Hi Curtis! Thanks for your reply, and for drawing my attention to Userenv
debugging, which looks like a very useful facility.
Here follows two debug log outputs from a Windows XP Pro workstation.
1) One is of a roaming profile user which has not logged into a Windows 2000
server before, and hence has a completely empty Profile directory.
2) The second is of the same user, who has since logged into a Windows 2000
Terminal Server, has logged out, and then logged into the Windows XP Pro
workstation.
Note that is seems to be at the following lines in the debug when the
problems start:
USERENV(318.31c) 17:15:28:843 GetOldSidString: Failed to open profile
profile guid key with error 2
USERENV(318.31c) 17:15:28:843 GetProfileSid: No Guid -> Sid Mapping
available
I appreciate your help, and look forward to your insight into this!
Many thanks
Paul
***USERENV LOGGING 1)***
USERENV(318.31c) 17:15:28:734 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(318.31c) 17:15:28:734
=========================================================
USERENV(318.31c) 17:15:28:734 LoadUserProfile: Entering, hToken = <0x900>,
lpProfileInfo = 0x6e734
USERENV(318.31c) 17:15:28:750 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(318.31c) 17:15:28:750 LoadUserProfile: lpProfileInfo->lpUserName =
<tbs000021>
USERENV(318.31c) 17:15:28:750 LoadUserProfile: lpProfileInfo->lpProfilePath
= <\\savalas\lo_profiles\tbs000021>
USERENV(318.31c) 17:15:28:750 LoadUserProfile: lpProfileInfo->lpDefaultPath
= <\\POITIER\netlogon\Default User>
USERENV(318.31c) 17:15:28:765 LoadUserProfile: NULL server name
USERENV(318.31c) 17:15:28:765 LoadUserProfile: In console winlogon process
USERENV(318.31c) 17:15:28:765 In LoadUserProfileP
USERENV(318.31c) 17:15:28:765
=========================================================
USERENV(318.31c) 17:15:28:781 LoadUserProfile: Entering, hToken = <0x900>,
lpProfileInfo = 0x6e734
USERENV(318.31c) 17:15:28:781 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(318.31c) 17:15:28:781 LoadUserProfile: lpProfileInfo->lpUserName =
<tbs000021>
USERENV(318.31c) 17:15:28:781 LoadUserProfile: lpProfileInfo->lpProfilePath
= <\\savalas\lo_profiles\tbs000021>
USERENV(318.31c) 17:15:28:796 LoadUserProfile: lpProfileInfo->lpDefaultPath
= <\\POITIER\netlogon\Default User>
USERENV(318.31c) 17:15:28:796 LoadUserProfile: NULL server name
USERENV(318.31c) 17:15:28:796 LoadUserProfile: User sid:
S-1-5-21-746137067-1844823847-1801674531-1232
USERENV(318.31c) 17:15:28:796 CSyncManager::EnterLock
<S-1-5-21-746137067-1844823847-1801674531-1232>
USERENV(318.31c) 17:15:28:796 CSyncManager::EnterLock: No existing entry
found
USERENV(318.31c) 17:15:28:812 CSyncManager::EnterLock: New entry created
USERENV(318.31c) 17:15:28:812 CHashTable::HashAdd:
S-1-5-21-746137067-1844823847-1801674531-1232 added in bucket 17
USERENV(318.31c) 17:15:28:812 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(318.31c) 17:15:28:843 GetOldSidString: Failed to open profile
profile guid key with error 2
USERENV(318.31c) 17:15:28:843 GetProfileSid: No Guid -> Sid Mapping
available
USERENV(318.31c) 17:15:28:859 GetOldSidString: Failed to open profile
profile guid key with error 2
USERENV(318.31c) 17:15:28:859 GetProfileSid: No Guid -> Sid Mapping
available
USERENV(318.31c) 17:15:28:859 LoadUserProfile: Expanded profile path is
\\savalas\lo_profiles\tbs000021
USERENV(318.31c) 17:15:28:859 ParseProfilePath: Entering, lpProfilePath =
<\\savalas\lo_profiles\tbs000021>
