Event ID: 1524/1517
This is not an urgent issue:
I have a server running backup exec 12.5. It backs up a lot of stuff for us from a central file server. On my file server's application log (windows 2003), I get Event ID: 1524/1517 every night at 9:15PM.
User: BackupService
Event ID 1524: Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.
User: SYSTEM
Event ID 1517: Windows saved user FILESERVER\BackupService registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
It seems to me like it may be a bug in coding on either microsoft or symantec's side??
Any pointers?
.:edit:.
I did read about a program called UPHclean by microsoft which seems to be the answer, but I'd like some feedback first.
Verbatim:
The application event IDs 1000, 1500, 1517, 1524 are logged in the Application log. Viewing events in the Application log is the most accurate method to determine user profile unload errors
Take a look at - http://support.microsoft.com/kb/837115 which provides details about these events being logged