fcf8
(2b8.2bc) 08:44:58:598 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(2b8.2bc) 08:44:58:598 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
(2b8.2bc) 08:44:58:598 LoadUserProfile: NULL central profile path
(2b8.2bc) 08:44:58:598 LoadUserProfile: NULL default profile path
(2b8.2bc) 08:44:58:598 LoadUserProfile: NULL server name
(2b8.2bc) 08:44:58:598 GetInterface: Returning rpc binding handle
(28c.2a4) 08:44:58:598 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:44:58:598 DropClientContext: Got client token 000003E4, sid =
S-1-5-18
(28c.2a4) 08:44:58:598 MIDL_user_allocate enter
(28c.2a4) 08:44:58:598 DropClientContext: load profile object successfully
made
(28c.2a4) 08:44:58:598 DropClientContext: Returning 0
(2b8.2bc) 08:44:58:598 LoadUserProfile: Calling DropClientToken (as self)
succeeded
(28c.380) 08:44:58:598 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:44:58:598 In LoadUserProfileP
(28c.380) 08:44:58:598 LoadUserProfile: Running as client
(28c.380) 08:44:58:598
=========================================================
(28c.380) 08:44:58:598 LoadUserProfile: Entering, hToken = <0x3e8>,
lpProfileInfo = 0xe757c0
(28c.380) 08:44:58:598 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(28c.380) 08:44:58:598 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
(28c.380) 08:44:58:598 LoadUserProfile: NULL central profile path
(28c.380) 08:44:58:598 LoadUserProfile: NULL default profile path
(28c.380) 08:44:58:598 LoadUserProfile: NULL server name
(28c.380) 08:44:58:598 LoadUserProfile: User sid: S-1-5-20
(28c.380) 08:44:58:598 CSyncManager::EnterLock <S-1-5-20>
(28c.380) 08:44:58:598 CSyncManager::EnterLock: No existing entry found
(28c.380) 08:44:58:598 CSyncManager::EnterLock: New entry created
(28c.380) 08:44:58:598 CHashTable::HashAdd: S-1-5-20 added in bucket 4
(28c.380) 08:44:58:598 LoadUserProfile: Wait succeeded. In critical section.
(28c.380) 08:44:58:598 TestIfUserProfileLoaded: Profile already loaded.
(28c.380) 08:44:58:598 Profile Ref Count is 2
(28c.380) 08:44:58:598 LoadUserProfile: Leaving critical Section.
(28c.380) 08:44:58:598 CSyncManager::LeaveLock <S-1-5-20>
(28c.380) 08:44:58:598 CSyncManager::LeaveLock: Lock released
(28c.380) 08:44:58:598 CHashTable::HashDelete: S-1-5-20 deleted
(28c.380) 08:44:58:598 CSyncManager::LeaveLock: Lock deleted
(28c.380) 08:44:58:598 LoadUserProfile: Impersonated user: 000003e8, 000003f4
(28c.380) 08:44:58:598 LoadUserProfile: Reverted to user: 00000000
(28c.380) 08:44:58:608 LoadUserProfile: Reverted back to user <00000000>
(28c.380) 08:44:58:608 LoadUserProfile: Leaving with a value of 1.
(28c.380) 08:44:58:608
=========================================================
(28c.380) 08:44:58:608 LoadUserProfileI: returning 0
(2b8.2bc) 08:44:58:608 LoadUserProfile: Running as self
(2b8.2bc) 08:44:58:608 LoadUserProfile: Calling LoadUserProfileI (as user)
succeeded
(2b8.2bc) 08:44:58:608 LoadUserProfile: Returning success. Final
Information follows:
(2b8.2bc) 08:44:58:608 lpProfileInfo->UserName = <NetworkService>
(2b8.2bc) 08:44:58:608 lpProfileInfo->lpProfilePath = <>
(2b8.2bc) 08:44:58:608 lpProfileInfo->dwFlags = 0x9
(28c.2a4) 08:44:58:608 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:44:58:608 ReleaseClientContext: Releasing context
(28c.2a4) 08:44:58:608 ReleaseClientContext_s: Releasing context
(28c.2a4) 08:44:58:608 MIDL_user_free enter
(2b8.2bc) 08:44:58:608 ReleaseInterface: Releasing rpc binding handle
(2b8.2bc) 08:44:58:608 LoadUserProfile: Returning TRUE. hProfile = <0x358>
(2b8.2bc) 08:44:58:608 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(3f4.3f8) 08:44:58:638 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
(2b8.2bc) 08:44:58:638 LoadUserProfile: Yes, we can impersonate the user.
