Re: Windows cannot load the locally stored profile

From: "Phil C." <charlestek@xxxxxxx>
Date: Tue, 1 May 2007 06:04:59 -0400

I tried logging in this morning and got "Windows cannot load the locally
stored profile".
This time, the userenv.log shows exactly what is happening, but I cannot
interpret it:

[Key section from log below: USERENV(1c8.1cc) 05:34:39:015 MyRegLoadKey:
Failed to load subkey <S-1-5-21-1653384031-3508051079-812977905-500>, error
=32
USERENV(1c8.1cc) 05:34:39:015 MyRegLoadKey: Returning 00000020
USERENV(1c8.1cc) 05:34:39:062 RestoreUserProfile: MyRegLoadKey returned
FALSE.
USERENV(1c8.1cc) 05:34:39:062 ReportError: Impersonating user.
USERENV(1c8.1cc) 05:34:39:125 ReportError: Logging Error <Windows cannot
load the locally stored profile. Possible causes of this error include
insufficient security rights or a corrupt local profile. If this problem
persists, contact your network administrator.
DETAIL - The process cannot access the file because it is being used by
another process.

]

**************************************************************
full text of userenv.log:
**************************************************************

USERENV(1c8.1cc) 05:34:23:484 InitializePolicyProcessing: Initialised
Machine Mutex/Events
USERENV(1c8.1cc) 05:34:23:500 InitializePolicyProcessing: Initialised User
Mutex/Events
USERENV(1c8.1cc) 05:34:23:500 LibMain: Process Name:
\??\F:\WINDOWS\system32\winlogon.exe
USERENV(1c8.1cc) 05:34:23:609 Entering CUserProfile::Initialize ...
USERENV(1c8.1cc) 05:34:23:609 CUserProfile::Initialize called by winlogon
USERENV(1c8.1cc) 05:34:23:609 CUserProfile::Initialize: critical section
initialized
USERENV(1c8.1cc) 05:34:23:609 CSyncManager::Initialize: critical section
initialized
USERENV(1c8.1cc) 05:34:23:609 CUserProfile::Initialize: registry key
Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
USERENV(1c8.1cc) 05:34:23:609 CUserProfile::Initialize: Proccessing
S-1-5-21-1653384031-3508051079-812977905-500
USERENV(1c8.1cc) 05:34:23:609 CSyncManager::EnterLock
<S-1-5-21-1653384031-3508051079-812977905-500>
USERENV(1c8.1cc) 05:34:23:609 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1cc) 05:34:23:609 CSyncManager::EnterLock: New entry created
USERENV(1c8.1cc) 05:34:23:609 CHashTable::HashAdd:
S-1-5-21-1653384031-3508051079-812977905-500 added in bucket 6
USERENV(1c8.1cc) 05:34:23:609 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(1c8.1cc) 05:34:23:609 CUserProfile::GetRefCountAndFlags: Ref count
is 0, state is 00000100
USERENV(1c8.1cc) 05:34:23:609 CSyncManager::LeaveLock
<S-1-5-21-1653384031-3508051079-812977905-500>
USERENV(1c8.1cc) 05:34:23:609 CSyncManager::LeaveLock: Lock released
USERENV(1c8.1cc) 05:34:23:609 CHashTable::HashDelete:
S-1-5-21-1653384031-3508051079-812977905-500 deleted
USERENV(1c8.1cc) 05:34:23:609 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.1cc) 05:34:23:609 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(1c8.1cc) 05:34:23:609 CUserProfile::Initialize: Proccessing S-1-5-20
USERENV(1c8.1cc) 05:34:23:609 CSyncManager::EnterLock <S-1-5-20>
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::EnterLock: New entry created
USERENV(1c8.1cc) 05:34:23:625 CHashTable::HashAdd: S-1-5-20 added in bucket
4
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::GetRefCountAndFlags: Ref count
is 3, state is 00000000
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::CleanupUserProfile: Ref Count is
not 0
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::LeaveLock <S-1-5-20>
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::LeaveLock: Lock released
USERENV(1c8.1cc) 05:34:23:625 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::Initialize: Proccessing S-1-5-19
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::EnterLock <S-1-5-19>
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::EnterLock: New entry created
USERENV(1c8.1cc) 05:34:23:625 CHashTable::HashAdd: S-1-5-19 added in bucket
12
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::GetRefCountAndFlags: Ref count
is 3, state is 00000000
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::CleanupUserProfile: Ref Count is
not 0
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::LeaveLock <S-1-5-19>
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::LeaveLock: Lock released
USERENV(1c8.1cc) 05:34:23:625 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::Initialize: Proccessing S-1-5-18
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::EnterLock <S-1-5-18>
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::EnterLock: New entry created
USERENV(1c8.1cc) 05:34:23:625 CHashTable::HashAdd: S-1-5-18 added in bucket
11
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::CleanupUserProfile: Enter
critical section.
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::GetRefCountAndFlags: Ref count
is 1, state is 00000000
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::CleanupUserProfile: Ref Count is
not 0
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::LeaveLock <S-1-5-18>
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::LeaveLock: Lock released
USERENV(1c8.1cc) 05:34:23:625 CHashTable::HashDelete: S-1-5-18 deleted
USERENV(1c8.1cc) 05:34:23:625 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::CleanupUserProfile: Leave
critical section
USERENV(1c8.1cc) 05:34:23:625 CUserProfile::Initialize:
RpcServerRegisterIfEx successful
USERENV(1c8.1cc) 05:34:23:625 Exiting CUserProfile::Initialize, successful
USERENV(204.208) 05:34:23:718 LibMain: Process Name:
F:\WINDOWS\system32\lsass.exe
USERENV(1f8.1fc) 05:34:23:765 LibMain: Process Name:
F:\WINDOWS\system32\services.exe
USERENV(1c8.1cc) 05:34:23:796 IsSyncForegroundPolicyRefresh: Synchronous,
Reason: policy set to SYNC
USERENV(204.208) 05:34:23:828 LibMain: Process Name:
F:\WINDOWS\system32\lsass.exe
USERENV(1f8.1fc) 05:34:24:171 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(1f8.1fc) 05:34:24:171
=========================================================
USERENV(1f8.1fc) 05:34:24:171 LoadUserProfile: Entering, hToken = <0x324>,
lpProfileInfo = 0x6fce4
USERENV(1f8.1fc) 05:34:24:171 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1f8.1fc) 05:34:24:171 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
USERENV(1f8.1fc) 05:34:24:171 LoadUserProfile: NULL central profile path
USERENV(1f8.1fc) 05:34:24:171 LoadUserProfile: NULL default profile path
USERENV(1f8.1fc) 05:34:24:171 LoadUserProfile: NULL server name
USERENV(1f8.1fc) 05:34:24:171 LoadUserProfile: no thread token found,
impersonating self.
USERENV(1f8.1fc) 05:34:24:171 GetInterface: Returning rpc binding handle
USERENV(1c8.2f4) 05:34:24:171 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:24:171 DropClientContext: Got client token 000003DC,
sid = S-1-5-18
USERENV(1c8.2f4) 05:34:24:171 MIDL_user_allocate enter
USERENV(1c8.2f4) 05:34:24:171 DropClientContext: load profile object
successfully made
USERENV(1c8.2f4) 05:34:24:171 DropClientContext: Returning 0
USERENV(1f8.1fc) 05:34:24:171 LoadUserProfile: Calling DropClientToken (as
self) succeeded
USERENV(1c8.1e4) 05:34:24:171 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.1e4) 05:34:24:187 In LoadUserProfileP
USERENV(1c8.1e4) 05:34:24:187 LoadUserProfile: Running as client, sid =
S-1-5-18
USERENV(1c8.1e4) 05:34:24:187
=========================================================
USERENV(1c8.1e4) 05:34:24:187 LoadUserProfile: Entering, hToken = <0x3e4>,
lpProfileInfo = 0xac67c8
USERENV(1c8.1e4) 05:34:24:187 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1c8.1e4) 05:34:24:187 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
USERENV(1c8.1e4) 05:34:24:187 LoadUserProfile: NULL central profile path
USERENV(1c8.1e4) 05:34:24:187 LoadUserProfile: NULL default profile path
USERENV(1c8.1e4) 05:34:24:187 LoadUserProfile: NULL server name
USERENV(1c8.1e4) 05:34:24:187 LoadUserProfile: User sid: S-1-5-20
USERENV(1c8.1e4) 05:34:24:187 CSyncManager::EnterLock <S-1-5-20>
USERENV(1c8.1e4) 05:34:24:187 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1e4) 05:34:24:187 CSyncManager::EnterLock: New entry created
USERENV(1c8.1e4) 05:34:24:187 CHashTable::HashAdd: S-1-5-20 added in bucket
4
USERENV(1c8.1e4) 05:34:24:187 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(1c8.1e4) 05:34:24:187 TestIfUserProfileLoaded: return with error 2.
USERENV(1c8.1e4) 05:34:24:187 RestoreUserProfile: Entering
USERENV(1c8.1e4) 05:34:24:187 IsCentralProfileReachable: Entering
USERENV(1c8.1e4) 05:34:24:187 IsCentralProfileReachable: Null path.
