Hallo,
ik zit hier al een tijdje met een vervelend probleem op het bedrijf. Ik heb via active directory de Z: drive gemapped naar de usermap. Deze usermap staat op de NAS, dus is meer dan snel genoeg (blijkt ook uit tests eens ik ingelogd ben).
Probleem is dat sindsdien bepaalde clients (Win XP) onnoemelijk traag inloggen. Het inloggen duurt zo'n 2 minuten. Nochtans is er in de logs nergens een foutmelding te bespeuren; de DNS en DHCP zijn goed geconfigged, en de naam van de server en mappen kunnen goed geresolved worden. Hieronder een deel van de userenv.log:
USERENV(274.6e0) 14:44:53:062 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.6e0) 14:44:53:062 GetUserNameAndDomain Failed to impersonate user
USERENV(274.6e0) 14:44:53:072 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.6e0) 14:44:53:072 GetUserDNSDomainName: Failed to impersonate user
USERENV(274.6e0) 14:44:53:072 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(3cc.c88) 14:44:54:884 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(3cc.c88) 14:44:54:884 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.240) 14:44:57:478 UnloadUserProfile: Entering, hProfile = <0x134>
USERENV(23c.240) 14:44:57:478 UnloadUserProfile: In console winlogon process
USERENV(23c.240) 14:44:57:478 UnloadUserProfileP: Entering, hProfile = <0x134>
USERENV(23c.240) 14:44:57:478 GetExclusionListFromRegistry: Policy list is empty, returning user list = <Local Settings;Temporary Internet Files;History;Temp;Local Settings\Application Data\Microsoft\Outlook>
USERENV(23c.240) 14:44:57:478 CSyncManager::EnterLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:44:57:478 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:44:57:478 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:44:57:478 CHashTable::HashAdd: S-1-5-21-2141665459-1023760628-433219294-2381 added in bucket 12
USERENV(23c.240) 14:44:57:478 UnloadUserProfileP: Wait succeeded. In critical section.
USERENV(23c.240) 14:44:58:329 MyRegUnLoadKey: Returning 1.
USERENV(23c.240) 14:44:58:339 UnloadUserProfileP: Succesfully unloaded profile
USERENV(23c.240) 14:44:58:369 MyRegUnLoadKey: Returning 1.
USERENV(23c.240) 14:44:58:369 UnLoadClassHive: Successfully unmounted S-1-5-21-2141665459-1023760628-433219294-2381_Classes
USERENV(23c.240) 14:44:58:369 UnloadUserProfileP: Successfully unloaded user classes
USERENV(23c.240) 14:44:58:369 UnloadUserProfileP: Impersonated user
USERENV(23c.240) 14:44:58:369 UnloadUserProfileP: Writing local ini file
USERENV(23c.240) 14:44:58:410 UnloadUserProfileP: Reverting to Self
USERENV(23c.240) 14:44:58:420 UnloadUserProfileP: exitting and cleaning up
USERENV(23c.240) 14:44:58:420 CSyncManager::LeaveLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:44:58:420 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:44:58:420 CHashTable::HashDelete: S-1-5-21-2141665459-1023760628-433219294-2381 deleted
USERENV(23c.240) 14:44:58:420 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:44:58:420 UnloadUserProfileP: Leave critical section.
USERENV(23c.240) 14:44:58:420 UnloadUserProfileP: Leaving with a return value of 1
USERENV(23c.240) 14:44:58:420 UnloadUserProfile: UnloadUserProfileP succeeded
USERENV(23c.240) 14:44:58:430 UnloadUserProfile: returning 1
USERENV(44c.cdc) 14:44:59:090 LibMain: Process Name: C:\WINDOWS\system32\dwwin.exe
USERENV(44c.750) 14:45:00:002 GetHkeyCU: RegOpenKey failed with error 2
USERENV(268.d30) 14:45:02:015 UnloadUserProfile: Entering, hProfile = <0x4a0>
USERENV(268.d30) 14:45:02:025 GetInterface: Returning rpc binding handle
USERENV(23c.254) 14:45:02:025 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:02:035 DropClientContext: Got client token 000005E4, sid = S-1-5-18
USERENV(23c.254) 14:45:02:035 MIDL_user_allocate enter
USERENV(23c.254) 14:45:02:035 DropClientContext: load profile object successfully made
USERENV(23c.254) 14:45:02:045 DropClientContext: Returning 0
USERENV(268.d30) 14:45:02:045 UnLoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(23c.7f8) 14:45:02:045 IProfileSecurityCallBack: client authenticated.
USERENV(23c.7f8) 14:45:02:055 UnloadUserProfileP: Entering, hProfile = <0x3dc>
USERENV(23c.7f8) 14:45:02:055 UnloadUserProfileP: ImpersonateUser <000005e4>, old token is <00000000>
USERENV(23c.7f8) 14:45:02:065 GetExclusionListFromRegistry: Policy list is empty, returning user list = <Local Settings;Temporary Internet Files;History;Temp>
USERENV(23c.7f8) 14:45:02:065 CSyncManager::EnterLock <S-1-5-19>
USERENV(23c.7f8) 14:45:02:065 CSyncManager::EnterLock: No existing entry found
USERENV(23c.7f8) 14:45:02:075 CSyncManager::EnterLock: New entry created
USERENV(23c.7f8) 14:45:02:075 CHashTable::HashAdd: S-1-5-19 added in bucket 12
USERENV(23c.7f8) 14:45:02:075 UnloadUserProfileP: Wait succeeded. In critical section.
USERENV(23c.7f8) 14:45:02:085 UnloadUserProfileP: Didn't unload user profile, Ref Count is 2
USERENV(23c.7f8) 14:45:02:085 UnloadUserProfileP: Reverted back to user <00000000>
USERENV(23c.7f8) 14:45:02:095 CSyncManager::LeaveLock <S-1-5-19>
USERENV(23c.7f8) 14:45:02:095 CSyncManager::LeaveLock: Lock released
USERENV(23c.7f8) 14:45:02:095 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(23c.7f8) 14:45:02:105 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.7f8) 14:45:02:105 UnloadUserProfileP: Leave critical section.
USERENV(23c.7f8) 14:45:02:105 UnloadUserProfileP: Leaving with a return value of 1
USERENV(23c.7f8) 14:45:02:115 UnloadUserProfileI: returning 0
USERENV(268.d30) 14:45:02:115 UnloadUserProfile: Calling UnloadUserProfileI succeeded
USERENV(23c.254) 14:45:02:125 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:02:125 ReleaseClientContext: Releasing context
USERENV(23c.254) 14:45:02:125 ReleaseClientContext_s: Releasing context
USERENV(23c.254) 14:45:02:135 MIDL_user_free enter
USERENV(268.d30) 14:45:02:135 ReleaseInterface: Releasing rpc binding handle
USERENV(268.d30) 14:45:02:145 UnloadUserProfile: returning 1
USERENV(23c.240) 14:45:53:088 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(23c.240) 14:45:53:138 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(23c.240) 14:45:53:138 LibMain: Process Name: \??\C:\WINDOWS\system32\winlogon.exe
USERENV(23c.240) 14:45:54:259 Entering CUserProfile::Initialize ...
USERENV(23c.240) 14:45:54:259 CUserProfile::Initialize called by winlogon
USERENV(23c.240) 14:45:54:269 CUserProfile::Initialize: critical section initialized
USERENV(23c.240) 14:45:54:269 CSyncManager::Initialize: critical section initialized
USERENV(23c.240) 14:45:54:269 CUserProfile::Initialize: registry key Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
USERENV(23c.240) 14:45:54:269 CUserProfile::Initialize: Proccessing S-1-5-21-295240851-3373731420-871859708-500
USERENV(23c.240) 14:45:54:269 CSyncManager::EnterLock <S-1-5-21-295240851-3373731420-871859708-500>
USERENV(23c.240) 14:45:54:269 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:269 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:279 CHashTable::HashAdd: S-1-5-21-295240851-3373731420-871859708-500 added in bucket 6
USERENV(23c.240) 14:45:54:279 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:279 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000100
USERENV(23c.240) 14:45:54:279 CSyncManager::LeaveLock <S-1-5-21-295240851-3373731420-871859708-500>
USERENV(23c.240) 14:45:54:279 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:279 CHashTable::HashDelete: S-1-5-21-295240851-3373731420-871859708-500 deleted
USERENV(23c.240) 14:45:54:279 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:279 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:289 CUserProfile::Initialize: Proccessing S-1-5-21-295240851-3373731420-871859708-1003
USERENV(23c.240) 14:45:54:289 CSyncManager::EnterLock <S-1-5-21-295240851-3373731420-871859708-1003>
USERENV(23c.240) 14:45:54:289 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:289 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:289 CHashTable::HashAdd: S-1-5-21-295240851-3373731420-871859708-1003 added in bucket 7
USERENV(23c.240) 14:45:54:289 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:289 CUserProfile::GetRefCountAndFlags: Ref count is 2, state is 00000004
USERENV(23c.240) 14:45:54:299 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(23c.240) 14:45:54:299 CSyncManager::LeaveLock <S-1-5-21-295240851-3373731420-871859708-1003>
USERENV(23c.240) 14:45:54:299 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:299 CHashTable::HashDelete: S-1-5-21-295240851-3373731420-871859708-1003 deleted
USERENV(23c.240) 14:45:54:299 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:299 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:299 CUserProfile::Initialize: Proccessing S-1-5-21-2141665459-1023760628-433219294-2381
USERENV(23c.240) 14:45:54:309 CSyncManager::EnterLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:45:54:309 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:309 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:309 CHashTable::HashAdd: S-1-5-21-2141665459-1023760628-433219294-2381 added in bucket 12
USERENV(23c.240) 14:45:54:309 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:309 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000100
USERENV(23c.240) 14:45:54:309 CSyncManager::LeaveLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:45:54:309 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:319 CHashTable::HashDelete: S-1-5-21-2141665459-1023760628-433219294-2381 deleted
USERENV(23c.240) 14:45:54:319 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:319 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:319 CUserProfile::Initialize: Proccessing S-1-5-20
USERENV(23c.240) 14:45:54:319 CSyncManager::EnterLock <S-1-5-20>
USERENV(23c.240) 14:45:54:319 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:319 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:329 CHashTable::HashAdd: S-1-5-20 added in bucket 4
USERENV(23c.240) 14:45:54:329 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:329 CUserProfile::GetRefCountAndFlags: Ref count is 2, state is 00000000
USERENV(23c.240) 14:45:54:329 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(23c.240) 14:45:54:329 CSyncManager::LeaveLock <S-1-5-20>
USERENV(23c.240) 14:45:54:329 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:329 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(23c.240) 14:45:54:329 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:339 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:339 CUserProfile::Initialize: Proccessing S-1-5-19
USERENV(23c.240) 14:45:54:339 CSyncManager::EnterLock <S-1-5-19>
USERENV(23c.240) 14:45:54:339 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:339 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:339 CHashTable::HashAdd: S-1-5-19 added in bucket 12
USERENV(23c.240) 14:45:54:339 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:349 CUserProfile::GetRefCountAndFlags: Ref count is 2, state is 00000000
USERENV(23c.240) 14:45:54:349 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(23c.240) 14:45:54:349 CSyncManager::LeaveLock <S-1-5-19>
USERENV(23c.240) 14:45:54:349 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:349 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(23c.240) 14:45:54:349 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:349 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:359 CUserProfile::Initialize: Proccessing S-1-5-18
USERENV(23c.240) 14:45:54:359 CSyncManager::EnterLock <S-1-5-18>
USERENV(23c.240) 14:45:54:359 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:359 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:359 CHashTable::HashAdd: S-1-5-18 added in bucket 11
USERENV(23c.240) 14:45:54:359 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:359 CUserProfile::GetRefCountAndFlags: Ref count is 1, state is 00000000
USERENV(23c.240) 14:45:54:359 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(23c.240) 14:45:54:370 CSyncManager::LeaveLock <S-1-5-18>
USERENV(23c.240) 14:45:54:370 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:370 CHashTable::HashDelete: S-1-5-18 deleted
USERENV(23c.240) 14:45:54:370 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:370 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:370 CUserProfile::Initialize: RpcServerRegisterIfEx successful
USERENV(23c.240) 14:45:54:370 Exiting CUserProfile::Initialize, successful
USERENV(268.26c) 14:45:54:760 LibMain: Process Name: C:\WINDOWS\system32\services.exe
USERENV(274.278) 14:45:54:790 LibMain: Process Name: C:\WINDOWS\system32\lsass.exe
USERENV(23c.240) 14:45:54:970 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(330.334) 14:45:56:793 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
USERENV(268.26c) 14:45:57:073 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(268.26c) 14:45:57:073 =========================================================
USERENV(268.26c) 14:45:57:073 LoadUserProfile: Entering, hToken = <0x2d8>, lpProfileInfo = 0x7fcf8
USERENV(268.26c) 14:45:57:073 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(268.26c) 14:45:57:073 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(268.26c) 14:45:57:073 LoadUserProfile: NULL central profile path
USERENV(268.26c) 14:45:57:073 LoadUserProfile: NULL default profile path
USERENV(268.26c) 14:45:57:083 LoadUserProfile: NULL server name
USERENV(268.26c) 14:45:57:083 GetInterface: Returning rpc binding handle
USERENV(23c.364) 14:45:57:083 IProfileSecurityCallBack: client authenticated.
