Re: Slow logon because of "Applying computer settings..."

On 9 Jun., 10:39, AJ <ajsarka...@xxxxxxxxx> wrote:
Hello Dominique,

These slow logn issues need investigation and a Userenv log would help
you to figure out. I would suggest to call Microsoft PSS and they
would be able to help you right away!!

Thanks

Ajay Sarkaria

Hi AJ

Here is the userenv.log file I took from one of our workstations a
couple of days ago.
You can clearly see the 4 minute gap between 7:53 and 7:57 were the
computer freezes and only shows "Applying Computer Settings...".

USERENV(360.2a4) 07:50:57:387 DropClientContext: Got client token
0000033C, sid = S-1-5-18
USERENV(360.2a4) 07:50:57:387 MIDL_user_allocate enter
USERENV(360.2a4) 07:50:57:387 DropClientContext: load profile object
successfully made
USERENV(360.2a4) 07:50:57:387 DropClientContext: Returning 0
USERENV(360.3d8) 07:50:57:387 IProfileSecurityCallBack: client
authenticated.
USERENV(360.3d8) 07:50:57:397 UnloadUserProfileP: Entering, hProfile =
<0x3f0>
USERENV(360.3d8) 07:50:57:397 UnloadUserProfileP: ImpersonateUser
<0000033c>, old token is <00000000>
USERENV(360.3d8) 07:50:57:397 GetExclusionListFromRegistry: Policy
list is empty, returning user list = <Local Settings;Temporary
Internet Files;History;Temp>
USERENV(360.3d8) 07:50:57:397 CSyncManager::EnterLock <S-1-5-19>
USERENV(360.3d8) 07:50:57:397 CSyncManager::EnterLock: No existing
entry found
USERENV(360.3d8) 07:50:57:397 CSyncManager::EnterLock: New entry
created
USERENV(360.3d8) 07:50:57:397 CHashTable::HashAdd: S-1-5-19 added in
bucket 12
USERENV(360.3d8) 07:50:57:397 UnloadUserProfileP: Wait succeeded. In
critical section.
USERENV(360.3d8) 07:50:57:397 UnloadUserProfileP: Didn't unload user
profile, Ref Count is 2
USERENV(360.3d8) 07:50:57:397 UnloadUserProfileP: Reverted back to
user <00000000>
USERENV(360.3d8) 07:50:57:397 CSyncManager::LeaveLock <S-1-5-19>
USERENV(360.3d8) 07:50:57:397 CSyncManager::LeaveLock: Lock released
USERENV(360.3d8) 07:50:57:397 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(360.3d8) 07:50:57:397 CSyncManager::LeaveLock: Lock deleted
USERENV(360.3d8) 07:50:57:397 UnloadUserProfileP: Leave critical
section.
USERENV(360.3d8) 07:50:57:397 UnloadUserProfileP: Leaving with a
return value of 1
USERENV(360.3d8) 07:50:57:397 UnloadUserProfileI: returning 0
USERENV(360.2a4) 07:50:57:397 IProfileSecurityCallBack: client
authenticated.
USERENV(360.2a4) 07:50:57:397 ReleaseClientContext: Releasing context
USERENV(360.2a4) 07:50:57:397 ReleaseClientContext_s: Releasing
context
USERENV(360.2a4) 07:50:57:397 MIDL_user_free enter
USERENV(350.354) 07:51:42:663 InitializePolicyProcessing: Initialised
Machine Mutex/Events
USERENV(350.354) 07:51:42:683 InitializePolicyProcessing: Initialised
User Mutex/Events
USERENV(350.354) 07:51:42:683 LibMain: Process Name: \??\C:\WINDOWS
\system32\winlogon.exe
USERENV(350.354) 07:51:44:746 Entering CUserProfile::Initialize ...
USERENV(350.354) 07:51:44:746 CUserProfile::Initialize called by
winlogon
USERENV(350.354) 07:51:44:746 CUserProfile::Initialize: critical
section initialized
USERENV(350.354) 07:51:44:756 CSyncManager::Initialize: critical
section initialized
USERENV(350.354) 07:51:44:756 CUserProfile::Initialize: registry key
Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
USERENV(350.354) 07:51:44:756 CUserProfile::Initialize: Proccessing
S-1-5-21-2052111302-583907252-725345543-9320
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock
<S-1-5-21-2052111302-583907252-725345543-9320>
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:756 CHashTable::HashAdd:
S-1-5-21-2052111302-583907252-725345543-9320 added in bucket 14
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:756 CUserProfile::GetRefCountAndFlags: Ref
count is 0, state is 00000010
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock
<S-1-5-21-2052111302-583907252-725345543-9320>
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:756 CHashTable::HashDelete:
S-1-5-21-2052111302-583907252-725345543-9320 deleted
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:756 CUserProfile::Initialize: Proccessing
S-1-5-21-2052111302-583907252-725345543-72405
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock
<S-1-5-21-2052111302-583907252-725345543-72405>
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:756 CHashTable::HashAdd:
S-1-5-21-2052111302-583907252-725345543-72405 added in bucket 20
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:756 CUserProfile::GetRefCountAndFlags: Ref
count is 0, state is 00000100
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock
<S-1-5-21-2052111302-583907252-725345543-72405>
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:756 CHashTable::HashDelete:
S-1-5-21-2052111302-583907252-725345543-72405 deleted
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:756 CUserProfile::Initialize: Proccessing
S-1-5-21-2052111302-583907252-725345543-72213
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock
<S-1-5-21-2052111302-583907252-725345543-72213>
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:756 CHashTable::HashAdd:
S-1-5-21-2052111302-583907252-725345543-72213 added in bucket 17
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:756 CUserProfile::GetRefCountAndFlags: Ref
count is 0, state is 00000010
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock
<S-1-5-21-2052111302-583907252-725345543-72213>
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:756 CHashTable::HashDelete:
S-1-5-21-2052111302-583907252-725345543-72213 deleted
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:756 CUserProfile::Initialize: Proccessing
S-1-5-21-2052111302-583907252-725345543-63989
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock
<S-1-5-21-2052111302-583907252-725345543-63989>
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:756 CHashTable::HashAdd:
S-1-5-21-2052111302-583907252-725345543-63989 added in bucket 14
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:756 CUserProfile::GetRefCountAndFlags: Ref
count is 0, state is 00000100
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock
<S-1-5-21-2052111302-583907252-725345543-63989>
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:756 CHashTable::HashDelete:
S-1-5-21-2052111302-583907252-725345543-63989 deleted
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:756 CUserProfile::Initialize: Proccessing
S-1-5-21-2052111302-583907252-725345543-60932
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock
<S-1-5-21-2052111302-583907252-725345543-60932>
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:756 CHashTable::HashAdd:
S-1-5-21-2052111302-583907252-725345543-60932 added in bucket 22
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:756 CUserProfile::GetRefCountAndFlags: Ref
count is 0, state is 00000000
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock
<S-1-5-21-2052111302-583907252-725345543-60932>
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:756 CHashTable::HashDelete:
S-1-5-21-2052111302-583907252-725345543-60932 deleted
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:756 CUserProfile::Initialize: Proccessing
S-1-5-21-2052111302-583907252-725345543-60930
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock
<S-1-5-21-2052111302-583907252-725345543-60930>
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:756 CHashTable::HashAdd:
S-1-5-21-2052111302-583907252-725345543-60930 added in bucket 20
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:756 CUserProfile::GetRefCountAndFlags: Ref
count is 0, state is 00000100
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock
<S-1-5-21-2052111302-583907252-725345543-60930>
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:756 CHashTable::HashDelete:
S-1-5-21-2052111302-583907252-725345543-60930 deleted
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:756 CUserProfile::Initialize: Proccessing
S-1-5-21-2052111302-583907252-725345543-47847
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock
<S-1-5-21-2052111302-583907252-725345543-47847>
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:756 CHashTable::HashAdd:
S-1-5-21-2052111302-583907252-725345543-47847 added in bucket 9
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:756 CUserProfile::GetRefCountAndFlags: Ref
count is 0, state is 00000304
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock
<S-1-5-21-2052111302-583907252-725345543-47847>
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:756 CHashTable::HashDelete:
S-1-5-21-2052111302-583907252-725345543-47847 deleted
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:756 CUserProfile::Initialize: Proccessing
S-1-5-21-2052111302-583907252-725345543-31706
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock
<S-1-5-21-2052111302-583907252-725345543-31706>
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:756 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:756 CHashTable::HashAdd:
S-1-5-21-2052111302-583907252-725345543-31706 added in bucket 19
USERENV(350.354) 07:51:44:756 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:756 CUserProfile::GetRefCountAndFlags: Ref
count is 0, state is 00000010
USERENV(350.354) 07:51:44:756 CSyncManager::LeaveLock
<S-1-5-21-2052111302-583907252-725345543-31706>
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:766 CHashTable::HashDelete:
S-1-5-21-2052111302-583907252-725345543-31706 deleted
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:766 CUserProfile::Initialize: Proccessing
S-1-5-21-1338241817-1480946520-2891796617-500
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock
<S-1-5-21-1338241817-1480946520-2891796617-500>
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:766 CHashTable::HashAdd:
S-1-5-21-1338241817-1480946520-2891796617-500 added in bucket 21
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:766 CUserProfile::GetRefCountAndFlags: Ref
count is 0, state is 00000100
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock
<S-1-5-21-1338241817-1480946520-2891796617-500>
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:766 CHashTable::HashDelete:
S-1-5-21-1338241817-1480946520-2891796617-500 deleted
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:766 CUserProfile::Initialize: Proccessing
S-1-5-20
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock <S-1-5-20>
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:766 CHashTable::HashAdd: S-1-5-20 added in
bucket 4
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:766 CUserProfile::GetRefCountAndFlags: Ref
count is 2, state is 00000000
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Ref
Count is not 0
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock <S-1-5-20>
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:766 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:766 CUserProfile::Initialize: Proccessing
S-1-5-19
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock <S-1-5-19>
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:766 CHashTable::HashAdd: S-1-5-19 added in
bucket 12
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:766 CUserProfile::GetRefCountAndFlags: Ref
count is 2, state is 00000000
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Ref
Count is not 0
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock <S-1-5-19>
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:766 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:766 CUserProfile::Initialize: Proccessing
S-1-5-18
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock <S-1-5-18>
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:51:44:766 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:51:44:766 CHashTable::HashAdd: S-1-5-18 added in
bucket 11
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(350.354) 07:51:44:766 CUserProfile::GetRefCountAndFlags: Ref
count is 1, state is 00000000
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Ref
Count is not 0
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock <S-1-5-18>
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:51:44:766 CHashTable::HashDelete: S-1-5-18 deleted
USERENV(350.354) 07:51:44:766 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:51:44:766 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(350.354) 07:51:44:776 CUserProfile::Initialize:
RpcServerRegisterIfEx successful
USERENV(350.354) 07:51:44:776 Exiting CUserProfile::Initialize,
successful
USERENV(3dc.3e0) 07:51:45:647 LibMain: Process Name: C:\WINDOWS
\system32\services.exe
USERENV(3e8.3ec) 07:51:45:747 LibMain: Process Name: C:\WINDOWS
\system32\lsass.exe
USERENV(350.354) 07:51:46:368 IsSyncForegroundPolicyRefresh:
Asynchronous, Reason: NoNeedForSync
USERENV(4e8.4ec) 07:51:48:321 LibMain: Process Name: C:\WINDOWS
\system32\svchost.exe
USERENV(3dc.3e0) 07:51:48:711 LoadUserProfile: Yes, we can impersonate
the user. Running as self
USERENV(3dc.3e0) 07:51:48:711
=========================================================
USERENV(3dc.3e0) 07:51:48:711 LoadUserProfile: Entering, hToken =
<0x2b8>, lpProfileInfo = 0x7fcf8
USERENV(3dc.3e0) 07:51:48:711 LoadUserProfile: lpProfileInfo->dwFlags
= <0x9>
USERENV(3dc.3e0) 07:51:48:711 LoadUserProfile: lpProfileInfo-
lpUserName = <NetworkService>
USERENV(3dc.3e0) 07:51:48:711 LoadUserProfile: NULL central profile
path
USERENV(3dc.3e0) 07:51:48:711 LoadUserProfile: NULL default profile
path
USERENV(3dc.3e0) 07:51:48:721 LoadUserProfile: NULL server name
USERENV(3dc.3e0) 07:51:48:721 GetInterface: Returning rpc binding
handle
USERENV(350.544) 07:51:48:721 IProfileSecurityCallBack: client
authenticated.