USERENV(318.31c) 17:15:28:921 LoadUserProfile: ParseProfilePath returned a
directory of <H:\tbs000021>
USERENV(318.31c) 17:15:28:937 RestoreUserProfile: Entering
USERENV(318.31c) 17:15:28:937 IsCentralProfileReachable: Entering
USERENV(318.31c) 17:15:28:953 RestoreUserProfile: IsCentralProfileReachable
returned FALSE. error = 2
USERENV(318.31c) 17:15:30:609 RestoreUserProfile: Profile path = <>
USERENV(318.31c) 17:15:30:609 ExtractProfileFromBackup: Failed to open key
Software\Microsoft\Windows
NT\CurrentVersion\ProfileList\S-1-5-21-746137067-1844823847-1801674531-1232
with error 2
USERENV(318.31c) 17:15:30:625 ExtractProfileFromBackup: Couldn't open
backup profile key. Error = 2
USERENV(318.31c) 17:15:30:625 GetOldSidString: Failed to open profile
profile guid key with error 2
USERENV(318.31c) 17:15:30:625 PatchNewProfileIfRequred: No OldSidString
found
USERENV(318.31c) 17:15:30:625 CreateLocalProfileKey: Not setting additional
Security
USERENV(318.31c) 17:15:30:640 CreateLocalProfileImage: One way or another
we haven't got an existing local profile, try and create one
USERENV(318.31c) 17:15:30:640 GetUserDomainName: DomainName = <OURDOMAIN>
USERENV(318.31c) 17:15:30:640 CreateSecureDirectory: Entering with
<C:\Documents and Settings\tbs000021.OURDOMAIN>
USERENV(318.31c) 17:15:30:656 CreateSecureDirectory: Created the directory
<C:\Documents and Settings\tbs000021.OURDOMAIN>
USERENV(318.31c) 17:15:30:656 ComputeLocalProfileName: generated the profile
directory <C:\Documents and Settings\tbs000021.OURDOMAIN>
USERENV(318.31c) 17:15:30:656 Creating Local Profile
USERENV(318.31c) 17:15:30:656 Local profile name is <C:\Documents and
Settings\tbs000021.OURDOMAIN>
USERENV(318.31c) 17:15:30:671 RestoreUserProfile: Working with a new user.
Go straight to issuing a default profile.
USERENV(318.31c) 17:15:30:671 RestoreUserProfile: Issuing default profile
USERENV(318.31c) 17:15:30:671 CheckNetDefaultProfile: Entering, lpNetPath =
<\\POITIER\netlogon\Default User>
USERENV(318.31c) 17:15:31:593 CheckNetDefaultProfile: Removing local copy
of network default user profile.
USERENV(318.31c) 17:15:31:593 Delnode_Recurse: Entering, lpDir =
<\\?\C:\Documents and Settings\Default User (Network)>
USERENV(318.31c) 17:15:31:593 CheckNetDefaultProfile: Leaving with a value
of 0.
USERENV(318.31c) 17:15:31:609 IssueDefaultProfile: Entering.
lpDefaultProfile = <C:\Documents and Settings\Default User> lpLocalProfile =
<C:\Documents and Settings\tbs000021.OURDOMAIN>
USERENV(318.31c) 17:15:34:453 MyRegLoadKey: Returning 00000000
USERENV(318.31c) 17:15:34:468 IssueDefaultProfile: Leaving successfully
USERENV(318.31c) 17:15:34:468 RestoreUserProfile: Successfully setup the
local default.
USERENV(318.31c) 17:15:34:468 SetupNewHive: Entering
USERENV(318.31c) 17:15:34:468 SetDefaultUserHiveSecurity: Entering
USERENV(318.31c) 17:15:34:500 SecureUserKey: Entering
USERENV(318.31c) 17:15:34:500 SecureUserKey: Leaving with a return value of
1
USERENV(318.31c) 17:15:34:515 SecureUserKey: Entering
USERENV(318.31c) 17:15:34:515 SecureUserKey: Leaving with a return value of
1
USERENV(318.31c) 17:15:34:703 SetupNewHive: Leaving with a return value of
1
USERENV(318.31c) 17:15:34:906 MyRegLoadKey: Returning 00000000
USERENV(318.31c) 17:15:34:906 CreateClassHive: existing user classes hive
not found
USERENV(318.31c) 17:15:34:906 SetDefaultUserHiveSecurity: Entering
USERENV(318.31c) 17:15:34:921 RestoreUserProfile: About to Leave. Final
Information follows:
USERENV(318.31c) 17:15:34:921 Profile was successfully loaded.