Leaving
USERENV(1c8.1e4) 05:34:24:187 RestoreUserProfile: Profile path = <>
USERENV(1c8.1e4) 05:34:24:187 ExtractProfileFromBackup: A profile already
exists
USERENV(1c8.1e4) 05:34:24:187 PatchNewProfileIfRequred: A profile already
exists with the current sid, exitting
USERENV(1c8.1e4) 05:34:24:187 CreateLocalProfileKey: user <S-1-5-20> is
local, not setting preference key
USERENV(1c8.1e4) 05:34:24:187 GetExistingLocalProfileImage: Found entry in
profile list for existing local profile
USERENV(1c8.1e4) 05:34:24:187 GetExistingLocalProfileImage: Local profile
image filename = <%SystemDrive%\Documents and Settings\NetworkService>
USERENV(1c8.1e4) 05:34:24:187 GetExistingLocalProfileImage: Expanded local
profile image filename = <F:\Documents and Settings\NetworkService>
USERENV(1c8.1e4) 05:34:24:187 GetExistingLocalProfileImage: No local
mandatory profile. Error = 2
USERENV(1c8.1e4) 05:34:24:187 GetExistingLocalProfileImage: Found local
profile image file ok <F:\Documents and Settings\NetworkService\ntuser.dat>
USERENV(1c8.1e4) 05:34:24:187 GetExistingLocalProfileImage: Failed to query
low profile unload time with error 2
USERENV(1c8.1e4) 05:34:24:187 Local Existing Profile Image is reachable
USERENV(1c8.1e4) 05:34:24:187 Local profile name is <F:\Documents and
Settings\NetworkService>
USERENV(1c8.1e4) 05:34:24:187 RestoreUserProfile: No central profile.
Attempting to load local profile.
USERENV(1c8.1e4) 05:34:24:187 MyRegLoadKey: Returning 00000000
USERENV(1c8.1e4) 05:34:24:187 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(1c8.1e4) 05:34:24:218 MyRegLoadKeyEx: Loading key
<S-1-5-20_Classes>
USERENV(1c8.1e4) 05:34:24:218 MyRegLoadKeyEx: Successfully loaded
<S-1-5-20_Classes>
USERENV(1c8.1e4) 05:34:24:218 CreateClassHive: existing user classes hive
found
USERENV(1c8.1e4) 05:34:24:218 RestoreUserProfile: About to Leave. Final
Information follows:
USERENV(1c8.1e4) 05:34:24:218 Profile was successfully loaded.
USERENV(1c8.1e4) 05:34:24:218 lpProfile->lpRoamingProfile = <>
USERENV(1c8.1e4) 05:34:24:218 lpProfile->lpLocalProfile = <F:\Documents and
Settings\NetworkService>
USERENV(1c8.1e4) 05:34:24:218 lpProfile->dwInternalFlags = 0x0
USERENV(1c8.1e4) 05:34:24:218 RestoreUserProfile: Leaving.
USERENV(1c8.1e4) 05:34:24:218 UpgradeProfile: Entering
USERENV(1c8.1e4) 05:34:24:218 UpgradeProfile: Build numbers match
USERENV(1c8.1e4) 05:34:24:218 UpgradeProfile: Leaving Successfully
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(AppData) : <%USERPROFILE%\Application Data> expanded to <F:\Documents
and Settings\NetworkService\Application Data>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(Cookies) : <%USERPROFILE%\Cookies> expanded to <F:\Documents and
Settings\NetworkService\Cookies>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(Desktop) : <%USERPROFILE%\Desktop> expanded to <F:\Documents and
Settings\NetworkService\Desktop>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(Favorites) : <%USERPROFILE%\Favorites> expanded to <F:\Documents and
Settings\NetworkService\Favorites>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(NetHood) : <%USERPROFILE%\NetHood> expanded to <F:\Documents and
Settings\NetworkService\NetHood>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(Personal) : <%USERPROFILE%\My Documents> expanded to <F:\Documents
and Settings\NetworkService\My Documents>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(PrintHood) : <%USERPROFILE%\PrintHood> expanded to <F:\Documents and
Settings\NetworkService\PrintHood>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(Recent) : <%USERPROFILE%\Recent> expanded to <F:\Documents and
Settings\NetworkService\Recent>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(SendTo) : <%USERPROFILE%\SendTo> expanded to <F:\Documents and
Settings\NetworkService\SendTo>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell Folder(Start
Menu) : <%USERPROFILE%\Start Menu> expanded to <F:\Documents and
Settings\NetworkService\Start Menu>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(Templates) : <%USERPROFILE%\Templates> expanded to <F:\Documents and
Settings\NetworkService\Templates>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(Programs) : <%USERPROFILE%\Start Menu\Programs> expanded to
<F:\Documents and Settings\NetworkService\Start Menu\Programs>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(Startup) : <%USERPROFILE%\Start Menu\Programs\Startup> expanded to
<F:\Documents and Settings\NetworkService\Start Menu\Programs\Startup>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell Folder(Local
Settings) : <%USERPROFILE%\Local Settings> expanded to <F:\Documents and
Settings\NetworkService\Local Settings>.
USERENV(1c8.1e4) 05:34:24:218 GetProfileType: Profile already loaded.
USERENV(1c8.1e4) 05:34:24:218 LoadProfileInfo: Failed to query central
profile with error 2
USERENV(1c8.1e4) 05:34:24:218 GetProfileType: ProfileFlags is 0
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell Folder(Local
AppData) : <%USERPROFILE%\Local Settings\Application Data> expanded to
<F:\Documents and Settings\NetworkService\Local Settings\Application Data>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(Cache) : <%USERPROFILE%\Local Settings\Temporary Internet Files>
expanded to <F:\Documents and Settings\NetworkService\Local
Settings\Temporary Internet Files>.
USERENV(1c8.1e4) 05:34:24:218 PrepareProfileForUse: User Shell
Folder(History) : <%USERPROFILE%\Local Settings\History> expanded to
<F:\Documents and Settings\NetworkService\Local Settings\History>.
USERENV(1c8.1e4) 05:34:24:218 Profile Ref Count is 1
USERENV(1c8.1e4) 05:34:24:218 LoadUserProfile: Leaving critical Section.
USERENV(1c8.1e4) 05:34:24:218 CSyncManager::LeaveLock <S-1-5-20>
USERENV(1c8.1e4) 05:34:24:218 CSyncManager::LeaveLock: Lock released
USERENV(1c8.1e4) 05:34:24:218 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(1c8.1e4) 05:34:24:218 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.1e4) 05:34:24:218 LoadUserProfile: Impersonated user: 000003e4,
000003f8
USERENV(204.24c) 05:34:24:218 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(204.24c) 05:34:24:218 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(1c8.1e4) 05:34:24:250 LoadUserProfile: 002 About Reverted to user:
000003f8
USERENV(1c8.1e4) 05:34:24:250 LoadUserProfile: 003 About Reverted back to
user <00000000>
USERENV(1c8.1e4) 05:34:24:250 LoadUserProfile: Leaving with a value of 1.
USERENV(1c8.1e4) 05:34:24:250
=========================================================
USERENV(1c8.1e4) 05:34:24:250 LoadUserProfileI: returning 0
USERENV(1f8.1fc) 05:34:24:250 LoadUserProfile: Running as self
USERENV(1f8.1fc) 05:34:24:250 LoadUserProfile: Calling LoadUserProfileI (as
user) succeeded
USERENV(1f8.1fc) 05:34:24:250 LoadUserProfile: Returning success. Final
Information follows:
USERENV(1f8.1fc) 05:34:24:250 lpProfileInfo->UserName = <NetworkService>
USERENV(1f8.1fc) 05:34:24:250 lpProfileInfo->lpProfilePath = <(null)>
USERENV(1f8.1fc) 05:34:24:250 lpProfileInfo->dwFlags = 0x9
USERENV(1c8.2f4) 05:34:24:250 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:24:250 ReleaseClientContext: Releasing context
USERENV(1c8.2f4) 05:34:24:250 ReleaseClientContext_s: Releasing context
USERENV(1c8.2f4) 05:34:24:250 MIDL_user_free enter
USERENV(1f8.1fc) 05:34:24:250 ReleaseInterface: Releasing rpc binding handle
USERENV(1f8.1fc) 05:34:24:250 LoadUserProfile: Returning TRUE. hProfile =
<0x340>
USERENV(1f8.1fc) 05:34:24:250 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(340.344) 05:34:24:359 LibMain: Process Name: F:\Program
Files\Windows Defender\MsMpEng.exe
USERENV(1f8.1fc) 05:34:24:406 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(1f8.1fc) 05:34:24:406
=========================================================
USERENV(1f8.1fc) 05:34:24:406 LoadUserProfile: Entering, hToken = <0x370>,
lpProfileInfo = 0x6fce4
USERENV(1f8.1fc) 05:34:24:406 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1f8.1fc) 05:34:24:406 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
USERENV(1f8.1fc) 05:34:24:406 LoadUserProfile: NULL central profile path
USERENV(1f8.1fc) 05:34:24:406 LoadUserProfile: NULL default profile path
USERENV(1f8.1fc) 05:34:24:406 LoadUserProfile: NULL server name
USERENV(1f8.1fc) 05:34:24:406 LoadUserProfile: no thread token found,
impersonating self.
USERENV(1f8.1fc) 05:34:24:406 GetInterface: Returning rpc binding handle
USERENV(1c8.1e4) 05:34:24:406 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.1e4) 05:34:24:406 DropClientContext: Got client token 000006D0,
sid = S-1-5-18
USERENV(1c8.1e4) 05:34:24:406 MIDL_user_allocate enter
USERENV(1c8.1e4) 05:34:24:406 DropClientContext: load profile object
successfully made
USERENV(1c8.1e4) 05:34:24:406 DropClientContext: Returning 0
USERENV(1f8.1fc) 05:34:24:406 LoadUserProfile: Calling DropClientToken (as
self) succeeded
USERENV(1c8.2f4) 05:34:24:406 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:24:406 In LoadUserProfileP
USERENV(1c8.2f4) 05:34:24:406 LoadUserProfile: Running as client, sid =
S-1-5-18
USERENV(1c8.2f4) 05:34:24:406
=========================================================
USERENV(1c8.2f4) 05:34:24:406 LoadUserProfile: Entering, hToken = <0x6d4>,
lpProfileInfo = 0xac80d0
USERENV(1c8.2f4) 05:34:24:406 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1c8.2f4) 05:34:24:406 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
USERENV(1c8.2f4) 05:34:24:406 LoadUserProfile: NULL central profile path
USERENV(1c8.2f4) 05:34:24:421 LoadUserProfile: NULL default profile path
USERENV(1c8.2f4) 05:34:24:421 LoadUserProfile: NULL server name
USERENV(1c8.2f4) 05:34:24:421 LoadUserProfile: User sid: S-1-5-20
USERENV(1c8.2f4) 05:34:24:421 CSyncManager::EnterLock <S-1-5-20>
USERENV(1c8.2f4) 05:34:24:421 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.2f4) 05:34:24:421 CSyncManager::EnterLock: New entry created
USERENV(1c8.2f4) 05:34:24:421 CHashTable::HashAdd: S-1-5-20 added in bucket
4
USERENV(1c8.2f4) 05:34:24:421 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(1c8.2f4) 05:34:24:421 TestIfUserProfileLoaded: Profile already
loaded.