USERENV(350.544) 07:51:48:721 DropClientContext: Got client token
000005EC, sid = S-1-5-18
USERENV(350.544) 07:51:48:721 MIDL_user_allocate enter
USERENV(350.544) 07:51:48:721 DropClientContext: load profile object
successfully made
USERENV(350.544) 07:51:48:721 DropClientContext: Returning 0
USERENV(3dc.3e0) 07:51:48:721 LoadUserProfile: Calling DropClientToken
(as self) succeeded
USERENV(350.3b8) 07:51:48:721 IProfileSecurityCallBack: client
authenticated.
USERENV(350.3b8) 07:51:48:721 In LoadUserProfileP
USERENV(350.3b8) 07:51:48:721 LoadUserProfile: Running as client
USERENV(350.3b8) 07:51:48:721
=========================================================
USERENV(350.3b8) 07:51:48:721 LoadUserProfile: Entering, hToken =
<0x5f0>, lpProfileInfo = 0xe4c5e8
USERENV(350.3b8) 07:51:48:721 LoadUserProfile: lpProfileInfo->dwFlags
= <0x9>
USERENV(350.3b8) 07:51:48:721 LoadUserProfile: lpProfileInfo-
lpUserName = <NetworkService>
USERENV(350.3b8) 07:51:48:721 LoadUserProfile: NULL central profile
path
USERENV(350.3b8) 07:51:48:721 LoadUserProfile: NULL default profile
path
USERENV(350.3b8) 07:51:48:721 LoadUserProfile: NULL server name
USERENV(350.3b8) 07:51:48:721 LoadUserProfile: User sid: S-1-5-20
USERENV(350.3b8) 07:51:48:721 CSyncManager::EnterLock <S-1-5-20>
USERENV(350.3b8) 07:51:48:721 CSyncManager::EnterLock: No existing
entry found
USERENV(350.3b8) 07:51:48:721 CSyncManager::EnterLock: New entry
created
USERENV(350.3b8) 07:51:48:721 CHashTable::HashAdd: S-1-5-20 added in
bucket 4
USERENV(350.3b8) 07:51:48:721 LoadUserProfile: Wait succeeded. In
critical section.
USERENV(350.3b8) 07:51:48:721 RestoreUserProfile: Entering
USERENV(350.3b8) 07:51:48:721 IsCentralProfileReachable: Entering
USERENV(350.3b8) 07:51:48:721 IsCentralProfileReachable: Null path.
Leaving
USERENV(350.3b8) 07:51:48:721 RestoreUserProfile: Profile path = <>
USERENV(350.3b8) 07:51:48:721 ExtractProfileFromBackup: A profile
already exists
USERENV(350.3b8) 07:51:48:721 PatchNewProfileIfRequred: A profile
already exists with the current sid, exitting
USERENV(350.3b8) 07:51:48:721 CreateLocalProfileKey: Not setting
additional Security
USERENV(350.3b8) 07:51:48:721 GetExistingLocalProfileImage: Found
entry in profile list for existing local profile
USERENV(350.3b8) 07:51:48:721 GetExistingLocalProfileImage: Local
profile image filename = <%SystemDrive%\Documents and Settings
\NetworkService>
USERENV(350.3b8) 07:51:48:721 GetExistingLocalProfileImage: Expanded
local profile image filename = <C:\Documents and Settings
\NetworkService>
USERENV(350.3b8) 07:51:48:802 GetExistingLocalProfileImage: Found
local profile image file ok <C:\Documents and Settings\NetworkService
\ntuser.dat>
USERENV(350.3b8) 07:51:48:802 GetExistingLocalProfileImage: Failed to
query low profile unload time with error 2
USERENV(350.3b8) 07:51:48:802 Local Existing Profile Image is
reachable
USERENV(350.3b8) 07:51:48:802 Local profile name is <C:\Documents and
Settings\NetworkService>
USERENV(350.3b8) 07:51:48:802 RestoreUserProfile: No central
profile. Attempting to load local profile.
USERENV(350.3b8) 07:51:48:832 MyRegLoadKey: Returning 00000000
USERENV(350.3b8) 07:51:48:852 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(350.3b8) 07:51:48:932 MyRegLoadKey: Returning 00000000
USERENV(350.3b8) 07:51:48:932 CreateClassHive: existing user classes
hive found
USERENV(350.3b8) 07:51:48:932 RestoreUserProfile: About to Leave.
Final Information follows:
USERENV(350.3b8) 07:51:48:932 Profile was successfully loaded.
USERENV(350.3b8) 07:51:48:932 lpProfile->lpRoamingProfile = <>
USERENV(350.3b8) 07:51:48:932 lpProfile->lpLocalProfile = <C:
\Documents and Settings\NetworkService>
USERENV(350.3b8) 07:51:48:932 lpProfile->dwInternalFlags = 0x0
USERENV(350.3b8) 07:51:48:932 RestoreUserProfile: Leaving.
USERENV(350.3b8) 07:51:49:042 UpgradeProfile: Entering
USERENV(350.3b8) 07:51:49:042 UpgradeProfile: Build numbers match
USERENV(350.3b8) 07:51:49:042 UpgradeProfile: Leaving Successfully
USERENV(350.3b8) 07:51:49:082 GetProfileType: Profile already loaded.
USERENV(350.3b8) 07:51:49:082 LoadProfileInfo: Failed to query
central profile with error 2
USERENV(350.3b8) 07:51:49:082 GetProfileType: ProfileFlags is 0
USERENV(350.3b8) 07:51:49:162 Profile Ref Count is 1
USERENV(350.3b8) 07:51:49:162 LoadUserProfile: Leaving critical
Section.
USERENV(350.3b8) 07:51:49:162 CSyncManager::LeaveLock <S-1-5-20>
USERENV(350.3b8) 07:51:49:162 CSyncManager::LeaveLock: Lock released
USERENV(350.3b8) 07:51:49:162 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(350.3b8) 07:51:49:162 CSyncManager::LeaveLock: Lock deleted
USERENV(350.3b8) 07:51:49:212 LoadUserProfile: Reverted to user:
00000000
USERENV(350.3b8) 07:51:49:212 LoadUserProfile: Reverted back to user
<00000000>
USERENV(350.3b8) 07:51:49:212 LoadUserProfile: Leaving with a value of
1.
USERENV(350.3b8) 07:51:49:212
=========================================================
USERENV(350.3b8) 07:51:49:212 LoadUserProfileI: returning 0
USERENV(3dc.3e0) 07:51:49:212 LoadUserProfile: Running as self
USERENV(3dc.3e0) 07:51:49:212 LoadUserProfile: Calling
LoadUserProfileI (as user) succeeded
USERENV(3dc.3e0) 07:51:49:212 LoadUserProfile: Returning success.
Final Information follows:
USERENV(3dc.3e0) 07:51:49:212 lpProfileInfo->UserName =
<NetworkService>
USERENV(3dc.3e0) 07:51:49:212 lpProfileInfo->lpProfilePath = <>
USERENV(3dc.3e0) 07:51:49:212 lpProfileInfo->dwFlags = 0x9
USERENV(350.544) 07:51:49:212 IProfileSecurityCallBack: client
authenticated.
USERENV(350.544) 07:51:49:212 ReleaseClientContext: Releasing context
USERENV(350.544) 07:51:49:212 ReleaseClientContext_s: Releasing
context
USERENV(350.544) 07:51:49:212 MIDL_user_free enter
USERENV(3dc.3e0) 07:51:49:212 ReleaseInterface: Releasing rpc binding
handle
USERENV(3dc.3e0) 07:51:49:212 LoadUserProfile: Returning TRUE.
hProfile = <0x334>
USERENV(3dc.3e0) 07:51:49:212 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(5cc.5d0) 07:51:49:623 LibMain: Process Name: C:\WINDOWS
\System32\svchost.exe
USERENV(350.354) 07:51:49:723 IsSyncForegroundPolicyRefresh:
Asynchronous, Reason: NoNeedForSync
USERENV(3dc.3e0) 07:51:49:803 LoadUserProfile: Yes, we can impersonate
the user. Running as self
USERENV(3dc.3e0) 07:51:49:803
=========================================================
USERENV(3dc.3e0) 07:51:49:803 LoadUserProfile: Entering, hToken =
<0x358>, lpProfileInfo = 0x7fcf8
USERENV(3dc.3e0) 07:51:49:803 LoadUserProfile: lpProfileInfo->dwFlags
= <0x9>
USERENV(3dc.3e0) 07:51:49:803 LoadUserProfile: lpProfileInfo-
lpUserName = <NetworkService>
USERENV(3dc.3e0) 07:51:49:803 LoadUserProfile: NULL central profile
path
USERENV(3dc.3e0) 07:51:49:803 LoadUserProfile: NULL default profile
path
USERENV(3dc.3e0) 07:51:49:803 LoadUserProfile: NULL server name
USERENV(3dc.3e0) 07:51:49:803 GetInterface: Returning rpc binding
handle
USERENV(350.3b8) 07:51:49:813 IProfileSecurityCallBack: client
authenticated.
USERENV(350.3b8) 07:51:49:813 DropClientContext: Got client token
00000664, sid = S-1-5-18
USERENV(350.3b8) 07:51:49:813 MIDL_user_allocate enter
USERENV(350.3b8) 07:51:49:813 DropClientContext: load profile object
successfully made
USERENV(350.3b8) 07:51:49:813 DropClientContext: Returning 0
USERENV(3dc.3e0) 07:51:49:813 LoadUserProfile: Calling DropClientToken
(as self) succeeded
USERENV(350.544) 07:51:49:813 IProfileSecurityCallBack: client
authenticated.
USERENV(350.544) 07:51:49:813 In LoadUserProfileP
USERENV(350.544) 07:51:49:813 LoadUserProfile: Running as client
USERENV(350.544) 07:51:49:813
=========================================================
USERENV(350.544) 07:51:49:813 LoadUserProfile: Entering, hToken =
<0x668>, lpProfileInfo = 0xe4ffc0
USERENV(350.544) 07:51:49:813 LoadUserProfile: lpProfileInfo->dwFlags
= <0x9>
USERENV(350.544) 07:51:49:813 LoadUserProfile: lpProfileInfo-
lpUserName = <NetworkService>
USERENV(350.544) 07:51:49:813 LoadUserProfile: NULL central profile
path
USERENV(350.544) 07:51:49:813 LoadUserProfile: NULL default profile
path
USERENV(350.544) 07:51:49:813 LoadUserProfile: NULL server name
USERENV(350.544) 07:51:49:813 LoadUserProfile: User sid: S-1-5-20
USERENV(350.544) 07:51:49:813 CSyncManager::EnterLock <S-1-5-20>
USERENV(350.544) 07:51:49:813 CSyncManager::EnterLock: No existing
entry found
USERENV(350.544) 07:51:49:813 CSyncManager::EnterLock: New entry
created
USERENV(350.544) 07:51:49:813 CHashTable::HashAdd: S-1-5-20 added in
bucket 4
USERENV(350.544) 07:51:49:813 LoadUserProfile: Wait succeeded. In
critical section.
USERENV(350.544) 07:51:49:813 TestIfUserProfileLoaded: Profile
already loaded.
USERENV(350.544) 07:51:49:813 Profile Ref Count is 2
USERENV(350.544) 07:51:49:813 LoadUserProfile: Leaving critical
Section.
USERENV(350.544) 07:51:49:813 CSyncManager::LeaveLock <S-1-5-20>
USERENV(350.544) 07:51:49:813 CSyncManager::LeaveLock: Lock released
USERENV(350.544) 07:51:49:813 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(350.544) 07:51:49:813 CSyncManager::LeaveLock: Lock deleted
USERENV(350.544) 07:51:49:813 LoadUserProfile: Reverted to user:
00000000
USERENV(350.544) 07:51:49:813 LoadUserProfile: Reverted back to user
<00000000>
USERENV(350.544) 07:51:49:813 LoadUserProfile: Leaving with a value of
1.
USERENV(350.544) 07:51:49:813
=========================================================
USERENV(350.544) 07:51:49:813 LoadUserProfileI: returning 0
USERENV(3dc.3e0) 07:51:49:813 LoadUserProfile: Running as self
USERENV(3dc.3e0) 07:51:49:813 LoadUserProfile: Calling
LoadUserProfileI (as user) succeeded
USERENV(3dc.3e0) 07:51:49:813 LoadUserProfile: Returning success.
Final Information follows:
USERENV(3dc.3e0) 07:51:49:813 lpProfileInfo->UserName =
<NetworkService>
USERENV(3dc.3e0) 07:51:49:813 lpProfileInfo->lpProfilePath = <>
USERENV(3dc.3e0) 07:51:49:813 lpProfileInfo->dwFlags = 0x9
USERENV(350.3b8) 07:51:49:813 IProfileSecurityCallBack: client
authenticated.