USERENV(23c.364) 14:45:57:083 DropClientContext: Got client token 000005F0, sid = S-1-5-18
USERENV(23c.364) 14:45:57:083 MIDL_user_allocate enter
USERENV(23c.364) 14:45:57:083 DropClientContext: load profile object successfully made
USERENV(23c.364) 14:45:57:083 DropClientContext: Returning 0
USERENV(268.26c) 14:45:57:093 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(23c.254) 14:45:57:093 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:57:093 In LoadUserProfileP
USERENV(23c.254) 14:45:57:093 LoadUserProfile: Running as client
USERENV(23c.254) 14:45:57:093 =========================================================
USERENV(23c.254) 14:45:57:093 LoadUserProfile: Entering, hToken = <0x5f4>, lpProfileInfo = 0xe0d5a8
USERENV(23c.254) 14:45:57:093 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(23c.254) 14:45:57:103 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(23c.254) 14:45:57:103 LoadUserProfile: NULL central profile path
USERENV(23c.254) 14:45:57:103 LoadUserProfile: NULL default profile path
USERENV(23c.254) 14:45:57:103 LoadUserProfile: NULL server name
USERENV(23c.254) 14:45:57:103 LoadUserProfile: User sid: S-1-5-20
USERENV(23c.254) 14:45:57:103 CSyncManager::EnterLock <S-1-5-20>
USERENV(23c.254) 14:45:57:103 CSyncManager::EnterLock: No existing entry found
USERENV(23c.254) 14:45:57:113 CSyncManager::EnterLock: New entry created
USERENV(23c.254) 14:45:57:113 CHashTable::HashAdd: S-1-5-20 added in bucket 4
USERENV(23c.254) 14:45:57:113 LoadUserProfile: Wait succeeded. In critical section.
USERENV(23c.254) 14:45:57:113 RestoreUserProfile: Entering
USERENV(23c.254) 14:45:57:113 IsCentralProfileReachable: Entering
USERENV(23c.254) 14:45:57:113 IsCentralProfileReachable: Null path. Leaving
USERENV(23c.254) 14:45:57:113 RestoreUserProfile: Profile path = <>
USERENV(23c.254) 14:45:57:113 ExtractProfileFromBackup: A profile already exists
USERENV(23c.254) 14:45:57:123 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(23c.254) 14:45:57:123 CreateLocalProfileKey: Not setting additional Security
USERENV(23c.254) 14:45:57:123 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(23c.254) 14:45:57:123 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\NetworkService>
USERENV(23c.254) 14:45:57:123 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\NetworkService>
USERENV(23c.254) 14:45:57:123 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(23c.254) 14:45:57:123 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\NetworkService\ntuser.dat>
USERENV(23c.254) 14:45:57:133 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
USERENV(23c.254) 14:45:57:133 Local Existing Profile Image is reachable
USERENV(23c.254) 14:45:57:133 Local profile name is <C:\Documents and Settings\NetworkService>
USERENV(23c.254) 14:45:57:133 RestoreUserProfile: No central profile. Attempting to load local profile.
USERENV(23c.254) 14:45:57:143 MyRegLoadKey: Returning 00000000
USERENV(23c.254) 14:45:57:174 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(23c.254) 14:45:57:174 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.254) 14:45:57:194 MyRegLoadKey: Returning 00000000
USERENV(23c.254) 14:45:57:194 CreateClassHive: existing user classes hive found
USERENV(23c.254) 14:45:57:194 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(23c.254) 14:45:57:194 Profile was successfully loaded.
USERENV(23c.254) 14:45:57:194 lpProfile->lpRoamingProfile = <>
USERENV(23c.254) 14:45:57:194 lpProfile->lpLocalProfile = <C:\Documents and Settings\NetworkService>
USERENV(23c.254) 14:45:57:194 lpProfile->dwInternalFlags = 0x0
USERENV(23c.254) 14:45:57:204 RestoreUserProfile: Leaving.
USERENV(23c.254) 14:45:57:204 UpgradeProfile: Entering
USERENV(23c.254) 14:45:57:204 UpgradeProfile: Build numbers match
USERENV(23c.254) 14:45:57:204 UpgradeProfile: Leaving Successfully
USERENV(23c.254) 14:45:57:334 Profile Ref Count is 1
USERENV(23c.254) 14:45:57:334 LoadUserProfile: Leaving critical Section.
USERENV(23c.254) 14:45:57:334 CSyncManager::LeaveLock <S-1-5-20>
USERENV(23c.254) 14:45:57:334 CSyncManager::LeaveLock: Lock released
USERENV(23c.254) 14:45:57:344 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(23c.254) 14:45:57:344 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.254) 14:45:57:344 LoadUserProfile: Impersonated user: 000005f4, 00000600
USERENV(274.2b8) 14:45:57:344 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(274.2b8) 14:45:57:344 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2b8) 14:45:57:354 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(274.2b8) 14:45:57:354 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.254) 14:45:57:364 LoadUserProfile: Reverted to user: 00000000
USERENV(23c.254) 14:45:57:374 LoadUserProfile: Reverted back to user <00000000>
USERENV(23c.254) 14:45:57:374 LoadUserProfile: Leaving with a value of 1.
USERENV(23c.254) 14:45:57:374 =========================================================
USERENV(23c.254) 14:45:57:374 LoadUserProfileI: returning 0
USERENV(268.26c) 14:45:57:384 LoadUserProfile: Running as self
USERENV(268.26c) 14:45:57:384 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(268.26c) 14:45:57:384 LoadUserProfile: Returning success. Final Information follows:
USERENV(268.26c) 14:45:57:384 lpProfileInfo->UserName = <NetworkService>
USERENV(268.26c) 14:45:57:394 lpProfileInfo->lpProfilePath = <>
USERENV(268.26c) 14:45:57:394 lpProfileInfo->dwFlags = 0x9
USERENV(23c.364) 14:45:57:394 IProfileSecurityCallBack: client authenticated.
USERENV(23c.364) 14:45:57:404 ReleaseClientContext: Releasing context
USERENV(23c.364) 14:45:57:404 ReleaseClientContext_s: Releasing context
USERENV(23c.364) 14:45:57:404 MIDL_user_free enter
USERENV(268.26c) 14:45:57:404 ReleaseInterface: Releasing rpc binding handle
USERENV(268.26c) 14:45:57:414 LoadUserProfile: Returning TRUE. hProfile = <0x33c>
USERENV(268.26c) 14:45:57:414 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(268.26c) 14:45:57:414 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(36c.370) 14:45:57:484 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
USERENV(3cc.3d0) 14:45:57:744 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
USERENV(23c.240) 14:45:58:145 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(23c.3f8) 14:45:58:245 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(268.26c) 14:45:58:756 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(268.26c) 14:45:58:756 =========================================================
USERENV(268.26c) 14:45:58:766 LoadUserProfile: Entering, hToken = <0x36c>, lpProfileInfo = 0x7fcf8
USERENV(268.26c) 14:45:58:766 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(268.26c) 14:45:58:766 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(268.26c) 14:45:58:766 LoadUserProfile: NULL central profile path
USERENV(268.26c) 14:45:58:776 LoadUserProfile: NULL default profile path
USERENV(268.26c) 14:45:58:776 LoadUserProfile: NULL server name
USERENV(268.26c) 14:45:58:776 GetInterface: Returning rpc binding handle
USERENV(23c.254) 14:45:58:776 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:58:776 DropClientContext: Got client token 000005F4, sid = S-1-5-18
USERENV(23c.254) 14:45:58:776 MIDL_user_allocate enter
USERENV(23c.254) 14:45:58:776 DropClientContext: load profile object successfully made
USERENV(23c.254) 14:45:58:786 DropClientContext: Returning 0
USERENV(268.26c) 14:45:58:786 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(23c.364) 14:45:58:786 IProfileSecurityCallBack: client authenticated.
