I'm not sure if this will help. It's the output of
C:\WINDOWS\Debug\UserMode\userenv.log. I cleared the file and then
logged out and logged back in.
USERENV(424.598) 14:19:32:636 UnloadUserProfile: Entering, hProfile =
<0x16f4>
USERENV(424.598) 14:19:32:636 GetInterface: Returning rpc binding handle
USERENV(28c.aa0) 14:19:32:652 IProfileSecurityCallBack: client
authenticated.
USERENV(28c.aa0) 14:19:32:652 DropClientContext: Got client token
00000964, sid = S-1-5-18
USERENV(28c.aa0) 14:19:32:652 MIDL_user_allocate enter
USERENV(28c.aa0) 14:19:32:652 DropClientContext: load profile object
successfully made
USERENV(28c.aa0) 14:19:32:652 DropClientContext: Returning 0
USERENV(424.598) 14:19:32:652 UnLoadUserProfile: Calling DropClientToken
(as self) succeeded
USERENV(28c.2a4) 14:19:32:652 IProfileSecurityCallBack: client
authenticated.
USERENV(28c.2a4) 14:19:32:669 UnloadUserProfileP: Entering, hProfile =
<0x950>
USERENV(28c.2a4) 14:19:32:669 UnloadUserProfileP: ImpersonateUser
<00000964>, old token is <00000000>
USERENV(28c.2a4) 14:19:32:685 GetExclusionListFromRegistry: Policy list
is empty, returning user list = <Local Settings;Temporary Internet
Files;History;Temp;Local Settings\Application Data\Microsoft\Outlook>
USERENV(28c.2a4) 14:19:32:685 CSyncManager::EnterLock
<S-1-5-21-1078081533-1004336348-725345543-500>
USERENV(28c.2a4) 14:19:32:685 CSyncManager::EnterLock: No existing entry
found
USERENV(28c.2a4) 14:19:32:685 CSyncManager::EnterLock: New entry created
USERENV(28c.2a4) 14:19:32:685 CHashTable::HashAdd:
S-1-5-21-1078081533-1004336348-725345543-500 added in bucket 15
USERENV(28c.2a4) 14:19:32:685 UnloadUserProfileP: Wait succeeded. In
critical section.
USERENV(28c.2a4) 14:19:32:945 MyRegUnloadKey: user hive is already
scheduled for unloading
USERENV(28c.2a4) 14:19:32:945 MyRegUnLoadKey: Returning 0.
USERENV(28c.2a4) 14:19:32:945 UnloadUserProfileP: Didn't unload user
profile <err = 19>
USERENV(28c.2a4) 14:19:32:962 MyRegUnloadKey: user hive is already
scheduled for unloading
USERENV(28c.2a4) 14:19:32:962 MyRegUnLoadKey: Returning 0.
USERENV(28c.2a4) 14:19:32:962 UnLoadClassHive: failed to unload classes
key with 13
USERENV(28c.2a4) 14:19:32:962 UnloadUserProfileP: Didn't unload user
classes.
USERENV(28c.2a4) 14:19:34:263 HandleRegKeyLeak: RegSaveKey succeeded!
USERENV(28c.2a4) 14:19:34:263 HandleRegKeyLeak: hkCurrentUser closed
USERENV(28c.2a4) 14:19:34:279 UnloadUserProfileP: Impersonated user
USERENV(28c.2a4) 14:19:34:279 UnloadUserProfileP: Writing local ini file
USERENV(28c.2a4) 14:19:34:296 UnloadUserProfileP: Reverting to Self
USERENV(28c.2a4) 14:19:34:296 UnloadUserProfileP: exitting and cleaning up
USERENV(28c.2a4) 14:19:34:296 UnloadUserProfileP: Reverted back to user
<00000000>
USERENV(28c.2a4) 14:19:34:296 CSyncManager::LeaveLock
<S-1-5-21-1078081533-1004336348-725345543-500>
USERENV(28c.2a4) 14:19:34:296 CSyncManager::LeaveLock: Lock released
USERENV(28c.2a4) 14:19:34:296 CHashTable::HashDelete:
S-1-5-21-1078081533-1004336348-725345543-500 deleted
USERENV(28c.2a4) 14:19:34:296 CSyncManager::LeaveLock: Lock deleted
USERENV(28c.2a4) 14:19:34:312 UnloadUserProfileP: Leave critical section.
USERENV(28c.2a4) 14:19:34:312 UnloadUserProfileP: Leaving with a return
value of 1
USERENV(28c.2a4) 14:19:34:312 UnloadUserProfileI: returning 0
USERENV(424.598) 14:19:34:312 UnloadUserProfile: Calling
UnloadUserProfileI succeeded
USERENV(28c.3c4) 14:19:34:312 IProfileSecurityCallBack: client
authenticated.
