Re: Group Policy Software Uninstalls on XP PCs
- From: kkbradsh <kkbradsh@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 21 Jul 2006 11:45:02 -0700
Userenv Part 3 (see additonal posts for rest of log):
(28c.290) 08:44:57:647 CUserProfile::Initialize: Proccessing S-1-5-20
(28c.290) 08:44:57:647 CSyncManager::EnterLock <S-1-5-20>
(28c.290) 08:44:57:647 CSyncManager::EnterLock: No existing entry found
(28c.290) 08:44:57:647 CSyncManager::EnterLock: New entry created
(28c.290) 08:44:57:647 CHashTable::HashAdd: S-1-5-20 added in bucket 4
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Enter critical
section.
(28c.290) 08:44:57:647 CUserProfile::GetRefCountAndFlags: Ref count is 2,
state is 00000000
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Ref Count is not 0
(28c.290) 08:44:57:647 CSyncManager::LeaveLock <S-1-5-20>
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock released
(28c.290) 08:44:57:647 CHashTable::HashDelete: S-1-5-20 deleted
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock deleted
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Leave critical
section
(28c.290) 08:44:57:647 CUserProfile::Initialize: Proccessing S-1-5-19
(28c.290) 08:44:57:647 CSyncManager::EnterLock <S-1-5-19>
(28c.290) 08:44:57:647 CSyncManager::EnterLock: No existing entry found
(28c.290) 08:44:57:647 CSyncManager::EnterLock: New entry created
(28c.290) 08:44:57:647 CHashTable::HashAdd: S-1-5-19 added in bucket 12
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Enter critical
section.
(28c.290) 08:44:57:647 CUserProfile::GetRefCountAndFlags: Ref count is 2,
state is 00000000
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Ref Count is not 0
(28c.290) 08:44:57:647 CSyncManager::LeaveLock <S-1-5-19>
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock released
(28c.290) 08:44:57:647 CHashTable::HashDelete: S-1-5-19 deleted
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock deleted
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Leave critical
section
(28c.290) 08:44:57:647 CUserProfile::Initialize: Proccessing S-1-5-18
(28c.290) 08:44:57:647 CSyncManager::EnterLock <S-1-5-18>
(28c.290) 08:44:57:647 CSyncManager::EnterLock: No existing entry found
(28c.290) 08:44:57:647 CSyncManager::EnterLock: New entry created
(28c.290) 08:44:57:647 CHashTable::HashAdd: S-1-5-18 added in bucket 11
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Enter critical
section.
(28c.290) 08:44:57:647 CUserProfile::GetRefCountAndFlags: Ref count is 1,
state is 00000000
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Ref Count is not 0
(28c.290) 08:44:57:647 CSyncManager::LeaveLock <S-1-5-18>
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock released
(28c.290) 08:44:57:647 CHashTable::HashDelete: S-1-5-18 deleted
(28c.290) 08:44:57:647 CSyncManager::LeaveLock: Lock deleted
(28c.290) 08:44:57:647 CUserProfile::CleanupUserProfile: Leave critical
section
(28c.290) 08:44:57:647 CUserProfile::Initialize: RpcServerRegisterIfEx
successful
(28c.290) 08:44:57:647 Exiting CUserProfile::Initialize, successful
(2c4.2c8) 08:44:57:717 LibMain: Process Name: C:\WINDOWS\system32\lsass.exe
(28c.290) 08:44:57:757 IsSyncForegroundPolicyRefresh: Synchronous, Reason:
policy set to SYNC
(2b8.2bc) 08:44:57:797 LibMain: Process Name:
C:\WINDOWS\system32\services.exe
(358.35c) 08:44:58:238 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
(2b8.2bc) 08:44:58:358 LoadUserProfile: Yes, we can impersonate the user.