USERENV(318.31c) 17:15:34:921 lpProfile->lpRoamingProfile = <>
USERENV(318.31c) 17:15:34:921 lpProfile->lpLocalProfile = <C:\Documents and
Settings\tbs000021.OURDOMAIN>
USERENV(318.31c) 17:15:34:937 lpProfile->dwInternalFlags = 0x10204
USERENV(318.31c) 17:15:34:937 RestoreUserProfile: Leaving.
USERENV(318.31c) 17:15:34:937 UpgradeProfile: Entering
USERENV(318.31c) 17:15:34:953 UpgradeProfile: Build numbers match
USERENV(318.31c) 17:15:34:953 UpgradeProfile: Leaving Successfully
USERENV(318.31c) 17:15:34:968 Profile Ref Count is 1
USERENV(318.31c) 17:15:34:968 LoadUserProfile: Leaving critical Section.
USERENV(318.31c) 17:15:34:984 CSyncManager::LeaveLock
<S-1-5-21-746137067-1844823847-1801674531-1232>
USERENV(318.31c) 17:15:34:984 CSyncManager::LeaveLock: Lock released
USERENV(318.31c) 17:15:34:984 CHashTable::HashDelete:
S-1-5-21-746137067-1844823847-1801674531-1232 deleted
USERENV(318.31c) 17:15:34:984 CSyncManager::LeaveLock: Lock deleted
USERENV(318.31c) 17:15:35:062 LoadUserProfile: Reverted to user: 00000000
USERENV(318.31c) 17:15:35:062 LoadUserProfile: Leaving with a value of 1.
USERENV(318.31c) 17:15:35:078
=========================================================
USERENV(318.31c) 17:15:35:078 LoadUserProfile: LoadUserProfileP succeeded
USERENV(318.31c) 17:15:35:078 LoadUserProfile: Returning success. Final
Information follows:
USERENV(318.31c) 17:15:35:078 lpProfileInfo->UserName = <tbs000021>
USERENV(318.31c) 17:15:35:093 lpProfileInfo->lpProfilePath =
<\\savalas\lo_profiles\tbs000021>
USERENV(318.31c) 17:15:35:093 lpProfileInfo->dwFlags = 0x0
USERENV(318.31c) 17:15:35:093 LoadUserProfile: Returning TRUE. hProfile =
<0x748>
USERENV(318.31c) 17:15:35:125 IsSyncForegroundPolicyRefresh: Synchronous,
Reason: FirstPolicyRefresh
USERENV(318.92c) 17:15:35:140 IsSyncForegroundPolicyRefresh: Synchronous,
Reason: FirstPolicyRefresh
USERENV(318.92c) 17:15:35:375 ApplyGroupPolicy: Entering. Flags = 6
USERENV(318.92c) 17:15:35:375 ProcessGPOs:
USERENV(318.92c) 17:15:35:390 ProcessGPOs:
USERENV(318.92c) 17:15:35:390 ProcessGPOs: Starting user Group Policy
(Background) processing...
USERENV(318.92c) 17:15:35:390 ProcessGPOs:
USERENV(318.92c) 17:15:35:390 ProcessGPOs:
USERENV(318.92c) 17:15:35:390 EnterCriticalPolicySection: User critical
section has been claimed. Handle = 0x940
USERENV(318.92c) 17:15:35:656 ProcessGPOs: Machine role is 2.
USERENV(318.92c) 17:15:35:671 PingComputer: Adapter speed 100000000 bps
USERENV(318.92c) 17:15:35:671 PingComputer: First time: 0
USERENV(318.92c) 17:15:35:671 PingComputer: Fast link. Exiting.
