Application Log Warning for Event 1530
Symptom
An application log warning with information similar to the following warning appears:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
Notice
Details:
2 user registry handles leaked from \Registry\User\S-1-5-21-4045450679-1639168508-2468595402-500:
Process 468 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\<SID>
Process 988 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\<SID>\Printers\DevModePerUser
Cause
This behavior occurs because Windows automatically closes any registry handle to a user profile that is left open by an application.
Notice
Event ID 1530 is logged as a Warning event. The application that is listed in the event detail is leaving the registry handle open and should be investigated.
Resolution
Though this error is not related to SecureAuth functionality, it should be investigated due to possible memory leaks or application conflicts. See MS KB 947238 http://support.microsoft.com/kb/947238for more information.