USERENV(28c.3c4) 14:19:34:312 ReleaseClientContext: Releasing context
USERENV(28c.3c4) 14:19:34:312 ReleaseClientContext_s: Releasing context
USERENV(28c.3c4) 14:19:34:312 MIDL_user_free enter
USERENV(424.598) 14:19:34:328 ReleaseInterface: Releasing rpc binding handle
USERENV(424.598) 14:19:34:328 UnloadUserProfile: returning 1
USERENV(b20.aa4) 14:19:36:362 LibMain: Process Name: C:\Program
Files\Hummingbird\Connectivity\10.00\NFS Maestro\HumGSS.exe
USERENV(b20.aa4) 14:19:36:378 LibMain: Process Name: C:\Program
Files\Hummingbird\Connectivity\10.00\NFS Maestro\HumGSS.exe
USERENV(b20.aa4) 14:19:36:394 LibMain: Process Name: C:\Program
Files\Hummingbird\Connectivity\10.00\NFS Maestro\HumGSS.exe
USERENV(b20.aa4) 14:19:36:411 LibMain: Process Name: C:\Program
Files\Hummingbird\Connectivity\10.00\NFS Maestro\HumGSS.exe
USERENV(28c.290) 14:19:42:935 UnloadUserProfile: Entering, hProfile =
<0x76c>
USERENV(28c.290) 14:19:42:935 UnloadUserProfile: In console winlogon process
USERENV(28c.290) 14:19:42:935 UnloadUserProfileP: Entering, hProfile =
<0x76c>
USERENV(28c.290) 14:19:42:935 AbleToBypassCSC: Try to bypass CSC
USERENV(28c.290) 14:19:42:951 AbleToBypassCSC: tried
NPAddConnection3ForCSCAgent. Error 85
USERENV(28c.290) 14:19:42:951 AbleToBypassCSC: tried
NPAddConnection3ForCSCAgent. Error 2109
USERENV(28c.290) 14:19:42:951 AbleToBypassCSC: Share \\isis\dave mapped
to drive F. Returned Path F:\profile
USERENV(28c.290) 14:19:42:951 UnLoadUserProfileP: CSC bypassed.
USERENV(28c.290) 14:19:42:951 GetExclusionListFromRegistry: Policy list
is empty, returning user list = <Local Settings;Temporary Internet
Files;History;Temp>
USERENV(28c.290) 14:19:42:951 CSyncManager::EnterLock
<S-1-5-21-1423522002-514043473-3775106752-2200>
USERENV(28c.290) 14:19:42:951 CSyncManager::EnterLock: No existing entry
found
USERENV(28c.290) 14:19:42:951 CSyncManager::EnterLock: New entry created
USERENV(28c.290) 14:19:42:951 CHashTable::HashAdd:
S-1-5-21-1423522002-514043473-3775106752-2200 added in bucket 5
USERENV(28c.290) 14:19:42:967 UnloadUserProfileP: Wait succeeded. In
critical section.
USERENV(28c.290) 14:19:43:732 UnloadUserProfileP: Didn't unload user
profile, Ref Count is 1
USERENV(28c.290) 14:19:43:748 CSyncManager::LeaveLock
<S-1-5-21-1423522002-514043473-3775106752-2200>
USERENV(28c.290) 14:19:43:748 CSyncManager::LeaveLock: Lock released
USERENV(28c.290) 14:19:43:748 CHashTable::HashDelete:
S-1-5-21-1423522002-514043473-3775106752-2200 deleted
USERENV(28c.290) 14:19:43:748 CSyncManager::LeaveLock: Lock deleted
USERENV(28c.290) 14:19:43:748 UnloadUserProfileP: Leave critical section.
USERENV(28c.290) 14:19:43:748 CancelCSCBypassedConnection: Cancelling
connection of F:
USERENV(28c.290) 14:19:43:748 CancelCSCBypassedConnection: Connection
deleted.
USERENV(28c.290) 14:19:43:748 UnloadUserProfileP: Leaving with a return
value of 1
USERENV(28c.290) 14:19:43:748 UnloadUserProfile: UnloadUserProfileP
succeeded
USERENV(28c.290) 14:19:43:765 UnloadUserProfile: returning 1
USERENV(28c.cac) 14:19:52:339 SetFgRefreshInfo: Next User Fg policy
Synchronous, Reason: NonCachedCredentials.