USERENV(318.92c) 17:15:35:671 ProcessGPOs: User name is: CN=Staff
Member,OU=users,OU=staff,DC=OURDOMAIN,DC=co,DC=uk, Domain name is:
OURDOMAIN
USERENV(318.92c) 17:15:35:687 ProcessGPOs: Domain controller is:
\\poitier.OURDOMAIN.co.uk Domain DN is OURDOMAIN.co.uk
USERENV(318.92c) 17:15:35:687 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(318.92c) 17:15:35:687 ReadGPExtensions: Rsop entry point not found
for dskquota.dll.
USERENV(318.92c) 17:15:35:687 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(318.92c) 17:15:35:687 ReadGPExtensions: Rsop entry point not found
for scecli.dll.
USERENV(318.92c) 17:15:35:703 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(318.92c) 17:15:36:078 ProcessGPOs: Logging Data for Target
<tbs000021>.
USERENV(318.92c) 17:15:36:078 GetWbemServices: CoCreateInstance succeeded
USERENV(318.92c) 17:15:36:109 ConnectToNameSpace: ConnectServer returned
0x8004100e
USERENV(318.92c) 17:15:36:109 ConnectToNameSpace: ConnectServer failed with
0x8004100e, trying to recreate the name space
USERENV(318.92c) 17:15:36:406 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(318.92c) 17:15:36:421 CSessionLogger::Log: Get failed.
hr=0x00000000.
USERENV(318.92c) 17:15:36:421 CSessionLogger::Log: logging new security grps
USERENV(318.92c) 17:15:36:515 LogRsopData: Successfully logged Rsop data
USERENV(318.92c) 17:15:36:531 ProcessGPOs: Logged Rsop Data successfully.
USERENV(318.92c) 17:15:36:578 ProcessGPOs: OpenThreadToken failed with error
1008, assuming thread is not impersonating
USERENV(318.92c) 17:15:36:578 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:36:578 ProcessGPOs: Processing extension Registry
USERENV(318.92c) 17:15:36:593 CompareGPOLists: One list is empty
USERENV(318.92c) 17:15:36:593 ProcessGPOList: Entering for extension
Registry
USERENV(318.92c) 17:15:36:593 UserPolicyCallback: Setting status UI to
Applying Registry policy...
USERENV(318.92c) 17:15:36:609 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(318.92c) 17:15:36:609 ResetPolicies: Entering.
USERENV(318.92c) 17:15:36:625 ParseRegistryFile: Entering with <C:\Documents
and Settings\tbs000021.OURDOMAIN\ntuser.pol>.
USERENV(318.92c) 17:15:36:625 ParseRegistryFile: Leaving.
USERENV(318.92c) 17:15:36:625 ResetPolicies: Leaving.
USERENV(318.92c) 17:15:36:640 ParseRegistryFile: Entering with
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-
9E7ADF6B89C3}\User\registry.pol>.