Running as self
(2b8.2bc) 08:44:58:638
=========================================================
(2b8.2bc) 08:44:58:638 LoadUserProfile: Entering, hToken = <0x37c>,
lpProfileInfo = 0x7fcf8
(2b8.2bc) 08:44:58:638 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(2b8.2bc) 08:44:58:638 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
(2b8.2bc) 08:44:58:638 LoadUserProfile: NULL central profile path
(2b8.2bc) 08:44:58:638 LoadUserProfile: NULL default profile path
(2b8.2bc) 08:44:58:638 LoadUserProfile: NULL server name
(2b8.2bc) 08:44:58:638 GetInterface: Returning rpc binding handle
(28c.380) 08:44:58:638 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:44:58:638 DropClientContext: Got client token 000003F0, sid =
S-1-5-18
(28c.380) 08:44:58:638 MIDL_user_allocate enter
(28c.380) 08:44:58:638 DropClientContext: load profile object successfully
made
(28c.380) 08:44:58:638 DropClientContext: Returning 0
(2b8.2bc) 08:44:58:638 LoadUserProfile: Calling DropClientToken (as self)
succeeded
(28c.2a4) 08:44:58:638 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:44:58:638 In LoadUserProfileP
(28c.2a4) 08:44:58:638 LoadUserProfile: Running as client
(28c.2a4) 08:44:58:638
=========================================================
(28c.2a4) 08:44:58:638 LoadUserProfile: Entering, hToken = <0x3e8>,
lpProfileInfo = 0x78f28
(28c.2a4) 08:44:58:638 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(28c.2a4) 08:44:58:638 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
(28c.2a4) 08:44:58:638 LoadUserProfile: NULL central profile path
(28c.2a4) 08:44:58:638 LoadUserProfile: NULL default profile path
(28c.2a4) 08:44:58:638 LoadUserProfile: NULL server name
(28c.2a4) 08:44:58:638 LoadUserProfile: User sid: S-1-5-19
(28c.2a4) 08:44:58:638 CSyncManager::EnterLock <S-1-5-19>
(28c.2a4) 08:44:58:638 CSyncManager::EnterLock: No existing entry found
(28c.2a4) 08:44:58:638 CSyncManager::EnterLock: New entry created
(28c.2a4) 08:44:58:648 CHashTable::HashAdd: S-1-5-19 added in bucket 12
(28c.2a4) 08:44:58:648 LoadUserProfile: Wait succeeded. In critical section.
(28c.2a4) 08:44:58:648 RestoreUserProfile: Entering
(28c.2a4) 08:44:58:648 IsCentralProfileReachable: Entering
(28c.2a4) 08:44:58:648 IsCentralProfileReachable: Null path. Leaving
(28c.2a4) 08:44:58:648 RestoreUserProfile: Profile path = <>
(28c.2a4) 08:44:58:648 ExtractProfileFromBackup: A profile already exists
(28c.2a4) 08:44:58:648 PatchNewProfileIfRequred: A profile already exists
with the current sid, exitting
(28c.2a4) 08:44:58:648 CreateLocalProfileKey: Not setting additional Security
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: Found entry in profile
list for existing local profile
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: Local profile image
filename = <%SystemDrive%\Documents and Settings\LocalService>
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: Expanded local profile
image filename = <C:\Documents and Settings\LocalService>
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: No local mandatory
profile. Error = 2
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: Found local profile
image file ok <C:\Documents and Settings\LocalService\ntuser.dat>
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: Failed to query low
profile unload time with error 2
(28c.2a4) 08:44:58:648 Local Existing Profile Image is reachable
(28c.2a4) 08:44:58:648 Local profile name is <C:\Documents and
Settings\LocalService>
(28c.2a4) 08:44:58:648 RestoreUserProfile: No central profile. Attempting
to load local profile.
(28c.2a4) 08:44:58:648 MyRegLoadKey: Returning 00000000
(28c.2a4) 08:44:58:648 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(28c.2a4) 08:44:58:648 MyRegLoadKey: Returning 00000000
(28c.2a4) 08:44:58:648 CreateClassHive: existing user classes hive found
(28c.2a4) 08:44:58:648 RestoreUserProfile: About to Leave. Final
Information follows:
(28c.2a4) 08:44:58:648 Profile was successfully loaded.
(28c.2a4) 08:44:58:648 lpProfile->lpRoamingProfile = <>
(28c.2a4) 08:44:58:648 lpProfile->lpLocalProfile = <C:\Documents and
Settings\LocalService>
(28c.2a4) 08:44:58:648 lpProfile->dwInternalFlags = 0x0
(28c.2a4) 08:44:58:648 RestoreUserProfile: Leaving.