USERENV(23c.364) 14:45:58:786 In LoadUserProfileP
USERENV(23c.364) 14:45:58:786 LoadUserProfile: Running as client
USERENV(23c.364) 14:45:58:786 =========================================================
USERENV(23c.364) 14:45:58:786 LoadUserProfile: Entering, hToken = <0x5fc>, lpProfileInfo = 0xe17980
USERENV(23c.364) 14:45:58:796 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(23c.364) 14:45:58:796 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(23c.364) 14:45:58:796 LoadUserProfile: NULL central profile path
USERENV(23c.364) 14:45:58:796 LoadUserProfile: NULL default profile path
USERENV(23c.364) 14:45:58:796 LoadUserProfile: NULL server name
USERENV(23c.364) 14:45:58:796 LoadUserProfile: User sid: S-1-5-20
USERENV(23c.364) 14:45:58:796 CSyncManager::EnterLock <S-1-5-20>
USERENV(23c.364) 14:45:58:806 CSyncManager::EnterLock: No existing entry found
USERENV(23c.364) 14:45:58:806 CSyncManager::EnterLock: New entry created
USERENV(23c.364) 14:45:58:806 CHashTable::HashAdd: S-1-5-20 added in bucket 4
USERENV(23c.364) 14:45:58:806 LoadUserProfile: Wait succeeded. In critical section.
USERENV(23c.364) 14:45:58:806 TestIfUserProfileLoaded: Profile already loaded.
USERENV(23c.364) 14:45:58:806 Profile Ref Count is 2
USERENV(23c.364) 14:45:58:806 LoadUserProfile: Leaving critical Section.
USERENV(23c.364) 14:45:58:816 CSyncManager::LeaveLock <S-1-5-20>
USERENV(23c.364) 14:45:58:816 CSyncManager::LeaveLock: Lock released
USERENV(23c.364) 14:45:58:816 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(23c.364) 14:45:58:816 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.364) 14:45:58:816 LoadUserProfile: Impersonated user: 000005fc, 00000604
USERENV(23c.364) 14:45:58:816 LoadUserProfile: Reverted to user: 00000000
USERENV(23c.364) 14:45:58:816 LoadUserProfile: Reverted back to user <00000000>
USERENV(23c.364) 14:45:58:816 LoadUserProfile: Leaving with a value of 1.
USERENV(23c.364) 14:45:58:826 =========================================================
USERENV(23c.364) 14:45:58:826 LoadUserProfileI: returning 0
USERENV(268.26c) 14:45:58:826 LoadUserProfile: Running as self
USERENV(268.26c) 14:45:58:826 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(268.26c) 14:45:58:826 LoadUserProfile: Returning success. Final Information follows:
USERENV(268.26c) 14:45:58:826 lpProfileInfo->UserName = <NetworkService>
USERENV(268.26c) 14:45:58:836 lpProfileInfo->lpProfilePath = <>
USERENV(268.26c) 14:45:58:836 lpProfileInfo->dwFlags = 0x9
USERENV(23c.254) 14:45:58:836 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:58:836 ReleaseClientContext: Releasing context
USERENV(23c.254) 14:45:58:836 ReleaseClientContext_s: Releasing context
USERENV(23c.254) 14:45:58:836 MIDL_user_free enter
USERENV(268.26c) 14:45:58:836 ReleaseInterface: Releasing rpc binding handle
USERENV(268.26c) 14:45:58:846 LoadUserProfile: Returning TRUE. hProfile = <0x38c>
USERENV(268.26c) 14:45:58:846 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(268.26c) 14:45:58:846 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(4a0.4a4) 14:45:58:876 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
USERENV(268.26c) 14:45:58:896 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(268.26c) 14:45:58:896 =========================================================
USERENV(268.26c) 14:45:58:916 LoadUserProfile: Entering, hToken = <0x39c>, lpProfileInfo = 0x7fcf8
USERENV(268.26c) 14:45:58:916 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(268.26c) 14:45:58:926 LoadUserProfile: lpProfileInfo->lpUserName = <LocalService>
USERENV(268.26c) 14:45:58:936 LoadUserProfile: NULL central profile path
USERENV(268.26c) 14:45:58:936 LoadUserProfile: NULL default profile path
USERENV(268.26c) 14:45:58:936 LoadUserProfile: NULL server name
USERENV(268.26c) 14:45:58:946 GetInterface: Returning rpc binding handle
USERENV(23c.364) 14:45:58:946 IProfileSecurityCallBack: client authenticated.
USERENV(23c.364) 14:45:58:956 DropClientContext: Got client token 000005F4, sid = S-1-5-18
USERENV(23c.364) 14:45:58:956 MIDL_user_allocate enter
USERENV(23c.364) 14:45:58:956 DropClientContext: load profile object successfully made
USERENV(23c.364) 14:45:58:966 DropClientContext: Returning 0
USERENV(268.26c) 14:45:58:966 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(23c.254) 14:45:58:976 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:58:976 In LoadUserProfileP
USERENV(23c.254) 14:45:58:986 LoadUserProfile: Running as client
USERENV(23c.254) 14:45:58:986 =========================================================
USERENV(23c.254) 14:45:58:986 LoadUserProfile: Entering, hToken = <0x5fc>, lpProfileInfo = 0xe179a8
USERENV(23c.254) 14:45:58:996 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(23c.254) 14:45:58:996 LoadUserProfile: lpProfileInfo->lpUserName = <LocalService>
USERENV(23c.254) 14:45:58:996 LoadUserProfile: NULL central profile path
USERENV(23c.254) 14:45:59:006 LoadUserProfile: NULL default profile path
USERENV(23c.254) 14:45:59:006 LoadUserProfile: NULL server name
USERENV(23c.254) 14:45:59:016 LoadUserProfile: User sid: S-1-5-19
USERENV(23c.254) 14:45:59:016 CSyncManager::EnterLock <S-1-5-19>
USERENV(23c.254) 14:45:59:016 CSyncManager::EnterLock: No existing entry found
USERENV(23c.254) 14:45:59:026 CSyncManager::EnterLock: New entry created
USERENV(23c.254) 14:45:59:026 CHashTable::HashAdd: S-1-5-19 added in bucket 12
USERENV(23c.254) 14:45:59:026 LoadUserProfile: Wait succeeded. In critical section.
USERENV(23c.254) 14:45:59:036 RestoreUserProfile: Entering
USERENV(23c.254) 14:45:59:036 IsCentralProfileReachable: Entering
USERENV(23c.254) 14:45:59:036 IsCentralProfileReachable: Null path. Leaving
USERENV(23c.254) 14:45:59:046 RestoreUserProfile: Profile path = <>
USERENV(23c.254) 14:45:59:046 ExtractProfileFromBackup: A profile already exists
USERENV(23c.254) 14:45:59:046 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(23c.254) 14:45:59:056 CreateLocalProfileKey: Not setting additional Security
USERENV(23c.254) 14:45:59:056 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(23c.254) 14:45:59:066 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\LocalService>
USERENV(23c.254) 14:45:59:066 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\LocalService>
USERENV(23c.254) 14:45:59:066 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(23c.254) 14:45:59:066 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\LocalService\ntuser.dat>
USERENV(23c.254) 14:45:59:066 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
USERENV(23c.254) 14:45:59:066 Local Existing Profile Image is reachable
USERENV(23c.254) 14:45:59:066 Local profile name is <C:\Documents and Settings\LocalService>
USERENV(23c.254) 14:45:59:076 RestoreUserProfile: No central profile. Attempting to load local profile.
USERENV(23c.254) 14:45:59:086 MyRegLoadKey: Returning 00000000
USERENV(23c.254) 14:45:59:086 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(23c.254) 14:45:59:086 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.254) 14:45:59:096 MyRegLoadKey: Returning 00000000
USERENV(23c.254) 14:45:59:096 CreateClassHive: existing user classes hive found
USERENV(23c.254) 14:45:59:096 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(23c.254) 14:45:59:096 Profile was successfully loaded.
USERENV(23c.254) 14:45:59:096 lpProfile->lpRoamingProfile = <>
USERENV(23c.254) 14:45:59:106 lpProfile->lpLocalProfile = <C:\Documents and Settings\LocalService>
USERENV(23c.254) 14:45:59:106 lpProfile->dwInternalFlags = 0x0
USERENV(23c.254) 14:45:59:106 RestoreUserProfile: Leaving.
USERENV(23c.254) 14:45:59:106 UpgradeProfile: Entering
USERENV(23c.254) 14:45:59:106 UpgradeProfile: Build numbers match
USERENV(23c.254) 14:45:59:106 UpgradeProfile: Leaving Successfully
USERENV(23c.254) 14:45:59:136 Profile Ref Count is 1
USERENV(23c.254) 14:45:59:136 LoadUserProfile: Leaving critical Section.
USERENV(23c.254) 14:45:59:136 CSyncManager::LeaveLock <S-1-5-19>
USERENV(23c.254) 14:45:59:136 CSyncManager::LeaveLock: Lock released
USERENV(23c.254) 14:45:59:146 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(23c.254) 14:45:59:146 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.254) 14:45:59:146 LoadUserProfile: Impersonated user: 000005fc, 00000604
USERENV(274.2d4) 14:45:59:146 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(274.2d4) 14:45:59:146 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:45:59:146 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(274.2d4) 14:45:59:156 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.254) 14:45:59:176 LoadUserProfile: Reverted to user: 00000000
USERENV(23c.254) 14:45:59:176 LoadUserProfile: Reverted back to user <00000000>
USERENV(23c.254) 14:45:59:176 LoadUserProfile: Leaving with a value of 1.
USERENV(23c.254) 14:45:59:176 =========================================================
USERENV(23c.254) 14:45:59:186 LoadUserProfileI: returning 0
USERENV(268.26c) 14:45:59:186 LoadUserProfile: Running as self
USERENV(268.26c) 14:45:59:186 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(268.26c) 14:45:59:186 LoadUserProfile: Returning success. Final Information follows:
USERENV(268.26c) 14:45:59:186 lpProfileInfo->UserName = <LocalService>
USERENV(268.26c) 14:45:59:186 lpProfileInfo->lpProfilePath = <>
USERENV(268.26c) 14:45:59:186 lpProfileInfo->dwFlags = 0x9
USERENV(23c.364) 14:45:59:196 IProfileSecurityCallBack: client authenticated.