USERENV(350.3b8) 07:51:49:813 ReleaseClientContext: Releasing context
USERENV(350.3b8) 07:51:49:813 ReleaseClientContext_s: Releasing
context
USERENV(350.3b8) 07:51:49:813 MIDL_user_free enter
USERENV(3dc.3e0) 07:51:49:813 ReleaseInterface: Releasing rpc binding
handle
USERENV(3dc.3e0) 07:51:49:813 LoadUserProfile: Returning TRUE.
hProfile = <0x360>
USERENV(3dc.3e0) 07:51:49:813 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(350.600) 07:51:49:853 IsSyncForegroundPolicyRefresh:
Asynchronous, Reason: NoNeedForSync
USERENV(3dc.3e0) 07:51:49:883 LoadUserProfile: Yes, we can impersonate
the user. Running as self
USERENV(3dc.3e0) 07:51:49:883
=========================================================
USERENV(3dc.3e0) 07:51:49:883 LoadUserProfile: Entering, hToken =
<0x378>, lpProfileInfo = 0x7fcf8
USERENV(3dc.3e0) 07:51:49:883 LoadUserProfile: lpProfileInfo->dwFlags
= <0x9>
USERENV(3dc.3e0) 07:51:49:883 LoadUserProfile: lpProfileInfo-
lpUserName = <LocalService>
USERENV(3dc.3e0) 07:51:49:883 LoadUserProfile: NULL central profile
path
USERENV(3dc.3e0) 07:51:49:883 LoadUserProfile: NULL default profile
path
USERENV(3dc.3e0) 07:51:49:883 LoadUserProfile: NULL server name
USERENV(3dc.3e0) 07:51:49:883 GetInterface: Returning rpc binding
handle
USERENV(350.544) 07:51:49:883 IProfileSecurityCallBack: client
authenticated.
USERENV(350.544) 07:51:49:883 DropClientContext: Got client token
000006A4, sid = S-1-5-18
USERENV(350.544) 07:51:49:883 MIDL_user_allocate enter
USERENV(350.544) 07:51:49:883 DropClientContext: load profile object
successfully made
USERENV(350.544) 07:51:49:883 DropClientContext: Returning 0
USERENV(3dc.3e0) 07:51:49:883 LoadUserProfile: Calling DropClientToken
(as self) succeeded
USERENV(350.3b8) 07:51:49:883 IProfileSecurityCallBack: client
authenticated.
USERENV(350.3b8) 07:51:49:883 In LoadUserProfileP
USERENV(350.3b8) 07:51:49:883 LoadUserProfile: Running as client
USERENV(350.3b8) 07:51:49:883
=========================================================
USERENV(350.3b8) 07:51:49:883 LoadUserProfile: Entering, hToken =
<0x6a8>, lpProfileInfo = 0xe519e0
USERENV(350.3b8) 07:51:49:883 LoadUserProfile: lpProfileInfo->dwFlags
= <0x9>
USERENV(350.3b8) 07:51:49:883 LoadUserProfile: lpProfileInfo-
lpUserName = <LocalService>
USERENV(350.3b8) 07:51:49:883 LoadUserProfile: NULL central profile
path
USERENV(350.3b8) 07:51:49:883 LoadUserProfile: NULL default profile
path
USERENV(350.3b8) 07:51:49:883 LoadUserProfile: NULL server name
USERENV(350.3b8) 07:51:49:883 LoadUserProfile: User sid: S-1-5-19
USERENV(350.3b8) 07:51:49:883 CSyncManager::EnterLock <S-1-5-19>
USERENV(350.3b8) 07:51:49:883 CSyncManager::EnterLock: No existing
entry found
USERENV(350.3b8) 07:51:49:883 CSyncManager::EnterLock: New entry
created
USERENV(350.3b8) 07:51:49:883 CHashTable::HashAdd: S-1-5-19 added in
bucket 12
USERENV(350.3b8) 07:51:49:883 LoadUserProfile: Wait succeeded. In
critical section.
USERENV(350.3b8) 07:51:49:883 RestoreUserProfile: Entering
USERENV(350.3b8) 07:51:49:883 IsCentralProfileReachable: Entering
USERENV(350.3b8) 07:51:49:883 IsCentralProfileReachable: Null path.
Leaving
USERENV(350.3b8) 07:51:49:883 RestoreUserProfile: Profile path = <>
USERENV(350.3b8) 07:51:49:883 ExtractProfileFromBackup: A profile
already exists
USERENV(350.3b8) 07:51:49:883 PatchNewProfileIfRequred: A profile
already exists with the current sid, exitting
USERENV(350.3b8) 07:51:49:883 CreateLocalProfileKey: Not setting
additional Security
USERENV(350.3b8) 07:51:49:883 GetExistingLocalProfileImage: Found
entry in profile list for existing local profile
USERENV(350.3b8) 07:51:49:883 GetExistingLocalProfileImage: Local
profile image filename = <%SystemDrive%\Documents and Settings
\LocalService>
USERENV(350.3b8) 07:51:49:883 GetExistingLocalProfileImage: Expanded
local profile image filename = <C:\Documents and Settings
\LocalService>
USERENV(350.3b8) 07:51:49:953 GetExistingLocalProfileImage: Found
local profile image file ok <C:\Documents and Settings\LocalService
\ntuser.dat>
USERENV(350.3b8) 07:51:49:953 GetExistingLocalProfileImage: Failed to
query low profile unload time with error 2
USERENV(350.3b8) 07:51:49:953 Local Existing Profile Image is
reachable
USERENV(350.3b8) 07:51:49:953 Local profile name is <C:\Documents and
Settings\LocalService>
USERENV(350.3b8) 07:51:49:953 RestoreUserProfile: No central
profile. Attempting to load local profile.
USERENV(350.3b8) 07:51:50:003 MyRegLoadKey: Returning 00000000
USERENV(350.3b8) 07:51:50:214 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(350.3b8) 07:51:50:304 MyRegLoadKey: Returning 00000000
USERENV(350.3b8) 07:51:50:304 CreateClassHive: existing user classes
hive found
USERENV(350.3b8) 07:51:50:314 RestoreUserProfile: About to Leave.
Final Information follows:
USERENV(350.3b8) 07:51:50:314 Profile was successfully loaded.
USERENV(350.3b8) 07:51:50:314 lpProfile->lpRoamingProfile = <>
USERENV(350.3b8) 07:51:50:314 lpProfile->lpLocalProfile = <C:
\Documents and Settings\LocalService>
USERENV(350.3b8) 07:51:50:314 lpProfile->dwInternalFlags = 0x0
USERENV(350.3b8) 07:51:50:314 RestoreUserProfile: Leaving.
USERENV(350.3b8) 07:51:50:394 UpgradeProfile: Entering
USERENV(350.3b8) 07:51:50:394 UpgradeProfile: Build numbers match
USERENV(350.3b8) 07:51:50:394 UpgradeProfile: Leaving Successfully
USERENV(350.3b8) 07:51:50:404 GetProfileType: Profile already loaded.
USERENV(350.3b8) 07:51:50:404 LoadProfileInfo: Failed to query
central profile with error 2
USERENV(350.3b8) 07:51:50:404 GetProfileType: ProfileFlags is 0
USERENV(350.3b8) 07:51:50:574 Profile Ref Count is 1
USERENV(350.3b8) 07:51:50:574 LoadUserProfile: Leaving critical
Section.
USERENV(350.3b8) 07:51:50:574 CSyncManager::LeaveLock <S-1-5-19>
USERENV(350.3b8) 07:51:50:574 CSyncManager::LeaveLock: Lock released
USERENV(350.3b8) 07:51:50:574 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(350.3b8) 07:51:50:574 CSyncManager::LeaveLock: Lock deleted
USERENV(350.3b8) 07:51:50:634 LoadUserProfile: Reverted to user:
00000000
USERENV(350.3b8) 07:51:50:634 LoadUserProfile: Reverted back to user
<00000000>
USERENV(350.3b8) 07:51:50:634 LoadUserProfile: Leaving with a value of
1.
USERENV(350.3b8) 07:51:50:634
=========================================================
USERENV(350.3b8) 07:51:50:634 LoadUserProfileI: returning 0
USERENV(3dc.3e0) 07:51:50:634 LoadUserProfile: Running as self
USERENV(3dc.3e0) 07:51:50:634 LoadUserProfile: Calling
LoadUserProfileI (as user) succeeded
USERENV(3dc.3e0) 07:51:50:634 LoadUserProfile: Returning success.
Final Information follows:
USERENV(3dc.3e0) 07:51:50:634 lpProfileInfo->UserName = <LocalService>
USERENV(3dc.3e0) 07:51:50:634 lpProfileInfo->lpProfilePath = <>
USERENV(3dc.3e0) 07:51:50:634 lpProfileInfo->dwFlags = 0x9
USERENV(350.544) 07:51:50:634 IProfileSecurityCallBack: client
authenticated.
USERENV(350.544) 07:51:50:634 ReleaseClientContext: Releasing context
USERENV(350.544) 07:51:50:634 ReleaseClientContext_s: Releasing
context
USERENV(350.544) 07:51:50:634 MIDL_user_free enter
USERENV(3dc.3e0) 07:51:50:634 ReleaseInterface: Releasing rpc binding
handle
USERENV(3dc.3e0) 07:51:50:634 LoadUserProfile: Returning TRUE.
hProfile = <0x390>
USERENV(3dc.3e0) 07:51:50:634 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(c4.c8) 07:51:53:659 LibMain: Process Name: C:\WINDOWS
\system32\spoolsv.exe
USERENV(350.600) 07:51:54:169 ApplyGroupPolicy: Entering. Flags = f
USERENV(350.600) 07:51:54:169 ProcessGPOs:
USERENV(350.600) 07:51:54:169 ProcessGPOs:
USERENV(350.600) 07:51:54:169 ProcessGPOs: Starting computer Group
Policy (Async forground) processing...
USERENV(350.600) 07:51:54:169 ProcessGPOs:
USERENV(350.600) 07:51:54:169 ProcessGPOs:
USERENV(350.600) 07:51:54:169 EnterCriticalPolicySectionEx: Entering
with timeout 600000 and flags 0x0
USERENV(350.600) 07:51:54:169 EnterCriticalPolicySectionEx: Machine
critical section has been claimed. Handle = 0x758
USERENV(350.600) 07:51:54:169 EnterCriticalPolicySectionEx: Leaving
successfully.
USERENV(350.600) 07:51:54:169 ProcessGPOs: Machine role is 2.
USERENV(350.600) 07:51:54:370 PingComputer: Adapter speed 1000000000
bps
USERENV(350.600) 07:51:54:370 PingComputer: First time: 0
USERENV(350.600) 07:51:54:370 PingComputer: Fast link. Exiting.
USERENV(218.21c) 07:51:55:601 LibMain: Process Name: C:\WINDOWS
\system32\msiexec.exe
USERENV(270.26c) 07:51:56:413 LibMain: Process Name: C:\ORACLE
\ora92\bin\omtsreco.exe
USERENV(2e8.2ec) 07:51:57:454 LibMain: Process Name: C:\WINDOWS
\system32\svchost.exe
USERENV(3dc.3e0) 07:51:57:454 LoadUserProfile: Yes, we can impersonate
the user. Running as self
USERENV(3dc.3e0) 07:51:57:464
=========================================================
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: Entering, hToken =
<0x40c>, lpProfileInfo = 0x7fcf8
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: lpProfileInfo->dwFlags
= <0x9>
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: lpProfileInfo-
lpUserName = <LocalService>
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: NULL central profile
path
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: NULL default profile
path
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: NULL server name
USERENV(3dc.3e0) 07:51:57:464 GetInterface: Returning rpc binding
handle
USERENV(350.3b8) 07:51:57:464 IProfileSecurityCallBack: client
authenticated.
USERENV(350.3b8) 07:51:57:464 DropClientContext: Got client token
000007A0, sid = S-1-5-18
USERENV(350.3b8) 07:51:57:464 MIDL_user_allocate enter
USERENV(350.3b8) 07:51:57:464 DropClientContext: load profile object
successfully made
USERENV(350.3b8) 07:51:57:464 DropClientContext: Returning 0
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: Calling DropClientToken
(as self) succeeded
USERENV(350.544) 07:51:57:464 IProfileSecurityCallBack: client
authenticated.
