Video Screencast Help


Created: 12 Jun 2012 • Updated: 13 Jun 2012 | 6 comments
This issue has been solved. See solution.

We have Windows Server 2003 Servers with Citrix XenApp 5 installed.

I Installed Symantec Endpoint Protection 12.1 MP1 and now a "TempProfile_Nlnhook" is created under the user profile folder (%USERPROFILE%) for each user that logs into a multi-user Lotus Notes installation.

This was a issue in Symantec Endpoint Protection 11 but should be fixed (fix id:1519913).

Anyone an idea how to solve this in Symantec Endpoint Protection 12.1 MP1

Comments 6 CommentsJump to latest comment

Mithun Sanghavi's picture


After migration to SEP 12.1,  an error is seen in the user profile while booting the machine; error shows NLM_hook.exe type and Lotus Note is not running.

Delete the word ".dll" from the line "NSF_HOOKS=NLNVP.DLL" which resides in User Profile/Local Settings/Application Data/Lotus/Notes/Data/notes.ini

Open the file notes.ini using a text editor (Notepad for example), change the line from "NSF_HOOKS=NLNVP.DLL" to "NSF_HOOKS=NLNVP" and attempt to login to Lotus Notes again.

If the line "NSF_HOOKS=NLNVP.DLL" is not found inside notes.ini file then more configuration testing is required.

Deleting the Data folder may resolve the issue. Path for the Data folder is:User Profile/Local Settings/Application Data/Lotus/Notes/Data

NOTE: Make a copy of the NAMES.NSF file which has stored mail address to restore later after deleting the Data folder.


Hope that helps!!

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Swapnil khare's picture

Yes this was fixed.

You may like to try this , i would suggest to try under TEST user profile by recreating issue above .

To narrow down this issue, Could you help to confirm some questions as below,


1.       How did you set the roaming profile settings for the problematic users?

2.       Temporarily disable roaming profile for the problematic user and retry to logon RDS via this account, does it work?

3.       Can the problematic user access the roaming profile folder with full-control permission?

4.       What’s the OS for the problematic users and what’s the events log on client machine?

(Refer to;EN-US;947215 steps to diagnose the profile issues on client)


By the way, I found following conditions may cause roaming profile issue:


   • You have a terminal server that is running Windows Server 2008 or Windows Server 2008 R2. 

   • You enable the Delete cache copies of roaming profiles Group Policy setting on the terminal server. 

   • You configure a user account to load a terminal server roaming profile on the terminal server. 

   • The Change password at the next logon option is enabled in the properties of the user account. 

   • You create a terminal server session to the terminal server by using the user account.


This issue occurs because the User Profile service does not load the terminal server roaming profile correctly after the user account password is reset.


When the Delete cache copies of roaming profiles Group Policy setting is enabled, and when a user is prompted to change the user account password, the User Profile service loads a local temporary user profile. The User Profile service loads this user profile to perform the password reset operation. However, the profile changes to a combination of the local temporary profile and of the roaming profile after the user password is reset. Therefore, the terminal server roaming profile is not loaded correctly.


For more information: Please refer to the article as followed:

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Manhars's picture

Hello Mithun,

Thanks for your reply.

I've looked for the  "NSF_HOOKS=NLNVP.DLL" in the notes.ini but could not find it.

Also there was no Lotus folder in Profile/Local Settings/Application Data/ or in Profile/Application Data/

Lotus Notes doesn´t crash it´s working properly.

But only this creation of "TempProfile_Nlnhook" in the profile directory.

Any other ideas?

Manhars's picture

Hello Swapnil,

Thank you for your reply.

We have a Citrix XenApp 5 environment on Windows Server 2003 32 bits Servers.

As for your questions:
1) The roaming profile is copied from a FileServer to the Citrix Servers upon login.

2) Where can I disable the roaming profile temporarily? Users are not allowed to logon to a Server by RDP.

3) Yes the user has full acces on the roaming profile folder.

4) The OS of the client machine is Windows XP Pro SP3. Can't see anything occure in the event log after the installation of Symantec Endpoint.

Before the installation of Symantec Endpoint the roaming profiles were copied correct to the Citrix Servers upon logone and from the Citrix Servers to the FileServer.

Manhars's picture

I got rid of the "TempProfile_Nlnhook".

I deinstalled the Symantec Endpoint Protection client then used the Cleanwipe utility from Symantec and then reinstalled only the Basic Protection for Servers.

Swapnil khare's picture

NIce to hear you issue is fixed

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.