USERENV(bd0.380) 14:19:52:534 LibMain: Process Name:
C:\WINDOWS\system32\mpnotify.exe
USERENV(28c.290) 14:19:52:811 LoadUserProfile: Yes, we can impersonate
the user. Running as self
USERENV(28c.290) 14:19:52:811
=========================================================
USERENV(28c.290) 14:19:52:811 LoadUserProfile: Entering, hToken =
<0x86c>, lpProfileInfo = 0x6e3e0
USERENV(28c.290) 14:19:52:811 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(28c.290) 14:19:52:811 LoadUserProfile: lpProfileInfo->lpUserName
= <dave>
USERENV(28c.290) 14:19:52:811 LoadUserProfile:
lpProfileInfo->lpProfilePath = <\\isis\dave\profile>
USERENV(28c.290) 14:19:52:811 LoadUserProfile:
lpProfileInfo->lpDefaultPath = <\\ISIS\netlogon\Default User>
USERENV(28c.290) 14:19:52:827 LoadUserProfile: NULL server name
USERENV(28c.290) 14:19:52:827 LoadUserProfile: In console winlogon process
USERENV(28c.290) 14:19:52:827 In LoadUserProfileP
USERENV(28c.290) 14:19:52:827
=========================================================
USERENV(28c.290) 14:19:52:827 LoadUserProfile: Entering, hToken =
<0x86c>, lpProfileInfo = 0x6e3e0
USERENV(28c.290) 14:19:52:827 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(28c.290) 14:19:52:827 LoadUserProfile: lpProfileInfo->lpUserName
= <dave>
USERENV(28c.290) 14:19:52:827 LoadUserProfile:
lpProfileInfo->lpProfilePath = <\\isis\dave\profile>
USERENV(28c.290) 14:19:52:827 LoadUserProfile:
lpProfileInfo->lpDefaultPath = <\\ISIS\netlogon\Default User>
USERENV(28c.290) 14:19:52:843 LoadUserProfile: NULL server name
USERENV(28c.290) 14:19:52:843 LoadUserProfile: User sid:
S-1-5-21-1423522002-514043473-3775106752-2200
USERENV(28c.290) 14:19:52:843 CSyncManager::EnterLock
<S-1-5-21-1423522002-514043473-3775106752-2200>
USERENV(28c.290) 14:19:52:843 CSyncManager::EnterLock: No existing entry
found
USERENV(28c.290) 14:19:52:843 CSyncManager::EnterLock: New entry created
USERENV(28c.290) 14:19:52:843 CHashTable::HashAdd:
S-1-5-21-1423522002-514043473-3775106752-2200 added in bucket 5
USERENV(28c.290) 14:19:52:843 LoadUserProfile: Wait succeeded. In
critical section.
USERENV(28c.290) 14:19:52:843 TestIfUserProfileLoaded: Profile already
loaded.
USERENV(28c.290) 14:19:52:843 Profile Ref Count is 2
USERENV(28c.290) 14:19:52:859 LoadUserProfile: Leaving critical Section.
USERENV(28c.290) 14:19:52:859 CSyncManager::LeaveLock
<S-1-5-21-1423522002-514043473-3775106752-2200>
USERENV(28c.290) 14:19:52:859 CSyncManager::LeaveLock: Lock released
USERENV(28c.290) 14:19:52:859 CHashTable::HashDelete:
S-1-5-21-1423522002-514043473-3775106752-2200 deleted
USERENV(28c.290) 14:19:52:859 CSyncManager::LeaveLock: Lock deleted
USERENV(28c.290) 14:19:52:859 LoadUserProfile: Impersonated user:
0000086c, 00000000
USERENV(28c.290) 14:19:52:859 LoadUserProfile: Reverted to user: 00000000
USERENV(28c.290) 14:19:52:859 LoadUserProfile: Leaving with a value of 1.
USERENV(28c.290) 14:19:52:876
=========================================================
USERENV(28c.290) 14:19:52:876 LoadUserProfile: LoadUserProfileP succeeded
USERENV(28c.290) 14:19:52:876 LoadUserProfile: Returning success.
Final Information follows:
USERENV(28c.290) 14:19:52:876 lpProfileInfo->UserName = <dave>
USERENV(28c.290) 14:19:52:876 lpProfileInfo->lpProfilePath =
<\\isis\dave\profile>
USERENV(28c.290) 14:19:52:876 lpProfileInfo->dwFlags = 0x0
USERENV(28c.290) 14:19:52:876 LoadUserProfile: Returning TRUE. hProfile
= <0x8d0>
USERENV(28c.290) 14:19:52:876 ApplySystemPolicy: Entering
USERENV(28c.290) 14:19:52:876 ApplySystemPolicy: PolicyPath is:
<\\ISIS\netlogon\ntconfig.pol>.
USERENV(28c.290) 14:19:52:925 ApplySystemPolicy: No policy file.
USERENV(28c.290) 14:19:52:925 GetUserDNSDomainName: MyGetUserNameEx
failed for NameDnsDomain style name with 1332
USERENV(28c.290) 14:19:53:006 IsSyncForegroundPolicyRefresh:
Synchronous, Reason: NonCachedCredentials
USERENV(28c.644) 14:19:53:006 IsSyncForegroundPolicyRefresh:
Synchronous, Reason: NonCachedCredentials
USERENV(28c.644) 14:19:53:006 ApplyGroupPolicy: Entering. Flags = 2
USERENV(28c.644) 14:19:53:006 ProcessGPOs:
USERENV(28c.644) 14:19:53:006 ProcessGPOs:
USERENV(28c.644) 14:19:53:022 ProcessGPOs: Starting user Group Policy
(Background) processing...
USERENV(28c.644) 14:19:53:022 ProcessGPOs:
USERENV(28c.644) 14:19:53:022 ProcessGPOs:
USERENV(28c.644) 14:19:53:022 EnterCriticalPolicySectionEx: Entering
with timeout 600000 and flags 0x0
USERENV(28c.644) 14:19:53:022 EnterCriticalPolicySectionEx: User
critical section has been claimed. Handle = 0x7a4
USERENV(28c.644) 14:19:53:022 EnterCriticalPolicySectionEx: Leaving
successfully.
USERENV(28c.644) 14:19:53:022 ProcessGPOs: Machine role is 1.
