Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Userenv EventID 1517 "awhost32.exe" not letting the registry unload.

Updated: 22 Apr 2010 | 8 comments
gismotm's picture
0 0 Votes
Login to vote

If the User logoff the eventviewer show me this error.

Userenv EventID 1517

Die Registrierung des Benutzers "username" wurde gespeichert, obwohl eine Anwendung oder ein Dienst auf die Registrierung während der Abmeldung zugegriffen hat.
Der von der Registrierung des Benutzers verwendete Speicher wurde nicht freigegeben. Der Upload der Registrierung wird durchgeführt, wenn diese nicht mehr verwendet wird.

 
 

UPHClean says:

The following handles in user profile hive <Username> (S-1-5-21-2052111302-1972579041-682003330-4395) have been remapped because they were preventing the profile from unloading successfully:

awhost32.exe (1556)HKCU (0xbc)

discussion Filed Under:

Comments

Thomas K's picture
04
Feb
2010
0 Votes 0
Login to vote

This is the pcAnywhere forum.

This is the pcAnywhere forum. What product and version are you using?

Thanks,
Thomas

gismotm's picture
05
Feb
2010
0 Votes 0
Login to vote

PCAnywhere 12.5 build 265 on

PCAnywhere 12.5 build 265 on Windows XP SP3

Thomas K's picture
05
Feb
2010
0 Votes 0
Login to vote

This looks like a Microsoft

This looks like a Microsoft issue. See this MS KB for solution - http://support.microsoft.com/kb/837115

Cheers,
Thomas

gismotm's picture
09
Feb
2010
0 Votes 0
Login to vote

This problem is only on

This problem is only on computers with PCAnywhere 12.5. With On Command we don´t have this problem.

Thomas K's picture
09
Feb
2010
0 Votes 0
Login to vote

There is a Microsoft Hotfix

There is a Microsoft Hotfix for this error.

Event ID: 1517 occurs when users who use roaming profiles encrypt files on a Windows Server 2003-based file server

See - http://support.microsoft.com/default.aspx/kb/900613

Best,
Thomas

MitchInOmaha's picture
20
Apr
2010
0 Votes 0
Login to vote

I don't understand how this

I don't understand how this is a MS issue.  It appears from the OP's logs that awhost is not shutting down and is causing the user profile to not be properly released.

We're seeing this same thing in a few of our 19,000 clients. 

The information in the event log reads "The following handles in user profile hive UPCORP\blahblah have been remapped because they were preventing the profile from unloading successfully.  awhost32.exe (1184), HKCU (0xc8)"  Next time the user logs in, a new user profile is created. :(

It appears to me that somehow awhost.exe is the cause of this.

-- Mitch

-- Mitch

If your question has been resolved, please be sure to "Mark as Solution"! Thank you.

jessek's picture
30
Jun
2010
0 Votes 0
Login to vote

We've seen the same thing

Our help desk has been dealing with this same issue for months - at least since April.  It is exactly as Mitch describes.  With the UPHC service installed the problem persists, but the users get a message that awhost32.exe is preventing the unloading of the profile, exactly as described in the first post of this thread.

We're an Altiris customer, so we're using the pcAnywhere Solution as part of the IT Management Suite.  Our help desk is rounding up PC names and pcA plugin versions, and we're going to try swapping PCs with a user that consistently has the issue to see if we can figure out what is going on.

The provided links to hotfixes don't apply here.  These aren't Windows Server 2003 machines, they are Windows XP desktops.  I'll open a case with Symantec after we collect more data.

Jesse Kozikowski
Aspirus, Inc.

ICHCB's picture
15
Jul
2010
1 Vote +1
Login to vote

Take a look at this MS article

Looks like citrix had the same issue.

http://support.microsoft.com/kb/969100

cheers.

If you find this post helpful please give it a thumbs up!
If you find that this solves your problem please mark it as the solution!