USERENV(350.544) 07:51:57:464 In LoadUserProfileP
USERENV(350.544) 07:51:57:464 LoadUserProfile: Running as client
USERENV(350.544) 07:51:57:464
=========================================================
USERENV(350.544) 07:51:57:464 LoadUserProfile: Entering, hToken =
<0x7ac>, lpProfileInfo = 0xe5ecd8
USERENV(350.544) 07:51:57:464 LoadUserProfile: lpProfileInfo->dwFlags
= <0x9>
USERENV(350.544) 07:51:57:464 LoadUserProfile: lpProfileInfo-
lpUserName = <LocalService>
USERENV(350.544) 07:51:57:464 LoadUserProfile: NULL central profile
path
USERENV(350.544) 07:51:57:464 LoadUserProfile: NULL default profile
path
USERENV(350.544) 07:51:57:464 LoadUserProfile: NULL server name
USERENV(350.544) 07:51:57:464 LoadUserProfile: User sid: S-1-5-19
USERENV(350.544) 07:51:57:464 CSyncManager::EnterLock <S-1-5-19>
USERENV(350.544) 07:51:57:464 CSyncManager::EnterLock: No existing
entry found
USERENV(350.544) 07:51:57:464 CSyncManager::EnterLock: New entry
created
USERENV(350.544) 07:51:57:464 CHashTable::HashAdd: S-1-5-19 added in
bucket 12
USERENV(350.544) 07:51:57:464 LoadUserProfile: Wait succeeded. In
critical section.
USERENV(350.544) 07:51:57:464 TestIfUserProfileLoaded: Profile
already loaded.
USERENV(350.544) 07:51:57:464 Profile Ref Count is 2
USERENV(350.544) 07:51:57:464 LoadUserProfile: Leaving critical
Section.
USERENV(350.544) 07:51:57:464 CSyncManager::LeaveLock <S-1-5-19>
USERENV(350.544) 07:51:57:464 CSyncManager::LeaveLock: Lock released
USERENV(350.544) 07:51:57:464 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(350.544) 07:51:57:464 CSyncManager::LeaveLock: Lock deleted
USERENV(350.544) 07:51:57:464 LoadUserProfile: Reverted to user:
00000000
USERENV(350.544) 07:51:57:464 LoadUserProfile: Reverted back to user
<00000000>
USERENV(350.544) 07:51:57:464 LoadUserProfile: Leaving with a value of
1.
USERENV(350.544) 07:51:57:464
=========================================================
USERENV(350.544) 07:51:57:464 LoadUserProfileI: returning 0
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: Running as self
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: Calling
LoadUserProfileI (as user) succeeded
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: Returning success.
Final Information follows:
USERENV(3dc.3e0) 07:51:57:464 lpProfileInfo->UserName = <LocalService>
USERENV(3dc.3e0) 07:51:57:464 lpProfileInfo->lpProfilePath = <>
USERENV(3dc.3e0) 07:51:57:464 lpProfileInfo->dwFlags = 0x9
USERENV(350.3b8) 07:51:57:464 IProfileSecurityCallBack: client
authenticated.
USERENV(350.3b8) 07:51:57:464 ReleaseClientContext: Releasing context
USERENV(350.3b8) 07:51:57:464 ReleaseClientContext_s: Releasing
context
USERENV(350.3b8) 07:51:57:464 MIDL_user_free enter
USERENV(3dc.3e0) 07:51:57:464 ReleaseInterface: Releasing rpc binding
handle
USERENV(3dc.3e0) 07:51:57:464 LoadUserProfile: Returning TRUE.
hProfile = <0x404>
USERENV(3dc.3e0) 07:51:57:464 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(350.600) 07:52:02:061 ProcessGPOs: network name is
cslg1.cslg.net
USERENV(350.600) 07:52:02:061 ProcessGPOs: User name is:
CN=EUCHBRN2322W,OU=Workstations,OU=CH
BRN,OU=EU,DC=cslg1,DC=cslg,DC=net, Domain name is: CSLG1
USERENV(350.600) 07:52:02:061 ProcessGPOs: Domain controller is: \
\euchbrnsdc03.cslg1.cslg.net Domain DN is cslg1.cslg.net
USERENV(350.600) 07:52:02:061 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(350.600) 07:52:02:061 ReadGPExtensions: Rsop entry point not
found for dskquota.dll.
USERENV(350.600) 07:52:02:061 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(350.600) 07:52:02:061 ReadGPExtensions: Rsop entry point not
found for iedkcs32.dll.
USERENV(350.600) 07:52:02:071 ReadGPExtensions: Rsop entry point not
found for scecli.dll.
USERENV(350.600) 07:52:02:071 ReadGPExtensions: Rsop entry point not
found for C:\WINDOWS\System32\cscui.dll.
USERENV(350.600) 07:52:02:071 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(350.600) 07:52:02:071 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(350.600) 07:52:02:071 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(350.600) 07:52:02:071 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {C631DF4C-088F-4156-B058-4375F0853CD8}
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(350.600) 07:52:02:071 ReadExtStatus: Reading Previous Status
for extension {F6E72D5A-6ED3-43D9-9710-4440455F6934}
USERENV(350.600) 07:52:02:071 ProcessGPOs: Calling GetGPOInfo for
normal policy mode
USERENV(350.600) 07:52:02:071 GetGPOInfo:
********************************
USERENV(350.600) 07:52:02:071 GetGPOInfo: Entering...
USERENV(350.600) 07:52:02:221 GetGPOInfo: Server connection
established.
USERENV(350.600) 07:52:02:251 GetGPOInfo: Bound successfully.
USERENV(350.600) 07:52:02:301 SearchDSObject: Searching
<OU=Workstations,OU=CH BRN,OU=EU,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 SearchDSObject: Found GPO(s): <[LDAP://
cn={FE759947-
FAC3-4B56-82A2-1AD2483D0069},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net;
0][LDAP://
cn={3126E24F-24B0-4FDC-9171-047D3CD7ED7B},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net;
0][LDAP://cn={6E13097B-1014-4AD1-
AA37-2710C695181F},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net;0]
[LDAP://
cn={AE9EACA3-4E32-4781-8326-36C18BFB7BF0},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net;
0][LDAP://cn={6E123ACE-F947-4514-A843-
C3A8C86CF8A4},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net;0][LDAP://
cn={D4061591-D2E3-48C6-B2F6-
C5D90A80971E},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net;0]>
USERENV(350.600) 07:52:02:301 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:301 ProcessGPO: Deferring search for
<LDAP://cn={FE759947-
FAC3-4B56-82A2-1AD2483D0069},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:301 ProcessGPO: Deferring search for
<LDAP://
cn={3126E24F-24B0-4FDC-9171-047D3CD7ED7B},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:301 ProcessGPO: Deferring search for
<LDAP://cn={6E13097B-1014-4AD1-
AA37-2710C695181F},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:301 ProcessGPO: Deferring search for
<LDAP://
cn={AE9EACA3-4E32-4781-8326-36C18BFB7BF0},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:301 ProcessGPO: Deferring search for
<LDAP://cn={6E123ACE-F947-4514-A843-
C3A8C86CF8A4},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:301 ProcessGPO: Deferring search for
<LDAP://cn={D4061591-D2E3-48C6-B2F6-
C5D90A80971E},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 SearchDSObject: Searching <OU=CH
BRN,OU=EU,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 SearchDSObject: Found GPO(s): < >
USERENV(350.600) 07:52:02:301 SearchDSObject: Searching
<OU=EU,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 SearchDSObject: Found GPO(s): <[LDAP://
CN={6EF5CC41-
EA13-43EE-9101-2B22A8354A62},CN=Policies,CN=System,DC=cslg1,DC=cslg,DC=net;
0]>
USERENV(350.600) 07:52:02:301 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:301 ProcessGPO: Deferring search for
<LDAP://CN={6EF5CC41-
EA13-43EE-9101-2B22A8354A62},CN=Policies,CN=System,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 SearchDSObject: Searching
<DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 SearchDSObject: Found GPO(s): <[LDAP://
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=cslg1,DC=cslg,DC=net;
0]>
USERENV(350.600) 07:52:02:301 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:301 ProcessGPO: Deferring search for
<LDAP://
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 SearchDSObject: Searching
<CN=euchbrn,CN=Sites,CN=Configuration,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:301 SearchDSObject: No GPO(s) for this
object.
USERENV(350.600) 07:52:02:311 EvaluateDeferredGPOs: Searching for
GPOs in cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net
USERENV(350.600) 07:52:02:311 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:311 ProcessGPO: Searching
<CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:311 ProcessGPO: Machine has access to this
GPO.
USERENV(350.600) 07:52:02:311 ProcessGPO: GPO passes the filter
check.
USERENV(350.600) 07:52:02:311 ProcessGPO: Found functionality version
of: 2
USERENV(350.600) 07:52:02:311 ProcessGPO: Found file system path of:
<\\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(350.600) 07:52:02:341 ProcessGPO: Found common name of:
<{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(350.600) 07:52:02:341 ProcessGPO: Found display name of:
<Default Domain Policy>
USERENV(350.600) 07:52:02:341 ProcessGPO: Found machine version of:
GPC is 204, GPT is 204
USERENV(350.600) 07:52:02:341 ProcessGPO: Found flags of: 0
USERENV(350.600) 07:52:02:341 ProcessGPO: Found extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-
A28C-00C04FB94F17}{53D6AB1D-2488-11D1-A28C-00C04FB94F17}]
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-
A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
{53D6AB1B-2488-11D1-A28C-00C04FB94F17}{53D6AB1D-2488-11D1-
A28C-00C04FB94F17}]
USERENV(350.600) 07:52:02:341 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:341 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:341 ProcessGPO: Searching <CN={6EF5CC41-
EA13-43EE-9101-2B22A8354A62},CN=Policies,CN=System,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:341 ProcessGPO: Machine has access to this
GPO.
USERENV(350.600) 07:52:02:341 ProcessGPO: GPO passes the filter
check.
USERENV(350.600) 07:52:02:341 ProcessGPO: Found functionality version
of: 2
USERENV(350.600) 07:52:02:341 ProcessGPO: Found file system path of:
<\\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}>
USERENV(350.600) 07:52:02:341 ProcessGPO: Found common name of:
<{6EF5CC41-EA13-43EE-9101-2B22A8354A62}>
USERENV(350.600) 07:52:02:341 ProcessGPO: Found display name of: <EU
Policy>
USERENV(350.600) 07:52:02:341 ProcessGPO: Found machine version of:
GPC is 3, GPT is 3
USERENV(350.600) 07:52:02:341 ProcessGPO: Found flags of: 0
USERENV(350.600) 07:52:02:341 ProcessGPO: Found extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-
A7CC-0000F87571E3}]
USERENV(350.600) 07:52:02:341 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:341 EvalList: Object <cn={FE759947-
FAC3-4B56-82A2-1AD2483D0069},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
cannot be accessed
USERENV(350.600) 07:52:02:341 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:341 ProcessGPO: Searching
<cn={3126E24F-24B0-4FDC-9171-047D3CD7ED7B},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
USERENV(350.600) 07:52:02:341 ProcessGPO: Machine has access to this
GPO.
USERENV(350.600) 07:52:02:341 ProcessGPO: GPO passes the filter
check.
USERENV(350.600) 07:52:02:341 ProcessGPO: Found functionality version
of: 2
USERENV(350.600) 07:52:02:341 ProcessGPO: Found file system path of:
<\\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}>
USERENV(350.600) 07:52:02:341 ProcessGPO: Found common name of:
<{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}>
USERENV(350.600) 07:52:02:341 ProcessGPO: Found display name of:
<BRNBPL - Default Workstations - GPO>
USERENV(350.600) 07:52:02:341 ProcessGPO: Found machine version of:
GPC is 11, GPT is 11
USERENV(350.600) 07:52:02:341 ProcessGPO: Found flags of: 0
USERENV(350.600) 07:52:02:341 ProcessGPO: Found extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-
A7CC-0000F87571E3}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-
B4FB-11D0-A0D0-00A0C90F574B}]
USERENV(350.600) 07:52:02:341 ProcessGPO:
==============================
USERENV(350.600) 07:52:02:341 EvalList: Object <cn={6E13097B-1014-4AD1-
AA37-2710C695181F},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
cannot be accessed
USERENV(350.600) 07:52:02:341 EvalList: Object
<cn={AE9EACA3-4E32-4781-8326-36C18BFB7BF0},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
cannot be accessed
USERENV(350.600) 07:52:02:341 EvalList: Object <cn={6E123ACE-F947-4514-
A843-C3A8C86CF8A4},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
cannot be accessed
USERENV(350.600) 07:52:02:341 EvalList: Object <cn={D4061591-D2E3-48C6-
B2F6-C5D90A80971E},cn=policies,cn=system,DC=cslg1,DC=cslg,DC=net>
cannot be accessed
USERENV(350.600) 07:52:02:451 GetGPOInfo: Leaving with 1
USERENV(350.600) 07:52:02:451 GetGPOInfo:
********************************
USERENV(350.600) 07:52:02:471 ReadMembershipList: Old count 13 is
different from current count 12
USERENV(350.600) 07:52:02:481 ProcessGPOs: Logging Data for Target
<EUCHBRN2322W>.