USERENV(28c.644) 14:19:53:022 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(28c.644) 14:19:53:022 ReadGPExtensions: Rsop entry point not
found for dskquota.dll.
USERENV(28c.644) 14:19:53:038 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(28c.644) 14:19:53:038 ReadGPExtensions: Rsop entry point not
found for iedkcs32.dll.
USERENV(28c.644) 14:19:53:038 ReadGPExtensions: Rsop entry point not
found for scecli.dll.
USERENV(28c.644) 14:19:53:038 ReadGPExtensions: Rsop entry point not
found for C:\WINDOWS\System32\cscui.dll.
USERENV(28c.644) 14:19:53:038 ReadGPExtensions: Rsop entry point not
found for gptext.dll.
USERENV(28c.644) 14:19:53:038 ReadExtStatus: Reading Previous Status for
extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
USERENV(28c.644) 14:19:53:038 ReadExtStatus: Reading Previous Status for
extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
USERENV(28c.644) 14:19:53:038 ReadExtStatus: Reading Previous Status for
extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
USERENV(28c.644) 14:19:53:038 ReadExtStatus: Reading Previous Status for
extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
USERENV(28c.644) 14:19:53:038 ReadExtStatus: Reading Previous Status for
extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
USERENV(28c.644) 14:19:53:038 ReadExtStatus: Reading Previous Status for
extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
USERENV(28c.644) 14:19:53:038 ReadExtStatus: Reading Previous Status for
extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
USERENV(28c.644) 14:19:53:038 ReadExtStatus: Reading Previous Status for
extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(28c.644) 14:19:53:038 ReadExtStatus: Reading Previous Status for
extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
USERENV(28c.644) 14:19:53:038 ReadExtStatus: Reading Previous Status for
extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
USERENV(28c.644) 14:19:53:055 ReadExtStatus: Reading Previous Status for
extension {C631DF4C-088F-4156-B058-4375F0853CD8}
USERENV(28c.644) 14:19:53:055 ReadExtStatus: Reading Previous Status for
extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
USERENV(28c.644) 14:19:53:055 ReadExtStatus: Reading Previous Status for
extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
USERENV(28c.644) 14:19:53:055 ProcessGPOs: No site name defined.
Skipping site policy.
USERENV(28c.644) 14:19:53:055 ProcessGPOs: Calling GetGPOInfo for normal
policy mode
USERENV(28c.644) 14:19:53:055 GetGPOInfo: ********************************
USERENV(28c.644) 14:19:53:055 GetGPOInfo: Entering...
USERENV(28c.644) 14:19:53:055 GetGPOInfo: lpHostName or lpDNName is
NULL. Skipping DS stuff.
USERENV(28c.644) 14:19:53:055 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(28c.644) 14:19:53:055 GetGPOInfo: Leaving with 1
USERENV(28c.644) 14:19:53:055 GetGPOInfo: ********************************
USERENV(28c.644) 14:19:53:055 ProcessGPOs: Logging Data for Target <dave>.
USERENV(28c.644) 14:19:53:055 ProcessGPOs: OpenThreadToken failed with
error 1008, assuming thread is not impersonating
USERENV(28c.644) 14:19:53:055 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:055 ProcessGPOs: Processing extension Registry
USERENV(28c.644) 14:19:53:055 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:071 CheckGPOs: No GPO changes but couldn't
read extension Registry's status or policy time.
USERENV(28c.644) 14:19:53:071 ProcessGPOs: Extension Registry skipped
because both deleted and changed GPO lists are empty.
USERENV(28c.644) 14:19:53:071 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:071 ProcessGPOs: Processing extension Wireless
USERENV(28c.644) 14:19:53:071 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:071 CheckGPOs: No GPO changes but couldn't
read extension Wireless's status or policy time.
USERENV(28c.644) 14:19:53:071 ProcessGPOs: Extension Wireless skipped
with flags 0x2.
USERENV(28c.644) 14:19:53:071 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:071 ProcessGPOs: Processing extension Folder
Redirection
USERENV(28c.644) 14:19:53:087 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:087 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:087 CheckGPOs: No GPO changes but couldn't
read extension Folder Redirection's status or policy time.
USERENV(28c.644) 14:19:53:087 ProcessGPOs: Extension Folder Redirection
skipped because both deleted and changed GPO lists are empty.
USERENV(28c.644) 14:19:53:087 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:087 ProcessGPOs: Processing extension
Microsoft Disk Quota
USERENV(28c.644) 14:19:53:087 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:087 CheckGPOs: No GPO changes but couldn't
read extension Microsoft Disk Quota's status or policy time.
USERENV(28c.644) 14:19:53:087 ProcessGPOs: Extension Microsoft Disk
Quota skipped with flags 0x2.
USERENV(28c.644) 14:19:53:104 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:104 ProcessGPOs: Processing extension QoS
Packet Scheduler
USERENV(28c.644) 14:19:53:104 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:104 CheckGPOs: No GPO changes but couldn't
read extension QoS Packet Scheduler's status or policy time.
USERENV(28c.644) 14:19:53:104 ProcessGPOs: Extension QoS Packet
Scheduler skipped with flags 0x2.