Running as self
(2b8.2bc) 08:44:58:358
=========================================================
(2b8.2bc) 08:44:58:358 LoadUserProfile: Entering, hToken = <0x2b8>,
lpProfileInfo = 0x7fcf8
(2b8.2bc) 08:44:58:358 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(2b8.2bc) 08:44:58:358 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
(2b8.2bc) 08:44:58:358 LoadUserProfile: NULL central profile path
(2b8.2bc) 08:44:58:358 LoadUserProfile: NULL default profile path
(2b8.2bc) 08:44:58:358 LoadUserProfile: NULL server name
(2b8.2bc) 08:44:58:358 GetInterface: Returning rpc binding handle
(28c.380) 08:44:58:358 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:44:58:358 DropClientContext: Got client token 000003E4, sid =
S-1-5-18
(28c.380) 08:44:58:358 MIDL_user_allocate enter
(28c.380) 08:44:58:358 DropClientContext: load profile object successfully
made
(28c.380) 08:44:58:358 DropClientContext: Returning 0
(2b8.2bc) 08:44:58:358 LoadUserProfile: Calling DropClientToken (as self)
succeeded
(28c.2a4) 08:44:58:358 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:44:58:358 In LoadUserProfileP
(28c.2a4) 08:44:58:358 LoadUserProfile: Running as client
(28c.2a4) 08:44:58:358
=========================================================
(28c.2a4) 08:44:58:358 LoadUserProfile: Entering, hToken = <0x3e8>,
lpProfileInfo = 0xe757c0
(28c.2a4) 08:44:58:358 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(28c.2a4) 08:44:58:358 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
(28c.2a4) 08:44:58:358 LoadUserProfile: NULL central profile path
(28c.2a4) 08:44:58:358 LoadUserProfile: NULL default profile path
(28c.2a4) 08:44:58:358 LoadUserProfile: NULL server name
(28c.2a4) 08:44:58:358 LoadUserProfile: User sid: S-1-5-20
(28c.2a4) 08:44:58:358 CSyncManager::EnterLock <S-1-5-20>
(28c.2a4) 08:44:58:358 CSyncManager::EnterLock: No existing entry found
(28c.2a4) 08:44:58:358 CSyncManager::EnterLock: New entry created
(28c.2a4) 08:44:58:358 CHashTable::HashAdd: S-1-5-20 added in bucket 4
(28c.2a4) 08:44:58:358 LoadUserProfile: Wait succeeded. In critical section.
(28c.2a4) 08:44:58:358 RestoreUserProfile: Entering
(28c.2a4) 08:44:58:358 IsCentralProfileReachable: Entering
(28c.2a4) 08:44:58:358 IsCentralProfileReachable: Null path. Leaving
(28c.2a4) 08:44:58:358 RestoreUserProfile: Profile path = <>
(28c.2a4) 08:44:58:358 ExtractProfileFromBackup: A profile already exists
(28c.2a4) 08:44:58:358 PatchNewProfileIfRequred: A profile already exists
with the current sid, exitting
(28c.2a4) 08:44:58:358 CreateLocalProfileKey: Not setting additional Security
(28c.2a4) 08:44:58:358 GetExistingLocalProfileImage: Found entry in profile
list for existing local profile
(28c.2a4) 08:44:58:358 GetExistingLocalProfileImage: Local profile image
filename = <%SystemDrive%\Documents and Settings\NetworkService>
(28c.2a4) 08:44:58:358 GetExistingLocalProfileImage: Expanded local profile
image filename = <C:\Documents and Settings\NetworkService>
(28c.2a4) 08:44:58:368 GetExistingLocalProfileImage: No local mandatory
profile. Error = 2
(28c.2a4) 08:44:58:368 GetExistingLocalProfileImage: Found local profile
image file ok <C:\Documents and Settings\NetworkService\ntuser.dat>
(28c.2a4) 08:44:58:368 GetExistingLocalProfileImage: Failed to query low
profile unload time with error 2
(28c.2a4) 08:44:58:368 Local Existing Profile Image is reachable
(28c.2a4) 08:44:58:368 Local profile name is <C:\Documents and
Settings\NetworkService>
(28c.2a4) 08:44:58:368 RestoreUserProfile: No central profile. Attempting
to load local profile.
(28c.2a4) 08:44:58:368 MyRegLoadKey: Returning 00000000
(28c.2a4) 08:44:58:368 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(28c.2a4) 08:44:58:368 MyRegLoadKey: Returning 00000000
(28c.2a4) 08:44:58:368 CreateClassHive: existing user classes hive found
(28c.2a4) 08:44:58:368 RestoreUserProfile: About to Leave. Final
Information follows:
(28c.2a4) 08:44:58:368 Profile was successfully loaded.