USERENV(350.600) 07:52:02:491 GetWbemServices: CoCreateInstance
succeeded
USERENV(350.600) 07:52:02:661 ConnectToNameSpace: ConnectServer
returned 0x0
USERENV(350.600) 07:52:02:882 CSessionLogger::Log: logging new
security grps
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: Yes, we can impersonate
the user. Running as self
USERENV(3dc.5b4) 07:52:02:942
=========================================================
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: Entering, hToken =
<0x37c>, lpProfileInfo = 0x10df6ec
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: lpProfileInfo->dwFlags
= <0x9>
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: lpProfileInfo-
lpUserName = <LocalService>
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: NULL central profile
path
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: NULL default profile
path
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: NULL server name
USERENV(3dc.5b4) 07:52:02:942 GetInterface: Returning rpc binding
handle
USERENV(350.544) 07:52:02:942 IProfileSecurityCallBack: client
authenticated.
USERENV(350.544) 07:52:02:942 DropClientContext: Got client token
00000854, sid = S-1-5-18
USERENV(350.544) 07:52:02:942 MIDL_user_allocate enter
USERENV(350.544) 07:52:02:942 DropClientContext: load profile object
successfully made
USERENV(350.544) 07:52:02:942 DropClientContext: Returning 0
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: Calling DropClientToken
(as self) succeeded
USERENV(350.3b8) 07:52:02:942 IProfileSecurityCallBack: client
authenticated.
USERENV(350.3b8) 07:52:02:942 In LoadUserProfileP
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: Running as client
USERENV(350.3b8) 07:52:02:942
=========================================================
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: Entering, hToken =
<0x858>, lpProfileInfo = 0xe81818
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: lpProfileInfo->dwFlags
= <0x9>
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: lpProfileInfo-
lpUserName = <LocalService>
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: NULL central profile
path
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: NULL default profile
path
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: NULL server name
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: User sid: S-1-5-19
USERENV(350.3b8) 07:52:02:942 CSyncManager::EnterLock <S-1-5-19>
USERENV(350.3b8) 07:52:02:942 CSyncManager::EnterLock: No existing
entry found
USERENV(350.3b8) 07:52:02:942 CSyncManager::EnterLock: New entry
created
USERENV(350.3b8) 07:52:02:942 CHashTable::HashAdd: S-1-5-19 added in
bucket 12
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: Wait succeeded. In
critical section.
USERENV(350.3b8) 07:52:02:942 TestIfUserProfileLoaded: Profile
already loaded.
USERENV(350.3b8) 07:52:02:942 Profile Ref Count is 3
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: Leaving critical
Section.
USERENV(350.3b8) 07:52:02:942 CSyncManager::LeaveLock <S-1-5-19>
USERENV(350.3b8) 07:52:02:942 CSyncManager::LeaveLock: Lock released
USERENV(350.3b8) 07:52:02:942 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(350.3b8) 07:52:02:942 CSyncManager::LeaveLock: Lock deleted
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: Reverted to user:
00000000
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: Reverted back to user
<00000000>
USERENV(350.3b8) 07:52:02:942 LoadUserProfile: Leaving with a value of
1.
USERENV(350.3b8) 07:52:02:942
=========================================================
USERENV(350.3b8) 07:52:02:942 LoadUserProfileI: returning 0
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: Running as self
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: Calling
LoadUserProfileI (as user) succeeded
USERENV(3dc.5b4) 07:52:02:942 LoadUserProfile: Returning success.
Final Information follows:
USERENV(3dc.5b4) 07:52:02:942 lpProfileInfo->UserName = <LocalService>
USERENV(3dc.5b4) 07:52:02:942 lpProfileInfo->lpProfilePath = <>
USERENV(3dc.5b4) 07:52:02:942 lpProfileInfo->dwFlags = 0x9
USERENV(350.544) 07:52:02:942 IProfileSecurityCallBack: client
authenticated.
USERENV(350.544) 07:52:02:942 ReleaseClientContext: Releasing context
USERENV(350.544) 07:52:02:952 ReleaseClientContext_s: Releasing
context
USERENV(350.544) 07:52:02:952 MIDL_user_free enter
USERENV(3dc.5b4) 07:52:02:952 ReleaseInterface: Releasing rpc binding
handle
USERENV(3dc.5b4) 07:52:02:952 LoadUserProfile: Returning TRUE.
hProfile = <0x444>
USERENV(3dc.5b4) 07:52:02:952 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(350.600) 07:52:03:373 LogRsopData: Successfully logged Rsop
data
USERENV(350.600) 07:52:03:373 ProcessGPOs: Logged Rsop Data
successfully.
USERENV(350.600) 07:52:03:413 ProcessGPOs: OpenThreadToken failed with
error 1008, assuming thread is not impersonating
USERENV(350.600) 07:52:03:413 ProcessGPOs: -----------------------
USERENV(350.600) 07:52:03:413 ProcessGPOs: Processing extension
Registrierung
USERENV(350.600) 07:52:03:413 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.600) 07:52:03:413 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:52:03:413 ProcessGPOList: Entering for extension
Registrierung
USERENV(350.600) 07:52:03:413 MachinePolicyCallback: Setting status UI
to Richtlinie Registrierung wird übernommen...
USERENV(350.600) 07:52:03:413 MachinePolicyCallback: Extension
requested status UI when status UI is not available.
USERENV(350.600) 07:52:03:493 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(350.600) 07:52:03:493 EnterCriticalPolicySectionEx: Entering
with timeout 60000 and flags 0x2
USERENV(350.600) 07:52:03:493 EnterCriticalPolicySectionEx: Machine
critical section has been claimed. Handle = 0x818
USERENV(350.600) 07:52:03:493 EnterCriticalPolicySectionEx: Leaving
successfully.
USERENV(350.600) 07:52:03:493 ResetPolicies: Entering.
USERENV(350.600) 07:52:03:493 ParseRegistryFile: Entering with <C:
\Documents and Settings\All Users\ntuser.pol>.
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Microsoft\Windows\CurrentVersion\Policies\System\VerboseStatus
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\Cryptography\AutoEnrollment\AEPolicy
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\ACRS\Certificates\
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\ACRS\CRLs\
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\ACRS\CTLs\
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\EFS\EFSBlob
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\EFS\Certificates
\1ECB3B7A474B38246547181DD9F843ECE2B9B1EF\Blob
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\EFS\CRLs\
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\EFS\CTLs\
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\Root\Certificates\
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\Root\CRLs\
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\Root\CTLs\
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\Trust\Certificates\
USERENV(350.600) 07:52:03:573 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\Trust\CRLs\
USERENV(350.600) 07:52:03:583 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\SystemCertificates\Trust\CTLs\
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted SOFTWARE
\Policies\Microsoft\Windows NT\Terminal Services\MaxDisconnectionTime
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted SOFTWARE
\Policies\Microsoft\Windows NT\Terminal Services\MaxIdleTime
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted SOFTWARE
\Policies\Microsoft\Windows NT\Terminal Services\fResetBroken
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Microsoft\Windows\CurrentVersion\Policies\Explorer
\NoMSAppLogo5ChannelNotify
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions
\NoJITSetup
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions
\NoUpdateCheck
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions
\NoSplash
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\Windows\NetCache\Enabled
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\Windows NT\Terminal Services\fDenyTSConnections
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\WindowsFirewall\DomainProfile\EnableFirewall
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\WindowsFirewall\StandardProfile\EnableFirewall
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\WindowsMediaPlayer\GroupPrivacyAcceptance
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\WindowsMediaPlayer\DesktopShortcut
USERENV(350.600) 07:52:03:623 DeleteRegistryValue: Deleted Software
\Policies\Microsoft\WindowsMediaPlayer\DisableAutoUpdate
USERENV(350.600) 07:52:03:623 ParseRegistryFile: Leaving.
USERENV(350.600) 07:52:03:623 ResetPolicies: Leaving.
USERENV(350.600) 07:52:03:713 ParseRegistryFile: Entering with <C:
\WINDOWS\System32\GroupPolicy\Machine\registry.pol>.
USERENV(350.600) 07:52:03:723 SetRegistryValue: VerboseStatus => 1
[OK]
USERENV(350.600) 07:52:03:723 ParseRegistryFile: Leaving.
USERENV(350.600) 07:52:03:723 AllocAdmFileInfo: Adding File name <C:
\WINDOWS\System32\GroupPolicy\Adm\conf.adm> to the Adm list.
USERENV(350.600) 07:52:03:723 MakePathUNC: Entering with <C:\WINDOWS
\System32\GroupPolicy\Adm\conf.adm>
USERENV(350.600) 07:52:03:723 MakePathUNC: Returning a UNCPath of \
\EUCHBRN2322W\admin$\System32\GroupPolicy\Adm\conf.adm
USERENV(350.600) 07:52:03:723 AllocAdmFileInfo: Adding File name <C:
\WINDOWS\System32\GroupPolicy\Adm\inetres.adm> to the Adm list.
USERENV(350.600) 07:52:03:723 MakePathUNC: Entering with <C:\WINDOWS
\System32\GroupPolicy\Adm\inetres.adm>
USERENV(350.600) 07:52:03:723 MakePathUNC: Returning a UNCPath of \
\EUCHBRN2322W\admin$\System32\GroupPolicy\Adm\inetres.adm
USERENV(350.600) 07:52:03:723 AllocAdmFileInfo: Adding File name <C:
\WINDOWS\System32\GroupPolicy\Adm\system.adm> to the Adm list.
USERENV(350.600) 07:52:03:723 MakePathUNC: Entering with <C:\WINDOWS
\System32\GroupPolicy\Adm\system.adm>
USERENV(350.600) 07:52:03:723 MakePathUNC: Returning a UNCPath of \
\EUCHBRN2322W\admin$\System32\GroupPolicy\Adm\system.adm
USERENV(350.600) 07:52:03:723 AllocAdmFileInfo: Adding File name <C:
\WINDOWS\System32\GroupPolicy\Adm\wmplayer.adm> to the Adm list.
USERENV(350.600) 07:52:03:723 MakePathUNC: Entering with <C:\WINDOWS
\System32\GroupPolicy\Adm\wmplayer.adm>
USERENV(350.600) 07:52:03:723 MakePathUNC: Returning a UNCPath of \
\EUCHBRN2322W\admin$\System32\GroupPolicy\Adm\wmplayer.adm
USERENV(350.600) 07:52:03:723 AllocAdmFileInfo: Adding File name <C:
\WINDOWS\System32\GroupPolicy\Adm\wuau.adm> to the Adm list.
USERENV(350.600) 07:52:03:723 MakePathUNC: Entering with <C:\WINDOWS
\System32\GroupPolicy\Adm\wuau.adm>
USERENV(350.600) 07:52:03:723 MakePathUNC: Returning a UNCPath of \
\EUCHBRN2322W\admin$\System32\GroupPolicy\Adm\wuau.adm
USERENV(350.600) 07:52:03:723 ParseRegistryFile: Entering with <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol>.
USERENV(350.600) 07:52:03:723 SetRegistryValue: AEPolicy => 6 [OK]
USERENV(350.600) 07:52:03:723 SetRegistryValue: EFSBlob was set
successfully
USERENV(350.600) 07:52:03:723 SetRegistryValue: Blob was set
successfully
USERENV(350.600) 07:52:03:733 ParseRegistryFile: Leaving.
USERENV(350.600) 07:52:03:733 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\conf.adm> to the Adm list.
USERENV(350.600) 07:52:03:733 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\inetcorp.adm> to the Adm
list.
USERENV(350.600) 07:52:03:733 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\inetres.adm> to the Adm
list.
USERENV(350.600) 07:52:03:733 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\inetset.adm> to the Adm
list.
USERENV(350.600) 07:52:03:733 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\system.adm> to the Adm
list.
USERENV(350.600) 07:52:03:733 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\wmplayer.adm> to the Adm
list.
USERENV(350.600) 07:52:03:733 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\wuau.adm> to the Adm list.
USERENV(350.600) 07:52:03:743 ParseRegistryFile: Entering with <\
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Machine\registry.pol>.
USERENV(350.600) 07:52:03:743 SetRegistryValue: MaxDisconnectionTime
=> 600000 [OK]
USERENV(350.600) 07:52:03:743 SetRegistryValue: MaxIdleTime => 600000
[OK]
USERENV(350.600) 07:52:03:743 SetRegistryValue: fResetBroken => 1
[OK]
USERENV(350.600) 07:52:03:743 ParseRegistryFile: Leaving.
USERENV(350.600) 07:52:03:743 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\conf.adm> to the Adm list.
USERENV(350.600) 07:52:03:743 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\inetcorp.adm> to the Adm list.
USERENV(350.600) 07:52:03:743 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\inetres.adm> to the Adm list.
USERENV(350.600) 07:52:03:743 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\inetset.adm> to the Adm list.