USERENV(28c.644) 14:19:53:104 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:104 ProcessGPOs: Processing extension Scripts
USERENV(28c.644) 14:19:53:104 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:104 CheckGPOs: No GPO changes but couldn't
read extension Scripts's status or policy time.
USERENV(28c.644) 14:19:53:120 ProcessGPOs: Extension Scripts skipped
because both deleted and changed GPO lists are empty.
USERENV(28c.644) 14:19:53:120 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:120 ProcessGPOs: Processing extension Internet
Explorer Zonemapping
USERENV(28c.644) 14:19:53:120 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:120 CheckGPOs: No GPO changes but couldn't
read extension Internet Explorer Zonemapping's status or policy time.
USERENV(28c.644) 14:19:53:120 ProcessGPOs: Extension Internet Explorer
Zonemapping skipped because both deleted and changed GPO lists are empty.
USERENV(28c.644) 14:19:53:120 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:120 ProcessGPOs: Processing extension Security
USERENV(28c.644) 14:19:53:120 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:136 CheckGPOs: No GPO changes but couldn't
read extension Security's status or policy time.
USERENV(28c.644) 14:19:53:136 ProcessGPOs: Extension Security skipped
with flags 0x2.
USERENV(28c.644) 14:19:53:136 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:136 ProcessGPOs: Processing extension Internet
Explorer Branding
USERENV(28c.644) 14:19:53:136 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:136 CheckGPOs: No GPO changes but couldn't
read extension Internet Explorer Branding's status or policy time.
USERENV(28c.644) 14:19:53:136 ProcessGPOs: Extension Internet Explorer
Branding skipped because both deleted and changed GPO lists are empty.
USERENV(28c.644) 14:19:53:136 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:136 ProcessGPOs: Processing extension EFS recovery
USERENV(28c.644) 14:19:53:152 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:152 CheckGPOs: No GPO changes but couldn't
read extension EFS recovery's status or policy time.
USERENV(28c.644) 14:19:53:152 ProcessGPOs: Extension EFS recovery
skipped with flags 0x2.
USERENV(28c.644) 14:19:53:152 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:152 ProcessGPOs: Processing extension
Microsoft Offline Files
USERENV(28c.644) 14:19:53:152 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:152 CheckGPOs: No GPO changes but couldn't
read extension Microsoft Offline Files's status or policy time.
USERENV(28c.644) 14:19:53:152 ProcessGPOs: Extension Microsoft Offline
Files skipped with flags 0x2.
USERENV(28c.644) 14:19:53:152 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:169 ProcessGPOs: Processing extension Software
Installation
USERENV(28c.644) 14:19:53:169 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:169 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:169 CheckGPOs: No GPO changes but couldn't
read extension Software Installation's status or policy time.
USERENV(28c.644) 14:19:53:169 ProcessGPOs: Extension Software
Installation skipped because both deleted and changed GPO lists are empty.
USERENV(28c.644) 14:19:53:169 ProcessGPOs: -----------------------
USERENV(28c.644) 14:19:53:169 ProcessGPOs: Processing extension IP Security
USERENV(28c.644) 14:19:53:169 CompareGPOLists: The lists are the same.
USERENV(28c.644) 14:19:53:169 CheckGPOs: No GPO changes but couldn't
read extension IP Security's status or policy time.
USERENV(28c.644) 14:19:53:185 ProcessGPOs: Extension IP Security skipped
with flags 0x2.
USERENV(28c.644) 14:19:53:185 SetFgRefreshInfo: Previous User Fg policy
Synchronous, Reason: NonCachedCredentials.
USERENV(28c.644) 14:19:53:185 SetFgRefreshInfo: Next User Fg policy
Asynchronous, Reason: NoNeedForSync.
USERENV(28c.644) 14:19:53:201 ProcessGPOs: No WMI logging done in this
policy cycle.
USERENV(28c.644) 14:19:53:201 LeaveCriticalPolicySection: Critical
section 0x7a4 has been released.
USERENV(28c.644) 14:19:53:201 ProcessGPOs: User Group Policy has been
applied.
USERENV(28c.644) 14:19:53:201 ProcessGPOs: Leaving with 1.
USERENV(28c.644) 14:19:53:201 ApplyGroupPolicy: Leaving successfully.
USERENV(28c.26c) 14:19:53:266 GPOThread: Next refresh will happen in 97
minutes
USERENV(28c.290) 14:19:53:559 IsSyncForegroundPolicyRefresh:
Asynchronous, Reason: NoNeedForSync
USERENV(fd4.db8) 14:19:53:771 LibMain: Process Name:
C:\WINDOWS\system32\Ati2evxx.exe
USERENV(e0.c84) 14:19:53:868 LibMain: Process Name:
C:\WINDOWS\system32\userinit.exe
USERENV(2c4.2dc) 14:19:53:950 ImpersonateUser: Failed to impersonate
user with 5.
USERENV(2c4.2dc) 14:19:53:950 GetUserNameAndDomain Failed to impersonate
user
USERENV(2c4.2dc) 14:19:53:950 ImpersonateUser: Failed to impersonate
user with 5.