(28c.2a4) 08:44:58:648 UpgradeProfile: Entering
(28c.2a4) 08:44:58:648 UpgradeProfile: Build numbers match
(28c.2a4) 08:44:58:648 UpgradeProfile: Leaving Successfully
(28c.2a4) 08:44:58:999 Profile Ref Count is 1
(28c.2a4) 08:44:58:999 LoadUserProfile: Leaving critical Section.
(28c.2a4) 08:44:58:999 CSyncManager::LeaveLock <S-1-5-19>
(28c.2a4) 08:44:58:999 CSyncManager::LeaveLock: Lock released
(28c.2a4) 08:44:58:999 CHashTable::HashDelete: S-1-5-19 deleted
(28c.2a4) 08:44:58:999 CSyncManager::LeaveLock: Lock deleted
(28c.2a4) 08:44:58:999 LoadUserProfile: Impersonated user: 000003e8, 000003f8
(2c4.328) 08:44:58:999 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(2c4.328) 08:44:59:009 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(28c.2a4) 08:44:59:039 LoadUserProfile: Reverted to user: 00000000
(28c.2a4) 08:44:59:039 LoadUserProfile: Reverted back to user <00000000>
(28c.2a4) 08:44:59:039 LoadUserProfile: Leaving with a value of 1.
(28c.2a4) 08:44:59:039
=========================================================
(28c.2a4) 08:44:59:039 LoadUserProfileI: returning 0
(2b8.2bc) 08:44:59:039 LoadUserProfile: Running as self
(2b8.2bc) 08:44:59:039 LoadUserProfile: Calling LoadUserProfileI (as user)
succeeded
(2b8.2bc) 08:44:59:039 LoadUserProfile: Returning success. Final
Information follows:
(2b8.2bc) 08:44:59:039 lpProfileInfo->UserName = <LocalService>
(2b8.2bc) 08:44:59:039 lpProfileInfo->lpProfilePath = <>
(2b8.2bc) 08:44:59:039 lpProfileInfo->dwFlags = 0x9
(28c.380) 08:44:59:039 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:44:59:039 ReleaseClientContext: Releasing context
(28c.380) 08:44:59:039 ReleaseClientContext_s: Releasing context
(28c.380) 08:44:59:039 MIDL_user_free enter
(2b8.2bc) 08:44:59:039 ReleaseInterface: Releasing rpc binding handle
(2b8.2bc) 08:44:59:039 LoadUserProfile: Returning TRUE. hProfile = <0x354>
(2b8.2bc) 08:44:59:039 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(440.444) 08:44:59:099 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
(28c.290) 08:44:59:119 IsSyncForegroundPolicyRefresh: Synchronous, Reason:
policy set to SYNC
(5f0.5f4) 08:45:00:671 LibMain: Process Name: C:\WINDOWS\system32\spoolsv.exe
(620.624) 08:45:00:751 LibMain: Process Name: C:\WINDOWS\System32\ccs.exe
(28c.694) 08:45:00:902 IsSyncForegroundPolicyRefresh: Synchronous, Reason:
policy set to SYNC
(28c.694) 08:45:00:902 ApplyGroupPolicy: Entering. Flags = 7
(28c.694) 08:45:00:902 ProcessGPOs:
(28c.694) 08:45:00:902 ProcessGPOs:
(28c.694) 08:45:00:902 ProcessGPOs: Starting computer Group Policy
(Background) processing...
(28c.694) 08:45:00:902 ProcessGPOs:
(28c.694) 08:45:00:902 ProcessGPOs:
(28c.694) 08:45:00:902 EnterCriticalPolicySectionEx: Entering with timeout
600000 and flags 0x0
(28c.694) 08:45:00:902 EnterCriticalPolicySectionEx: Machine critical
section has been claimed. Handle = 0x784
(28c.694) 08:45:00:902 EnterCriticalPolicySectionEx: Leaving successfully.
(28c.694) 08:45:00:902 ProcessGPOs: Machine role is 2.
(28c.694) 08:45:00:912 ProcessGPOs: The DC for domain DOMAINNAME is not
available at startup. retrying
(28c.694) 08:45:00:912 RetryDCContactAtMachineStartup: Enter.
(2b8.6cc) 08:45:01:693 LoadUserProfile: Yes, we can impersonate the user.