USERENV(23c.364) 14:45:59:196 ReleaseClientContext: Releasing context
USERENV(23c.364) 14:45:59:196 ReleaseClientContext_s: Releasing context
USERENV(23c.364) 14:45:59:196 MIDL_user_free enter
USERENV(268.26c) 14:45:59:196 ReleaseInterface: Releasing rpc binding handle
USERENV(268.26c) 14:45:59:196 LoadUserProfile: Returning TRUE. hProfile = <0x3a0>
USERENV(268.26c) 14:45:59:196 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(268.26c) 14:45:59:206 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(4e0.4e4) 14:45:59:226 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
USERENV(554.55c) 14:46:00:038 LibMain: Process Name: C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
USERENV(554.55c) 14:46:00:038 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(560.584) 14:46:00:779 LibMain: Process Name: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
USERENV(560.584) 14:46:00:789 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(60c.610) 14:46:01:079 LibMain: Process Name: C:\WINDOWS\system32\spoolsv.exe
USERENV(630.634) 14:46:01:430 LibMain: Process Name: C:\WINDOWS\system32\acs.exe
USERENV(23c.670) 14:46:01:760 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(680.684) 14:46:01:910 LibMain: Process Name: C:\WINDOWS\system32\mpnotify.exe
USERENV(23c.240) 14:46:01:990 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(23c.240) 14:46:01:990 =========================================================
USERENV(23c.240) 14:46:01:990 LoadUserProfile: Entering, hToken = <0x704>, lpProfileInfo = 0x6e3e0
USERENV(23c.240) 14:46:01:990 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(23c.240) 14:46:02:000 LoadUserProfile: lpProfileInfo->lpUserName = <NickG>
USERENV(23c.240) 14:46:02:000 LoadUserProfile: NULL central profile path
USERENV(23c.240) 14:46:02:021 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\SERVER\netlogon\Default User>
USERENV(23c.240) 14:46:02:021 LoadUserProfile: NULL server name
USERENV(23c.240) 14:46:02:021 LoadUserProfile: In console winlogon process
USERENV(23c.240) 14:46:02:021 In LoadUserProfileP
USERENV(23c.240) 14:46:02:031 =========================================================
USERENV(23c.240) 14:46:02:031 LoadUserProfile: Entering, hToken = <0x704>, lpProfileInfo = 0x6e3e0
USERENV(23c.240) 14:46:02:031 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(23c.240) 14:46:02:031 LoadUserProfile: lpProfileInfo->lpUserName = <NickG>
USERENV(23c.240) 14:46:02:041 LoadUserProfile: NULL central profile path
USERENV(23c.240) 14:46:02:041 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\SERVER\netlogon\Default User>
USERENV(23c.240) 14:46:02:041 LoadUserProfile: NULL server name
USERENV(23c.240) 14:46:02:051 LoadUserProfile: User sid: S-1-5-21-2141665459-1023760628-433219294-2381
USERENV(23c.240) 14:46:02:051 CSyncManager::EnterLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:46:02:051 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:46:02:051 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:46:02:061 CHashTable::HashAdd: S-1-5-21-2141665459-1023760628-433219294-2381 added in bucket 12
USERENV(23c.240) 14:46:02:061 LoadUserProfile: Wait succeeded. In critical section.
USERENV(23c.240) 14:46:02:061 RestoreUserProfile: Entering
USERENV(23c.240) 14:46:02:061 RestoreUserProfile: User is a Admin
USERENV(23c.240) 14:46:02:071 IsCentralProfileReachable: Entering
USERENV(23c.240) 14:46:02:071 IsCentralProfileReachable: Null path. Leaving
USERENV(23c.240) 14:46:02:071 RestoreUserProfile: Profile path = <>
USERENV(23c.240) 14:46:02:071 ExtractProfileFromBackup: A profile already exists
USERENV(23c.240) 14:46:02:081 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(23c.240) 14:46:02:081 CreateLocalProfileKey: Not setting additional Security
USERENV(23c.240) 14:46:02:081 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(23c.240) 14:46:02:081 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\NickG>
USERENV(23c.240) 14:46:02:091 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\NickG>
USERENV(23c.240) 14:46:02:111 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(23c.240) 14:46:02:111 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\NickG\ntuser.dat>
USERENV(23c.240) 14:46:02:121 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
USERENV(23c.240) 14:46:02:121 Local Existing Profile Image is reachable
USERENV(23c.240) 14:46:02:121 Local profile name is <C:\Documents and Settings\NickG>
USERENV(23c.240) 14:46:02:121 RestoreUserProfile: No central profile. Attempting to load local profile.
USERENV(23c.240) 14:46:02:421 MyRegLoadKey: Returning 00000000
USERENV(23c.240) 14:46:02:431 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.240) 14:46:02:591 MyRegLoadKey: Returning 00000000
USERENV(23c.240) 14:46:02:591 CreateClassHive: existing user classes hive found
USERENV(23c.240) 14:46:02:591 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(23c.240) 14:46:02:591 Profile was successfully loaded.
USERENV(23c.240) 14:46:02:601 lpProfile->lpRoamingProfile = <>
USERENV(23c.240) 14:46:02:601 lpProfile->lpLocalProfile = <C:\Documents and Settings\NickG>
USERENV(23c.240) 14:46:02:601 lpProfile->dwInternalFlags = 0x100
USERENV(23c.240) 14:46:02:601 RestoreUserProfile: Leaving.
USERENV(23c.240) 14:46:02:601 UpgradeProfile: Entering
USERENV(23c.240) 14:46:02:601 UpgradeProfile: Build numbers match
USERENV(23c.240) 14:46:02:611 UpgradeProfile: Leaving Successfully
USERENV(23c.240) 14:46:02:762 Profile Ref Count is 1
USERENV(23c.240) 14:46:02:762 LoadUserProfile: Leaving critical Section.
USERENV(23c.240) 14:46:02:762 CSyncManager::LeaveLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:46:02:762 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:46:02:762 CHashTable::HashDelete: S-1-5-21-2141665459-1023760628-433219294-2381 deleted
USERENV(23c.240) 14:46:02:762 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:46:02:762 LoadUserProfile: Impersonated user: 00000704, 00000000
USERENV(274.2d4) 14:46:02:772 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:46:02:772 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:46:02:862 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:862 GetUserNameAndDomain Failed to impersonate user
USERENV(274.2d4) 14:46:02:862 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:872 GetUserDNSDomainName: Failed to impersonate user
USERENV(274.2d4) 14:46:02:872 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:46:02:902 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:902 GetUserNameAndDomain Failed to impersonate user
USERENV(274.2d4) 14:46:02:902 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:902 GetUserDNSDomainName: Failed to impersonate user
USERENV(274.2d4) 14:46:02:902 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:46:02:942 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:46:02:942 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:952 GetUserNameAndDomain Failed to impersonate user
USERENV(274.2d4) 14:46:02:952 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:962 GetUserDNSDomainName: Failed to impersonate user
USERENV(274.2d4) 14:46:02:962 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.240) 14:46:02:982 LoadUserProfile: Reverted to user: 00000000
USERENV(23c.240) 14:46:02:982 LoadUserProfile: Leaving with a value of 1.
USERENV(23c.240) 14:46:02:992 =========================================================
USERENV(23c.240) 14:46:02:992 LoadUserProfile: LoadUserProfileP succeeded
USERENV(23c.240) 14:46:02:992 LoadUserProfile: Returning success. Final Information follows:
USERENV(23c.240) 14:46:03:002 lpProfileInfo->UserName = <NickG>
USERENV(23c.240) 14:46:03:002 lpProfileInfo->lpProfilePath = <>
USERENV(23c.240) 14:46:03:002 lpProfileInfo->dwFlags = 0x0
USERENV(23c.240) 14:46:03:012 LoadUserProfile: Returning TRUE. hProfile = <0x134>
USERENV(23c.240) 14:46:03:022 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.240) 14:46:03:312 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(23c.694) 14:46:03:312 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(23c.240) 14:47:33:833 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(394.398) 14:47:34:564 LibMain: Process Name: C:\WINDOWS\system32\Ati2evxx.exe
USERENV(3b4.3b8) 14:47:34:604 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(3b4.3b8) 14:47:34:714 CheckXForestLogon: checking x-forest logon, user handle = 132
USERENV(3b4.3b8) 14:47:34:724 CheckUserInMachineForest: Failed to enumerate forest domains with 1717.
USERENV(3b4.3b8) 14:47:34:734 CheckXForestLogon : CheckUserInMachineForest failed with 1717
USERENV(3e8.404) 14:47:34:844 LibMain: Process Name: C:\WINDOWS\Explorer.EXE
USERENV(3e8.448) 14:47:35:585 GetProfileType: Profile already loaded.
USERENV(3e8.448) 14:47:35:585 GetProfileType: ProfileFlags is 0
USERENV(4bc.4c0) 14:47:37:438 LibMain: Process Name: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
USERENV(4bc.4c0) 14:47:37:458 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(540.544) 14:47:38:369 LibMain: Process Name: C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
USERENV(69c.6a4) 14:47:39:330 LibMain: Process Name: C:\WINDOWS\system32\mobsync.exe
USERENV(6a0.714) 14:47:39:921 LibMain: Process Name: C:\Program Files\Hewlett-Packard\HP Mobile Printing\HPBMOBIL.EXE
USERENV(6a0.714) 14:47:39:921 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(6a0.714) 14:47:40:031 ImpersonateUser: Failed to impersonate user with 5.
USERENV(6a0.714) 14:47:40:051 GetUserNameAndDomain Failed to impersonate user
USERENV(6a0.714) 14:47:40:061 ImpersonateUser: Failed to impersonate user with 5.
USERENV(6a0.714) 14:47:40:061 GetUserDNSDomainName: Failed to impersonate user
USERENV(6a0.714) 14:47:40:072 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(6a0.714) 14:47:40:082 ImpersonateUser: Failed to impersonate user with 5.
USERENV(6a0.714) 14:47:40:132 GetUserNameAndDomain Failed to impersonate user
USERENV(6a0.714) 14:47:40:142 ImpersonateUser: Failed to impersonate user with 5.
USERENV(6a0.714) 14:47:40:142 GetUserDNSDomainName: Failed to impersonate user
USERENV(6a0.714) 14:47:40:152 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(790.794) 14:47:44:949 LibMain: Process Name: C:\WINDOWS\explorer.exe
USERENV(7e8.7ec) 14:47:59:349 LibMain: Process Name: C:\WINDOWS\system32\NOTEPAD.EXE
Iemand enig idee waarom het inloggen zo traag gaat??
grtz,
Nick
ik zit hier al een tijdje met een vervelend probleem op het bedrijf. Ik heb via active directory de Z: drive gemapped naar de usermap. Deze usermap staat op de NAS, dus is meer dan snel genoeg (blijkt ook uit tests eens ik ingelogd ben).