USERENV(2c4.2dc) 14:19:53:966 GetUserDNSDomainName: Failed to
impersonate user
USERENV(6d8.bd4) 14:19:54:161 LibMain: Process Name:
C:\WINDOWS\Explorer.EXE
USERENV(6d8.114) 14:19:54:307 GetProfileType: Profile already loaded.
USERENV(6d8.114) 14:19:54:307 GetProfileType: ProfileFlags is 2
USERENV(6d8.114) 14:19:54:324 GetProfileType: Profile already loaded.
USERENV(6d8.114) 14:19:54:324 GetProfileType: ProfileFlags is 2
USERENV(424.930) 14:19:55:349 GetUserDNSDomainName: MyGetUserNameEx
failed for NameDnsDomain style name with 1332
USERENV(5a8.638) 14:19:57:724 LibMain: Process Name: C:\Program
Files\Common Files\Symantec Shared\ccApp.exe
USERENV(5a8.638) 14:19:57:740 GetUserDNSDomainName: MyGetUserNameEx
failed for NameDnsDomain style name with 1332
USERENV(da0.b98) 14:19:58:359 LibMain: Process Name:
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
USERENV(6d8.bfc) 14:19:59:058 GetUserDNSDomainName: MyGetUserNameEx
failed for NameDnsDomain style name with 1332
USERENV(bac.ca4) 14:20:00:848 LibMain: Process Name:
C:\WINDOWS\system32\imapi.exe
USERENV(424.9f4) 14:20:01:808 GetUserDNSDomainName: MyGetUserNameEx
failed for NameDnsDomain style name with 1332
USERENV(424.900) 14:20:04:492 LoadUserProfile: Yes, we can impersonate
the user. Running as self
USERENV(424.900) 14:20:04:525
=========================================================
USERENV(424.900) 14:20:04:525 LoadUserProfile: Entering, hToken =
<0x570>, lpProfileInfo = 0x148f79c
USERENV(424.900) 14:20:04:525 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(424.900) 14:20:04:525 LoadUserProfile: lpProfileInfo->lpUserName
= <Administrator>
USERENV(424.900) 14:20:04:541 LoadUserProfile: NULL central profile path
USERENV(424.900) 14:20:04:541 LoadUserProfile: NULL default profile path
USERENV(424.900) 14:20:04:541 LoadUserProfile: NULL server name
USERENV(424.900) 14:20:04:541 GetInterface: Returning rpc binding handle
USERENV(28c.2a4) 14:20:04:541 IProfileSecurityCallBack: client
authenticated.
USERENV(28c.2a4) 14:20:04:541 DropClientContext: Got client token
000009D8, sid = S-1-5-18
USERENV(28c.2a4) 14:20:04:541 MIDL_user_allocate enter
USERENV(28c.2a4) 14:20:04:541 DropClientContext: load profile object
successfully made
USERENV(28c.2a4) 14:20:04:557 DropClientContext: Returning 0
USERENV(424.900) 14:20:04:557 LoadUserProfile: Calling DropClientToken
(as self) succeeded
USERENV(28c.3c4) 14:20:04:557 IProfileSecurityCallBack: client
authenticated.
USERENV(28c.3c4) 14:20:04:557 LoadUserProfileI: RPC end point
IProfileDialog_0EAAE903B902660731AF2CCC90FF4420
USERENV(28c.3c4) 14:20:04:557 In LoadUserProfileP
USERENV(28c.3c4) 14:20:04:557 LoadUserProfile: Running as client
USERENV(28c.3c4) 14:20:04:557
=========================================================
USERENV(28c.3c4) 14:20:04:557 LoadUserProfile: Entering, hToken =
<0x9dc>, lpProfileInfo = 0xea99a0
USERENV(28c.3c4) 14:20:04:574 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(28c.3c4) 14:20:04:574 LoadUserProfile: lpProfileInfo->lpUserName
= <Administrator>
USERENV(28c.3c4) 14:20:04:574 LoadUserProfile: NULL central profile path
USERENV(28c.3c4) 14:20:04:574 LoadUserProfile: NULL default profile path
USERENV(28c.3c4) 14:20:04:574 LoadUserProfile: NULL server name
USERENV(28c.3c4) 14:20:04:574 LoadUserProfile: User sid:
S-1-5-21-1078081533-1004336348-725345543-500
USERENV(28c.3c4) 14:20:04:574 CSyncManager::EnterLock
<S-1-5-21-1078081533-1004336348-725345543-500>
USERENV(28c.3c4) 14:20:04:574 CSyncManager::EnterLock: No existing entry
found
USERENV(28c.3c4) 14:20:04:590 CSyncManager::EnterLock: New entry created
USERENV(28c.3c4) 14:20:04:590 CHashTable::HashAdd:
S-1-5-21-1078081533-1004336348-725345543-500 added in bucket 15
USERENV(28c.3c4) 14:20:04:590 LoadUserProfile: Wait succeeded. In
critical section.
USERENV(28c.3c4) 14:20:04:590 TestIfUserProfileLoaded: Profile already
loaded.
USERENV(28c.3c4) 14:20:04:590 Profile was loaded but the Ref Count is 1 !!!
USERENV(28c.3c4) 14:20:04:590 LoadUserProfile: Leaving critical Section.