(28c.2a4) 08:44:58:368 lpProfile->lpRoamingProfile = <>
(28c.2a4) 08:44:58:368 lpProfile->lpLocalProfile = <C:\Documents and
Settings\NetworkService>
(28c.2a4) 08:44:58:368 lpProfile->dwInternalFlags = 0x0
(28c.2a4) 08:44:58:368 RestoreUserProfile: Leaving.
(28c.2a4) 08:44:58:368 UpgradeProfile: Entering
(28c.2a4) 08:44:58:368 UpgradeProfile: Build numbers match
(28c.2a4) 08:44:58:368 UpgradeProfile: Leaving Successfully
(28c.2a4) 08:44:58:478 Profile Ref Count is 1
(28c.2a4) 08:44:58:478 LoadUserProfile: Leaving critical Section.
(28c.2a4) 08:44:58:478 CSyncManager::LeaveLock <S-1-5-20>
(28c.2a4) 08:44:58:478 CSyncManager::LeaveLock: Lock released
(28c.2a4) 08:44:58:478 CHashTable::HashDelete: S-1-5-20 deleted
(28c.2a4) 08:44:58:478 CSyncManager::LeaveLock: Lock deleted
(28c.2a4) 08:44:58:478 LoadUserProfile: Impersonated user: 000003e8, 000003f4
(2c4.2f8) 08:44:58:478 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(2c4.2f8) 08:44:58:488 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(28c.2a4) 08:44:58:498 LoadUserProfile: Reverted to user: 00000000
(28c.2a4) 08:44:58:498 LoadUserProfile: Reverted back to user <00000000>
(28c.2a4) 08:44:58:498 LoadUserProfile: Leaving with a value of 1.
(28c.2a4) 08:44:58:498
=========================================================
(28c.2a4) 08:44:58:498 LoadUserProfileI: returning 0
(2b8.2bc) 08:44:58:498 LoadUserProfile: Running as self
(2b8.2bc) 08:44:58:498 LoadUserProfile: Calling LoadUserProfileI (as user)
succeeded
(2b8.2bc) 08:44:58:498 LoadUserProfile: Returning success. Final
Information follows:
(2b8.2bc) 08:44:58:498 lpProfileInfo->UserName = <NetworkService>
(2b8.2bc) 08:44:58:498 lpProfileInfo->lpProfilePath = <>
(2b8.2bc) 08:44:58:498 lpProfileInfo->dwFlags = 0x9
(28c.380) 08:44:58:498 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:44:58:498 ReleaseClientContext: Releasing context
(28c.380) 08:44:58:498 ReleaseClientContext_s: Releasing context
(28c.380) 08:44:58:498 MIDL_user_free enter
(2b8.2bc) 08:44:58:498 ReleaseInterface: Releasing rpc binding handle
(2b8.2bc) 08:44:58:498 LoadUserProfile: Returning TRUE. hProfile = <0x31c>
(2b8.2bc) 08:44:58:498 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(398.39c) 08:44:58:528 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
(3c0.3c4) 08:44:58:588 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
(2b8.2bc) 08:44:58:598 LoadUserProfile: Yes, we can impersonate the user.