Running as self
(2b8.6cc) 08:45:01:693
=========================================================
(2b8.6cc) 08:45:01:693 LoadUserProfile: Entering, hToken = <0x10>,
lpProfileInfo = 0xedf6ec
(2b8.6cc) 08:45:01:693 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(2b8.6cc) 08:45:01:693 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
(2b8.6cc) 08:45:01:693 LoadUserProfile: NULL central profile path
(2b8.6cc) 08:45:01:693 LoadUserProfile: NULL default profile path
(2b8.6cc) 08:45:01:693 LoadUserProfile: NULL server name
(2b8.6cc) 08:45:01:693 GetInterface: Returning rpc binding handle
(28c.2a4) 08:45:01:693 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:45:01:693 DropClientContext: Got client token 0000073C, sid =
S-1-5-18
(28c.2a4) 08:45:01:693 MIDL_user_allocate enter
(28c.2a4) 08:45:01:693 DropClientContext: load profile object successfully
made
(28c.2a4) 08:45:01:693 DropClientContext: Returning 0
(2b8.6cc) 08:45:01:693 LoadUserProfile: Calling DropClientToken (as self)
succeeded
(28c.380) 08:45:01:703 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:45:01:703 In LoadUserProfileP
(28c.380) 08:45:01:703 LoadUserProfile: Running as client
(28c.380) 08:45:01:703
=========================================================
(28c.380) 08:45:01:703 LoadUserProfile: Entering, hToken = <0x740>,
lpProfileInfo = 0xe7d200
(28c.380) 08:45:01:703 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(28c.380) 08:45:01:703 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
(28c.380) 08:45:01:703 LoadUserProfile: NULL central profile path
(28c.380) 08:45:01:703 LoadUserProfile: NULL default profile path
(28c.380) 08:45:01:703 LoadUserProfile: NULL server name
(28c.380) 08:45:01:703 LoadUserProfile: User sid: S-1-5-19
(28c.380) 08:45:01:703 CSyncManager::EnterLock <S-1-5-19>
(28c.380) 08:45:01:703 CSyncManager::EnterLock: No existing entry found
(28c.380) 08:45:01:703 CSyncManager::EnterLock: New entry created
(28c.380) 08:45:01:703 CHashTable::HashAdd: S-1-5-19 added in bucket 12
(28c.380) 08:45:01:703 LoadUserProfile: Wait succeeded. In critical section.
(28c.380) 08:45:01:703 TestIfUserProfileLoaded: Profile already loaded.
(28c.380) 08:45:01:703 Profile Ref Count is 2
(28c.380) 08:45:01:703 LoadUserProfile: Leaving critical Section.
(28c.380) 08:45:01:703 CSyncManager::LeaveLock <S-1-5-19>
(28c.380) 08:45:01:703 CSyncManager::LeaveLock: Lock released
(28c.380) 08:45:01:703 CHashTable::HashDelete: S-1-5-19 deleted
(28c.380) 08:45:01:703 CSyncManager::LeaveLock: Lock deleted
(28c.380) 08:45:01:703 LoadUserProfile: Impersonated user: 00000740, 00000788
(28c.380) 08:45:01:703 LoadUserProfile: Reverted to user: 00000000
(28c.380) 08:45:01:703 LoadUserProfile: Reverted back to user <00000000>
(28c.380) 08:45:01:703 LoadUserProfile: Leaving with a value of 1.
(28c.380) 08:45:01:703
=========================================================
(28c.380) 08:45:01:703 LoadUserProfileI: returning 0
(2b8.6cc) 08:45:01:703 LoadUserProfile: Running as self
(2b8.6cc) 08:45:01:703 LoadUserProfile: Calling LoadUserProfileI (as user)
succeeded
(2b8.6cc) 08:45:01:703 LoadUserProfile: Returning success. Final
Information follows:
(2b8.6cc) 08:45:01:703 lpProfileInfo->UserName = <LocalService>
(2b8.6cc) 08:45:01:703 lpProfileInfo->lpProfilePath = <>
(2b8.6cc) 08:45:01:703 lpProfileInfo->dwFlags = 0x9
(28c.2a4) 08:45:01:703 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:45:01:703 ReleaseClientContext: Releasing context
(28c.2a4) 08:45:01:703 ReleaseClientContext_s: Releasing context
(28c.2a4) 08:45:01:703 MIDL_user_free enter
(2b8.6cc) 08:45:01:703 ReleaseInterface: Releasing rpc binding handle
(2b8.6cc) 08:45:01:703 LoadUserProfile: Returning TRUE. hProfile = <0x1e0>
(2b8.6cc) 08:45:01:703 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(e8.e0) 08:45:01:733 LibMain: Process Name: C:\WINDOWS\System32\alg.exe
(28c.694) 08:45:45:356 PingComputer: Adapter speed 54000000 bps
(28c.694) 08:45:45:356 PingComputer: First time: 1
(28c.694) 08:45:45:366 PingComputer: Fast link. Exiting.
