Does this look familar?
-----------------------------------------------------------------------------------------
"Windows saved user X registry while an application or service was still
using the registry during log off. The memory used by the user's registry
has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the
services to run in either the LocalService or NetworkService account."
-------------------------------------------------------------------------------------------
Well, I think you're going to really like this....
http://www.microsoft.com/downloads/d...displaylang=en
Be sure to read the "Readme File.txt at the bottom of the page.
---------------------------------------------------------------------
"By default UPHClean takes action to allow profiles to unload."
You can choose to have UPHClean only report what processes it finds preventing profiles
from unloading. To do this, install UPHClean and use the registry editor to
set:
HKLM\System\CurrentControlSet\Services\UPHClean\Parameters\REPORT_ONLY to 1.
You can also have UPHClean log the call stack that is responsible for the
profile hive handle. This is necessary to find out what software is
responsible for the hive handle in processes used for many purposes (e.g.
svchost.exe, dllhost.exe, winmgmt.exe). To enable call stack logging use the
registry editor to set:
HKLM\System\CurrentControlSet\Services\UPHClean\Parameters\CALLSTACK_LOG to 1.
Logging the call stack is computationally and memory intensive. You should use
this option to collect information and then turn it off. To get more accurate
call stack logging it may be necessary to get symbols installed on the
computer. You can read about getting symbols at:
http://www.microsoft.com/whdc/ddk/de...g/symbols.mspx