Probleem is dat sindsdien bepaalde clients (Win XP) onnoemelijk traag inloggen. Het inloggen duurt zo'n 2 minuten. Nochtans is er in de logs nergens een foutmelding te bespeuren; de DNS en DHCP zijn goed geconfigged, en de naam van de server en mappen kunnen goed geresolved worden. Hieronder een deel van de userenv.log:
USERENV(274.6e0) 14:44:53:062 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.6e0) 14:44:53:062 GetUserNameAndDomain Failed to impersonate user
USERENV(274.6e0) 14:44:53:072 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.6e0) 14:44:53:072 GetUserDNSDomainName: Failed to impersonate user
USERENV(274.6e0) 14:44:53:072 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(3cc.c88) 14:44:54:884 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(3cc.c88) 14:44:54:884 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.240) 14:44:57:478 UnloadUserProfile: Entering, hProfile = <0x134>
USERENV(23c.240) 14:44:57:478 UnloadUserProfile: In console winlogon process
USERENV(23c.240) 14:44:57:478 UnloadUserProfileP: Entering, hProfile = <0x134>
USERENV(23c.240) 14:44:57:478 GetExclusionListFromRegistry: Policy list is empty, returning user list = <Local Settings;Temporary Internet Files;History;Temp;Local Settings\Application Data\Microsoft\Outlook>
USERENV(23c.240) 14:44:57:478 CSyncManager::EnterLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:44:57:478 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:44:57:478 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:44:57:478 CHashTable::HashAdd: S-1-5-21-2141665459-1023760628-433219294-2381 added in bucket 12
USERENV(23c.240) 14:44:57:478 UnloadUserProfileP: Wait succeeded. In critical section.
USERENV(23c.240) 14:44:58:329 MyRegUnLoadKey: Returning 1.
USERENV(23c.240) 14:44:58:339 UnloadUserProfileP: Succesfully unloaded profile
USERENV(23c.240) 14:44:58:369 MyRegUnLoadKey: Returning 1.
USERENV(23c.240) 14:44:58:369 UnLoadClassHive: Successfully unmounted S-1-5-21-2141665459-1023760628-433219294-2381_Classes
USERENV(23c.240) 14:44:58:369 UnloadUserProfileP: Successfully unloaded user classes
USERENV(23c.240) 14:44:58:369 UnloadUserProfileP: Impersonated user
USERENV(23c.240) 14:44:58:369 UnloadUserProfileP: Writing local ini file
USERENV(23c.240) 14:44:58:410 UnloadUserProfileP: Reverting to Self
USERENV(23c.240) 14:44:58:420 UnloadUserProfileP: exitting and cleaning up
USERENV(23c.240) 14:44:58:420 CSyncManager::LeaveLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:44:58:420 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:44:58:420 CHashTable::HashDelete: S-1-5-21-2141665459-1023760628-433219294-2381 deleted
USERENV(23c.240) 14:44:58:420 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:44:58:420 UnloadUserProfileP: Leave critical section.
USERENV(23c.240) 14:44:58:420 UnloadUserProfileP: Leaving with a return value of 1
USERENV(23c.240) 14:44:58:420 UnloadUserProfile: UnloadUserProfileP succeeded
USERENV(23c.240) 14:44:58:430 UnloadUserProfile: returning 1
USERENV(44c.cdc) 14:44:59:090 LibMain: Process Name: C:\WINDOWS\system32\dwwin.exe
USERENV(44c.750) 14:45:00:002 GetHkeyCU: RegOpenKey failed with error 2
USERENV(268.d30) 14:45:02:015 UnloadUserProfile: Entering, hProfile = <0x4a0>
USERENV(268.d30) 14:45:02:025 GetInterface: Returning rpc binding handle
USERENV(23c.254) 14:45:02:025 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:02:035 DropClientContext: Got client token 000005E4, sid = S-1-5-18
USERENV(23c.254) 14:45:02:035 MIDL_user_allocate enter
USERENV(23c.254) 14:45:02:035 DropClientContext: load profile object successfully made
USERENV(23c.254) 14:45:02:045 DropClientContext: Returning 0
USERENV(268.d30) 14:45:02:045 UnLoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(23c.7f8) 14:45:02:045 IProfileSecurityCallBack: client authenticated.
USERENV(23c.7f8) 14:45:02:055 UnloadUserProfileP: Entering, hProfile = <0x3dc>
USERENV(23c.7f8) 14:45:02:055 UnloadUserProfileP: ImpersonateUser <000005e4>, old token is <00000000>
USERENV(23c.7f8) 14:45:02:065 GetExclusionListFromRegistry: Policy list is empty, returning user list = <Local Settings;Temporary Internet Files;History;Temp>
USERENV(23c.7f8) 14:45:02:065 CSyncManager::EnterLock <S-1-5-19>
USERENV(23c.7f8) 14:45:02:065 CSyncManager::EnterLock: No existing entry found
USERENV(23c.7f8) 14:45:02:075 CSyncManager::EnterLock: New entry created
USERENV(23c.7f8) 14:45:02:075 CHashTable::HashAdd: S-1-5-19 added in bucket 12
USERENV(23c.7f8) 14:45:02:075 UnloadUserProfileP: Wait succeeded. In critical section.
USERENV(23c.7f8) 14:45:02:085 UnloadUserProfileP: Didn't unload user profile, Ref Count is 2
USERENV(23c.7f8) 14:45:02:085 UnloadUserProfileP: Reverted back to user <00000000>
USERENV(23c.7f8) 14:45:02:095 CSyncManager::LeaveLock <S-1-5-19>
USERENV(23c.7f8) 14:45:02:095 CSyncManager::LeaveLock: Lock released
USERENV(23c.7f8) 14:45:02:095 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(23c.7f8) 14:45:02:105 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.7f8) 14:45:02:105 UnloadUserProfileP: Leave critical section.
USERENV(23c.7f8) 14:45:02:105 UnloadUserProfileP: Leaving with a return value of 1
USERENV(23c.7f8) 14:45:02:115 UnloadUserProfileI: returning 0
USERENV(268.d30) 14:45:02:115 UnloadUserProfile: Calling UnloadUserProfileI succeeded
USERENV(23c.254) 14:45:02:125 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:02:125 ReleaseClientContext: Releasing context
USERENV(23c.254) 14:45:02:125 ReleaseClientContext_s: Releasing context
USERENV(23c.254) 14:45:02:135 MIDL_user_free enter
USERENV(268.d30) 14:45:02:135 ReleaseInterface: Releasing rpc binding handle
USERENV(268.d30) 14:45:02:145 UnloadUserProfile: returning 1
USERENV(23c.240) 14:45:53:088 InitializePolicyProcessing: Initialised Machine Mutex/Events
USERENV(23c.240) 14:45:53:138 InitializePolicyProcessing: Initialised User Mutex/Events
USERENV(23c.240) 14:45:53:138 LibMain: Process Name: \??\C:\WINDOWS\system32\winlogon.exe
USERENV(23c.240) 14:45:54:259 Entering CUserProfile::Initialize ...
USERENV(23c.240) 14:45:54:259 CUserProfile::Initialize called by winlogon
USERENV(23c.240) 14:45:54:269 CUserProfile::Initialize: critical section initialized
USERENV(23c.240) 14:45:54:269 CSyncManager::Initialize: critical section initialized
USERENV(23c.240) 14:45:54:269 CUserProfile::Initialize: registry key Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
USERENV(23c.240) 14:45:54:269 CUserProfile::Initialize: Proccessing S-1-5-21-295240851-3373731420-871859708-500
USERENV(23c.240) 14:45:54:269 CSyncManager::EnterLock <S-1-5-21-295240851-3373731420-871859708-500>
USERENV(23c.240) 14:45:54:269 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:269 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:279 CHashTable::HashAdd: S-1-5-21-295240851-3373731420-871859708-500 added in bucket 6
USERENV(23c.240) 14:45:54:279 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:279 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000100
USERENV(23c.240) 14:45:54:279 CSyncManager::LeaveLock <S-1-5-21-295240851-3373731420-871859708-500>
USERENV(23c.240) 14:45:54:279 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:279 CHashTable::HashDelete: S-1-5-21-295240851-3373731420-871859708-500 deleted
USERENV(23c.240) 14:45:54:279 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:279 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:289 CUserProfile::Initialize: Proccessing S-1-5-21-295240851-3373731420-871859708-1003
USERENV(23c.240) 14:45:54:289 CSyncManager::EnterLock <S-1-5-21-295240851-3373731420-871859708-1003>
USERENV(23c.240) 14:45:54:289 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:289 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:289 CHashTable::HashAdd: S-1-5-21-295240851-3373731420-871859708-1003 added in bucket 7
USERENV(23c.240) 14:45:54:289 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:289 CUserProfile::GetRefCountAndFlags: Ref count is 2, state is 00000004
USERENV(23c.240) 14:45:54:299 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(23c.240) 14:45:54:299 CSyncManager::LeaveLock <S-1-5-21-295240851-3373731420-871859708-1003>
USERENV(23c.240) 14:45:54:299 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:299 CHashTable::HashDelete: S-1-5-21-295240851-3373731420-871859708-1003 deleted
USERENV(23c.240) 14:45:54:299 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:299 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:299 CUserProfile::Initialize: Proccessing S-1-5-21-2141665459-1023760628-433219294-2381
USERENV(23c.240) 14:45:54:309 CSyncManager::EnterLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:45:54:309 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:309 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:309 CHashTable::HashAdd: S-1-5-21-2141665459-1023760628-433219294-2381 added in bucket 12
USERENV(23c.240) 14:45:54:309 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:309 CUserProfile::GetRefCountAndFlags: Ref count is 0, state is 00000100
USERENV(23c.240) 14:45:54:309 CSyncManager::LeaveLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:45:54:309 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:319 CHashTable::HashDelete: S-1-5-21-2141665459-1023760628-433219294-2381 deleted
USERENV(23c.240) 14:45:54:319 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:319 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:319 CUserProfile::Initialize: Proccessing S-1-5-20
USERENV(23c.240) 14:45:54:319 CSyncManager::EnterLock <S-1-5-20>
USERENV(23c.240) 14:45:54:319 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:319 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:329 CHashTable::HashAdd: S-1-5-20 added in bucket 4
USERENV(23c.240) 14:45:54:329 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:329 CUserProfile::GetRefCountAndFlags: Ref count is 2, state is 00000000
USERENV(23c.240) 14:45:54:329 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(23c.240) 14:45:54:329 CSyncManager::LeaveLock <S-1-5-20>
USERENV(23c.240) 14:45:54:329 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:329 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(23c.240) 14:45:54:329 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:339 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:339 CUserProfile::Initialize: Proccessing S-1-5-19
USERENV(23c.240) 14:45:54:339 CSyncManager::EnterLock <S-1-5-19>
USERENV(23c.240) 14:45:54:339 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:339 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:339 CHashTable::HashAdd: S-1-5-19 added in bucket 12
USERENV(23c.240) 14:45:54:339 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:349 CUserProfile::GetRefCountAndFlags: Ref count is 2, state is 00000000
USERENV(23c.240) 14:45:54:349 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(23c.240) 14:45:54:349 CSyncManager::LeaveLock <S-1-5-19>
USERENV(23c.240) 14:45:54:349 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:349 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(23c.240) 14:45:54:349 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:349 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:359 CUserProfile::Initialize: Proccessing S-1-5-18
USERENV(23c.240) 14:45:54:359 CSyncManager::EnterLock <S-1-5-18>
USERENV(23c.240) 14:45:54:359 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:45:54:359 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:45:54:359 CHashTable::HashAdd: S-1-5-18 added in bucket 11
USERENV(23c.240) 14:45:54:359 CUserProfile::CleanupUserProfile: Enter critical section.
