Our Remote Desktop users and Redirected Printers. Every login after the first they're getting what clearly appears to be the current + previous sessions multiple redirected printer sessions #s. Very frustrating. See attached image.
This really hints of the previous Login Sessions not closing properly, user profile logjam.
We're now focusing on the Event 1530 errors as a likely culprit. This event occurs at every user Log off. Below an a typical example of the event.
We read numerous forum posts and tried many of the suggestions.
1. Yes we have disabled Printer Redirection in Group Policy, same events occur
2. Yes we tried the UPHClean service which was popular back with W2K3 Terminal Server, it won't install on 2008 R2 and as its been replaced the MS User Profile Service.
3. No A/V software installed, no MSE or Defender.
4. User Profiles are at default location, on C:\Users\ of RDS Host. Very simple new setup.
Do we need to research these Processes shown below individually? Process 652 shown twice? Or any other solution you can suggest allowing the Redirected Printers to refresh/clear user profiles properly. How do we rid ourselves of Event 1530?
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 2/18/2013 4:37:25 PM
Event ID: 1530
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: RDS.Domain.com
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
3 user registry handles leaked from \Registry\User\S-1-5-21-3730962552-3612442801-2705850247-2101:
Process 652 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3730962552-3612442801-2705850247-2101
Process 980 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3730962552-3612442801-2705850247-2101\Printers\DevModePerUser
Process 652 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3730962552-3612442801-2705850247-2101\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
Any hints and comments would be greatly appreciated.