USERENV(1c8.2f4) 05:34:24:421 LoadUserClasses: classes hive already loaded.
USERENV(1c8.2f4) 05:34:24:421 Profile Ref Count is 2
USERENV(1c8.2f4) 05:34:24:421 LoadUserProfile: Leaving critical Section.
USERENV(1c8.2f4) 05:34:24:421 CSyncManager::LeaveLock <S-1-5-20>
USERENV(1c8.2f4) 05:34:24:421 CSyncManager::LeaveLock: Lock released
USERENV(1c8.2f4) 05:34:24:421 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(1c8.2f4) 05:34:24:421 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.2f4) 05:34:24:421 LoadUserProfile: Impersonated user: 000006d4,
000006dc
USERENV(1c8.2f4) 05:34:24:421 LoadUserProfile: 002 About Reverted to user:
000006dc
USERENV(1c8.2f4) 05:34:24:421 LoadUserProfile: 003 About Reverted back to
user <00000000>
USERENV(1c8.2f4) 05:34:24:421 LoadUserProfile: Leaving with a value of 1.
USERENV(1c8.2f4) 05:34:24:421
=========================================================
USERENV(1c8.2f4) 05:34:24:421 LoadUserProfileI: returning 0
USERENV(1f8.1fc) 05:34:24:421 LoadUserProfile: Running as self
USERENV(1f8.1fc) 05:34:24:421 LoadUserProfile: Calling LoadUserProfileI (as
user) succeeded
USERENV(1f8.1fc) 05:34:24:421 LoadUserProfile: Returning success. Final
Information follows:
USERENV(1f8.1fc) 05:34:24:421 lpProfileInfo->UserName = <NetworkService>
USERENV(1f8.1fc) 05:34:24:421 lpProfileInfo->lpProfilePath = <(null)>
USERENV(1f8.1fc) 05:34:24:421 lpProfileInfo->dwFlags = 0x9
USERENV(1c8.1e4) 05:34:24:421 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.1e4) 05:34:24:421 ReleaseClientContext: Releasing context
USERENV(1c8.1e4) 05:34:24:421 ReleaseClientContext_s: Releasing context
USERENV(1c8.1e4) 05:34:24:421 MIDL_user_free enter
USERENV(1f8.1fc) 05:34:24:421 ReleaseInterface: Releasing rpc binding handle
USERENV(1f8.1fc) 05:34:24:421 LoadUserProfile: Returning TRUE. hProfile =
<0x360>
USERENV(1f8.1fc) 05:34:24:421 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(1f8.1fc) 05:34:24:437 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(1f8.1fc) 05:34:24:437
=========================================================
USERENV(1f8.1fc) 05:34:24:437 LoadUserProfile: Entering, hToken = <0x36c>,
lpProfileInfo = 0x6fce4
USERENV(1f8.1fc) 05:34:24:437 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1f8.1fc) 05:34:24:437 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
USERENV(1f8.1fc) 05:34:24:437 LoadUserProfile: NULL central profile path
USERENV(1f8.1fc) 05:34:24:437 LoadUserProfile: NULL default profile path
USERENV(1f8.1fc) 05:34:24:437 LoadUserProfile: NULL server name
USERENV(1f8.1fc) 05:34:24:437 LoadUserProfile: no thread token found,
impersonating self.
USERENV(1f8.1fc) 05:34:24:437 GetInterface: Returning rpc binding handle
USERENV(1c8.2f4) 05:34:24:437 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:24:437 DropClientContext: Got client token 000006D0,
sid = S-1-5-18
USERENV(1c8.2f4) 05:34:24:437 MIDL_user_allocate enter
USERENV(1c8.2f4) 05:34:24:437 DropClientContext: load profile object
successfully made
USERENV(1c8.2f4) 05:34:24:437 DropClientContext: Returning 0
USERENV(1f8.1fc) 05:34:24:437 LoadUserProfile: Calling DropClientToken (as
self) succeeded
USERENV(1c8.1e4) 05:34:24:437 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.1e4) 05:34:24:437 In LoadUserProfileP
USERENV(1c8.1e4) 05:34:24:453 LoadUserProfile: Running as client, sid =
S-1-5-18
USERENV(1c8.1e4) 05:34:24:453
=========================================================
USERENV(1c8.1e4) 05:34:24:453 LoadUserProfile: Entering, hToken = <0x6d4>,
lpProfileInfo = 0xac9e30
USERENV(1c8.1e4) 05:34:24:453 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1c8.1e4) 05:34:24:453 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
USERENV(1c8.1e4) 05:34:24:453 LoadUserProfile: NULL central profile path
USERENV(1c8.1e4) 05:34:24:453 LoadUserProfile: NULL default profile path
USERENV(1c8.1e4) 05:34:24:453 LoadUserProfile: NULL server name
USERENV(1c8.1e4) 05:34:24:453 LoadUserProfile: User sid: S-1-5-19
USERENV(1c8.1e4) 05:34:24:453 CSyncManager::EnterLock <S-1-5-19>
USERENV(1c8.1e4) 05:34:24:453 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1e4) 05:34:24:453 CSyncManager::EnterLock: New entry created
USERENV(1c8.1e4) 05:34:24:453 CHashTable::HashAdd: S-1-5-19 added in bucket
12
USERENV(1c8.1e4) 05:34:24:453 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(1c8.1e4) 05:34:24:453 TestIfUserProfileLoaded: return with error 2.
USERENV(1c8.1e4) 05:34:24:453 RestoreUserProfile: Entering
USERENV(1c8.1e4) 05:34:24:453 IsCentralProfileReachable: Entering
USERENV(1c8.1e4) 05:34:24:453 IsCentralProfileReachable: Null path.
Leaving
USERENV(1c8.1e4) 05:34:24:453 RestoreUserProfile: Profile path = <>
USERENV(1c8.1e4) 05:34:24:453 ExtractProfileFromBackup: A profile already
exists
USERENV(1c8.1e4) 05:34:24:453 PatchNewProfileIfRequred: A profile already
exists with the current sid, exitting
USERENV(1c8.1e4) 05:34:24:453 CreateLocalProfileKey: user <S-1-5-19> is
local, not setting preference key
USERENV(1c8.1e4) 05:34:24:453 GetExistingLocalProfileImage: Found entry in
profile list for existing local profile
USERENV(1c8.1e4) 05:34:24:453 GetExistingLocalProfileImage: Local profile
image filename = <%SystemDrive%\Documents and Settings\LocalService>
USERENV(1c8.1e4) 05:34:24:453 GetExistingLocalProfileImage: Expanded local
profile image filename = <F:\Documents and Settings\LocalService>
USERENV(1c8.1e4) 05:34:24:453 GetExistingLocalProfileImage: No local
mandatory profile. Error = 2
USERENV(1c8.1e4) 05:34:24:453 GetExistingLocalProfileImage: Found local
profile image file ok <F:\Documents and Settings\LocalService\ntuser.dat>
USERENV(1c8.1e4) 05:34:24:453 GetExistingLocalProfileImage: Failed to query
low profile unload time with error 2
USERENV(1c8.1e4) 05:34:24:453 Local Existing Profile Image is reachable
USERENV(1c8.1e4) 05:34:24:453 Local profile name is <F:\Documents and
Settings\LocalService>
USERENV(1c8.1e4) 05:34:24:453 RestoreUserProfile: No central profile.
Attempting to load local profile.
USERENV(1c8.1e4) 05:34:24:453 MyRegLoadKey: Returning 00000000
USERENV(1c8.1e4) 05:34:24:453 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(1c8.1e4) 05:34:24:453 MyRegLoadKeyEx: Loading key
<S-1-5-19_Classes>
USERENV(1c8.1e4) 05:34:24:453 MyRegLoadKeyEx: Successfully loaded
<S-1-5-19_Classes>
USERENV(1c8.1e4) 05:34:24:453 CreateClassHive: existing user classes hive
found
USERENV(1c8.1e4) 05:34:24:453 RestoreUserProfile: About to Leave. Final
Information follows:
USERENV(1c8.1e4) 05:34:24:453 Profile was successfully loaded.
USERENV(1c8.1e4) 05:34:24:453 lpProfile->lpRoamingProfile = <>
USERENV(1c8.1e4) 05:34:24:453 lpProfile->lpLocalProfile = <F:\Documents and
Settings\LocalService>
USERENV(1c8.1e4) 05:34:24:453 lpProfile->dwInternalFlags = 0x0
USERENV(1c8.1e4) 05:34:24:453 RestoreUserProfile: Leaving.