Running as self
(2b8.2bc) 08:44:58:598
=========================================================
(2b8.2bc) 08:44:58:598 LoadUserProfile: Entering, hToken = <0x35c>,
lpProfileInfo = 0x7fcf8
(2b8.2bc) 08:44:58:598 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(2b8.2bc) 08:44:58:598 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
(2b8.2bc) 08:44:58:598 LoadUserProfile: NULL central profile path
(2b8.2bc) 08:44:58:598 LoadUserProfile: NULL default profile path
(2b8.2bc) 08:44:58:598 LoadUserProfile: NULL server name
(2b8.2bc) 08:44:58:598 GetInterface: Returning rpc binding handle
(28c.2a4) 08:44:58:598 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:44:58:598 DropClientContext: Got client token 000003E4, sid =
S-1-5-18
(28c.2a4) 08:44:58:598 MIDL_user_allocate enter
(28c.2a4) 08:44:58:598 DropClientContext: load profile object successfully
made
(28c.2a4) 08:44:58:598 DropClientContext: Returning 0
(2b8.2bc) 08:44:58:598 LoadUserProfile: Calling DropClientToken (as self)
succeeded
(28c.380) 08:44:58:598 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:44:58:598 In LoadUserProfileP
(28c.380) 08:44:58:598 LoadUserProfile: Running as client
(28c.380) 08:44:58:598
=========================================================
(28c.380) 08:44:58:598 LoadUserProfile: Entering, hToken = <0x3e8>,
lpProfileInfo = 0xe757c0
(28c.380) 08:44:58:598 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(28c.380) 08:44:58:598 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
(28c.380) 08:44:58:598 LoadUserProfile: NULL central profile path
(28c.380) 08:44:58:598 LoadUserProfile: NULL default profile path
(28c.380) 08:44:58:598 LoadUserProfile: NULL server name
(28c.380) 08:44:58:598 LoadUserProfile: User sid: S-1-5-20
(28c.380) 08:44:58:598 CSyncManager::EnterLock <S-1-5-20>
(28c.380) 08:44:58:598 CSyncManager::EnterLock: No existing entry found
(28c.380) 08:44:58:598 CSyncManager::EnterLock: New entry created
(28c.380) 08:44:58:598 CHashTable::HashAdd: S-1-5-20 added in bucket 4
(28c.380) 08:44:58:598 LoadUserProfile: Wait succeeded. In critical section.
(28c.380) 08:44:58:598 TestIfUserProfileLoaded: Profile already loaded.
(28c.380) 08:44:58:598 Profile Ref Count is 2
(28c.380) 08:44:58:598 LoadUserProfile: Leaving critical Section.
(28c.380) 08:44:58:598 CSyncManager::LeaveLock <S-1-5-20>
(28c.380) 08:44:58:598 CSyncManager::LeaveLock: Lock released
(28c.380) 08:44:58:598 CHashTable::HashDelete: S-1-5-20 deleted
(28c.380) 08:44:58:598 CSyncManager::LeaveLock: Lock deleted
(28c.380) 08:44:58:598 LoadUserProfile: Impersonated user: 000003e8, 000003f4
(28c.380) 08:44:58:598 LoadUserProfile: Reverted to user: 00000000
(28c.380) 08:44:58:608 LoadUserProfile: Reverted back to user <00000000>
(28c.380) 08:44:58:608 LoadUserProfile: Leaving with a value of 1.
(28c.380) 08:44:58:608
=========================================================
(28c.380) 08:44:58:608 LoadUserProfileI: returning 0
(2b8.2bc) 08:44:58:608 LoadUserProfile: Running as self
(2b8.2bc) 08:44:58:608 LoadUserProfile: Calling LoadUserProfileI (as user)
succeeded
(2b8.2bc) 08:44:58:608 LoadUserProfile: Returning success. Final
Information follows:
(2b8.2bc) 08:44:58:608 lpProfileInfo->UserName = <NetworkService>
(2b8.2bc) 08:44:58:608 lpProfileInfo->lpProfilePath = <>
(2b8.2bc) 08:44:58:608 lpProfileInfo->dwFlags = 0x9
(28c.2a4) 08:44:58:608 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:44:58:608 ReleaseClientContext: Releasing context
(28c.2a4) 08:44:58:608 ReleaseClientContext_s: Releasing context
(28c.2a4) 08:44:58:608 MIDL_user_free enter
(2b8.2bc) 08:44:58:608 ReleaseInterface: Releasing rpc binding handle
(2b8.2bc) 08:44:58:608 LoadUserProfile: Returning TRUE. hProfile = <0x358>
(2b8.2bc) 08:44:58:608 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(3f4.3f8) 08:44:58:638 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
(2b8.2bc) 08:44:58:638 LoadUserProfile: Yes, we can impersonate the user.