USERENV(23c.240) 14:45:54:359 CUserProfile::GetRefCountAndFlags: Ref count is 1, state is 00000000
USERENV(23c.240) 14:45:54:359 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(23c.240) 14:45:54:370 CSyncManager::LeaveLock <S-1-5-18>
USERENV(23c.240) 14:45:54:370 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:45:54:370 CHashTable::HashDelete: S-1-5-18 deleted
USERENV(23c.240) 14:45:54:370 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:45:54:370 CUserProfile::CleanupUserProfile: Leave critical section
USERENV(23c.240) 14:45:54:370 CUserProfile::Initialize: RpcServerRegisterIfEx successful
USERENV(23c.240) 14:45:54:370 Exiting CUserProfile::Initialize, successful
USERENV(268.26c) 14:45:54:760 LibMain: Process Name: C:\WINDOWS\system32\services.exe
USERENV(274.278) 14:45:54:790 LibMain: Process Name: C:\WINDOWS\system32\lsass.exe
USERENV(23c.240) 14:45:54:970 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(330.334) 14:45:56:793 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
USERENV(268.26c) 14:45:57:073 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(268.26c) 14:45:57:073 =========================================================
USERENV(268.26c) 14:45:57:073 LoadUserProfile: Entering, hToken = <0x2d8>, lpProfileInfo = 0x7fcf8
USERENV(268.26c) 14:45:57:073 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(268.26c) 14:45:57:073 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(268.26c) 14:45:57:073 LoadUserProfile: NULL central profile path
USERENV(268.26c) 14:45:57:073 LoadUserProfile: NULL default profile path
USERENV(268.26c) 14:45:57:083 LoadUserProfile: NULL server name
USERENV(268.26c) 14:45:57:083 GetInterface: Returning rpc binding handle
USERENV(23c.364) 14:45:57:083 IProfileSecurityCallBack: client authenticated.
USERENV(23c.364) 14:45:57:083 DropClientContext: Got client token 000005F0, sid = S-1-5-18
USERENV(23c.364) 14:45:57:083 MIDL_user_allocate enter
USERENV(23c.364) 14:45:57:083 DropClientContext: load profile object successfully made
USERENV(23c.364) 14:45:57:083 DropClientContext: Returning 0
USERENV(268.26c) 14:45:57:093 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(23c.254) 14:45:57:093 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:57:093 In LoadUserProfileP
USERENV(23c.254) 14:45:57:093 LoadUserProfile: Running as client
USERENV(23c.254) 14:45:57:093 =========================================================
USERENV(23c.254) 14:45:57:093 LoadUserProfile: Entering, hToken = <0x5f4>, lpProfileInfo = 0xe0d5a8
USERENV(23c.254) 14:45:57:093 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(23c.254) 14:45:57:103 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(23c.254) 14:45:57:103 LoadUserProfile: NULL central profile path
USERENV(23c.254) 14:45:57:103 LoadUserProfile: NULL default profile path
USERENV(23c.254) 14:45:57:103 LoadUserProfile: NULL server name
USERENV(23c.254) 14:45:57:103 LoadUserProfile: User sid: S-1-5-20
USERENV(23c.254) 14:45:57:103 CSyncManager::EnterLock <S-1-5-20>
USERENV(23c.254) 14:45:57:103 CSyncManager::EnterLock: No existing entry found
USERENV(23c.254) 14:45:57:113 CSyncManager::EnterLock: New entry created
USERENV(23c.254) 14:45:57:113 CHashTable::HashAdd: S-1-5-20 added in bucket 4
USERENV(23c.254) 14:45:57:113 LoadUserProfile: Wait succeeded. In critical section.
USERENV(23c.254) 14:45:57:113 RestoreUserProfile: Entering
USERENV(23c.254) 14:45:57:113 IsCentralProfileReachable: Entering
USERENV(23c.254) 14:45:57:113 IsCentralProfileReachable: Null path. Leaving
USERENV(23c.254) 14:45:57:113 RestoreUserProfile: Profile path = <>
USERENV(23c.254) 14:45:57:113 ExtractProfileFromBackup: A profile already exists
USERENV(23c.254) 14:45:57:123 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(23c.254) 14:45:57:123 CreateLocalProfileKey: Not setting additional Security
USERENV(23c.254) 14:45:57:123 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(23c.254) 14:45:57:123 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\NetworkService>
USERENV(23c.254) 14:45:57:123 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\NetworkService>
USERENV(23c.254) 14:45:57:123 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(23c.254) 14:45:57:123 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\NetworkService\ntuser.dat>
USERENV(23c.254) 14:45:57:133 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
USERENV(23c.254) 14:45:57:133 Local Existing Profile Image is reachable
USERENV(23c.254) 14:45:57:133 Local profile name is <C:\Documents and Settings\NetworkService>
USERENV(23c.254) 14:45:57:133 RestoreUserProfile: No central profile. Attempting to load local profile.
USERENV(23c.254) 14:45:57:143 MyRegLoadKey: Returning 00000000
USERENV(23c.254) 14:45:57:174 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(23c.254) 14:45:57:174 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.254) 14:45:57:194 MyRegLoadKey: Returning 00000000
USERENV(23c.254) 14:45:57:194 CreateClassHive: existing user classes hive found
USERENV(23c.254) 14:45:57:194 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(23c.254) 14:45:57:194 Profile was successfully loaded.
USERENV(23c.254) 14:45:57:194 lpProfile->lpRoamingProfile = <>
USERENV(23c.254) 14:45:57:194 lpProfile->lpLocalProfile = <C:\Documents and Settings\NetworkService>
USERENV(23c.254) 14:45:57:194 lpProfile->dwInternalFlags = 0x0
USERENV(23c.254) 14:45:57:204 RestoreUserProfile: Leaving.
USERENV(23c.254) 14:45:57:204 UpgradeProfile: Entering
USERENV(23c.254) 14:45:57:204 UpgradeProfile: Build numbers match
USERENV(23c.254) 14:45:57:204 UpgradeProfile: Leaving Successfully
USERENV(23c.254) 14:45:57:334 Profile Ref Count is 1
USERENV(23c.254) 14:45:57:334 LoadUserProfile: Leaving critical Section.
USERENV(23c.254) 14:45:57:334 CSyncManager::LeaveLock <S-1-5-20>
USERENV(23c.254) 14:45:57:334 CSyncManager::LeaveLock: Lock released
USERENV(23c.254) 14:45:57:344 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(23c.254) 14:45:57:344 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.254) 14:45:57:344 LoadUserProfile: Impersonated user: 000005f4, 00000600
USERENV(274.2b8) 14:45:57:344 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(274.2b8) 14:45:57:344 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2b8) 14:45:57:354 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(274.2b8) 14:45:57:354 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.254) 14:45:57:364 LoadUserProfile: Reverted to user: 00000000
USERENV(23c.254) 14:45:57:374 LoadUserProfile: Reverted back to user <00000000>
USERENV(23c.254) 14:45:57:374 LoadUserProfile: Leaving with a value of 1.
USERENV(23c.254) 14:45:57:374 =========================================================
USERENV(23c.254) 14:45:57:374 LoadUserProfileI: returning 0
USERENV(268.26c) 14:45:57:384 LoadUserProfile: Running as self
USERENV(268.26c) 14:45:57:384 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(268.26c) 14:45:57:384 LoadUserProfile: Returning success. Final Information follows:
USERENV(268.26c) 14:45:57:384 lpProfileInfo->UserName = <NetworkService>
USERENV(268.26c) 14:45:57:394 lpProfileInfo->lpProfilePath = <>
USERENV(268.26c) 14:45:57:394 lpProfileInfo->dwFlags = 0x9
USERENV(23c.364) 14:45:57:394 IProfileSecurityCallBack: client authenticated.
USERENV(23c.364) 14:45:57:404 ReleaseClientContext: Releasing context
USERENV(23c.364) 14:45:57:404 ReleaseClientContext_s: Releasing context
USERENV(23c.364) 14:45:57:404 MIDL_user_free enter
USERENV(268.26c) 14:45:57:404 ReleaseInterface: Releasing rpc binding handle
USERENV(268.26c) 14:45:57:414 LoadUserProfile: Returning TRUE. hProfile = <0x33c>
USERENV(268.26c) 14:45:57:414 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(268.26c) 14:45:57:414 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(36c.370) 14:45:57:484 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
USERENV(3cc.3d0) 14:45:57:744 LibMain: Process Name: C:\WINDOWS\System32\svchost.exe
USERENV(23c.240) 14:45:58:145 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(23c.3f8) 14:45:58:245 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(268.26c) 14:45:58:756 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(268.26c) 14:45:58:756 =========================================================
USERENV(268.26c) 14:45:58:766 LoadUserProfile: Entering, hToken = <0x36c>, lpProfileInfo = 0x7fcf8
USERENV(268.26c) 14:45:58:766 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(268.26c) 14:45:58:766 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(268.26c) 14:45:58:766 LoadUserProfile: NULL central profile path
USERENV(268.26c) 14:45:58:776 LoadUserProfile: NULL default profile path
USERENV(268.26c) 14:45:58:776 LoadUserProfile: NULL server name
USERENV(268.26c) 14:45:58:776 GetInterface: Returning rpc binding handle
USERENV(23c.254) 14:45:58:776 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:58:776 DropClientContext: Got client token 000005F4, sid = S-1-5-18
USERENV(23c.254) 14:45:58:776 MIDL_user_allocate enter
USERENV(23c.254) 14:45:58:776 DropClientContext: load profile object successfully made
USERENV(23c.254) 14:45:58:786 DropClientContext: Returning 0
USERENV(268.26c) 14:45:58:786 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(23c.364) 14:45:58:786 IProfileSecurityCallBack: client authenticated.
USERENV(23c.364) 14:45:58:786 In LoadUserProfileP
USERENV(23c.364) 14:45:58:786 LoadUserProfile: Running as client
USERENV(23c.364) 14:45:58:786 =========================================================
USERENV(23c.364) 14:45:58:786 LoadUserProfile: Entering, hToken = <0x5fc>, lpProfileInfo = 0xe17980
USERENV(23c.364) 14:45:58:796 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(23c.364) 14:45:58:796 LoadUserProfile: lpProfileInfo->lpUserName = <NetworkService>
USERENV(23c.364) 14:45:58:796 LoadUserProfile: NULL central profile path
USERENV(23c.364) 14:45:58:796 LoadUserProfile: NULL default profile path
USERENV(23c.364) 14:45:58:796 LoadUserProfile: NULL server name
USERENV(23c.364) 14:45:58:796 LoadUserProfile: User sid: S-1-5-20
USERENV(23c.364) 14:45:58:796 CSyncManager::EnterLock <S-1-5-20>
USERENV(23c.364) 14:45:58:806 CSyncManager::EnterLock: No existing entry found
USERENV(23c.364) 14:45:58:806 CSyncManager::EnterLock: New entry created
USERENV(23c.364) 14:45:58:806 CHashTable::HashAdd: S-1-5-20 added in bucket 4
USERENV(23c.364) 14:45:58:806 LoadUserProfile: Wait succeeded. In critical section.