USERENV(350.600) 07:52:03:743 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\system.adm> to the Adm list.
USERENV(350.600) 07:52:03:743 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\wmplayer.adm> to the Adm list.
USERENV(350.600) 07:52:03:743 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\wuau.adm> to the Adm list.
USERENV(350.600) 07:52:03:743 ParseRegistryFile: Entering with <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Machine\registry.pol>.
USERENV(350.600) 07:52:03:753 SetRegistryValue:
NoMSAppLogo5ChannelNotify => 1 [OK]
USERENV(350.600) 07:52:03:753 SetRegistryValue: NoJITSetup => 1 [OK]
USERENV(350.600) 07:52:03:753 SetRegistryValue: NoUpdateCheck => 1
[OK]
USERENV(350.600) 07:52:03:753 SetRegistryValue: NoSplash => 1 [OK]
USERENV(350.600) 07:52:03:753 SetRegistryValue: Enabled => 0 [OK]
USERENV(350.600) 07:52:03:753 SetRegistryValue: NoAutoUpdate => 1
[OK]
USERENV(350.600) 07:52:03:753 SetRegistryValue: Deleted value
<AUOptions>.
USERENV(350.600) 07:52:03:753 SetRegistryValue: Deleted value
<ScheduledInstallDay>.
USERENV(350.600) 07:52:03:753 SetRegistryValue: Deleted value
<ScheduledInstallTime>.
USERENV(350.600) 07:52:03:753 SetRegistryValue: fDenyTSConnections =>
0 [OK]
USERENV(350.600) 07:52:03:753 SetRegistryValue: EnableFirewall => 0
[OK]
USERENV(350.600) 07:52:03:753 SetRegistryValue: EnableFirewall => 0
[OK]
USERENV(350.600) 07:52:03:763 SetRegistryValue: GroupPrivacyAcceptance
=> 1 [OK]
USERENV(350.600) 07:52:03:763 SetRegistryValue: DesktopShortcut => no
[OK]
USERENV(350.600) 07:52:03:763 SetRegistryValue: DisableAutoUpdate =>
0 [OK]
USERENV(350.600) 07:52:03:763 ParseRegistryFile: Leaving.
USERENV(350.600) 07:52:03:763 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Adm\conf.adm> to the Adm list.
USERENV(350.600) 07:52:03:763 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Adm\inetres.adm> to the Adm
list.
USERENV(350.600) 07:52:03:763 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Adm\system.adm> to the Adm
list.
USERENV(350.600) 07:52:03:763 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Adm\wmplayer.adm> to the Adm
list.
USERENV(350.600) 07:52:03:763 AllocAdmFileInfo: Adding File name <\
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Adm\wuau.adm> to the Adm list.
USERENV(350.600) 07:52:04:013 LogRegistry RsopData: Successfully
logged registry Rsop data
USERENV(5cc.594) 07:52:04:043 GetProfileType: Profile already loaded.
USERENV(5cc.594) 07:52:04:043 LoadProfileInfo: Failed to query
central profile with error 2
USERENV(5cc.594) 07:52:04:043 GetProfileType: ProfileFlags is 0
USERENV(350.600) 07:52:04:094 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Adm\wuau.adm
USERENV(350.600) 07:52:04:094 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Adm\wmplayer.adm
USERENV(350.600) 07:52:04:104 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Adm\system.adm
USERENV(350.600) 07:52:04:104 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Adm\inetres.adm
USERENV(350.600) 07:52:04:104 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{3126E24F-24B0-4FDC-9171-047D3CD7ED7B}\Adm\conf.adm
USERENV(350.600) 07:52:04:104 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\wuau.adm
USERENV(350.600) 07:52:04:104 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\wmplayer.adm
USERENV(350.600) 07:52:04:104 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\system.adm
USERENV(350.600) 07:52:04:104 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\inetset.adm
USERENV(350.600) 07:52:04:114 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\inetres.adm
USERENV(350.600) 07:52:04:114 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\inetcorp.adm
USERENV(350.600) 07:52:04:114 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\SysVol\cslg1.cslg.net\Policies\{6EF5CC41-
EA13-43EE-9101-2B22A8354A62}\Adm\conf.adm
USERENV(350.600) 07:52:04:114 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\wuau.adm
USERENV(350.600) 07:52:04:114 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\wmplayer.adm
USERENV(350.600) 07:52:04:114 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\system.adm
USERENV(350.600) 07:52:04:114 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\inetset.adm
USERENV(350.600) 07:52:04:114 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\inetres.adm
USERENV(350.600) 07:52:04:124 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\inetcorp.adm
USERENV(350.600) 07:52:04:124 CAdmFileLogger::Log: Logging \
\cslg1.cslg.net\sysvol\cslg1.cslg.net\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\conf.adm
USERENV(350.600) 07:52:04:124 CAdmFileLogger::Log: Logging \
\EUCHBRN2322W\admin$\System32\GroupPolicy\Adm\wuau.adm
USERENV(350.600) 07:52:04:124 CAdmFileLogger::Log: Logging \
\EUCHBRN2322W\admin$\System32\GroupPolicy\Adm\wmplayer.adm
USERENV(350.600) 07:52:04:124 CAdmFileLogger::Log: Logging \
\EUCHBRN2322W\admin$\System32\GroupPolicy\Adm\system.adm
USERENV(350.600) 07:52:04:124 CAdmFileLogger::Log: Logging \
\EUCHBRN2322W\admin$\System32\GroupPolicy\Adm\inetres.adm
USERENV(350.600) 07:52:04:144 CAdmFileLogger::Log: Logging \
\EUCHBRN2322W\admin$\System32\GroupPolicy\Adm\conf.adm
USERENV(350.600) 07:52:04:144 LogAdmRsopData: Successfully logged Adm
data
USERENV(350.600) 07:52:04:144 LeaveCriticalPolicySection: Critical
section 0x818 has been released.
USERENV(350.600) 07:52:04:144 ProcessGPOList: Extension Registrierung
was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty
bit
USERENV(350.600) 07:52:04:174 ProcessGPOs: -----------------------
USERENV(350.600) 07:52:04:174 ProcessGPOs: -----------------------
USERENV(350.600) 07:52:04:174 ProcessGPOs: Processing extension
Wireless
USERENV(350.600) 07:52:04:174 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:52:04:174 ProcessGPOs: Extension Wireless skipped
because both deleted and changed GPO lists are empty.
USERENV(350.600) 07:52:04:174 ProcessGPOs: -----------------------
USERENV(350.600) 07:52:04:174 ProcessGPOs: Processing extension Folder
Redirection
USERENV(350.600) 07:52:04:174 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:52:04:174 ProcessGPOs: Extension Folder
Redirection skipped with flags 0x1000f.
USERENV(350.600) 07:52:04:174 ProcessGPOs: -----------------------
USERENV(350.600) 07:52:04:174 ProcessGPOs: Processing extension
Microsoft Disk Quota
USERENV(350.600) 07:52:04:174 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:52:04:174 ProcessGPOs: Extension Microsoft Disk
Quota skipped with flags 0x1000f.
USERENV(350.600) 07:52:04:174 ProcessGPOs: -----------------------
USERENV(350.600) 07:52:04:174 ProcessGPOs: Processing extension QoS
Packet Scheduler
USERENV(350.600) 07:52:04:174 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:52:04:174 ProcessGPOs: Extension QoS Packet
Scheduler skipped because both deleted and changed GPO lists are
empty.
USERENV(350.600) 07:52:04:174 ProcessGPOs: -----------------------
USERENV(350.600) 07:52:04:174 ProcessGPOs: Processing extension
Scripts
USERENV(350.600) 07:52:04:174 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:52:04:174 ProcessGPOs: Extension Scripts skipped
because both deleted and changed GPO lists are empty.
USERENV(350.600) 07:52:04:174 ProcessGPOs: -----------------------
USERENV(350.600) 07:52:04:174 ProcessGPOs: Processing extension
Internet Explorer Zonemapping
USERENV(350.600) 07:52:04:174 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:52:04:174 ProcessGPOs: Extension Internet Explorer
Zonemapping skipped because both deleted and changed GPO lists are
empty.
USERENV(350.600) 07:52:04:174 ProcessGPOs: -----------------------
USERENV(350.600) 07:52:04:174 ProcessGPOs: Processing extension
Security
USERENV(350.600) 07:52:04:174 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.600) 07:52:04:174 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:52:04:184 ProcessGPOList: Entering for extension
Security
USERENV(350.600) 07:52:04:184 MachinePolicyCallback: Setting status UI
to Richtlinie Security wird übernommen...
USERENV(350.600) 07:52:04:184 MachinePolicyCallback: Extension
requested status UI when status UI is not available.
USERENV(350.600) 07:52:04:204 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(350.784) 07:52:04:204 SetFgRefreshInfo: Next User Fg policy
Synchronous, Reason: NonCachedCredentials.
USERENV(350.354) 07:52:05:295 LoadUserProfile: Yes, we can impersonate
the user. Running as self
USERENV(350.354) 07:52:05:295
=========================================================
USERENV(350.354) 07:52:05:295 LoadUserProfile: Entering, hToken =
<0x860>, lpProfileInfo = 0x6e3e0
USERENV(350.354) 07:52:05:295 LoadUserProfile: lpProfileInfo->dwFlags
= <0x0>
USERENV(350.354) 07:52:05:295 LoadUserProfile: lpProfileInfo-
lpUserName = <wim.etter>
USERENV(350.354) 07:52:05:325 LoadUserProfile: lpProfileInfo-
lpProfilePath = <\\euchbrnfil01\Wim.Etter$\MySettings>
USERENV(350.354) 07:52:05:325 LoadUserProfile: lpProfileInfo-
lpDefaultPath = <\\EUCHBRNSDC03\netlogon\Default User>
USERENV(350.354) 07:52:05:325 LoadUserProfile: NULL server name
USERENV(350.354) 07:52:05:325 LoadUserProfile: In console winlogon
process
USERENV(350.354) 07:52:05:325 In LoadUserProfileP
USERENV(350.354) 07:52:05:325
=========================================================
USERENV(350.354) 07:52:05:325 LoadUserProfile: Entering, hToken =
<0x860>, lpProfileInfo = 0x6e3e0
USERENV(350.354) 07:52:05:325 LoadUserProfile: lpProfileInfo->dwFlags
= <0x0>
USERENV(350.354) 07:52:05:325 LoadUserProfile: lpProfileInfo-
lpUserName = <wim.etter>
USERENV(350.354) 07:52:05:325 LoadUserProfile: lpProfileInfo-
lpProfilePath = <\\euchbrnfil01\Wim.Etter$\MySettings>
USERENV(350.354) 07:52:05:325 LoadUserProfile: lpProfileInfo-
lpDefaultPath = <\\EUCHBRNSDC03\netlogon\Default User>
USERENV(350.354) 07:52:05:325 LoadUserProfile: NULL server name
USERENV(350.354) 07:52:05:325 LoadUserProfile: User sid:
S-1-5-21-2052111302-583907252-725345543-9320
USERENV(350.354) 07:52:05:325 CSyncManager::EnterLock
<S-1-5-21-2052111302-583907252-725345543-9320>
USERENV(350.354) 07:52:05:325 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:52:05:325 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:52:05:325 CHashTable::HashAdd:
S-1-5-21-2052111302-583907252-725345543-9320 added in bucket 14
USERENV(350.354) 07:52:05:325 LoadUserProfile: Wait succeeded. In
critical section.
USERENV(350.354) 07:52:05:325 LoadUserProfile: Expanded profile path
is \\euchbrnfil01\Wim.Etter$\MySettings
USERENV(350.354) 07:52:05:325 ParseProfilePath: Entering,
lpProfilePath = <\\euchbrnfil01\Wim.Etter$\MySettings>
USERENV(350.354) 07:52:05:325 CheckXForestLogon: checking x-forest
logon, user handle = 2144
USERENV(350.354) 07:52:05:325 CheckXForestLogon: not XForest logon.
USERENV(4fc.588) 07:52:05:756 LibMain: Process Name: C:\WINDOWS
\system32\CCM\CcmExec.exe
USERENV(350.600) 07:52:05:806 MachinePolicyCallback: Setting status UI
to Sicherheitsrichtlinie wird übernommen...
USERENV(350.600) 07:52:05:806 MachinePolicyCallback: Extension
requested status UI when status UI is not available.
USERENV(350.600) 07:52:05:806 MachinePolicyCallback: Setting status UI
to Default Domain Policy
USERENV(350.600) 07:52:05:806 MachinePolicyCallback: Extension
requested status UI when status UI is not available.