Running as self
(2b8.2bc) 08:44:58:638
=========================================================
(2b8.2bc) 08:44:58:638 LoadUserProfile: Entering, hToken = <0x37c>,
lpProfileInfo = 0x7fcf8
(2b8.2bc) 08:44:58:638 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(2b8.2bc) 08:44:58:638 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
(2b8.2bc) 08:44:58:638 LoadUserProfile: NULL central profile path
(2b8.2bc) 08:44:58:638 LoadUserProfile: NULL default profile path
(2b8.2bc) 08:44:58:638 LoadUserProfile: NULL server name
(2b8.2bc) 08:44:58:638 GetInterface: Returning rpc binding handle
(28c.380) 08:44:58:638 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:44:58:638 DropClientContext: Got client token 000003F0, sid =
S-1-5-18
(28c.380) 08:44:58:638 MIDL_user_allocate enter
(28c.380) 08:44:58:638 DropClientContext: load profile object successfully
made
(28c.380) 08:44:58:638 DropClientContext: Returning 0
(2b8.2bc) 08:44:58:638 LoadUserProfile: Calling DropClientToken (as self)
succeeded
(28c.2a4) 08:44:58:638 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:44:58:638 In LoadUserProfileP
(28c.2a4) 08:44:58:638 LoadUserProfile: Running as client
(28c.2a4) 08:44:58:638
=========================================================
(28c.2a4) 08:44:58:638 LoadUserProfile: Entering, hToken = <0x3e8>,
lpProfileInfo = 0x78f28
(28c.2a4) 08:44:58:638 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(28c.2a4) 08:44:58:638 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
(28c.2a4) 08:44:58:638 LoadUserProfile: NULL central profile path
(28c.2a4) 08:44:58:638 LoadUserProfile: NULL default profile path
(28c.2a4) 08:44:58:638 LoadUserProfile: NULL server name
(28c.2a4) 08:44:58:638 LoadUserProfile: User sid: S-1-5-19
(28c.2a4) 08:44:58:638 CSyncManager::EnterLock <S-1-5-19>
(28c.2a4) 08:44:58:638 CSyncManager::EnterLock: No existing entry found
(28c.2a4) 08:44:58:638 CSyncManager::EnterLock: New entry created
(28c.2a4) 08:44:58:648 CHashTable::HashAdd: S-1-5-19 added in bucket 12
(28c.2a4) 08:44:58:648 LoadUserProfile: Wait succeeded. In critical section.
(28c.2a4) 08:44:58:648 RestoreUserProfile: Entering
(28c.2a4) 08:44:58:648 IsCentralProfileReachable: Entering
(28c.2a4) 08:44:58:648 IsCentralProfileReachable: Null path. Leaving
(28c.2a4) 08:44:58:648 RestoreUserProfile: Profile path = <>
(28c.2a4) 08:44:58:648 ExtractProfileFromBackup: A profile already exists
(28c.2a4) 08:44:58:648 PatchNewProfileIfRequred: A profile already exists
with the current sid, exitting
(28c.2a4) 08:44:58:648 CreateLocalProfileKey: Not setting additional Security
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: Found entry in profile
list for existing local profile
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: Local profile image
filename = <%SystemDrive%\Documents and Settings\LocalService>
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: Expanded local profile
image filename = <C:\Documents and Settings\LocalService>
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: No local mandatory
profile. Error = 2
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: Found local profile
image file ok <C:\Documents and Settings\LocalService\ntuser.dat>
(28c.2a4) 08:44:58:648 GetExistingLocalProfileImage: Failed to query low
profile unload time with error 2
(28c.2a4) 08:44:58:648 Local Existing Profile Image is reachable
(28c.2a4) 08:44:58:648 Local profile name is <C:\Documents and
Settings\LocalService>
(28c.2a4) 08:44:58:648 RestoreUserProfile: No central profile. Attempting
to load local profile.
(28c.2a4) 08:44:58:648 MyRegLoadKey: Returning 00000000
(28c.2a4) 08:44:58:648 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(28c.2a4) 08:44:58:648 MyRegLoadKey: Returning 00000000
(28c.2a4) 08:44:58:648 CreateClassHive: existing user classes hive found
(28c.2a4) 08:44:58:648 RestoreUserProfile: About to Leave. Final
Information follows:
(28c.2a4) 08:44:58:648 Profile was successfully loaded.
(28c.2a4) 08:44:58:648 lpProfile->lpRoamingProfile = <>
(28c.2a4) 08:44:58:648 lpProfile->lpLocalProfile = <C:\Documents and
Settings\LocalService>
(28c.2a4) 08:44:58:648 lpProfile->dwInternalFlags = 0x0
(28c.2a4) 08:44:58:648 RestoreUserProfile: Leaving.