USERENV(1c8.1e4) 05:34:24:453 UpgradeProfile: Entering
USERENV(1c8.1e4) 05:34:24:453 UpgradeProfile: Build numbers match
USERENV(1c8.1e4) 05:34:24:453 UpgradeProfile: Leaving Successfully
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(AppData) : <%USERPROFILE%\Application Data> expanded to <F:\Documents
and Settings\LocalService\Application Data>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(Cookies) : <%USERPROFILE%\Cookies> expanded to <F:\Documents and
Settings\LocalService\Cookies>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(Desktop) : <%USERPROFILE%\Desktop> expanded to <F:\Documents and
Settings\LocalService\Desktop>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(Favorites) : <%USERPROFILE%\Favorites> expanded to <F:\Documents and
Settings\LocalService\Favorites>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(NetHood) : <%USERPROFILE%\NetHood> expanded to <F:\Documents and
Settings\LocalService\NetHood>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(Personal) : <%USERPROFILE%\My Documents> expanded to <F:\Documents
and Settings\LocalService\My Documents>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(PrintHood) : <%USERPROFILE%\PrintHood> expanded to <F:\Documents and
Settings\LocalService\PrintHood>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(Recent) : <%USERPROFILE%\Recent> expanded to <F:\Documents and
Settings\LocalService\Recent>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(SendTo) : <%USERPROFILE%\SendTo> expanded to <F:\Documents and
Settings\LocalService\SendTo>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell Folder(Start
Menu) : <%USERPROFILE%\Start Menu> expanded to <F:\Documents and
Settings\LocalService\Start Menu>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(Templates) : <%USERPROFILE%\Templates> expanded to <F:\Documents and
Settings\LocalService\Templates>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(Programs) : <%USERPROFILE%\Start Menu\Programs> expanded to
<F:\Documents and Settings\LocalService\Start Menu\Programs>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell
Folder(Startup) : <%USERPROFILE%\Start Menu\Programs\Startup> expanded to
<F:\Documents and Settings\LocalService\Start Menu\Programs\Startup>.
USERENV(1c8.1e4) 05:34:24:453 PrepareProfileForUse: User Shell Folder(Local
Settings) : <%USERPROFILE%\Local Settings> expanded to <F:\Documents and
Settings\LocalService\Local Settings>.
USERENV(1c8.1e4) 05:34:24:453 GetProfileType: Profile already loaded.
USERENV(1c8.1e4) 05:34:24:453 LoadProfileInfo: Failed to query central
profile with error 2
USERENV(1c8.1e4) 05:34:24:453 GetProfileType: ProfileFlags is 0
USERENV(1c8.1e4) 05:34:24:468 PrepareProfileForUse: User Shell Folder(Local
AppData) : <%USERPROFILE%\Local Settings\Application Data> expanded to
<F:\Documents and Settings\LocalService\Local Settings\Application Data>.
USERENV(1c8.1e4) 05:34:24:468 PrepareProfileForUse: User Shell
Folder(Cache) : <%USERPROFILE%\Local Settings\Temporary Internet Files>
expanded to <F:\Documents and Settings\LocalService\Local Settings\Temporary
Internet Files>.
USERENV(1c8.1e4) 05:34:24:468 PrepareProfileForUse: User Shell
Folder(History) : <%USERPROFILE%\Local Settings\History> expanded to
<F:\Documents and Settings\LocalService\Local Settings\History>.
USERENV(1c8.1e4) 05:34:24:468 Profile Ref Count is 1
USERENV(1c8.1e4) 05:34:24:468 LoadUserProfile: Leaving critical Section.
USERENV(1c8.1e4) 05:34:24:468 CSyncManager::LeaveLock <S-1-5-19>
USERENV(1c8.1e4) 05:34:24:468 CSyncManager::LeaveLock: Lock released
USERENV(1c8.1e4) 05:34:24:468 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(1c8.1e4) 05:34:24:468 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.1e4) 05:34:24:468 LoadUserProfile: Impersonated user: 000006d4,
000006e0
USERENV(204.298) 05:34:24:468 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(204.298) 05:34:24:468 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(1c8.1e4) 05:34:24:484 LoadUserProfile: 002 About Reverted to user:
000006e0
USERENV(1c8.1e4) 05:34:24:484 LoadUserProfile: 003 About Reverted back to
user <00000000>
USERENV(1c8.1e4) 05:34:24:484 LoadUserProfile: Leaving with a value of 1.
USERENV(1c8.1e4) 05:34:24:484
=========================================================
USERENV(1c8.1e4) 05:34:24:484 LoadUserProfileI: returning 0
USERENV(1f8.1fc) 05:34:24:484 LoadUserProfile: Running as self
USERENV(1f8.1fc) 05:34:24:484 LoadUserProfile: Calling LoadUserProfileI (as
user) succeeded
USERENV(1f8.1fc) 05:34:24:484 LoadUserProfile: Returning success. Final
Information follows:
USERENV(1f8.1fc) 05:34:24:484 lpProfileInfo->UserName = <LocalService>
USERENV(1f8.1fc) 05:34:24:484 lpProfileInfo->lpProfilePath = <(null)>
USERENV(1f8.1fc) 05:34:24:484 lpProfileInfo->dwFlags = 0x9
USERENV(1c8.2f4) 05:34:24:484 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:24:484 ReleaseClientContext: Releasing context
USERENV(1c8.2f4) 05:34:24:484 ReleaseClientContext_s: Releasing context
USERENV(1c8.2f4) 05:34:24:484 MIDL_user_free enter
USERENV(1f8.1fc) 05:34:24:484 ReleaseInterface: Releasing rpc binding handle
USERENV(1f8.1fc) 05:34:24:484 LoadUserProfile: Returning TRUE. hProfile =
<0x398>
USERENV(1f8.1fc) 05:34:24:484 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(340.364) 05:34:24:562 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(36c.41c) 05:34:24:750 LibMain: Process Name:
F:\WINDOWS\System32\svchost.exe
USERENV(1f8.1fc) 05:34:28:140 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(1f8.1fc) 05:34:28:140
=========================================================
USERENV(1f8.1fc) 05:34:28:140 LoadUserProfile: Entering, hToken = <0x3c0>,
lpProfileInfo = 0x6fce4
USERENV(1f8.1fc) 05:34:28:140 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1f8.1fc) 05:34:28:140 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
USERENV(1f8.1fc) 05:34:28:140 LoadUserProfile: NULL central profile path
USERENV(1f8.1fc) 05:34:28:140 LoadUserProfile: NULL default profile path
USERENV(1f8.1fc) 05:34:28:140 LoadUserProfile: NULL server name
USERENV(1f8.1fc) 05:34:28:140 LoadUserProfile: no thread token found,
impersonating self.
USERENV(1f8.1fc) 05:34:28:140 GetInterface: Returning rpc binding handle
USERENV(1c8.2f4) 05:34:28:156 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:28:156 DropClientContext: Got client token 000006D4,
sid = S-1-5-18
USERENV(1c8.2f4) 05:34:28:156 MIDL_user_allocate enter
USERENV(1c8.2f4) 05:34:28:156 DropClientContext: load profile object
successfully made
USERENV(1c8.2f4) 05:34:28:156 DropClientContext: Returning 0
USERENV(1f8.1fc) 05:34:28:156 LoadUserProfile: Calling DropClientToken (as
self) succeeded
USERENV(1c8.1e4) 05:34:28:156 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.1e4) 05:34:28:156 In LoadUserProfileP
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: Running as client, sid =
S-1-5-18
USERENV(1c8.1e4) 05:34:28:156
=========================================================
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: Entering, hToken = <0x6d8>,
lpProfileInfo = 0xac80d0
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: NULL central profile path
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: NULL default profile path
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: NULL server name
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: User sid: S-1-5-20
USERENV(1c8.1e4) 05:34:28:156 CSyncManager::EnterLock <S-1-5-20>
USERENV(1c8.1e4) 05:34:28:156 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1e4) 05:34:28:156 CSyncManager::EnterLock: New entry created
USERENV(1c8.1e4) 05:34:28:156 CHashTable::HashAdd: S-1-5-20 added in bucket
4
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(1c8.1e4) 05:34:28:156 TestIfUserProfileLoaded: Profile already
loaded.
USERENV(1c8.1e4) 05:34:28:156 LoadUserClasses: classes hive already loaded.
USERENV(1c8.1e4) 05:34:28:156 Profile Ref Count is 3
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: Leaving critical Section.
USERENV(1c8.1e4) 05:34:28:156 CSyncManager::LeaveLock <S-1-5-20>
USERENV(1c8.1e4) 05:34:28:156 CSyncManager::LeaveLock: Lock released
USERENV(1c8.1e4) 05:34:28:156 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(1c8.1e4) 05:34:28:156 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: Impersonated user: 000006d8,
000006dc
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: 002 About Reverted to user:
000006dc
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: 003 About Reverted back to
user <00000000>
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfile: Leaving with a value of 1.
USERENV(1c8.1e4) 05:34:28:156
=========================================================
USERENV(1c8.1e4) 05:34:28:156 LoadUserProfileI: returning 0
USERENV(1f8.1fc) 05:34:28:156 LoadUserProfile: Running as self
USERENV(1f8.1fc) 05:34:28:156 LoadUserProfile: Calling LoadUserProfileI (as
user) succeeded
USERENV(1f8.1fc) 05:34:28:156 LoadUserProfile: Returning success. Final
Information follows:
USERENV(1f8.1fc) 05:34:28:156 lpProfileInfo->UserName = <NetworkService>
USERENV(1f8.1fc) 05:34:28:156 lpProfileInfo->lpProfilePath = <(null)>
USERENV(1f8.1fc) 05:34:28:156 lpProfileInfo->dwFlags = 0x9
USERENV(1c8.2f4) 05:34:28:156 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:28:156 ReleaseClientContext: Releasing context
USERENV(1c8.2f4) 05:34:28:156 ReleaseClientContext_s: Releasing context
USERENV(1c8.2f4) 05:34:28:156 MIDL_user_free enter
USERENV(1f8.1fc) 05:34:28:156 ReleaseInterface: Releasing rpc binding handle
USERENV(1f8.1fc) 05:34:28:156 LoadUserProfile: Returning TRUE. hProfile =
<0x3ac>
USERENV(1f8.1fc) 05:34:28:156 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(1c8.498) 05:34:28:218 IsSyncForegroundPolicyRefresh: Synchronous,
Reason: policy set to SYNC
USERENV(1c8.498) 05:34:28:218 ApplyGroupPolicy: Entering. Flags = 3
USERENV(1c8.498) 05:34:28:218 ApplyGroupPolicy: Duplicating handles
USERENV(1c8.498) 05:34:28:218 ProcessGPOs:
USERENV(1c8.498) 05:34:28:218 ProcessGPOs:
USERENV(1c8.498) 05:34:28:218 ProcessGPOs: Starting computer Group Policy
(Sync forground) processing...