USERENV(23c.364) 14:45:58:806 TestIfUserProfileLoaded: Profile already loaded.
USERENV(23c.364) 14:45:58:806 Profile Ref Count is 2
USERENV(23c.364) 14:45:58:806 LoadUserProfile: Leaving critical Section.
USERENV(23c.364) 14:45:58:816 CSyncManager::LeaveLock <S-1-5-20>
USERENV(23c.364) 14:45:58:816 CSyncManager::LeaveLock: Lock released
USERENV(23c.364) 14:45:58:816 CHashTable::HashDelete: S-1-5-20 deleted
USERENV(23c.364) 14:45:58:816 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.364) 14:45:58:816 LoadUserProfile: Impersonated user: 000005fc, 00000604
USERENV(23c.364) 14:45:58:816 LoadUserProfile: Reverted to user: 00000000
USERENV(23c.364) 14:45:58:816 LoadUserProfile: Reverted back to user <00000000>
USERENV(23c.364) 14:45:58:816 LoadUserProfile: Leaving with a value of 1.
USERENV(23c.364) 14:45:58:826 =========================================================
USERENV(23c.364) 14:45:58:826 LoadUserProfileI: returning 0
USERENV(268.26c) 14:45:58:826 LoadUserProfile: Running as self
USERENV(268.26c) 14:45:58:826 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(268.26c) 14:45:58:826 LoadUserProfile: Returning success. Final Information follows:
USERENV(268.26c) 14:45:58:826 lpProfileInfo->UserName = <NetworkService>
USERENV(268.26c) 14:45:58:836 lpProfileInfo->lpProfilePath = <>
USERENV(268.26c) 14:45:58:836 lpProfileInfo->dwFlags = 0x9
USERENV(23c.254) 14:45:58:836 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:58:836 ReleaseClientContext: Releasing context
USERENV(23c.254) 14:45:58:836 ReleaseClientContext_s: Releasing context
USERENV(23c.254) 14:45:58:836 MIDL_user_free enter
USERENV(268.26c) 14:45:58:836 ReleaseInterface: Releasing rpc binding handle
USERENV(268.26c) 14:45:58:846 LoadUserProfile: Returning TRUE. hProfile = <0x38c>
USERENV(268.26c) 14:45:58:846 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(268.26c) 14:45:58:846 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(4a0.4a4) 14:45:58:876 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
USERENV(268.26c) 14:45:58:896 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(268.26c) 14:45:58:896 =========================================================
USERENV(268.26c) 14:45:58:916 LoadUserProfile: Entering, hToken = <0x39c>, lpProfileInfo = 0x7fcf8
USERENV(268.26c) 14:45:58:916 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(268.26c) 14:45:58:926 LoadUserProfile: lpProfileInfo->lpUserName = <LocalService>
USERENV(268.26c) 14:45:58:936 LoadUserProfile: NULL central profile path
USERENV(268.26c) 14:45:58:936 LoadUserProfile: NULL default profile path
USERENV(268.26c) 14:45:58:936 LoadUserProfile: NULL server name
USERENV(268.26c) 14:45:58:946 GetInterface: Returning rpc binding handle
USERENV(23c.364) 14:45:58:946 IProfileSecurityCallBack: client authenticated.
USERENV(23c.364) 14:45:58:956 DropClientContext: Got client token 000005F4, sid = S-1-5-18
USERENV(23c.364) 14:45:58:956 MIDL_user_allocate enter
USERENV(23c.364) 14:45:58:956 DropClientContext: load profile object successfully made
USERENV(23c.364) 14:45:58:966 DropClientContext: Returning 0
USERENV(268.26c) 14:45:58:966 LoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(23c.254) 14:45:58:976 IProfileSecurityCallBack: client authenticated.
USERENV(23c.254) 14:45:58:976 In LoadUserProfileP
USERENV(23c.254) 14:45:58:986 LoadUserProfile: Running as client
USERENV(23c.254) 14:45:58:986 =========================================================
USERENV(23c.254) 14:45:58:986 LoadUserProfile: Entering, hToken = <0x5fc>, lpProfileInfo = 0xe179a8
USERENV(23c.254) 14:45:58:996 LoadUserProfile: lpProfileInfo->dwFlags = <0x9>
USERENV(23c.254) 14:45:58:996 LoadUserProfile: lpProfileInfo->lpUserName = <LocalService>
USERENV(23c.254) 14:45:58:996 LoadUserProfile: NULL central profile path
USERENV(23c.254) 14:45:59:006 LoadUserProfile: NULL default profile path
USERENV(23c.254) 14:45:59:006 LoadUserProfile: NULL server name
USERENV(23c.254) 14:45:59:016 LoadUserProfile: User sid: S-1-5-19
USERENV(23c.254) 14:45:59:016 CSyncManager::EnterLock <S-1-5-19>
USERENV(23c.254) 14:45:59:016 CSyncManager::EnterLock: No existing entry found
USERENV(23c.254) 14:45:59:026 CSyncManager::EnterLock: New entry created
USERENV(23c.254) 14:45:59:026 CHashTable::HashAdd: S-1-5-19 added in bucket 12
USERENV(23c.254) 14:45:59:026 LoadUserProfile: Wait succeeded. In critical section.
USERENV(23c.254) 14:45:59:036 RestoreUserProfile: Entering
USERENV(23c.254) 14:45:59:036 IsCentralProfileReachable: Entering
USERENV(23c.254) 14:45:59:036 IsCentralProfileReachable: Null path. Leaving
USERENV(23c.254) 14:45:59:046 RestoreUserProfile: Profile path = <>
USERENV(23c.254) 14:45:59:046 ExtractProfileFromBackup: A profile already exists
USERENV(23c.254) 14:45:59:046 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(23c.254) 14:45:59:056 CreateLocalProfileKey: Not setting additional Security
USERENV(23c.254) 14:45:59:056 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(23c.254) 14:45:59:066 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\LocalService>
USERENV(23c.254) 14:45:59:066 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\LocalService>
USERENV(23c.254) 14:45:59:066 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(23c.254) 14:45:59:066 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\LocalService\ntuser.dat>
USERENV(23c.254) 14:45:59:066 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
USERENV(23c.254) 14:45:59:066 Local Existing Profile Image is reachable
USERENV(23c.254) 14:45:59:066 Local profile name is <C:\Documents and Settings\LocalService>
USERENV(23c.254) 14:45:59:076 RestoreUserProfile: No central profile. Attempting to load local profile.
USERENV(23c.254) 14:45:59:086 MyRegLoadKey: Returning 00000000
USERENV(23c.254) 14:45:59:086 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(23c.254) 14:45:59:086 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.254) 14:45:59:096 MyRegLoadKey: Returning 00000000
USERENV(23c.254) 14:45:59:096 CreateClassHive: existing user classes hive found
USERENV(23c.254) 14:45:59:096 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(23c.254) 14:45:59:096 Profile was successfully loaded.
USERENV(23c.254) 14:45:59:096 lpProfile->lpRoamingProfile = <>
USERENV(23c.254) 14:45:59:106 lpProfile->lpLocalProfile = <C:\Documents and Settings\LocalService>
USERENV(23c.254) 14:45:59:106 lpProfile->dwInternalFlags = 0x0
USERENV(23c.254) 14:45:59:106 RestoreUserProfile: Leaving.
USERENV(23c.254) 14:45:59:106 UpgradeProfile: Entering
USERENV(23c.254) 14:45:59:106 UpgradeProfile: Build numbers match
USERENV(23c.254) 14:45:59:106 UpgradeProfile: Leaving Successfully
USERENV(23c.254) 14:45:59:136 Profile Ref Count is 1
USERENV(23c.254) 14:45:59:136 LoadUserProfile: Leaving critical Section.
USERENV(23c.254) 14:45:59:136 CSyncManager::LeaveLock <S-1-5-19>
USERENV(23c.254) 14:45:59:136 CSyncManager::LeaveLock: Lock released
USERENV(23c.254) 14:45:59:146 CHashTable::HashDelete: S-1-5-19 deleted
USERENV(23c.254) 14:45:59:146 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.254) 14:45:59:146 LoadUserProfile: Impersonated user: 000005fc, 00000604
USERENV(274.2d4) 14:45:59:146 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(274.2d4) 14:45:59:146 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:45:59:146 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(274.2d4) 14:45:59:156 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.254) 14:45:59:176 LoadUserProfile: Reverted to user: 00000000
USERENV(23c.254) 14:45:59:176 LoadUserProfile: Reverted back to user <00000000>
USERENV(23c.254) 14:45:59:176 LoadUserProfile: Leaving with a value of 1.
USERENV(23c.254) 14:45:59:176 =========================================================
USERENV(23c.254) 14:45:59:186 LoadUserProfileI: returning 0
USERENV(268.26c) 14:45:59:186 LoadUserProfile: Running as self
USERENV(268.26c) 14:45:59:186 LoadUserProfile: Calling LoadUserProfileI (as user) succeeded
USERENV(268.26c) 14:45:59:186 LoadUserProfile: Returning success. Final Information follows:
USERENV(268.26c) 14:45:59:186 lpProfileInfo->UserName = <LocalService>
USERENV(268.26c) 14:45:59:186 lpProfileInfo->lpProfilePath = <>
USERENV(268.26c) 14:45:59:186 lpProfileInfo->dwFlags = 0x9
USERENV(23c.364) 14:45:59:196 IProfileSecurityCallBack: client authenticated.
USERENV(23c.364) 14:45:59:196 ReleaseClientContext: Releasing context
USERENV(23c.364) 14:45:59:196 ReleaseClientContext_s: Releasing context
USERENV(23c.364) 14:45:59:196 MIDL_user_free enter
USERENV(268.26c) 14:45:59:196 ReleaseInterface: Releasing rpc binding handle
USERENV(268.26c) 14:45:59:196 LoadUserProfile: Returning TRUE. hProfile = <0x3a0>
USERENV(268.26c) 14:45:59:196 GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name available.