(28c.2a4) 08:44:58:648 UpgradeProfile: Entering
(28c.2a4) 08:44:58:648 UpgradeProfile: Build numbers match
(28c.2a4) 08:44:58:648 UpgradeProfile: Leaving Successfully
(28c.2a4) 08:44:58:999 Profile Ref Count is 1
(28c.2a4) 08:44:58:999 LoadUserProfile: Leaving critical Section.
(28c.2a4) 08:44:58:999 CSyncManager::LeaveLock <S-1-5-19>
(28c.2a4) 08:44:58:999 CSyncManager::LeaveLock: Lock released
(28c.2a4) 08:44:58:999 CHashTable::HashDelete: S-1-5-19 deleted
(28c.2a4) 08:44:58:999 CSyncManager::LeaveLock: Lock deleted
(28c.2a4) 08:44:58:999 LoadUserProfile: Impersonated user: 000003e8, 000003f8
(2c4.328) 08:44:58:999 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(2c4.328) 08:44:59:009 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(28c.2a4) 08:44:59:039 LoadUserProfile: Reverted to user: 00000000
(28c.2a4) 08:44:59:039 LoadUserProfile: Reverted back to user <00000000>
(28c.2a4) 08:44:59:039 LoadUserProfile: Leaving with a value of 1.
(28c.2a4) 08:44:59:039
=========================================================
(28c.2a4) 08:44:59:039 LoadUserProfileI: returning 0
(2b8.2bc) 08:44:59:039 LoadUserProfile: Running as self
(2b8.2bc) 08:44:59:039 LoadUserProfile: Calling LoadUserProfileI (as user)
succeeded
(2b8.2bc) 08:44:59:039 LoadUserProfile: Returning success. Final
Information follows:
(2b8.2bc) 08:44:59:039 lpProfileInfo->UserName = <LocalService>
(2b8.2bc) 08:44:59:039 lpProfileInfo->lpProfilePath = <>
(2b8.2bc) 08:44:59:039 lpProfileInfo->dwFlags = 0x9
(28c.380) 08:44:59:039 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:44:59:039 ReleaseClientContext: Releasing context
(28c.380) 08:44:59:039 ReleaseClientContext_s: Releasing context
(28c.380) 08:44:59:039 MIDL_user_free enter
(2b8.2bc) 08:44:59:039 ReleaseInterface: Releasing rpc binding handle
(2b8.2bc) 08:44:59:039 LoadUserProfile: Returning TRUE. hProfile = <0x354>
(2b8.2bc) 08:44:59:039 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(440.444) 08:44:59:099 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
(28c.290) 08:44:59:119 IsSyncForegroundPolicyRefresh: Synchronous, Reason:
policy set to SYNC
(5f0.5f4) 08:45:00:671 LibMain: Process Name: C:\WINDOWS\system32\spoolsv.exe
(620.624) 08:45:00:751 LibMain: Process Name: C:\WINDOWS\System32\ccs.exe
(28c.694) 08:45:00:902 IsSyncForegroundPolicyRefresh: Synchronous, Reason:
policy set to SYNC
(28c.694) 08:45:00:902 ApplyGroupPolicy: Entering. Flags = 7
(28c.694) 08:45:00:902 ProcessGPOs:
(28c.694) 08:45:00:902 ProcessGPOs:
(28c.694) 08:45:00:902 ProcessGPOs: Starting computer Group Policy
(Background) processing...
(28c.694) 08:45:00:902 ProcessGPOs:
(28c.694) 08:45:00:902 ProcessGPOs:
(28c.694) 08:45:00:902 EnterCriticalPolicySectionEx: Entering with timeout
600000 and flags 0x0
(28c.694) 08:45:00:902 EnterCriticalPolicySectionEx: Machine critical
section has been claimed. Handle = 0x784
(28c.694) 08:45:00:902 EnterCriticalPolicySectionEx: Leaving successfully.
(28c.694) 08:45:00:902 ProcessGPOs: Machine role is 2.
(28c.694) 08:45:00:912 ProcessGPOs: The DC for domain DOMAINNAME is not
available at startup. retrying
(28c.694) 08:45:00:912 RetryDCContactAtMachineStartup: Enter.
(2b8.6cc) 08:45:01:693 LoadUserProfile: Yes, we can impersonate the user.