USERENV(350.354) 07:52:05:846 LoadUserProfile: ParseProfilePath
returned a directory of <F:\MySettings>
USERENV(350.354) 07:52:05:846 RestoreUserProfile: Entering
USERENV(350.354) 07:52:05:846 IsCentralProfileReachable: Entering
USERENV(350.354) 07:52:05:846 RestoreUserProfile: Central Profile is
reachable
USERENV(350.354) 07:52:05:846 RestoreUserProfile: Central Profile is
roaming
USERENV(350.354) 07:52:05:846 RestoreUserProfile: Profile path = <F:
\MySettings>
USERENV(350.354) 07:52:05:846 ExtractProfileFromBackup: A profile
already exists
USERENV(350.354) 07:52:05:846 PatchNewProfileIfRequred: A profile
already exists with the current sid, exitting
USERENV(350.354) 07:52:05:846 CreateLocalProfileKey: Not setting
additional Security
USERENV(350.354) 07:52:05:846 GetExistingLocalProfileImage: Found
entry in profile list for existing local profile
USERENV(350.354) 07:52:05:846 GetExistingLocalProfileImage: Local
profile image filename = <%SystemDrive%\Documents and Settings
\Wim.Etter>
USERENV(350.354) 07:52:05:856 GetExistingLocalProfileImage: Expanded
local profile image filename = <C:\Documents and Settings\Wim.Etter>
USERENV(350.354) 07:52:05:986 GetExistingLocalProfileImage: Found
local profile image file ok <C:\Documents and Settings\Wim.Etter
\ntuser.dat>
USERENV(350.354) 07:52:05:986 Local Existing Profile Image is
reachable
USERENV(350.354) 07:52:05:986 Local profile name is <C:\Documents and
Settings\Wim.Etter>
USERENV(350.354) 07:52:05:986 RestoreUserProfile: Reconciling roaming
profile with local profile
USERENV(350.354) 07:52:06:006 GetExclusionList: The exclusion on both
server and client are same: <Local Settings;Temporary Internet
Files;History;Temp;Local Settings\Application Data\Microsoft
\Outlook;Local Settings;Lokale Einstellungen\Temporary Internet
Files;History;Temp;My Documents; MyDesktop;Desktop;Clip
Organizer;Cookies;Application Data\Microsoft\Excel;.jpi_cache;
Application Data\Microsoft\Word;>
USERENV(350.600) 07:52:06:227 MachinePolicyCallback: Setting status UI
to BRNBPL - Default Workstations - GPO
USERENV(350.600) 07:52:06:227 MachinePolicyCallback: Extension
requested status UI when status UI is not available.
USERENV(2dc.2d8) 07:52:08:179 LibMain: Process Name: C:\WINDOWS
\system32\wbem\wmiprvse.exe
USERENV(350.600) 07:52:20:828 MachinePolicyCallback: Setting status UI
to Die Sicherheitsrichtlinie für das System wird konfiguriert.
USERENV(350.600) 07:52:20:828 MachinePolicyCallback: Extension
requested status UI when status UI is not available.
USERENV(368.36c) 07:52:47:524 LibMain: Process Name: C:\WINDOWS
\system32\wuauclt.exe
USERENV(6b8.6f4) 07:52:51:499 LibMain: Process Name: C:\WINDOWS
\system32\wbem\wmiprvse.exe
USERENV(350.354) 07:53:02:599 MyRegLoadKey: Returning 00000000
USERENV(350.354) 07:53:02:900 MyRegLoadKey: Returning 00000000
USERENV(350.354) 07:53:02:900 CreateClassHive: existing user classes
hive found
USERENV(350.354) 07:53:02:900 RestoreUserProfile: About to Leave.
Final Information follows:
USERENV(350.354) 07:53:02:900 Profile was successfully loaded.
USERENV(350.354) 07:53:02:910 lpProfile->lpRoamingProfile = <F:
\MySettings>
USERENV(350.354) 07:53:02:910 lpProfile->lpLocalProfile = <C:
\Documents and Settings\Wim.Etter>
USERENV(350.354) 07:53:02:910 lpProfile->dwInternalFlags = 0x10
USERENV(350.354) 07:53:02:910 RestoreUserProfile: Leaving.
USERENV(350.354) 07:53:02:910 UpgradeProfile: Entering
USERENV(350.354) 07:53:02:910 UpgradeProfile: Build numbers match
USERENV(350.354) 07:53:02:910 UpgradeProfile: Leaving Successfully
USERENV(350.354) 07:53:02:910 GetProfileType: Profile already loaded.
USERENV(350.354) 07:53:02:910 LoadProfileInfo: Failed to query
central profile with error 2
USERENV(350.354) 07:53:02:910 GetProfileType: ProfileFlags is 0
USERENV(350.354) 07:53:03:121 Profile Ref Count is 1
USERENV(350.354) 07:53:03:121 LoadUserProfile: Leaving critical
Section.
USERENV(350.354) 07:53:03:121 CSyncManager::LeaveLock
<S-1-5-21-2052111302-583907252-725345543-9320>
USERENV(350.354) 07:53:03:121 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:53:03:121 CHashTable::HashDelete:
S-1-5-21-2052111302-583907252-725345543-9320 deleted
USERENV(350.354) 07:53:03:121 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:53:03:271 LoadUserProfile: Reverted to user:
00000000
USERENV(350.354) 07:53:03:271 LoadUserProfile: Leaving with a value of
1.
USERENV(350.354) 07:53:03:271
=========================================================
USERENV(350.354) 07:53:03:271 LoadUserProfile: LoadUserProfileP
succeeded
USERENV(350.354) 07:53:03:271 LoadUserProfile: Returning success.
Final Information follows:
USERENV(350.354) 07:53:03:271 lpProfileInfo->UserName = <wim.etter>
USERENV(350.354) 07:53:03:271 lpProfileInfo->lpProfilePath = <\
\euchbrnfil01\Wim.Etter$\MySettings>
USERENV(350.354) 07:53:03:271 lpProfileInfo->dwFlags = 0x0
USERENV(350.354) 07:53:03:271 LoadUserProfile: Returning TRUE.
hProfile = <0x884>
USERENV(350.354) 07:53:04:847 IsSyncForegroundPolicyRefresh:
Synchronous, Reason: NonCachedCredentials
USERENV(350.7c4) 07:53:05:349 IsSyncForegroundPolicyRefresh:
Synchronous, Reason: NonCachedCredentials
USERENV(350.600) 07:57:04:634 MachinePolicyCallback: Setting status UI
to Computereinstellungen werden übernommen...
USERENV(350.600) 07:57:04:634 MachinePolicyCallback: Extension
requested status UI when status UI is not available.
USERENV(350.600) 07:57:04:634 ProcessGPOList: Extension Security
returned 0x0.
USERENV(350.600) 07:57:04:634 ProcessGPOList: Extension Security was
able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
USERENV(350.600) 07:57:04:875 ProcessGPOs: -----------------------
USERENV(350.600) 07:57:04:875 ProcessGPOs: -----------------------
USERENV(350.600) 07:57:04:875 ProcessGPOs: Processing extension
Internet Explorer Branding
USERENV(350.600) 07:57:04:875 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:57:04:875 ProcessGPOs: Extension Internet Explorer
Branding skipped with flags 0x1000f.
USERENV(350.600) 07:57:04:875 ProcessGPOs: -----------------------
USERENV(350.600) 07:57:04:875 ProcessGPOs: Processing extension EFS
recovery
USERENV(350.600) 07:57:04:875 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.600) 07:57:04:875 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:57:04:875 ProcessGPOList: Entering for extension
EFS recovery
USERENV(350.600) 07:57:04:875 MachinePolicyCallback: Setting status UI
to Richtlinie EFS recovery wird übernommen...
USERENV(350.600) 07:57:04:875 MachinePolicyCallback: Extension
requested status UI when status UI is not available.
USERENV(350.600) 07:57:04:875 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.600) 07:57:04:885 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(350.600) 07:57:04:885 ProcessGPOList: Extension EFS recovery
returned 0x0.
USERENV(350.600) 07:57:04:885 ProcessGPOList: Extension EFS recovery
doesn't support rsop logging
USERENV(350.600) 07:57:04:895 ProcessGPOs: -----------------------
USERENV(350.600) 07:57:04:895 ProcessGPOs: -----------------------
USERENV(350.600) 07:57:04:895 ProcessGPOs: Processing extension
Microsoft Offline Files
USERENV(350.600) 07:57:04:895 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:57:04:895 ProcessGPOs: Extension Microsoft Offline
Files skipped because both deleted and changed GPO lists are empty.
USERENV(350.600) 07:57:04:895 ProcessGPOs: -----------------------
USERENV(350.600) 07:57:04:895 ProcessGPOs: Processing extension
Software Installation
USERENV(350.600) 07:57:04:895 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:57:04:895 ProcessGPOs: Extension Software
Installation skipped because both deleted and changed GPO lists are
empty.
USERENV(350.600) 07:57:04:895 ProcessGPOs: -----------------------
USERENV(350.600) 07:57:04:895 ProcessGPOs: Processing extension IP
Security
USERENV(350.600) 07:57:04:895 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:57:04:895 ProcessGPOs: Extension IP Security
skipped because both deleted and changed GPO lists are empty.
USERENV(350.600) 07:57:04:895 ProcessGPOs: -----------------------
USERENV(350.600) 07:57:04:895 ProcessGPOs: Processing extension
PolicyMaker Registry
USERENV(350.600) 07:57:04:895 CompareGPOLists: The lists are the
same.
USERENV(350.600) 07:57:04:895 ProcessGPOs: Extension PolicyMaker
Registry skipped because both deleted and changed GPO lists are empty.
USERENV(350.600) 07:57:04:895 SetFgRefreshInfo: Previous Machine Fg
policy Asynchronous, Reason: NoNeedForSync.
USERENV(350.600) 07:57:04:895 LeaveCriticalPolicySection: Critical
section 0x758 has been released.
USERENV(350.600) 07:57:04:895 ProcessGPOs: Computer Group Policy has
been applied.
USERENV(350.600) 07:57:04:895 ProcessGPOs: Leaving with 1.
USERENV(350.700) 07:57:04:905 PolicyChangedThread: Calling UpdateUser
with 1.
USERENV(350.700) 07:57:04:905 PolicyChangedThread: Broadcast message
for 1.
USERENV(350.700) 07:57:04:905 PolicyChangedThread: Leaving
USERENV(350.600) 07:57:04:925 ApplyGroupPolicy: Leaving successfully.
USERENV(350.7c4) 07:57:04:925 ApplyGroupPolicy: Entering. Flags = 6
USERENV(350.7c4) 07:57:04:925 ProcessGPOs:
USERENV(350.7c4) 07:57:04:925 ProcessGPOs:
USERENV(350.7c4) 07:57:04:925 ProcessGPOs: Starting user Group Policy
(Background) processing...
USERENV(350.7c4) 07:57:04:925 ProcessGPOs:
USERENV(350.7c4) 07:57:04:925 ProcessGPOs:
USERENV(350.7c4) 07:57:04:925 EnterCriticalPolicySectionEx: Entering
with timeout 600000 and flags 0x0
USERENV(350.7c4) 07:57:04:925 EnterCriticalPolicySectionEx: User
critical section has been claimed. Handle = 0x804
USERENV(350.7c4) 07:57:04:925 EnterCriticalPolicySectionEx: Leaving
successfully.
USERENV(350.7c4) 07:57:04:925 ProcessGPOs: Machine role is 2.
USERENV(350.7c4) 07:57:04:945 PingComputer: Adapter speed 1000000000
bps
USERENV(350.7c4) 07:57:04:945 PingComputer: First time: 0
USERENV(350.7c4) 07:57:04:945 PingComputer: Fast link. Exiting.
USERENV(350.48c) 07:57:04:955 GPOThread: Next refresh will happen in
115 minutes
USERENV(350.7c4) 07:57:04:975 ProcessGPOs: User name is: CN=Etter
Wim,OU=Users,OU=CH BRN,OU=EU,DC=cslg1,DC=cslg,DC=net, Domain name is:
CSLG1
USERENV(350.7c4) 07:57:04:975 ProcessGPOs: Domain controller is: \
\euchbrnsdc01.cslg1.cslg.net Domain DN is cslg1.cslg.net
USERENV(350.7c4) 07:57:04:985 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(350.7c4) 07:57:04:985 ReadGPExtensions: Rsop entry point not
found for dskquota.dll.
USERENV(350.7c4) 07:57:04:985 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(350.7c4) 07:57:04:985 ReadGPExtensions: Rsop entry point not
found for iedkcs32.dll.
USERENV(350.7c4) 07:57:04:985 ReadGPExtensions: Rsop entry point not
found for scecli.dll.
USERENV(350.7c4) 07:57:04:985 ReadGPExtensions: Rsop entry point not
found for C:\WINDOWS\System32\cscui.dll.
USERENV(350.7c4) 07:57:04:985 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(350.7c4) 07:57:05:076 ProcessGPOs: Logging Data for Target
<wim.etter>.