USERENV(28c.3c4) 14:20:04:590 CSyncManager::LeaveLock
<S-1-5-21-1078081533-1004336348-725345543-500>
USERENV(28c.3c4) 14:20:04:590 CSyncManager::LeaveLock: Lock released
USERENV(28c.3c4) 14:20:04:590 CHashTable::HashDelete:
S-1-5-21-1078081533-1004336348-725345543-500 deleted
USERENV(28c.3c4) 14:20:04:606 CSyncManager::LeaveLock: Lock deleted
USERENV(28c.3c4) 14:20:04:606 LoadUserProfile: Impersonated user:
000009dc, 000006c4
USERENV(28c.3c4) 14:20:04:606 LoadUserProfile: Reverted to user: 00000000
USERENV(28c.3c4) 14:20:04:606 LoadUserProfile: Reverted back to user
<00000000>
USERENV(28c.3c4) 14:20:04:606 LoadUserProfile: Leaving with a value of 1.
USERENV(28c.3c4) 14:20:04:606
=========================================================
USERENV(28c.3c4) 14:20:04:606 LoadUserProfileI: returning 0
USERENV(424.900) 14:20:04:606 LoadUserProfile: Running as self
USERENV(424.900) 14:20:04:623 LoadUserProfile: Calling LoadUserProfileI
(as user) succeeded
USERENV(424.900) 14:20:04:623 LoadUserProfile: Returning success.
Final Information follows:
USERENV(424.900) 14:20:04:623 lpProfileInfo->UserName = <Administrator>
USERENV(424.900) 14:20:04:639 lpProfileInfo->lpProfilePath = <>
USERENV(424.900) 14:20:04:639 lpProfileInfo->dwFlags = 0x0
USERENV(28c.aa0) 14:20:04:639 IProfileSecurityCallBack: client
authenticated.
USERENV(28c.aa0) 14:20:04:639 ReleaseClientContext: Releasing context
USERENV(28c.aa0) 14:20:04:639 ReleaseClientContext_s: Releasing context
USERENV(28c.aa0) 14:20:04:639 MIDL_user_free enter
USERENV(424.900) 14:20:04:655 ReleaseInterface: Releasing rpc binding handle
USERENV(424.900) 14:20:04:655 LoadUserProfile: Returning TRUE. hProfile
= <0x1814>
USERENV(424.900) 14:20:04:655 GetUserDNSDomainName: Local user
account. No DNS domain name available.
USERENV(bc8.cd0) 14:20:04:704 LibMain: Process Name:
C:\WINDOWS\system32\notepad.exe
USERENV(fd4.db8) 14:20:08:560 LoadUserProfile: Yes, we can impersonate
the user. Running as self
USERENV(fd4.db8) 14:20:08:560
=========================================================
USERENV(fd4.db8) 14:20:08:560 LoadUserProfile: Entering, hToken =
<0x12c>, lpProfileInfo = 0x12f5a8
USERENV(fd4.db8) 14:20:08:560 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(fd4.db8) 14:20:08:576 LoadUserProfile: lpProfileInfo->lpUserName
= <dave>
USERENV(fd4.db8) 14:20:08:576 LoadUserProfile: NULL central profile path
USERENV(fd4.db8) 14:20:08:576 LoadUserProfile: NULL default profile path
USERENV(fd4.db8) 14:20:08:576 LoadUserProfile: NULL server name
USERENV(fd4.db8) 14:20:08:576 GetInterface: Returning rpc binding handle
USERENV(28c.aa0) 14:20:08:576 IProfileSecurityCallBack: client
authenticated.
USERENV(28c.aa0) 14:20:08:576 DropClientContext: Got client token
00000790, sid = S-1-5-18
USERENV(28c.aa0) 14:20:08:576 MIDL_user_allocate enter
USERENV(28c.aa0) 14:20:08:592 DropClientContext: load profile object
successfully made
USERENV(28c.aa0) 14:20:08:592 DropClientContext: Returning 0
USERENV(fd4.db8) 14:20:08:592 LoadUserProfile: Calling DropClientToken
(as self) succeeded
USERENV(fd4.db8) 14:20:08:609 CProfileDialog::Initialize : Cookie
generated <F12D50FD725853F18ED4338C9F89157E>
USERENV(fd4.db8) 14:20:08:609 CProfileDialog::Initialize : Endpoint
generated <IProfileDialog_8038C4D28F9BB7590292FA322584F6C7>
USERENV(28c.2a4) 14:20:08:609 IProfileSecurityCallBack: client
authenticated.