Running as self
(2b8.6cc) 08:45:01:693
=========================================================
(2b8.6cc) 08:45:01:693 LoadUserProfile: Entering, hToken = <0x10>,
lpProfileInfo = 0xedf6ec
(2b8.6cc) 08:45:01:693 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(2b8.6cc) 08:45:01:693 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
(2b8.6cc) 08:45:01:693 LoadUserProfile: NULL central profile path
(2b8.6cc) 08:45:01:693 LoadUserProfile: NULL default profile path
(2b8.6cc) 08:45:01:693 LoadUserProfile: NULL server name
(2b8.6cc) 08:45:01:693 GetInterface: Returning rpc binding handle
(28c.2a4) 08:45:01:693 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:45:01:693 DropClientContext: Got client token 0000073C, sid =
S-1-5-18
(28c.2a4) 08:45:01:693 MIDL_user_allocate enter
(28c.2a4) 08:45:01:693 DropClientContext: load profile object successfully
made
(28c.2a4) 08:45:01:693 DropClientContext: Returning 0
(2b8.6cc) 08:45:01:693 LoadUserProfile: Calling DropClientToken (as self)
succeeded
(28c.380) 08:45:01:703 IProfileSecurityCallBack: client authenticated.
(28c.380) 08:45:01:703 In LoadUserProfileP
(28c.380) 08:45:01:703 LoadUserProfile: Running as client
(28c.380) 08:45:01:703
=========================================================
(28c.380) 08:45:01:703 LoadUserProfile: Entering, hToken = <0x740>,
lpProfileInfo = 0xe7d200
(28c.380) 08:45:01:703 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
(28c.380) 08:45:01:703 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
(28c.380) 08:45:01:703 LoadUserProfile: NULL central profile path
(28c.380) 08:45:01:703 LoadUserProfile: NULL default profile path
(28c.380) 08:45:01:703 LoadUserProfile: NULL server name
(28c.380) 08:45:01:703 LoadUserProfile: User sid: S-1-5-19
(28c.380) 08:45:01:703 CSyncManager::EnterLock <S-1-5-19>
(28c.380) 08:45:01:703 CSyncManager::EnterLock: No existing entry found
(28c.380) 08:45:01:703 CSyncManager::EnterLock: New entry created
(28c.380) 08:45:01:703 CHashTable::HashAdd: S-1-5-19 added in bucket 12
(28c.380) 08:45:01:703 LoadUserProfile: Wait succeeded. In critical section.
(28c.380) 08:45:01:703 TestIfUserProfileLoaded: Profile already loaded.
(28c.380) 08:45:01:703 Profile Ref Count is 2
(28c.380) 08:45:01:703 LoadUserProfile: Leaving critical Section.
(28c.380) 08:45:01:703 CSyncManager::LeaveLock <S-1-5-19>
(28c.380) 08:45:01:703 CSyncManager::LeaveLock: Lock released
(28c.380) 08:45:01:703 CHashTable::HashDelete: S-1-5-19 deleted
(28c.380) 08:45:01:703 CSyncManager::LeaveLock: Lock deleted
(28c.380) 08:45:01:703 LoadUserProfile: Impersonated user: 00000740, 00000788
(28c.380) 08:45:01:703 LoadUserProfile: Reverted to user: 00000000
(28c.380) 08:45:01:703 LoadUserProfile: Reverted back to user <00000000>
(28c.380) 08:45:01:703 LoadUserProfile: Leaving with a value of 1.
(28c.380) 08:45:01:703
=========================================================
(28c.380) 08:45:01:703 LoadUserProfileI: returning 0
(2b8.6cc) 08:45:01:703 LoadUserProfile: Running as self
(2b8.6cc) 08:45:01:703 LoadUserProfile: Calling LoadUserProfileI (as user)
succeeded
(2b8.6cc) 08:45:01:703 LoadUserProfile: Returning success. Final
Information follows:
(2b8.6cc) 08:45:01:703 lpProfileInfo->UserName = <LocalService>
(2b8.6cc) 08:45:01:703 lpProfileInfo->lpProfilePath = <>
(2b8.6cc) 08:45:01:703 lpProfileInfo->dwFlags = 0x9
(28c.2a4) 08:45:01:703 IProfileSecurityCallBack: client authenticated.