USERENV(350.7c4) 07:57:05:076 ProcessGPOs: OpenThreadToken failed with
error 1008, assuming thread is not impersonating
USERENV(350.7c4) 07:57:05:076 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:076 ProcessGPOs: Processing extension
Registrierung
USERENV(350.7c4) 07:57:05:076 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.7c4) 07:57:05:076 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:076 CheckGPOs: No GPO changes and no
security group membership change and extension Registrierung has
NoGPOChanges set.
USERENV(350.7c4) 07:57:05:076 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:076 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:076 ProcessGPOs: Processing extension
Wireless
USERENV(350.7c4) 07:57:05:076 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:076 CheckGPOs: No GPO changes but couldn't
read extension Wireless's status or policy time.
USERENV(350.7c4) 07:57:05:076 ProcessGPOs: Extension Wireless skipped
with flags 0x6.
USERENV(350.7c4) 07:57:05:076 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:076 ProcessGPOs: Processing extension Folder
Redirection
USERENV(350.7c4) 07:57:05:076 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.7c4) 07:57:05:076 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:076 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:076 ProcessGPOList: Entering for extension
Folder Redirection
USERENV(350.7c4) 07:57:05:076 UserPolicyCallback: Setting status UI to
Richtlinie Folder Redirection wird übernommen...
USERENV(350.7c4) 07:57:05:076 ProcessGPOList: No changes. CSE will not
be passed in the IwbemServices intf ptr
USERENV(350.7c4) 07:57:05:126 UserPolicyCallback: Setting status UI to
Benutzereinstellungen werden übernommen...
USERENV(350.7c4) 07:57:05:126 ProcessGPOList: Extension Folder
Redirection returned 0x0.
USERENV(350.7c4) 07:57:05:126 ProcessGPOList: Extension Folder
Redirection status was not updated because there was no changes and no
transition or rsop wasn't enabled
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Processing extension
Microsoft Disk Quota
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CheckGPOs: No GPO changes but couldn't
read extension Microsoft Disk Quota's status or policy time.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Extension Microsoft Disk
Quota skipped with flags 0x6.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Processing extension QoS
Packet Scheduler
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CheckGPOs: No GPO changes but couldn't
read extension QoS Packet Scheduler's status or policy time.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Extension QoS Packet
Scheduler skipped with flags 0x6.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Processing extension
Scripts
USERENV(350.7c4) 07:57:05:136 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CheckGPOs: No GPO changes and no
security group membership change and extension Scripts has
NoGPOChanges set.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Processing extension
Internet Explorer Zonemapping
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CheckGPOs: No GPO changes but couldn't
read extension Internet Explorer Zonemapping's status or policy time.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Extension Internet Explorer
Zonemapping skipped because both deleted and changed GPO lists are
empty.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Processing extension
Security
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CheckGPOs: No GPO changes but couldn't
read extension Security's status or policy time.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Extension Security skipped
with flags 0x6.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Processing extension
Internet Explorer Branding
USERENV(350.7c4) 07:57:05:136 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CheckGPOs: No GPO changes and no
security group membership change and extension Internet Explorer
Branding has NoGPOChanges set.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Processing extension EFS
recovery
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CheckGPOs: No GPO changes but couldn't
read extension EFS recovery's status or policy time.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Extension EFS recovery
skipped with flags 0x6.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Processing extension
Microsoft Offline Files
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CheckGPOs: No GPO changes but couldn't
read extension Microsoft Offline Files's status or policy time.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Extension Microsoft Offline
Files skipped with flags 0x6.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Processing extension
Software Installation
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CheckGPOs: No GPO changes but couldn't
read extension Software Installation's status or policy time.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Extension Software
Installation skipped because both deleted and changed GPO lists are
empty.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Processing extension IP
Security
USERENV(350.7c4) 07:57:05:136 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:136 CheckGPOs: No GPO changes but couldn't
read extension IP Security's status or policy time.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: Extension IP Security
skipped with flags 0x6.
USERENV(350.7c4) 07:57:05:136 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:146 ProcessGPOs: Processing extension
PolicyMaker Registry
USERENV(350.7c4) 07:57:05:146 ReadStatus: Read Extension's Previous
status successfully.
USERENV(350.7c4) 07:57:05:146 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:146 CompareGPOLists: The lists are the
same.
USERENV(350.7c4) 07:57:05:146 ProcessGPOList: Entering for extension
PolicyMaker Registry
USERENV(350.7c4) 07:57:05:156 UserPolicyCallback: Setting status UI to
Richtlinie PolicyMaker Registry wird übernommen...
USERENV(350.7c4) 07:57:05:156 ProcessGPOList: No changes. CSE will not
be passed in the IwbemServices intf ptr
USERENV(350.7c4) 07:57:05:668 ProcessGroupPolicyCompleted: Entering.
Extension = {F6E72D5A-6ED3-43D9-9710-4440455F6934}, dwStatus = 0x0
USERENV(350.7c4) 07:57:05:688 GetWbemServices: CoCreateInstance
succeeded
USERENV(350.7c4) 07:57:05:708 ConnectToNameSpace: ConnectServer
returned 0x0
USERENV(350.7c4) 07:57:05:708 ProcessGroupPolicyCompletedEx: Extension
{F6E72D5A-6ED3-43D9-9710-4440455F6934} was able to log data. Error =
0x0, dwRet = 0. Clearing the dirty bit
USERENV(350.7c4) 07:57:05:718 CExtSessionLogger::Log: Didn't find an
instance of the extension object when trying to set the dirty flag.
USERENV(350.7c4) 07:57:05:718 ProcessGroupPolicyCompleted: Leaving.
Extension = {F6E72D5A-6ED3-43D9-9710-4440455F6934}, Return status
dwRet = 0x0
USERENV(350.7c4) 07:57:05:718 ProcessGPOList: Extension PolicyMaker
Registry returned 0x0.
USERENV(350.7c4) 07:57:05:718 ProcessGPOList: Extension PolicyMaker
Registry status was not updated because there was no changes and no
transition or rsop wasn't enabled
USERENV(350.7c4) 07:57:05:728 ProcessGPOs: -----------------------
USERENV(350.7c4) 07:57:05:728 SetFgRefreshInfo: Previous User Fg
policy Synchronous, Reason: NonCachedCredentials.
USERENV(350.7c4) 07:57:05:728 SetFgRefreshInfo: Next User Fg policy
Asynchronous, Reason: NoNeedForSync.
USERENV(350.7c4) 07:57:05:728 ProcessGPOs: No WMI logging done in this
policy cycle.
USERENV(350.7c4) 07:57:05:738 LeaveCriticalPolicySection: Critical
section 0x804 has been released.
USERENV(350.7c4) 07:57:05:738 ProcessGPOs: User Group Policy has been
applied.
USERENV(350.7c4) 07:57:05:738 ProcessGPOs: Leaving with 1.
USERENV(350.7c4) 07:57:05:738 ApplyGroupPolicy: Leaving successfully.
USERENV(350.3a8) 07:57:05:768 GPOThread: Next refresh will happen in
117 minutes
USERENV(350.7e8) 07:57:05:768 PolicyChangedThread: Calling UpdateUser
with 0.
USERENV(350.7e8) 07:57:05:788 PolicyChangedThread: Broadcast message
for 0.
USERENV(350.354) 07:57:06:210 IsSyncForegroundPolicyRefresh:
Asynchronous, Reason: NoNeedForSync
USERENV(350.1c8) 07:57:06:210 IsSyncForegroundPolicyRefresh:
Asynchronous, Reason: NoNeedForSync
USERENV(350.7e8) 07:57:06:812 PolicyChangedThread: Leaving
USERENV(e48.e4c) 07:57:20:494 LibMain: Process Name: C:\WINDOWS
\system32\imapi.exe
USERENV(350.354) 07:57:33:693 UnloadUserProfile: Entering, hProfile =
<0x884>
USERENV(350.354) 07:57:33:693 UnloadUserProfile: In console winlogon
process
USERENV(350.354) 07:57:33:693 UnloadUserProfileP: Entering, hProfile =
<0x884>
USERENV(350.354) 07:57:33:693 AbleToBypassCSC: Try to bypass CSC
USERENV(350.354) 07:57:33:703 UnLoadUserProfileP: CSC bypassed.
USERENV(350.354) 07:57:33:703 GetExclusionListFromRegistry: User list
= <Local Settings;Temporary Internet Files;History;Temp;Local Settings
\Application Data\Microsoft\Outlook>, Policy list = <Local
Settings;Lokale Einstellungen\Temporary Internet Files;History;Temp;My
Documents; MyDesktop;Desktop;Clip Organizer;Cookies;Application Data
\Microsoft\Excel;.jpi_cache; Application Data\Microsoft\Word;>
USERENV(350.354) 07:57:33:703 GetExclusionListFromRegistry: Merged
list = <Local Settings;Temporary Internet Files;History;Temp;Local
Settings\Application Data\Microsoft\Outlook;Local Settings;Lokale
Einstellungen\Temporary Internet Files;History;Temp;My Documents;
MyDesktop;Desktop;Clip Organizer;Cookies;Application Data\Microsoft
\Excel;.jpi_cache; Application Data\Microsoft\Word;>
USERENV(350.354) 07:57:33:703 CSyncManager::EnterLock
<S-1-5-21-2052111302-583907252-725345543-9320>
USERENV(350.354) 07:57:33:703 CSyncManager::EnterLock: No existing
entry found
USERENV(350.354) 07:57:33:703 CSyncManager::EnterLock: New entry
created
USERENV(350.354) 07:57:33:703 CHashTable::HashAdd:
S-1-5-21-2052111302-583907252-725345543-9320 added in bucket 14
USERENV(350.354) 07:57:33:703 UnloadUserProfileP: Wait succeeded. In
critical section.
USERENV(350.354) 07:57:34:584 MyRegUnLoadKey: Returning 1.
USERENV(350.354) 07:57:34:584 UnloadUserProfileP: Succesfully
unloaded profile
USERENV(350.354) 07:57:34:594 MyRegUnLoadKey: Returning 1.
USERENV(350.354) 07:57:34:594 UnLoadClassHive: Successfully unmounted
S-1-5-21-2052111302-583907252-725345543-9320_Classes
USERENV(350.354) 07:57:34:594 UnloadUserProfileP: Successfully
unloaded user classes
USERENV(350.354) 07:57:40:833 UnloadUserProfileP: Reverting to Self
USERENV(350.354) 07:57:40:833 UnloadUserProfile: Got the System Time
USERENV(350.354) 07:57:40:833 UnloadUserProfileP: Setting the unload
Time
USERENV(350.354) 07:57:40:833 UnloadUserProfileP: exitting and
cleaning up
USERENV(350.354) 07:57:40:833 CSyncManager::LeaveLock
<S-1-5-21-2052111302-583907252-725345543-9320>
USERENV(350.354) 07:57:40:833 CSyncManager::LeaveLock: Lock released
USERENV(350.354) 07:57:40:833 CHashTable::HashDelete:
S-1-5-21-2052111302-583907252-725345543-9320 deleted
USERENV(350.354) 07:57:40:833 CSyncManager::LeaveLock: Lock deleted
USERENV(350.354) 07:57:40:833 UnloadUserProfileP: Leave critical
section.
USERENV(350.354) 07:57:40:843 UnloadUserProfileP: Leaving with a
return value of 1
USERENV(350.354) 07:57:40:843 UnloadUserProfile: UnloadUserProfileP
succeeded
USERENV(350.354) 07:57:40:843 UnloadUserProfile: returning 1
USERENV(c40.eb8) 07:58:05:018 LibMain: Process Name: C:\WINDOWS
\system32\userinit.exe


.

Relevant Pages

  • Re: Group Policy Software Uninstalls on XP PCs
    ... list for existing local profile ... No DNS domain name available. ...
    (microsoft.public.win2000.group_policy)
  • Hey it worked!! autocomplete: account passwords not saved
    ... to new profile is ... you should see an entry ... >Please do not send email directly to this alias. ... >> AutoComplete Does Not Save Username and Password ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Windows cannot load the locally stored profile
    ... load the locally stored profile. ... RpcServerRegisterIfEx successful ... extension Wireless Group Policy's status or policy time. ...
    (microsoft.public.windows.server.general)
  • Re: Windows registered name incorrect
    ... profile and copy the data from old to new profile: ... "Dick Ballard" wrote in message ... I got the Registered To: Name entry changed under My ... > registry even though I never used that as a user name. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: OpenMsgStore fails with MAPI_E_FAILONEPROVIDER
    ... It creates a dynamic profile and logs into ... Handle to parent window. ... // and getting the entry that corresponds to the new service. ... It then opens the message store using this function but it fails on ...
    (microsoft.public.win32.programmer.messaging)