Unable to unload roaming user profile.

[dgeddis]

We have an NT4 Server based environment with XP workstations. The users on the network used to have NT4 workstations and profiles before the rollout of XP workstations. After setting users up on the new XP workstations we started receiving profile errors as listed below:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1504
Date: 29/09/2004
Time: 4:28:36 PM
User: AD210210A\u210019
Computer: AC210210A-026
Description:
Windows cannot update your roaming profile. Possible causes of this error include network problems or insufficient security rights. If this problem persists, contact your network administrator.

DETAIL - The process cannot access the file because it is being used by another process.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

After installing UPHClean utility from Microsoft it starting reporting the following errors when the user logs off of their XP workstation.

Event Type: Information
Event Source: UPHClean
Event Category: None
Event ID: 1501
Date: 29/09/2004
Time: 4:26:29 PM
User: AD210210A\u210019
Computer: AC210210A-026
Description:
The following handles opened in user profile hive AD210210A\u210019 (S-1-5-21-1606037022-1251696780-1990678075-1104) are preventing the profile from unloading:

winlogon.exe (348)
HKCU\Software\Classes (0x924)

svchost.exe (864)
HKCU\Software\Classes (0x220)
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap (0x228)

Rtvscan.exe (1184)
HKCU (0x4f4)


For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Is there anyway to modify the registry to unload winlogon, svchost, and Rtvscan?

It turns out that the profiles are not being updated successfully or unloded from the registry when users logoff.

Has anyone come across this type of issue before.

 

[bcastner]

http://service1.symantec.com/SUPPOR...88256c940061ee1e?OpenDocument&src=bar_sch_nam

 

[dgeddis]

Thanks, I'll give that a try and report back.

 

[dgeddis]

Workstations are running Symantec Norton Antivirus Corporate Edition 8.1. Was unable to find the files mentioned in the following article.

http://service1.symantec.com/SUPPOR...88256c940061ee1e?OpenDocument&src=bar_sch_nam

 

[bcastner]

To remove the plug-in manually

Rename the following files (change the file to <name>.dll.old):
nlnvp.dll
notesext.dll
Restart the client.

 

[dgeddis]

Users are using a fresh installation of Symantec Antivirus Corporate Edition v8.1 with a clean installation of Windows XP SP1. I did a search for the files mentioned in the article and they do not exist on the workstations. If realtime is disabled the profiles unload sucessfully without error messages.

-version 7.6 mentioned in the article wasn't installed previously.

 

[dgeddis]

I tried deleting roaming user profiles at the workstation and server and had XP rebuild the profiles and profile errors no longer exist. The users previously had NT4 profiles with machines containing NAV 7.6.

It looked as though the old profiles were still making reference to older versions of NAV

Everything is working fine now.