software

User Profile Hive Cleanup Service (Update)

Daniel Fleshbourne   on 09 April 2004 - 17:56 · 15 comments & 882 views

Advertisement (Why?)
On Windows 2000 the service deals with application event log event 1000 from source Userenv where the message indicates that the profile is not unloading and the error is "Access is denied". On Windows XP and Windows 2003 the equivalent events are 1517 and 1524 from source Userenv.

To accomplish this the service monitors for logged off users that still have hives loaded. When that happens the service determines which applications have handles opened to the hives and releases them. It logs the application name and what registry keys where left open. After this the system finishes unloading the profile.

Download: User Profile Hive Cleanup Service
View: Windows Support


P.s. Downtime was apparently due to a network issue at our Hosts; appologies :)

Post a comment · Send to friend Comments · There are 15 additional comments
#1 Jason on 09 Apr 2004 - 17:59
Been using this for quite a while at work.
#2 WindowsNT on 09 Apr 2004 - 18:10
i've been using UPH Clean for the last month at home and work. it rocks.
i dont know why MS has not made this far more public, i only found out about this when neowin anounced it back in Feburary.
#3 toadeater on 09 Apr 2004 - 19:43
It's about time they put this out. I've had two computers driving me nuts with the slow shutdown problems ever since SP1.
#4 Mav Phoenix on 10 Apr 2004 - 00:34
This should be a part of the Admin Tools in XP.
#5 kirk26 on 10 Apr 2004 - 01:49
yea yea, you've been using this since 1917. First time I've seen it. Thanks Neowin!
#6 Kevine on 10 Apr 2004 - 05:19
Why can't they just fix the bug that causes this in the first place?
Really off topic but:
Is it fixed in SP2?
Where could I get a list of fixes for sp2? Googling provides no results (or else I am searching for something else..)
(1 reply) #7 Stingray on 10 Apr 2004 - 13:39
Is this for XP as well?
#7.1 Techneaux on 10 Apr 2004 - 14:53
Yep:

"Supported Operating Systems: Windows 2000, Windows 2000 Service Pack 2, Windows 2000 Service Pack 3, Windows 2000 Service Pack 4, Windows NT, Windows Server 2003, Windows XP"
(2 replies) #8 memodude on 10 Apr 2004 - 16:56
The problem this program fixes is not Windows' fault, it is the fault of buggy software that leaves registry handles open. That is why it won't be fixed in SP2. However, you can also use this program on SP2.
#8.1 Kevine on 10 Apr 2004 - 18:16
Then explain why the microsoft lsass.exe service is leaving handles open?

The following handles in user profile hive *edited* have been closed because they were preventing the profile from unloading successfully:

lsass.exe (440)
HKCU (0x3a0)
#8.2 toadeater on 10 Apr 2004 - 20:33
It wasn't being caused by 3rd party software in my case, it was caused by the Terminal Services and Telephony services not shutting down for some reason. I had to figure that out through trial and error, XP's error reports were as helpful as usual, which was no help at all:

"Windows saved user XXXXXXXXXXXX registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use."

In use by WHICH "application or service"?!

Seems at least Windows Server 2003 now has detailed boot and shutdown logging so this kind of this could be traced. I hope SP2 will have it for XP.
(1 reply) #9 azharsdin on 10 Apr 2004 - 19:20
errr... what does it do actually?
#9.1 psykil on 15 Apr 2004 - 07:18
apparently it rocks.
#10 Mr. Black on 12 Apr 2004 - 18:01
Why isn't this programmed into the Userenvv subsystem? I shouldn't have to run a seperate Service to do this...
#11 Alexhouse on 23 Apr 2004 - 14:27
I downloaded and installed this several days ago on my WinXP system due to my system stopping upon reboot or shutdown at "saving system settings". It worked great. HOWEVER, I have noticed in Event Manager (think that's what it's called) that the service keeps shutting down and restarting again. I think something is shutting it down mistakenly. I had to go into services.msc and set it to re-load upon shutdown. I have no idea why it keeps shutting down or to find out what it causing it. I did see a vague reference somewhere that anti-virus programs like Norton (which I used) could cause this type of problem.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)