USERENV(1c8.498) 05:34:28:218 ProcessGPOs:
USERENV(1c8.498) 05:34:28:218 ProcessGPOs:
USERENV(1c8.498) 05:34:28:218 EnterCriticalPolicySectionEx: Entering with
timeout 600000 and flags 0x0
USERENV(1c8.498) 05:34:28:218 EnterCriticalPolicySectionEx: Machine critical
section has been claimed. Handle = 0x750
USERENV(1c8.498) 05:34:28:218 EnterCriticalPolicySectionEx: Leaving
successfully.
USERENV(1c8.498) 05:34:28:218 ProcessGPOs: Machine role is 0.
USERENV(1c8.498) 05:34:28:218 ReadGPExtensions: Rsop entry point not found
for dskquota.dll.
USERENV(1c8.498) 05:34:28:218 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(1c8.498) 05:34:28:218 ReadGPExtensions: Rsop entry point not found
for iedkcs32.dll.
USERENV(1c8.498) 05:34:28:218 ReadGPExtensions: Rsop entry point not found
for F:\WINDOWS\System32\srchadmin.dll.
USERENV(1c8.498) 05:34:28:218 ReadGPExtensions: Rsop entry point not found
for scecli.dll.
USERENV(1c8.498) 05:34:28:218 ReadGPExtensions: Rsop entry point not found
for F:\WINDOWS\System32\cscui.dll.
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(1c8.498) 05:34:28:218 ReadStatus: Read Extension's Previous status
successfully.
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {7933F41E-56F8-41d6-A31C-4148A711EE93}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(1c8.498) 05:34:28:218 ReadStatus: Read Extension's Previous status
successfully.
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {C631DF4C-088F-4156-B058-4375F0853CD8}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(1c8.498) 05:34:28:218 ReadExtStatus: Reading Previous Status for
extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(1c8.498) 05:34:28:218 ProcessGPOs: No site name defined. Skipping
site policy.
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: Calling GetGPOInfo for normal
policy mode
USERENV(1c8.498) 05:34:28:234 GetGPOInfo: ********************************
USERENV(1c8.498) 05:34:28:234 GetGPOInfo: Entering...
USERENV(1c8.498) 05:34:28:234 GetGPOInfo: lpHostName or lpDNName is NULL.
Skipping DS stuff.
USERENV(1c8.498) 05:34:28:234 GetGPOInfo: Leaving with 1
USERENV(1c8.498) 05:34:28:234 GetGPOInfo: ********************************
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: Logging Data for Target <OFFICE>.
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: OpenThreadToken failed with error
1008, assuming thread is not impersonating
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: Processing extension Registry
USERENV(1c8.498) 05:34:28:234 ReadStatus: Read Extension's Previous status
successfully.
USERENV(1c8.498) 05:34:28:234 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:234 CheckGPOs: No GPO changes and no security
group membership change and extension Registry has NoGPOChanges set.
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: Processing extension Wireless
Group Policy
USERENV(1c8.498) 05:34:28:234 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:234 CheckGPOs: No GPO changes but couldn't read
extension Wireless Group Policy's status or policy time.
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: Extension Wireless Group Policy
skipped because both deleted and changed GPO lists are empty.
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:234 ProcessGPOs: Processing extension Folder
Redirection
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension Folder Redirection's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension Folder Redirection
skipped with flags 0x3.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension Microsoft
Disk Quota
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension Microsoft Disk Quota's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension Microsoft Disk Quota
skipped because both deleted and changed GPO lists are empty.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension QoS Packet
Scheduler
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension QoS Packet Scheduler's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension QoS Packet Scheduler
skipped because both deleted and changed GPO lists are empty.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension Scripts
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension Scripts's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension Scripts skipped because
both deleted and changed GPO lists are empty.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension Internet
Explorer Zonemapping
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension Internet Explorer Zonemapping's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension Internet Explorer
Zonemapping skipped because both deleted and changed GPO lists are empty.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension Windows
Search Group Policy Extension
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension Windows Search Group Policy Extension's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension Windows Search Group
Policy Extension skipped because both deleted and changed GPO lists are
empty.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension Security
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension Security's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension Security skipped
because both deleted and changed GPO lists are empty.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension Internet
Explorer Branding
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension Internet Explorer Branding's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension Internet Explorer
Branding skipped with flags 0x3.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension EFS recovery
USERENV(1c8.498) 05:34:28:250 ReadStatus: Read Extension's Previous status
successfully.
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes and no security
group membership change and extension EFS recovery has NoGPOChanges set.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension Microsoft
Offline Files
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension Microsoft Offline Files's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension Microsoft Offline Files
skipped because both deleted and changed GPO lists are empty.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension Software
Installation
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension Software Installation's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension Software Installation
skipped because both deleted and changed GPO lists are empty.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: -----------------------
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Processing extension IP Security
USERENV(1c8.498) 05:34:28:250 CompareGPOLists: The lists are the same.
USERENV(1c8.498) 05:34:28:250 CheckGPOs: No GPO changes but couldn't read
extension IP Security's status or policy time.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Extension IP Security skipped
because both deleted and changed GPO lists are empty.
USERENV(1c8.498) 05:34:28:250 SetFgRefreshInfo: Previous Machine Fg policy
Synchronous, Reason: SKU.
USERENV(1c8.498) 05:34:28:250 SetFgRefreshInfo: Next Machine Fg policy
Synchronous, Reason: SKU.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: No WMI logging done in this
policy cycle.
USERENV(1c8.498) 05:34:28:250 LeaveCriticalPolicySection: Critical section
0x750 has been released.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Computer Group Policy has been
applied.
USERENV(1c8.498) 05:34:28:250 ProcessGPOs: Leaving with 1.
USERENV(1c8.498) 05:34:28:250 ApplyGroupPolicy: Leaving successfully.
USERENV(490.494) 05:34:28:234 LibMain: Process Name:
F:\WINDOWS\system32\msdtc.exe
USERENV(1c8.4a4) 05:34:28:281 GPOThread: Next refresh will happen in 118
minutes
USERENV(538.550) 05:34:29:250 LibMain: Process Name:
F:\WINDOWS\System32\svchost.exe
USERENV(1f8.1fc) 05:34:29:281 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(1f8.1fc) 05:34:29:296
=========================================================
USERENV(1f8.1fc) 05:34:29:312 LoadUserProfile: Entering, hToken = <0x3e8>,
lpProfileInfo = 0x6fce4
USERENV(1f8.1fc) 05:34:29:328 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1f8.1fc) 05:34:29:343 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
USERENV(1f8.1fc) 05:34:29:343 LoadUserProfile: NULL central profile path
USERENV(1f8.1fc) 05:34:29:343 LoadUserProfile: NULL default profile path
USERENV(1f8.1fc) 05:34:29:343 LoadUserProfile: NULL server name
USERENV(1f8.1fc) 05:34:29:343 LoadUserProfile: no thread token found,
impersonating self.
USERENV(1f8.1fc) 05:34:29:343 GetInterface: Returning rpc binding handle
USERENV(1c8.1e4) 05:34:29:343 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.1e4) 05:34:29:343 DropClientContext: Got client token 000006B4,
sid = S-1-5-18
USERENV(1c8.1e4) 05:34:29:343 MIDL_user_allocate enter
USERENV(1c8.1e4) 05:34:29:343 DropClientContext: load profile object
successfully made
USERENV(1c8.1e4) 05:34:29:343 DropClientContext: Returning 0
USERENV(1f8.1fc) 05:34:29:343 LoadUserProfile: Calling DropClientToken (as
self) succeeded
USERENV(1c8.2f4) 05:34:29:343 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:29:343 In LoadUserProfileP
USERENV(1c8.2f4) 05:34:29:343 LoadUserProfile: Running as client, sid =
S-1-5-18
USERENV(1c8.2f4) 05:34:29:343
=========================================================
USERENV(1c8.2f4) 05:34:29:343 LoadUserProfile: Entering, hToken = <0x3f8>,
lpProfileInfo = 0xb74878
USERENV(1c8.2f4) 05:34:29:343 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1c8.2f4) 05:34:29:343 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
USERENV(1c8.2f4) 05:34:29:343 LoadUserProfile: NULL central profile path
USERENV(1c8.2f4) 05:34:29:343 LoadUserProfile: NULL default profile path
USERENV(1c8.2f4) 05:34:29:343 LoadUserProfile: NULL server name
USERENV(1c8.2f4) 05:34:29:343 LoadUserProfile: User sid: S-1-5-20
USERENV(1c8.2f4) 05:34:29:343 CSyncManager::EnterLock <S-1-5-20>
USERENV(1c8.2f4) 05:34:29:343 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.2f4) 05:34:29:343 CSyncManager::EnterLock: New entry created
USERENV(1c8.2f4) 05:34:29:343 CHashTable::HashAdd: S-1-5-20 added in bucket
4
USERENV(1c8.2f4) 05:34:29:343 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(1c8.2f4) 05:34:29:343 TestIfUserProfileLoaded: Profile already
loaded.
USERENV(1c8.2f4) 05:34:29:343 LoadUserClasses: classes hive already loaded.
USERENV(1c8.2f4) 05:34:29:343 Profile Ref Count is 4
USERENV(1c8.2f4) 05:34:29:343 LoadUserProfile: Leaving critical Section.