USERENV(318.92c) 17:15:36:656 SetRegistryValue: NoNetConnectDisconnect => 1
[OK]
USERENV(318.92c) 17:15:36:656 SetRegistryValue: NoManageMyComputerVerb => 1
[OK]
USERENV(318.92c) 17:15:36:671 SetRegistryValue: LinkResolveIgnoreLinkInfo =>
1 [OK]
USERENV(318.92c) 17:15:36:671 SetRegistryValue: NoHardwareTab => 1 [OK]
USERENV(318.92c) 17:15:36:671 SetRegistryValue: NoDFSTab => 1 [OK]
USERENV(318.92c) 17:15:36:671 SetRegistryValue: NoComputersNearMe => 1 [OK]
USERENV(318.92c) 17:15:36:687 SetRegistryValue: MaxRecentDocs => 10 [OK]
USERENV(318.92c) 17:15:36:687 SetRegistryValue: NoRunasInstallPrompt => 1
[OK]
USERENV(318.92c) 17:15:36:687 SetRegistryValue: NoWindowsUpdate => 1 [OK]
USERENV(318.92c) 17:15:36:687 SetRegistryValue: NoNetworkConnections => 1
[OK]
USERENV(318.92c) 17:15:36:703 SetRegistryValue: NoRun => 1 [OK]
USERENV(318.92c) 17:15:36:703 SetRegistryValue: ForceStartMenuLogOff => 1
[OK]
USERENV(318.92c) 17:15:36:703 SetRegistryValue: NoChangeStartMenu => 1 [OK]
USERENV(318.92c) 17:15:36:703 SetRegistryValue: NoResolveSearch => 1 [OK]
USERENV(318.92c) 17:15:36:718 SetRegistryValue: NoResolveTrack => 1 [OK]
USERENV(318.92c) 17:15:36:718 SetRegistryValue: GreyMSIAds => 1 [OK]
USERENV(318.92c) 17:15:36:718 SetRegistryValue: NoNetHood => 1 [OK]
USERENV(318.92c) 17:15:36:718 SetRegistryValue: NoRecentDocsNetHood => 1
[OK]
USERENV(318.92c) 17:15:36:718 SetRegistryValue: DisablePersonalDirChange =>
1 [OK]
USERENV(318.92c) 17:15:36:734 SetRegistryValue: NoActiveDesktop => 1 [OK]
USERENV(318.92c) 17:15:36:734 SetRegistryValue: RestrictCpl => 1 [OK]
USERENV(318.92c) 17:15:36:734 SetRegistryValue: NoDeletePrinter => 1 [OK]
USERENV(318.92c) 17:15:36:734 SetRegistryValue: NoWelcomeScreen => 1 [OK]
USERENV(318.92c) 17:15:36:750 SetRegistryValue: NoDriveTypeAutoRun => 255
[OK]
USERENV(318.92c) 17:15:36:750 SetRegistryValue: NoClose => 1 [OK]
USERENV(318.92c) 17:15:36:750 SetRegistryValue: 1 => access.cpl [OK]
USERENV(318.92c) 17:15:36:765 SetRegistryValue: 2 => desk.cpl [OK]
USERENV(318.92c) 17:15:36:765 SetRegistryValue: 3 => inetcpl.cpl [OK]
USERENV(318.92c) 17:15:36:765 SetRegistryValue: 4 => intl.cpl [OK]
USERENV(318.92c) 17:15:36:765 SetRegistryValue: NoEntireNetwork => 1 [OK]
USERENV(318.92c) 17:15:36:781 SetRegistryValue: NoDispScrSavPage => 1 [OK]
USERENV(318.92c) 17:15:36:781 SetRegistryValue: NoDispSettingsPage => 1
[OK]
USERENV(318.92c) 17:15:36:781 SetRegistryValue: DisableRegistryTools => 1
[OK]
USERENV(318.92c) 17:15:36:781 SetRegistryValue: EnableProfileQuota => 1
[OK]
USERENV(318.92c) 17:15:36:781 SetRegistryValue: ProfileQuotaMessage => Your
profile is becoming very large, and may prevent you from logging on in
future. Try deleting your some temporary files. Ask a member of staff if
you require asistance. [OK]
USERENV(318.92c) 17:15:36:796 SetRegistryValue: MaxProfileSize => 20000
[OK]
USERENV(318.92c) 17:15:36:796 SetRegistryValue: Deleted value
<IncludeRegInProQuota>.
USERENV(318.92c) 17:15:36:796 SetRegistryValue: Deleted value <WarnUser>.
