event id: 1530
Hi,
I've problems when one of my pcs (windows 7) wants to logon to the domain (AD).
Searching in the application event viewer I've found the event id 1530 out each time I close the session in that pc. I followed the following solutions but without too much success:
http://support.microsoft.com/kb/929135/en-us?fr=1
http://social.technet.microsoft.com/Forums/et-EE/w7itproui/thread/23c9cd75-14af-4276-b07b-29e95d4368b5
I paste the warning to see whether anybody can help me:
2 user registry handles leaked from \Registry\User\S-1-5-21-3830471607-3036766313-4291415205-2132:
Process 636 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3830471607-3036766313-4291415205-2132
Process 1672 (\Device\HarddiskVolume2\Windows\SysWOW64\wbem\WmiPrvSE.exe) has opened key \REGISTRY\USER\S-1-5-21-3830471607-3036766313-4291415205-2132\Control Panel\International
XML de evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
<EventID>1530</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-06-27T14:00:09.819013800Z" />
<EventRecordID>8786</EventRecordID>
<Correlation ActivityID="{03316A50-F800-0002-03A1-E5436C54CD01}" />
<Execution ProcessID="116" ThreadID="5020" />
<Channel>Application</Channel>
<Computer>mypc.mydomain.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="EVENT_HIVE_LEAK">
<Data Name="Detail">2 user registry handles leaked from \Registry\User\S-1-5-21-3830471607-3036766313-4291415205-2132:
Process 636 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3830471607-3036766313-4291415205-2132
Process 1672 (\Device\HarddiskVolume2\Windows\SysWOW64\wbem\WmiPrvSE.exe) has opened key \REGISTRY\USER\S-1-5-21-3830471607-3036766313-4291415205-2132\Control Panel\International
</Data>
</EventData>
</Event>
Thanks in advance.
Regards.
June 27th, 2012 10:41am