USERENV(1c8.2f4) 05:34:29:343 CSyncManager::LeaveLock <S-1-5-20>
USERENV(1c8.2f4) 05:34:29:343 CSyncManager::LeaveLock: Lock released
USERENV(1c8.2f4) 05:34:29:343 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(1c8.2f4) 05:34:29:359 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.2f4) 05:34:29:359 LoadUserProfile: Impersonated user: 000003f8,
00000144
USERENV(1c8.2f4) 05:34:29:359 LoadUserProfile: 002 About Reverted to user:
00000144
USERENV(1c8.2f4) 05:34:29:359 LoadUserProfile: 003 About Reverted back to
user <00000000>
USERENV(1c8.2f4) 05:34:29:359 LoadUserProfile: Leaving with a value of 1.
USERENV(1c8.2f4) 05:34:29:359
=========================================================
USERENV(1c8.2f4) 05:34:29:359 LoadUserProfileI: returning 0
USERENV(1f8.1fc) 05:34:29:359 LoadUserProfile: Running as self
USERENV(1f8.1fc) 05:34:29:359 LoadUserProfile: Calling LoadUserProfileI (as
user) succeeded
USERENV(1f8.1fc) 05:34:29:359 LoadUserProfile: Returning success. Final
Information follows:
USERENV(1f8.1fc) 05:34:29:359 lpProfileInfo->UserName = <NetworkService>
USERENV(1f8.1fc) 05:34:29:359 lpProfileInfo->lpProfilePath = <(null)>
USERENV(1f8.1fc) 05:34:29:359 lpProfileInfo->dwFlags = 0x9
USERENV(1c8.1e4) 05:34:29:359 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.1e4) 05:34:29:359 ReleaseClientContext: Releasing context
USERENV(1c8.1e4) 05:34:29:359 ReleaseClientContext_s: Releasing context
USERENV(1c8.1e4) 05:34:29:359 MIDL_user_free enter
USERENV(1f8.1fc) 05:34:29:359 ReleaseInterface: Releasing rpc binding handle
USERENV(1f8.1fc) 05:34:29:359 LoadUserProfile: Returning TRUE. hProfile =
<0x3f4>
USERENV(1f8.1fc) 05:34:29:359 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(700.704) 05:34:29:640 LibMain: Process Name:
F:\WINDOWS\system32\nvsvc32.exe
USERENV(720.724) 05:34:30:343 LibMain: Process Name: F:\Program
Files\Raxco\PerfectDisk\PDAgent.exe
USERENV(1f8.1fc) 05:34:30:625 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(1f8.1fc) 05:34:30:703
=========================================================
USERENV(1f8.1fc) 05:34:30:734 LoadUserProfile: Entering, hToken = <0x430>,
lpProfileInfo = 0x6fce4
USERENV(1f8.1fc) 05:34:30:781 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1f8.1fc) 05:34:30:796 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
USERENV(1f8.1fc) 05:34:30:812 LoadUserProfile: NULL central profile path
USERENV(1f8.1fc) 05:34:30:859 LoadUserProfile: NULL default profile path
USERENV(1f8.1fc) 05:34:30:859 LoadUserProfile: NULL server name
USERENV(1f8.1fc) 05:34:30:890 LoadUserProfile: no thread token found,
impersonating self.
USERENV(1f8.1fc) 05:34:30:906 GetInterface: Returning rpc binding handle
USERENV(1c8.2f4) 05:34:30:906 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:30:906 DropClientContext: Got client token 000006B4,
sid = S-1-5-18
USERENV(1c8.2f4) 05:34:30:906 MIDL_user_allocate enter
USERENV(1c8.2f4) 05:34:30:906 DropClientContext: load profile object
successfully made
USERENV(1c8.2f4) 05:34:30:906 DropClientContext: Returning 0
USERENV(1f8.1fc) 05:34:30:906 LoadUserProfile: Calling DropClientToken (as
self) succeeded
USERENV(1c8.1e4) 05:34:30:906 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.1e4) 05:34:30:906 In LoadUserProfileP
USERENV(1c8.1e4) 05:34:30:906 LoadUserProfile: Running as client, sid =
S-1-5-18
USERENV(1c8.1e4) 05:34:30:906
=========================================================
USERENV(1c8.1e4) 05:34:30:906 LoadUserProfile: Entering, hToken = <0x3f8>,
lpProfileInfo = 0xb63998
USERENV(1c8.1e4) 05:34:30:906 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1c8.1e4) 05:34:30:906 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
USERENV(1c8.1e4) 05:34:30:906 LoadUserProfile: NULL central profile path
USERENV(1c8.1e4) 05:34:30:906 LoadUserProfile: NULL default profile path
USERENV(1c8.1e4) 05:34:30:906 LoadUserProfile: NULL server name
USERENV(1c8.1e4) 05:34:30:906 LoadUserProfile: User sid: S-1-5-19
USERENV(1c8.1e4) 05:34:30:906 CSyncManager::EnterLock <S-1-5-19>
USERENV(1c8.1e4) 05:34:30:906 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1e4) 05:34:30:906 CSyncManager::EnterLock: New entry created
USERENV(1c8.1e4) 05:34:30:906 CHashTable::HashAdd: S-1-5-19 added in bucket
12
USERENV(1c8.1e4) 05:34:30:921 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(1c8.1e4) 05:34:30:937 TestIfUserProfileLoaded: Profile already
loaded.
USERENV(1c8.1e4) 05:34:30:953 LoadUserClasses: classes hive already loaded.
USERENV(1c8.1e4) 05:34:30:953 Profile Ref Count is 2
USERENV(1c8.1e4) 05:34:30:968 LoadUserProfile: Leaving critical Section.
USERENV(1c8.1e4) 05:34:30:968 CSyncManager::LeaveLock <S-1-5-19>
USERENV(1c8.1e4) 05:34:30:968 CSyncManager::LeaveLock: Lock released
USERENV(1c8.1e4) 05:34:30:968 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(1c8.1e4) 05:34:30:968 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.1e4) 05:34:30:984 LoadUserProfile: Impersonated user: 000003f8,
0000077c
USERENV(1c8.1e4) 05:34:30:984 LoadUserProfile: 002 About Reverted to user:
0000077c
USERENV(1c8.1e4) 05:34:31:000 LoadUserProfile: 003 About Reverted back to
user <00000000>
USERENV(1c8.1e4) 05:34:31:000 LoadUserProfile: Leaving with a value of 1.
USERENV(1c8.1e4) 05:34:31:015
=========================================================
USERENV(1c8.1e4) 05:34:31:031 LoadUserProfileI: returning 0
USERENV(1f8.1fc) 05:34:31:046 LoadUserProfile: Running as self
USERENV(1f8.1fc) 05:34:31:046 LoadUserProfile: Calling LoadUserProfileI (as
user) succeeded
USERENV(1f8.1fc) 05:34:31:046 LoadUserProfile: Returning success. Final
Information follows:
USERENV(1f8.1fc) 05:34:31:046 lpProfileInfo->UserName = <LocalService>
USERENV(1f8.1fc) 05:34:31:046 lpProfileInfo->lpProfilePath = <(null)>
USERENV(1f8.1fc) 05:34:31:046 lpProfileInfo->dwFlags = 0x9
USERENV(1c8.170) 05:34:31:046 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.170) 05:34:31:046 ReleaseClientContext: Releasing context
USERENV(1c8.170) 05:34:31:046 ReleaseClientContext_s: Releasing context
USERENV(1c8.170) 05:34:31:046 MIDL_user_free enter
USERENV(1f8.1fc) 05:34:31:046 ReleaseInterface: Releasing rpc binding handle
USERENV(1f8.1fc) 05:34:31:046 LoadUserProfile: Returning TRUE. hProfile =
<0x444>
USERENV(1f8.1fc) 05:34:31:046 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(1f8.1fc) 05:34:31:093 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(1f8.1fc) 05:34:31:109
=========================================================
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: Entering, hToken = <0x45c>,
lpProfileInfo = 0x6fce4
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: NULL central profile path
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: NULL default profile path
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: NULL server name
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: no thread token found,
impersonating self.
USERENV(1f8.1fc) 05:34:31:125 GetInterface: Returning rpc binding handle
USERENV(1c8.2f4) 05:34:31:125 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:31:125 DropClientContext: Got client token 000006B4,
sid = S-1-5-18
USERENV(1c8.2f4) 05:34:31:125 MIDL_user_allocate enter
USERENV(1c8.2f4) 05:34:31:125 DropClientContext: load profile object
successfully made
USERENV(1c8.2f4) 05:34:31:125 DropClientContext: Returning 0
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: Calling DropClientToken (as
self) succeeded
USERENV(1c8.1e4) 05:34:31:125 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.1e4) 05:34:31:125 In LoadUserProfileP
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: Running as client, sid =
S-1-5-18
USERENV(1c8.1e4) 05:34:31:125
=========================================================
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: Entering, hToken = <0x3f8>,
lpProfileInfo = 0xb74878
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: lpProfileInfo->lpUserName =
<NetworkService>
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: NULL central profile path
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: NULL default profile path
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: NULL server name
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: User sid: S-1-5-20
USERENV(1c8.1e4) 05:34:31:125 CSyncManager::EnterLock <S-1-5-20>
USERENV(1c8.1e4) 05:34:31:125 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1e4) 05:34:31:125 CSyncManager::EnterLock: New entry created
USERENV(1c8.1e4) 05:34:31:125 CHashTable::HashAdd: S-1-5-20 added in bucket
4
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(1c8.1e4) 05:34:31:125 TestIfUserProfileLoaded: Profile already
loaded.
USERENV(1c8.1e4) 05:34:31:125 LoadUserClasses: classes hive already loaded.
USERENV(1c8.1e4) 05:34:31:125 Profile Ref Count is 5
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: Leaving critical Section.