(28c.2a4) 08:45:01:703 ReleaseClientContext: Releasing context
(28c.2a4) 08:45:01:703 ReleaseClientContext_s: Releasing context
(28c.2a4) 08:45:01:703 MIDL_user_free enter
(2b8.6cc) 08:45:01:703 ReleaseInterface: Releasing rpc binding handle
(2b8.6cc) 08:45:01:703 LoadUserProfile: Returning TRUE. hProfile = <0x1e0>
(2b8.6cc) 08:45:01:703 GetUserDNSDomainName: Domain name is NT Authority.
No DNS domain name available.
(e8.e0) 08:45:01:733 LibMain: Process Name: C:\WINDOWS\System32\alg.exe
(28c.694) 08:45:45:356 PingComputer: Adapter speed 54000000 bps
(28c.694) 08:45:45:356 PingComputer: First time: 1
(28c.694) 08:45:45:366 PingComputer: Fast link. Exiting.
(28c.694) 08:45:45:366 RetryDCContactAtMachineStartup: Tried to call
GetDomainControllerInfo 22 times.
(28c.694) 08:45:45:366 RetryDCContactAtMachineStartup: Exit with status 0.
(28c.694) 08:45:45:366 ProcessGPOs: DC for domain DOMAINNAME is reachable
after retries.
(28c.694) 08:45:45:366 ProcessGPOs: network name is 162.141.84.0
(28c.694) 08:45:45:466 ProcessGPOs: User name is:
CN=COMPUTERNAME,OU=Computers,OU=SITENAME,OU=ConsumerProducts,DC=DOMAINNAME,DC=DOMAIN,DC=com, Domain name is: DOMAINNAME
(28c.694) 08:45:45:466 ProcessGPOs: Domain controller is:
\\CPSITEDC.DOMAINNAME.DOMAIN.com Domain DN is DOMAINNAME.DOMAIN.com
(28c.694) 08:45:45:466 ReadGPExtensions: Rsop entry point not found for
gptext.dll.
(28c.694) 08:45:45:466 ReadGPExtensions: Rsop entry point not found for
dskquota.dll.
(28c.694) 08:45:45:466 ReadGPExtensions: Rsop entry point not found for
gptext.dll.
(28c.694) 08:45:45:476 ReadGPExtensions: Rsop entry point not found for
iedkcs32.dll.
(28c.694) 08:45:45:476 ReadGPExtensions: Rsop entry point not found for
scecli.dll.
(28c.694) 08:45:45:476 ReadGPExtensions: Rsop entry point not found for
gptext.dll.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{35378EAC-683F-11D2-A89A-00C04FBBCFA2}
(28c.694) 08:45:45:476 ReadStatus: Read Extension's Previous status
successfully.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{25537BA6-77A8-11D2-9B6C-0000F8080861}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{3610eda5-77ef-11d2-8dc5-00c04fa31a66}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{426031c0-0b47-4852-b0ca-ac3d37bfcb39}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{42B5FAAE-6536-11d2-AE5A-0000F87571E3}
(28c.694) 08:45:45:476 ReadStatus: Read Extension's Previous status
successfully.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{827D319E-6EAC-11D2-A4EA-00C04F79F83A}
(28c.694) 08:45:45:476 ReadStatus: Read Extension's Previous status
successfully.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
(28c.694) 08:45:45:476 ReadStatus: Read Extension's Previous status
successfully.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{c6dc5466-785a-11d2-84d0-00c04fb169f7}
(28c.694) 08:45:45:476 ReadStatus: Read Extension's Previous status
successfully.
(28c.694) 08:45:45:476 ReadExtStatus: Reading Previous Status for extension
{e437bc1c-aa7d-11d2-a382-00c04f991e27}
(28c.694) 08:45:45:476 ProcessGPOs: Calling GetGPOInfo for normal policy mode
(28c.694) 08:45:45:476 GetGPOInfo: ********************************
(28c.694) 08:45:45:476 GetGPOInfo: Entering...
(28c.694) 08:45:45:656 GetGPOInfo: Server connection established.
(28c.694) 08:45:45:726 GetGPOInfo: Bound successfully.
.
- Prev by Date: Re: Group Policy Software Uninstalls on XP PCs
- Next by Date: Re: Group Policy Software Uninstalls on XP PCs
- Previous by thread: Re: Group Policy Software Uninstalls on XP PCs
- Next by thread: Re: Group Policy Software Uninstalls on XP PCs
- Index(es):
Relevant Pages
|