USERENV(318.92c) 17:15:36:796 SetRegistryValue: WarnUserTimeout => 60 [OK]
USERENV(318.92c) 17:15:36:812 SetRegistryValue: NoAddRemovePrograms => 1
[OK]
USERENV(318.92c) 17:15:36:812 SetRegistryValue: NoDirectoryServices => 1
[OK]
USERENV(318.92c) 17:15:36:812 SetRegistryValue: NoAddingDirectoryServers =>
1 [OK]
USERENV(318.92c) 17:15:36:812 SetRegistryValue: NoWebDirectory => 1 [OK]
USERENV(318.92c) 17:15:36:828 SetRegistryValue: NoSendingFiles => 1 [OK]
USERENV(318.92c) 17:15:36:828 SetRegistryValue: NoReceivingFiles => 1 [OK]
USERENV(318.92c) 17:15:36:828 SetRegistryValue: NoOldWhiteBoard => 1 [OK]
USERENV(318.92c) 17:15:36:828 SetRegistryValue: NoNewWhiteBoard => 1 [OK]
USERENV(318.92c) 17:15:36:843 SetRegistryValue: NoAutoAcceptCalls => 1 [OK]
USERENV(318.92c) 17:15:36:843 SetRegistryValue: CallSecurity => 1 [OK]
USERENV(318.92c) 17:15:36:843 SetRegistryValue: NoAppSharing => 1 [OK]
USERENV(318.92c) 17:15:36:843 SetRegistryValue: NoSharing => 1 [OK]
USERENV(318.92c) 17:15:36:859 SetRegistryValue: NoAllowControl => 1 [OK]
USERENV(318.92c) 17:15:36:859 SetRegistryValue: NoAudio => 1 [OK]
USERENV(318.92c) 17:15:36:859 SetRegistryValue: NoFullDuplex => 1 [OK]
USERENV(318.92c) 17:15:36:859 SetRegistryValue: NoChangeDirectSound => 1
[OK]
USERENV(318.92c) 17:15:36:875 SetRegistryValue: NoSendingVideo => 1 [OK]
USERENV(318.92c) 17:15:36:875 SetRegistryValue: NoReceivingVideo => 1 [OK]
USERENV(318.92c) 17:15:36:875 SetRegistryValue: NoGeneralPage => 1 [OK]
USERENV(318.92c) 17:15:36:875 SetRegistryValue: NoAdvancedCalling => 1 [OK]
USERENV(318.92c) 17:15:36:875 SetRegistryValue: NoSecurityPage => 1 [OK]
USERENV(318.92c) 17:15:36:890 SetRegistryValue: NoAudioPage => 1 [OK]
USERENV(318.92c) 17:15:36:890 SetRegistryValue: NoVideoPage => 1 [OK]
USERENV(318.92c) 17:15:36:890 SetRegistryValue: Advanced => 1 [OK]
USERENV(318.92c) 17:15:36:890 SetRegistryValue: HomePage => 1 [OK]
USERENV(318.92c) 17:15:36:906 SetRegistryValue: Connwiz Admin Lock => 1
[OK]
USERENV(318.92c) 17:15:36:906 SetRegistryValue: Connection Settings => 1
[OK]
USERENV(318.92c) 17:15:36:906 SetRegistryValue: Proxy => 1 [OK]
USERENV(318.92c) 17:15:36:906 SetRegistryValue: Autoconfig => 1 [OK]
USERENV(318.92c) 17:15:36:921 SetRegistryValue: Ratings => 1 [OK]
USERENV(318.92c) 17:15:36:921 SetRegistryValue: Certificates => 1 [OK]
USERENV(318.92c) 17:15:36:921 SetRegistryValue: Profiles => 1 [OK]
USERENV(318.92c) 17:15:36:921 SetRegistryValue: Messaging => 1 [OK]
USERENV(318.92c) 17:15:36:937 SetRegistryValue: CalendarContact => 1 [OK]
USERENV(318.92c) 17:15:36:937 SetRegistryValue: NoSearchCustomization => 1
[OK]
USERENV(318.92c) 17:15:36:937 SetRegistryValue: NoAddingChannels => 1 [OK]
USERENV(318.92c) 17:15:36:937 SetRegistryValue: NoAddingSubscriptions => 1
[OK]
USERENV(318.92c) 17:15:36:953 SetRegistryValue: NoEditingSubscriptions => 1
[OK]
USERENV(318.92c) 17:15:36:953 SetRegistryValue: NoChannelLogging => 1 [OK]
USERENV(318.92c) 17:15:36:953 SetRegistryValue: NoScheduledUpdates => 1
[OK]
USERENV(318.92c) 17:15:36:953 SetRegistryValue: NoChannelUI => 1 [OK]
USERENV(318.92c) 17:15:36:968 SetRegistryValue: NoSubscriptionContent => 1
[OK]
USERENV(318.92c) 17:15:36:968 SetRegistryValue: NoEditingScheduleGroups => 1
[OK]
USERENV(318.92c) 17:15:36:968 SetRegistryValue: NoFindFiles => 1 [OK]
USERENV(318.92c) 17:15:36:968 SetRegistryValue: NoExternalBranding => 1
[OK]
USERENV(318.92c) 17:15:36:984 SetRegistryValue: NoHelpItemSendFeedback => 1
[OK]
USERENV(318.92c) 17:15:36:984 SetRegistryValue: RestrictAuthorMode => 1
[OK]
USERENV(318.92c) 17:15:36:984 SetRegistryValue: RestrictToPermittedSnapins
=> 1 [OK]