USERENV(28c.2a4) 14:20:08:609 LoadUserProfileI: RPC end point
IProfileDialog_8038C4D28F9BB7590292FA322584F6C7
USERENV(28c.2a4) 14:20:08:609 In LoadUserProfileP
USERENV(28c.2a4) 14:20:08:609 LoadUserProfile: Running as client
USERENV(28c.2a4) 14:20:08:609
=========================================================
USERENV(28c.2a4) 14:20:08:625 LoadUserProfile: Entering, hToken =
<0x76c>, lpProfileInfo = 0xe778e8
USERENV(28c.2a4) 14:20:08:625 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(28c.2a4) 14:20:08:625 LoadUserProfile: lpProfileInfo->lpUserName
= <dave>
USERENV(28c.2a4) 14:20:08:625 LoadUserProfile: NULL central profile path
USERENV(28c.2a4) 14:20:08:625 LoadUserProfile: NULL default profile path
USERENV(28c.2a4) 14:20:08:625 LoadUserProfile: NULL server name
USERENV(28c.2a4) 14:20:08:625 LoadUserProfile: User sid:
S-1-5-21-1423522002-514043473-3775106752-2200
USERENV(28c.2a4) 14:20:08:625 CSyncManager::EnterLock
<S-1-5-21-1423522002-514043473-3775106752-2200>
USERENV(28c.2a4) 14:20:08:641 CSyncManager::EnterLock: No existing entry
found
USERENV(28c.2a4) 14:20:08:641 CSyncManager::EnterLock: New entry created
USERENV(28c.2a4) 14:20:08:641 CHashTable::HashAdd:
S-1-5-21-1423522002-514043473-3775106752-2200 added in bucket 5
USERENV(28c.2a4) 14:20:08:641 LoadUserProfile: Wait succeeded. In
critical section.
USERENV(28c.2a4) 14:20:08:641 TestIfUserProfileLoaded: Profile already
loaded.
USERENV(28c.2a4) 14:20:08:641 Profile Ref Count is 3
USERENV(28c.2a4) 14:20:08:641 LoadUserProfile: Leaving critical Section.
USERENV(28c.2a4) 14:20:08:641 CSyncManager::LeaveLock
<S-1-5-21-1423522002-514043473-3775106752-2200>
USERENV(28c.2a4) 14:20:08:641 CSyncManager::LeaveLock: Lock released
USERENV(28c.2a4) 14:20:08:657 CHashTable::HashDelete:
S-1-5-21-1423522002-514043473-3775106752-2200 deleted
USERENV(28c.2a4) 14:20:08:657 CSyncManager::LeaveLock: Lock deleted
USERENV(28c.2a4) 14:20:08:657 LoadUserProfile: Impersonated user:
0000076c, 000007ec
USERENV(28c.2a4) 14:20:08:657 LoadUserProfile: Reverted to user: 00000000
USERENV(28c.2a4) 14:20:08:657 LoadUserProfile: Reverted back to user
<00000000>
USERENV(28c.2a4) 14:20:08:657 LoadUserProfile: Leaving with a value of 1.
USERENV(28c.2a4) 14:20:08:657
=========================================================
USERENV(28c.2a4) 14:20:08:657 LoadUserProfileI: returning 0
USERENV(fd4.db8) 14:20:08:674 LoadUserProfile: Running as self
USERENV(fd4.db8) 14:20:08:674 LoadUserProfile: Calling LoadUserProfileI
(as user) succeeded
USERENV(fd4.db8) 14:20:08:674 LoadUserProfile: Returning success.
Final Information follows:
USERENV(fd4.db8) 14:20:08:674 lpProfileInfo->UserName = <dave>
USERENV(fd4.db8) 14:20:08:674 lpProfileInfo->lpProfilePath = <>
USERENV(fd4.db8) 14:20:08:674 lpProfileInfo->dwFlags = 0x0
USERENV(28c.3c4) 14:20:08:674 IProfileSecurityCallBack: client
authenticated.
USERENV(28c.3c4) 14:20:08:674 ReleaseClientContext: Releasing context
USERENV(28c.3c4) 14:20:08:690 ReleaseClientContext_s: Releasing context
USERENV(28c.3c4) 14:20:08:690 MIDL_user_free enter
USERENV(fd4.db8) 14:20:08:690 ReleaseInterface: Releasing rpc binding handle
USERENV(fd4.db8) 14:20:08:690 LoadUserProfile: Returning TRUE. hProfile
= <0x140>
USERENV(fd4.db8) 14:20:08:690 UnloadUserProfile: Entering, hProfile =
<0x140>
USERENV(fd4.db8) 14:20:08:690 GetInterface: Returning rpc binding handle
USERENV(28c.aa0) 14:20:08:690 IProfileSecurityCallBack: client
authenticated.
USERENV(28c.aa0) 14:20:08:690 DropClientContext: Got client token
00000790, sid = S-1-5-21-1423522002-514043473-3775106752-2200
USERENV(28c.aa0) 14:20:08:690 DropClientContext: Client 00000790 doesn
not have enough permission. Error 5.
USERENV(28c.aa0) 14:20:08:706 DropClientContext: Returning 5
USERENV(fd4.db8) 14:20:08:706 UnLoadUserProfile: Calling
DropClientContext failed. err = 5
USERENV(fd4.db8) 14:20:08:706 ReleaseInterface: Releasing rpc binding handle
USERENV(fd4.db8) 14:20:08:706 UnloadUserProfile: returning 0
USERENV(28c.fe0) 14:20:08:820 GetUserDNSDomainName: MyGetUserNameEx
failed for NameDnsDomain style name with 1332
USERENV(efc.c88) 14:20:08:853 LibMain: Process Name:
C:\WINDOWS\system32\userinit.exe
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