USERENV(1c8.1e4) 05:34:31:125 CSyncManager::LeaveLock <S-1-5-20>
USERENV(1c8.1e4) 05:34:31:125 CSyncManager::LeaveLock: Lock released
USERENV(1c8.1e4) 05:34:31:125 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(1c8.1e4) 05:34:31:125 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: Impersonated user: 000003f8,
0000077c
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: 002 About Reverted to user:
0000077c
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: 003 About Reverted back to
user <00000000>
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfile: Leaving with a value of 1.
USERENV(1c8.1e4) 05:34:31:125
=========================================================
USERENV(1c8.1e4) 05:34:31:125 LoadUserProfileI: returning 0
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: Running as self
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: Calling LoadUserProfileI (as
user) succeeded
USERENV(1f8.1fc) 05:34:31:125 LoadUserProfile: Returning success. Final
Information follows:
USERENV(1f8.1fc) 05:34:31:125 lpProfileInfo->UserName = <NetworkService>
USERENV(1f8.1fc) 05:34:31:125 lpProfileInfo->lpProfilePath = <(null)>
USERENV(1f8.1fc) 05:34:31:125 lpProfileInfo->dwFlags = 0x9
USERENV(1c8.170) 05:34:31:140 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.170) 05:34:31:140 ReleaseClientContext: Releasing context
USERENV(1c8.170) 05:34:31:140 ReleaseClientContext_s: Releasing context
USERENV(1c8.170) 05:34:31:140 MIDL_user_free enter
USERENV(1f8.1fc) 05:34:31:140 ReleaseInterface: Releasing rpc binding handle
USERENV(1f8.1fc) 05:34:31:140 LoadUserProfile: Returning TRUE. hProfile =
<0x468>
USERENV(1f8.1fc) 05:34:31:140 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(694.6a4) 05:34:31:171 LibMain: Process Name:
F:\WINDOWS\system32\smlogsvc.exe
USERENV(694.6a4) 05:34:31:171 GetProfileType: Profile already loaded.
USERENV(694.6a4) 05:34:31:187 GetProfileType: ProfileFlags is 0
USERENV(478.18c) 05:34:31:328 LibMain: Process Name:
F:\WINDOWS\system32\spoolsv.exe
USERENV(6a8.7d8) 05:34:31:343 LibMain: Process Name:
F:\WINDOWS\System32\svchost.exe
USERENV(3d4.e0) 05:34:31:421 LibMain: Process Name:
F:\WINDOWS\system32\svchost.exe
USERENV(e8.f0) 05:34:31:562 LibMain: Process Name:
F:\WINDOWS\system32\SearchIndexer.exe
USERENV(244.350) 05:34:31:734 LibMain: Process Name:
F:\WINDOWS\system32\mqsvc.exe
USERENV(1c8.1cc) 05:34:38:437 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(1c8.1cc) 05:34:38:546
=========================================================
USERENV(1c8.1cc) 05:34:38:546 LoadUserProfile: Entering, hToken = <0x76c>,
lpProfileInfo = 0x6e5d8
USERENV(1c8.1cc) 05:34:38:562 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(1c8.1cc) 05:34:38:562 LoadUserProfile: lpProfileInfo->lpUserName =
<Administrator>
USERENV(1c8.1cc) 05:34:38:578 LoadUserProfile: NULL central profile path
USERENV(1c8.1cc) 05:34:38:593 LoadUserProfile: NULL default profile path
USERENV(1c8.1cc) 05:34:38:609 LoadUserProfile: NULL server name
USERENV(1c8.1cc) 05:34:38:843 LoadUserProfile: In console winlogon process
USERENV(1c8.1cc) 05:34:38:843 In LoadUserProfileP
USERENV(1c8.1cc) 05:34:38:843
=========================================================
USERENV(1c8.1cc) 05:34:38:843 LoadUserProfile: Entering, hToken = <0x76c>,
lpProfileInfo = 0x6e5d8
USERENV(1c8.1cc) 05:34:38:843 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(86c.870) 05:34:38:843 LibMain: Process Name: F:\Program
Files\Raxco\PerfectDisk\PDEngine.exe
USERENV(1c8.1cc) 05:34:38:843 LoadUserProfile: lpProfileInfo->lpUserName =
<Administrator>
USERENV(1c8.1cc) 05:34:38:859 LoadUserProfile: NULL central profile path
USERENV(1c8.1cc) 05:34:38:859 LoadUserProfile: NULL default profile path
USERENV(1c8.1cc) 05:34:38:859 LoadUserProfile: NULL server name
USERENV(1c8.1cc) 05:34:38:937 LoadUserProfile: User sid:
S-1-5-21-1653384031-3508051079-812977905-500
USERENV(1c8.1cc) 05:34:38:968 CSyncManager::EnterLock
<S-1-5-21-1653384031-3508051079-812977905-500>
USERENV(1c8.1cc) 05:34:38:968 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1cc) 05:34:38:968 CSyncManager::EnterLock: New entry created
USERENV(1c8.1cc) 05:34:38:968 CHashTable::HashAdd:
S-1-5-21-1653384031-3508051079-812977905-500 added in bucket 6
USERENV(1c8.1cc) 05:34:38:968 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(1c8.1cc) 05:34:38:968 TestIfUserProfileLoaded: return with error 2.
USERENV(1c8.1cc) 05:34:38:968 RestoreUserProfile: Entering
USERENV(1c8.1cc) 05:34:38:968 RestoreUserProfile: User is a Admin
USERENV(1c8.1cc) 05:34:38:968 IsCentralProfileReachable: Entering
USERENV(1c8.1cc) 05:34:38:968 IsCentralProfileReachable: Null path.
Leaving
USERENV(1c8.1cc) 05:34:38:968 RestoreUserProfile: Profile path = <>
USERENV(1c8.1cc) 05:34:38:968 ExtractProfileFromBackup: A profile already
exists
USERENV(1c8.1cc) 05:34:38:968 PatchNewProfileIfRequred: A profile already
exists with the current sid, exitting
USERENV(1c8.1cc) 05:34:38:968 CreateLocalProfileKey: user
<S-1-5-21-1653384031-3508051079-812977905-500> is local, not setting
preference key
USERENV(1c8.1cc) 05:34:38:968 GetExistingLocalProfileImage: Found entry in
profile list for existing local profile
USERENV(1c8.1cc) 05:34:38:968 GetExistingLocalProfileImage: Local profile
image filename = <%SystemDrive%\Documents and Settings\Administrator>
USERENV(1c8.1cc) 05:34:38:984 GetExistingLocalProfileImage: Expanded local
profile image filename = <F:\Documents and Settings\Administrator>
USERENV(1c8.1cc) 05:34:38:984 GetExistingLocalProfileImage: No local
mandatory profile. Error = 2
USERENV(1c8.1cc) 05:34:38:984 GetExistingLocalProfileImage: Found local
profile image file ok <F:\Documents and Settings\Administrator\ntuser.dat>
USERENV(1c8.1cc) 05:34:38:984 GetExistingLocalProfileImage: Failed to query
low profile unload time with error 2
USERENV(1c8.1cc) 05:34:38:984 Local Existing Profile Image is reachable
USERENV(1c8.1cc) 05:34:38:984 Local profile name is <F:\Documents and
Settings\Administrator>
USERENV(1c8.1cc) 05:34:38:984 RestoreUserProfile: No central profile.
Attempting to load local profile.
USERENV(1c8.1cc) 05:34:39:015 MyRegLoadKey: Failed to load subkey
<S-1-5-21-1653384031-3508051079-812977905-500>, error =32
USERENV(1c8.1cc) 05:34:39:015 MyRegLoadKey: Returning 00000020
USERENV(1c8.1cc) 05:34:39:062 RestoreUserProfile: MyRegLoadKey returned
FALSE.
USERENV(1c8.1cc) 05:34:39:062 ReportError: Impersonating user.
USERENV(1c8.1cc) 05:34:39:125 ReportError: Logging Error <Windows cannot
load the locally stored profile. Possible causes of this error include
insufficient security rights or a corrupt local profile. If this problem
persists, contact your network administrator.

DETAIL - The process cannot access the file because it is being used by
another process.

USERENV(1c8.1cc) 05:34:39:187 ErrorDialogEx: Calling DialogBoxParam
USERENV(1c8.1cc) 05:34:39:187 ErrorDlgProc:: DialogBoxParam
USERENV(1f8.7f0) 05:34:47:671 UnloadUserProfile: Entering, hProfile =
<0x468>
USERENV(1f8.7f0) 05:34:47:671 UnloadUserProfile: no thread token found,
impersonating self.
USERENV(1f8.7f0) 05:34:47:671 GetInterface: Returning rpc binding handle
USERENV(1c8.2f4) 05:34:47:687 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:47:703 DropClientContext: Got client token 000007A4,
sid = S-1-5-18
USERENV(1c8.2f4) 05:34:47:718 MIDL_user_allocate enter
USERENV(1c8.2f4) 05:34:47:718 DropClientContext: load profile object
successfully made
USERENV(1c8.2f4) 05:34:47:718 DropClientContext: Returning 0
USERENV(1f8.7f0) 05:34:47:718 UnLoadUserProfile: Calling DropClientToken (as
self) succeeded
USERENV(1c8.1e4) 05:34:47:734 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.1e4) 05:34:47:734 UnloadUserProfileP: Entering, hProfile =
<0x778>
USERENV(1c8.1e4) 05:34:47:734 UnloadUserProfileP: ImpersonateUser
<000007a4>, old token is <00000000>
USERENV(1c8.1e4) 05:34:47:734 GetExclusionListFromRegistry: Policy list is
empty, returning user list = <Local Settings;Temporary Internet
Files;History;Temp>
USERENV(1c8.1e4) 05:34:47:734 CSyncManager::EnterLock <S-1-5-20>
USERENV(1c8.1e4) 05:34:47:734 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.1e4) 05:34:47:734 CSyncManager::EnterLock: New entry created
USERENV(1c8.1e4) 05:34:47:734 CHashTable::HashAdd: S-1-5-20 added in bucket
4
USERENV(1c8.1e4) 05:34:47:734 UnloadUserProfileP: Wait succeeded. In
critical section.