USERENV(318.92c) 17:15:36:984 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:000 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:000 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:000 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:000 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:015 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:015 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:015 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:015 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:031 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:031 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:031 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:031 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:046 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:046 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:046 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:046 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:062 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:062 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:062 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:062 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:078 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:078 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:078 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:078 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:093 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:093 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:093 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:109 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:109 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:109 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:109 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:125 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:125 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:125 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:125 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:140 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:140 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:140 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:140 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:156 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:156 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:156 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:156 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:171 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:171 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:171 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:171 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:187 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:187 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:187 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:187 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:203 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:203 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:203 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.92c) 17:15:37:218 SetRegistryValue: ScreenSaveTimeOut => 900
[OK]
USERENV(318.92c) 17:15:37:218 SetRegistryValue: ScreenSaverIsSecure => 1
[OK]
USERENV(318.92c) 17:15:37:218 SetRegistryValue: SCRNSAVE.EXE => logon.scr
[OK]
USERENV(318.92c) 17:15:37:218 SetRegistryValue: ScreenSaveActive => 1 [OK]
USERENV(318.92c) 17:15:37:218 SetRegistryValue: Locked Down => 1 [OK]
USERENV(318.92c) 17:15:37:234 SetRegistryValue: DialupAutodetect => 0 [OK]
USERENV(318.92c) 17:15:37:234 SetRegistryValue: EnableAutoProxyResultCache
=> 0 [OK]
USERENV(318.92c) 17:15:37:234 SetRegistryValue: HideDirectoryFolder => 1
[OK]
USERENV(318.92c) 17:15:37:234 SetRegistryValue: SyncAtLogoff => 0 [OK]
USERENV(318.92c) 17:15:37:250 SetRegistryValue: GoOfflineAction => 1 [OK]
USERENV(318.92c) 17:15:37:250 SetRegistryValue: NoMakeAvailableOffline => 1