(28c.694) 08:45:45:366 RetryDCContactAtMachineStartup: Tried to call
GetDomainControllerInfo 22 times.
(28c.694) 08:45:45:366 RetryDCContactAtMachineStartup: Exit with status 0.
(28c.694) 08:45:45:366 ProcessGPOs: DC for domain DOMAINNAME is reachable
after retries.
(28c.694) 08:45:45:366 ProcessGPOs: network name is 162.141.84.0
(28c.694) 08:45:45:466 ProcessGPOs: User name is:
CN=COMPUTERNAME,OU=Computers,OU=SITENAME,OU=ConsumerProducts,DC=DOMAINNAME,DC=DOMAIN,DC=com, Domain name is: DOMAINNAME
(28c.694) 08:45:45:466 ProcessGPOs: Domain controller is:
\\CPSITEDC.DOMAINNAME.DOMAIN.com Domain DN is DOMAINNAME.DOMAIN.com
(28c.694) 08:45:45:466 ReadGPExtensions: Rsop entry point not found for
gptext.dll.
(28c.694) 08:45:45:466 ReadGPExtensions: Rsop entry point not found for
dskquota.dll.
(28c.694) 08:45:45:466 ReadGPExtensions: Rsop entry point not found for
gptext.dll.
(28c.694) 08:45:45:476 ReadGPExtensions: Rsop entry point not found for
iedkcs32.dll.
(28c.694) 08:45:45:476 ReadGPExtensions: Rsop entry point not found for
scecli.dll.
(28c.694) 08:45:45:476 ReadGPExtensions: Rsop entry point not found for
gptext.dll.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{35378EAC-683F-11D2-A89A-00C04FBBCFA2}
(28c.694) 08:45:45:476 ReadStatus: Read Extension's Previous status
successfully.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{25537BA6-77A8-11D2-9B6C-0000F8080861}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{3610eda5-77ef-11d2-8dc5-00c04fa31a66}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{426031c0-0b47-4852-b0ca-ac3d37bfcb39}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{42B5FAAE-6536-11d2-AE5A-0000F87571E3}
(28c.694) 08:45:45:476 ReadStatus: Read Extension's Previous status
successfully.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{827D319E-6EAC-11D2-A4EA-00C04F79F83A}
(28c.694) 08:45:45:476 ReadStatus: Read Extension's Previous status
successfully.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
(28c.694) 08:45:45:476 ReadStatus: Read Extension's Previous status
successfully.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{c6dc5466-785a-11d2-84d0-00c04fb169f7}
(28c.694) 08:45:45:476 ReadStatus: Read Extension's Previous status
successfully.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{e437bc1c-aa7d-11d2-a382-00c04f991e27}
(28c.694) 08:45:45:476 ProcessGPOs: Calling GetGPOInfo for normal policy mode
(28c.694) 08:45:45:476 GetGPOInfo: ********************************
(28c.694) 08:45:45:476 GetGPOInfo: Entering...
(28c.694) 08:45:45:656 GetGPOInfo: Server connection established.
(28c.694) 08:45:45:726 GetGPOInfo: Bound successfully.

.



Relevant Pages

  • Re: Profile werden nicht geladen
    ... USERENV21:40:32:763 Profile Ref Count is 2 ... No DNS domain name available. ... Stellen Sie sicher, dass Sie mit dem Server, der Sie authentifiziert hat, ...
    (microsoft.public.de.german.windows.server.general)
  • Re: Windows cannot load the locally stored profile
    ... load the locally stored profile. ... RpcServerRegisterIfEx successful ... extension Wireless Group Policy's status or policy time. ...
    (microsoft.public.windows.server.general)
  • Re: Slow logon because of "Applying computer settings..."
    ... entry found ... RpcServerRegisterIfEx successful ... entry in profile list for existing local profile ... Scheduler skipped because both deleted and changed GPO lists are ...
    (microsoft.public.windows.server.active_directory)
  • RE: Multiple Profile ~ XP
    ... Prohibit installation and configuration of Network Bridge on your DNS domain ... the setting is DNS domain based, so test it first for you environment. ... what impact it makes if we create single profile ... and when user logs in XP will decide what type of connection is available. ...
    (Focus-Microsoft)
  • Re: Profile werden nicht geladen
    ... <NetworkService> ... profile list for existing local profile ... Authority. ... No DNS domain name available. ...
    (microsoft.public.de.german.windows.server.general)