USERENV(268.26c) 14:45:59:206 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(4e0.4e4) 14:45:59:226 LibMain: Process Name: C:\WINDOWS\system32\svchost.exe
USERENV(554.55c) 14:46:00:038 LibMain: Process Name: C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
USERENV(554.55c) 14:46:00:038 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(560.584) 14:46:00:779 LibMain: Process Name: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
USERENV(560.584) 14:46:00:789 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(60c.610) 14:46:01:079 LibMain: Process Name: C:\WINDOWS\system32\spoolsv.exe
USERENV(630.634) 14:46:01:430 LibMain: Process Name: C:\WINDOWS\system32\acs.exe
USERENV(23c.670) 14:46:01:760 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(680.684) 14:46:01:910 LibMain: Process Name: C:\WINDOWS\system32\mpnotify.exe
USERENV(23c.240) 14:46:01:990 LoadUserProfile: Yes, we can impersonate the user. Running as self
USERENV(23c.240) 14:46:01:990 =========================================================
USERENV(23c.240) 14:46:01:990 LoadUserProfile: Entering, hToken = <0x704>, lpProfileInfo = 0x6e3e0
USERENV(23c.240) 14:46:01:990 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(23c.240) 14:46:02:000 LoadUserProfile: lpProfileInfo->lpUserName = <NickG>
USERENV(23c.240) 14:46:02:000 LoadUserProfile: NULL central profile path
USERENV(23c.240) 14:46:02:021 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\SERVER\netlogon\Default User>
USERENV(23c.240) 14:46:02:021 LoadUserProfile: NULL server name
USERENV(23c.240) 14:46:02:021 LoadUserProfile: In console winlogon process
USERENV(23c.240) 14:46:02:021 In LoadUserProfileP
USERENV(23c.240) 14:46:02:031 =========================================================
USERENV(23c.240) 14:46:02:031 LoadUserProfile: Entering, hToken = <0x704>, lpProfileInfo = 0x6e3e0
USERENV(23c.240) 14:46:02:031 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(23c.240) 14:46:02:031 LoadUserProfile: lpProfileInfo->lpUserName = <NickG>
USERENV(23c.240) 14:46:02:041 LoadUserProfile: NULL central profile path
USERENV(23c.240) 14:46:02:041 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\SERVER\netlogon\Default User>
USERENV(23c.240) 14:46:02:041 LoadUserProfile: NULL server name
USERENV(23c.240) 14:46:02:051 LoadUserProfile: User sid: S-1-5-21-2141665459-1023760628-433219294-2381
USERENV(23c.240) 14:46:02:051 CSyncManager::EnterLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:46:02:051 CSyncManager::EnterLock: No existing entry found
USERENV(23c.240) 14:46:02:051 CSyncManager::EnterLock: New entry created
USERENV(23c.240) 14:46:02:061 CHashTable::HashAdd: S-1-5-21-2141665459-1023760628-433219294-2381 added in bucket 12
USERENV(23c.240) 14:46:02:061 LoadUserProfile: Wait succeeded. In critical section.
USERENV(23c.240) 14:46:02:061 RestoreUserProfile: Entering
USERENV(23c.240) 14:46:02:061 RestoreUserProfile: User is a Admin
USERENV(23c.240) 14:46:02:071 IsCentralProfileReachable: Entering
USERENV(23c.240) 14:46:02:071 IsCentralProfileReachable: Null path. Leaving
USERENV(23c.240) 14:46:02:071 RestoreUserProfile: Profile path = <>
USERENV(23c.240) 14:46:02:071 ExtractProfileFromBackup: A profile already exists
USERENV(23c.240) 14:46:02:081 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(23c.240) 14:46:02:081 CreateLocalProfileKey: Not setting additional Security
USERENV(23c.240) 14:46:02:081 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(23c.240) 14:46:02:081 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\NickG>
USERENV(23c.240) 14:46:02:091 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\NickG>
USERENV(23c.240) 14:46:02:111 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(23c.240) 14:46:02:111 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\NickG\ntuser.dat>
USERENV(23c.240) 14:46:02:121 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
USERENV(23c.240) 14:46:02:121 Local Existing Profile Image is reachable
USERENV(23c.240) 14:46:02:121 Local profile name is <C:\Documents and Settings\NickG>
USERENV(23c.240) 14:46:02:121 RestoreUserProfile: No central profile. Attempting to load local profile.
USERENV(23c.240) 14:46:02:421 MyRegLoadKey: Returning 00000000
USERENV(23c.240) 14:46:02:431 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.240) 14:46:02:591 MyRegLoadKey: Returning 00000000
USERENV(23c.240) 14:46:02:591 CreateClassHive: existing user classes hive found
USERENV(23c.240) 14:46:02:591 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(23c.240) 14:46:02:591 Profile was successfully loaded.
USERENV(23c.240) 14:46:02:601 lpProfile->lpRoamingProfile = <>
USERENV(23c.240) 14:46:02:601 lpProfile->lpLocalProfile = <C:\Documents and Settings\NickG>
USERENV(23c.240) 14:46:02:601 lpProfile->dwInternalFlags = 0x100
USERENV(23c.240) 14:46:02:601 RestoreUserProfile: Leaving.
USERENV(23c.240) 14:46:02:601 UpgradeProfile: Entering
USERENV(23c.240) 14:46:02:601 UpgradeProfile: Build numbers match
USERENV(23c.240) 14:46:02:611 UpgradeProfile: Leaving Successfully
USERENV(23c.240) 14:46:02:762 Profile Ref Count is 1
USERENV(23c.240) 14:46:02:762 LoadUserProfile: Leaving critical Section.
USERENV(23c.240) 14:46:02:762 CSyncManager::LeaveLock <S-1-5-21-2141665459-1023760628-433219294-2381>
USERENV(23c.240) 14:46:02:762 CSyncManager::LeaveLock: Lock released
USERENV(23c.240) 14:46:02:762 CHashTable::HashDelete: S-1-5-21-2141665459-1023760628-433219294-2381 deleted
USERENV(23c.240) 14:46:02:762 CSyncManager::LeaveLock: Lock deleted
USERENV(23c.240) 14:46:02:762 LoadUserProfile: Impersonated user: 00000704, 00000000
USERENV(274.2d4) 14:46:02:772 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:46:02:772 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:46:02:862 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:862 GetUserNameAndDomain Failed to impersonate user
USERENV(274.2d4) 14:46:02:862 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:872 GetUserDNSDomainName: Failed to impersonate user
USERENV(274.2d4) 14:46:02:872 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:46:02:902 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:902 GetUserNameAndDomain Failed to impersonate user
USERENV(274.2d4) 14:46:02:902 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:902 GetUserDNSDomainName: Failed to impersonate user
USERENV(274.2d4) 14:46:02:902 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:46:02:942 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(274.2d4) 14:46:02:942 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:952 GetUserNameAndDomain Failed to impersonate user
USERENV(274.2d4) 14:46:02:952 ImpersonateUser: Failed to impersonate user with 5.
USERENV(274.2d4) 14:46:02:962 GetUserDNSDomainName: Failed to impersonate user
USERENV(274.2d4) 14:46:02:962 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.240) 14:46:02:982 LoadUserProfile: Reverted to user: 00000000
USERENV(23c.240) 14:46:02:982 LoadUserProfile: Leaving with a value of 1.
USERENV(23c.240) 14:46:02:992 =========================================================
USERENV(23c.240) 14:46:02:992 LoadUserProfile: LoadUserProfileP succeeded
USERENV(23c.240) 14:46:02:992 LoadUserProfile: Returning success. Final Information follows:
USERENV(23c.240) 14:46:03:002 lpProfileInfo->UserName = <NickG>
USERENV(23c.240) 14:46:03:002 lpProfileInfo->lpProfilePath = <>
USERENV(23c.240) 14:46:03:002 lpProfileInfo->dwFlags = 0x0
USERENV(23c.240) 14:46:03:012 LoadUserProfile: Returning TRUE. hProfile = <0x134>
USERENV(23c.240) 14:46:03:022 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(23c.240) 14:46:03:312 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(23c.694) 14:46:03:312 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(23c.240) 14:47:33:833 IsSyncForegroundPolicyRefresh: Asynchronous, Reason: NoNeedForSync
USERENV(394.398) 14:47:34:564 LibMain: Process Name: C:\WINDOWS\system32\Ati2evxx.exe
USERENV(3b4.3b8) 14:47:34:604 LibMain: Process Name: C:\WINDOWS\system32\userinit.exe
USERENV(3b4.3b8) 14:47:34:714 CheckXForestLogon: checking x-forest logon, user handle = 132
USERENV(3b4.3b8) 14:47:34:724 CheckUserInMachineForest: Failed to enumerate forest domains with 1717.
USERENV(3b4.3b8) 14:47:34:734 CheckXForestLogon : CheckUserInMachineForest failed with 1717
USERENV(3e8.404) 14:47:34:844 LibMain: Process Name: C:\WINDOWS\Explorer.EXE
USERENV(3e8.448) 14:47:35:585 GetProfileType: Profile already loaded.
USERENV(3e8.448) 14:47:35:585 GetProfileType: ProfileFlags is 0
USERENV(4bc.4c0) 14:47:37:438 LibMain: Process Name: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
USERENV(4bc.4c0) 14:47:37:458 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(540.544) 14:47:38:369 LibMain: Process Name: C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
USERENV(69c.6a4) 14:47:39:330 LibMain: Process Name: C:\WINDOWS\system32\mobsync.exe
USERENV(6a0.714) 14:47:39:921 LibMain: Process Name: C:\Program Files\Hewlett-Packard\HP Mobile Printing\HPBMOBIL.EXE
USERENV(6a0.714) 14:47:39:921 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(6a0.714) 14:47:40:031 ImpersonateUser: Failed to impersonate user with 5.
USERENV(6a0.714) 14:47:40:051 GetUserNameAndDomain Failed to impersonate user
USERENV(6a0.714) 14:47:40:061 ImpersonateUser: Failed to impersonate user with 5.
USERENV(6a0.714) 14:47:40:061 GetUserDNSDomainName: Failed to impersonate user
USERENV(6a0.714) 14:47:40:072 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(6a0.714) 14:47:40:082 ImpersonateUser: Failed to impersonate user with 5.
USERENV(6a0.714) 14:47:40:132 GetUserNameAndDomain Failed to impersonate user
USERENV(6a0.714) 14:47:40:142 ImpersonateUser: Failed to impersonate user with 5.
USERENV(6a0.714) 14:47:40:142 GetUserDNSDomainName: Failed to impersonate user
USERENV(6a0.714) 14:47:40:152 ProcessAutoexec: Cannot process autoexec.bat.
USERENV(790.794) 14:47:44:949 LibMain: Process Name: C:\WINDOWS\explorer.exe
USERENV(7e8.7ec) 14:47:59:349 LibMain: Process Name: C:\WINDOWS\system32\NOTEPAD.EXE
Iemand enig idee waarom het inloggen zo traag gaat??
grtz,
Nick