USERENV(1f8.7d4) 05:34:47:921 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(1f8.7d4) 05:34:47:921
=========================================================
USERENV(1f8.7d4) 05:34:47:937 LoadUserProfile: Entering, hToken = <0x1dc>,
lpProfileInfo = 0xf3f6f4
USERENV(1f8.7d4) 05:34:47:937 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1f8.7d4) 05:34:47:937 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
USERENV(1f8.7d4) 05:34:47:937 LoadUserProfile: NULL central profile path
USERENV(1f8.7d4) 05:34:47:937 LoadUserProfile: NULL default profile path
USERENV(1f8.7d4) 05:34:47:937 LoadUserProfile: NULL server name
USERENV(1f8.7d4) 05:34:47:937 LoadUserProfile: no thread token found,
impersonating self.
USERENV(1f8.7d4) 05:34:47:937 GetInterface: Returning rpc binding handle
USERENV(1c8.170) 05:34:47:937 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.170) 05:34:47:937 DropClientContext: Got client token 000007A0,
sid = S-1-5-18
USERENV(1c8.170) 05:34:47:937 MIDL_user_allocate enter
USERENV(1c8.170) 05:34:47:953 DropClientContext: load profile object
successfully made
USERENV(1c8.170) 05:34:47:953 DropClientContext: Returning 0
USERENV(1f8.7d4) 05:34:47:953 LoadUserProfile: Calling DropClientToken (as
self) succeeded
USERENV(1c8.2f4) 05:34:47:953 IProfileSecurityCallBack: client
authenticated.
USERENV(1c8.2f4) 05:34:47:953 In LoadUserProfileP
USERENV(1c8.2f4) 05:34:47:953 LoadUserProfile: Running as client, sid =
S-1-5-18
USERENV(1c8.2f4) 05:34:47:953
=========================================================
USERENV(1c8.2f4) 05:34:47:953 LoadUserProfile: Entering, hToken = <0x7a8>,
lpProfileInfo = 0xb6ff20
USERENV(1c8.2f4) 05:34:47:953 LoadUserProfile: lpProfileInfo->dwFlags =
<0x9>
USERENV(1c8.2f4) 05:34:47:953 LoadUserProfile: lpProfileInfo->lpUserName =
<LocalService>
USERENV(1c8.2f4) 05:34:47:953 LoadUserProfile: NULL central profile path
USERENV(1c8.2f4) 05:34:47:953 LoadUserProfile: NULL default profile path
USERENV(1c8.2f4) 05:34:47:953 LoadUserProfile: NULL server name
USERENV(1c8.2f4) 05:34:47:953 LoadUserProfile: User sid: S-1-5-19
USERENV(1c8.2f4) 05:34:47:953 CSyncManager::EnterLock <S-1-5-19>
USERENV(1c8.2f4) 05:34:47:953 CSyncManager::EnterLock: No existing entry
found
USERENV(1c8.2f4) 05:34:47:953 CSyncManager::EnterLock: New entry created
USERENV(1c8.2f4) 05:34:47:953 CHashTable::HashAdd: S-1-5-19 added in bucket
12
USERENV(1c8.2f4) 05:34:47:953 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(1c8.2f4) 05:34:47:953 TestIfUserProfileLoaded: Profile already
loaded.
USERENV(1c8.2f4) 05:34:47:953 LoadUserClasses: classes hive already loaded.
USERENV(1c8.2f4) 05:34:48:984 Profile Ref Count is 3
USERENV(1c8.1e4) 05:34:48:984 UnloadUserProfileP: Didn't unload user
profile, Ref Count is 4
USERENV(1c8.2f4) 05:34:49:000 LoadUserProfile: Leaving critical Section.
USERENV(1c8.1e4) 05:34:49:000 UnloadUserProfileP: About Reverted back to
user <00000000>
USERENV(1c8.2f4) 05:34:49:015 CSyncManager::LeaveLock <S-1-5-19>
USERENV(1c8.1e4) 05:34:49:015 CSyncManager::LeaveLock <S-1-5-20>
USERENV(1c8.2f4) 05:34:49:031 CSyncManager::LeaveLock: Lock released
USERENV(1c8.2f4) 05:34:49:046 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(1c8.2f4) 05:34:49:046 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.1e4) 05:34:49:062 CSyncManager::LeaveLock: Lock released
USERENV(1c8.2f4) 05:34:49:062 LoadUserProfile: Impersonated user: 000007a8,
000007b0
USERENV(1c8.1e4) 05:34:49:078 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(1c8.2f4) 05:34:49:078 LoadUserProfile: 002 About Reverted to user:
000007b0
USERENV(1c8.1e4) 05:34:49:093 CSyncManager::LeaveLock: Lock deleted
USERENV(1c8.2f4) 05:34:49:093 LoadUserProfile: 003 About Reverted back to
user <00000000>
USERENV(1c8.2f4) 05:34:49:125 LoadUserProfile: Leaving with a value of 1.
USERENV(1c8.1e4) 05:34:49:125 UnloadUserProfileP: Leave critical section.
USERENV(1c8.2f4) 05:34:49:125
=========================================================
USERENV(1c8.1e4) 05:34:49:125 UnloadUserProfileP: Leaving with a return
value of 1
USERENV(1c8.2f4) 05:34:49:125 LoadUserProfileI: returning 0
USERENV(1c8.1e4) 05:34:49:125 UnloadUserProfileI: returning 0
USERENV(1f8.7d4) 05:34:49:125 LoadUserProfile: Running as self
USERENV(1f8.7f0) 05:34:49:125 UnloadUserProfile: Calling UnloadUserProfileI
succeeded
USERENV(1f8.7d4) 05:34:49:125 LoadUserProfile: Calling LoadUserProfileI (as
user) succeeded
USERENV(1c8.170) 05:34:49:125 IProfileSecurityCallBack: client
authenticated.
USERENV(1f8.7d4) 05:34:49:125 LoadUserProfile: Returning success. Final
Information follows:
USERENV(1c8.170) 05:34:49:125 ReleaseClientContext: Releasing context
USERENV(1f8.7d4) 05:34:49:125 lpProfileInfo->UserName = <LocalService>
USERENV(1c8.170) 05:34:49:125 ReleaseClientContext_s: Releasing context
USERENV(1f8.7d4) 05:34:49:125 lpProfileInfo->lpProfilePath = <(null)>
USERENV(1c8.170) 05:34:49:125 MIDL_user_free enter
USERENV(1f8.7d4) 05:34:49:125 lpProfileInfo->dwFlags = 0x9
USERENV(1f8.7f0) 05:34:49:125 ReleaseInterface: Releasing rpc binding handle
USERENV(1c8.2f4) 05:34:49:140 IProfileSecurityCallBack: client
authenticated.
USERENV(1f8.7f0) 05:34:49:140 UnloadUserProfile: returning 1
USERENV(1c8.2f4) 05:34:49:140 ReleaseClientContext: Releasing context
USERENV(1c8.2f4) 05:34:49:140 ReleaseClientContext_s: Releasing context
USERENV(1c8.2f4) 05:34:49:140 MIDL_user_free enter
USERENV(1f8.7d4) 05:34:49:140 ReleaseInterface: Releasing rpc binding handle
USERENV(1f8.7d4) 05:34:49:140 LoadUserProfile: Returning TRUE. hProfile =
<0x46c>
USERENV(1f8.7d4) 05:34:49:140 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(36c.580) 05:34:50:343 ImpersonateUser: Failed to impersonate user
with 5.
USERENV(36c.580) 05:34:50:343 GetUserNameAndDomain Failed to impersonate
user
USERENV(36c.580) 05:34:50:343 GetUserDNSDomainName: Computer is running
standalone. No DNS domain name available.
USERENV(36c.bb4) 05:34:50:406 GetProfileType: Profile already loaded.
USERENV(36c.bb4) 05:34:50:406 LoadProfileInfo: Failed to query central
profile with error 2
USERENV(36c.bb4) 05:34:50:406 GetProfileType: ProfileFlags is 0

.

References:
- Windows cannot load the locally stored profile
  - From: charlestek

Prev by Date: Re: NT Backup :KB927073 : Scheduled Backup Fails
Next by Date: Re: tape library/drive in removable storage
Previous by thread: Windows cannot load the locally stored profile
Next by thread: Re: FTP in W2k
Index(es):
- Date
- Thread

Relevant Pages

Re: Group Policy Software Uninstalls on XP PCs
... list for existing local profile ... No DNS domain name available. ...
(microsoft.public.win2000.group_policy)
Re: ProcessLogonConfigurations?
... profile list for existing local profile ... extension Wireless Group Policy's status or policy time. ... skipped because both deleted and changed GPO lists are empty. ...
(microsoft.public.windows.group_policy)
Re: Slow logon because of "Applying computer settings..."
... entry found ... RpcServerRegisterIfEx successful ... entry in profile list for existing local profile ... Scheduler skipped because both deleted and changed GPO lists are ...
(microsoft.public.windows.server.active_directory)
Re: Profile werden nicht geladen
... USERENV21:40:32:763 Profile Ref Count is 2 ... No DNS domain name available. ... Stellen Sie sicher, dass Sie mit dem Server, der Sie authentifiziert hat, ...
(microsoft.public.de.german.windows.server.general)
Computer GPO not applied to Admin Workstations
... Computer Policies however are never applied on the "Admin Workstations" OU. ... USERENV08:00:14:515 Profile Ref Count is 3 ... USERENV08:00:29:377 Local Existing Profile Image is reachable ...
(microsoft.public.windows.group_policy)