[OK]
USERENV(318.92c) 17:15:37:250 SetRegistryValue: NoCacheViewer => 1 [OK]
USERENV(318.92c) 17:15:37:250 SetRegistryValue: NoReminders => 1 [OK]
USERENV(318.92c) 17:15:37:265 SetRegistryValue: NC_LanConnect => 0 [OK]
USERENV(318.92c) 17:15:37:265 SetRegistryValue: NC_LanProperties => 0 [OK]
USERENV(318.92c) 17:15:37:265 SetRegistryValue: NC_RasMyProperties => 0
[OK]
USERENV(318.92c) 17:15:37:265 SetRegistryValue: NC_RasAllUserProperties => 0
[OK]
USERENV(318.92c) 17:15:37:281 SetRegistryValue: NC_RenameConnection => 0
[OK]
USERENV(318.92c) 17:15:37:281 SetRegistryValue: NC_ChangeBindState => 0
[OK]
USERENV(318.92c) 17:15:37:281 SetRegistryValue: NC_RenameMyRasConnection =>
0 [OK]
USERENV(318.92c) 17:15:37:281 SetRegistryValue: NC_AddRemoveComponents => 0
[OK]
USERENV(318.92c) 17:15:37:296 SetRegistryValue: NC_LanChangeProperties => 0
[OK]
USERENV(318.92c) 17:15:37:296 SetRegistryValue: NC_RasChangeProperties => 0
[OK]
USERENV(318.92c) 17:15:37:296 SetRegistryValue: NC_NewConnectionWizard => 0
[OK]
USERENV(318.92c) 17:15:37:296 SetRegistryValue: NC_Statistics => 0 [OK]
USERENV(318.92c) 17:15:37:312 SetRegistryValue: NC_DialupPrefs => 0 [OK]
USERENV(318.92c) 17:15:37:312 SetRegistryValue: NC_AdvancedSettings => 0
[OK]
USERENV(318.92c) 17:15:37:312 SetRegistryValue: NC_ShowSharedAccessUI => 0
[OK]
USERENV(318.92c) 17:15:37:312 SetRegistryValue: NC_AllowAdvancedTCPIPConfig
=> 0 [OK]
USERENV(318.92c) 17:15:37:328 SetRegistryValue: NC_DeleteConnection => 0
[OK]
USERENV(318.92c) 17:15:37:328 SetRegistryValue: NC_DeleteAllUserConnection
=> 0 [OK]
USERENV(318.92c) 17:15:37:328 SetRegistryValue: NC_RasConnect => 0 [OK]
USERENV(318.92c) 17:15:37:328 SetRegistryValue: DisableCMD => 2 [OK]
USERENV(318.92c) 17:15:37:343 SetRegistryValue: Property Pages => 1 [OK]
USERENV(318.92c) 17:15:37:343 SetRegistryValue: Execution => 1 [OK]
USERENV(318.92c) 17:15:37:343 SetRegistryValue: DragAndDrop => 1 [OK]
USERENV(318.92c) 17:15:37:343 SetRegistryValue: Task Creation => 1 [OK]
USERENV(318.92c) 17:15:37:359 SetRegistryValue: Task Deletion => 1 [OK]
USERENV(318.92c) 17:15:37:359 SetRegistryValue: Disable Advanced => 1 [OK]
USERENV(318.92c) 17:15:37:359 SetRegistryValue: Allow Browse => 1 [OK]
USERENV(318.92c) 17:15:37:359 SetRegistryValue: BehaviorOnFailedVerify => 2
[OK]
USERENV(318.92c) 17:15:37:359 SetRegistryValue: Downlevel Browse => 1 [OK]
USERENV(318.92c) 17:15:37:375 SetRegistryValue: Deleted value <Printers Page
URL>.
USERENV(318.92c) 17:15:37:375 ParseRegistryFile: Leaving.
USERENV(318.92c) 17:15:37:406 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-
9E7ADF6B89C3}\Adm\conf.adm> to the Adm list.
USERENV(318.92c) 17:15:37:406 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-
9E7ADF6B89C3}\Adm\inetres.adm> to the Adm list.
USERENV(318.92c) 17:15:37:421 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-
9E7ADF6B89C3}\Adm\system.adm> to the Adm list.
USERENV(318.92c) 17:15:37:421 ParseRegistryFile: Entering with
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-
E35BF05EE4A9}\User\registry.pol>.
USERENV(318.92c) 17:15:37:453 SetRegistryValue: Deleted value
<NoDeletePrinter>.
USERENV(318.92c) 17:15:37:453 SetRegistryValue: Deleted value
<NoAddPrinter>.
USERENV(318.92c) 17:15:37:468 SetRegistryValue: ScreenSaveTimeOut => 1800
[OK]
USERENV(318.92c) 17:15:37:468 SetRegistryValue: Downlevel Browse => 1 [OK]
USERENV(318.92c) 17:15:37:468 ParseRegistryFile: Leaving.
USERENV(318.92c) 17:15:37:500 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-
E35BF05EE4A9}\Adm\conf.adm> to the Adm list.
USERENV(318.92c) 17:15:37:515 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-
E35BF05EE4A9}\Adm\inetres.adm> to the Adm list.
USERENV(318.92c) 17:15:37:515 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-
E35BF05EE4A9}\Adm\system.adm> to the Adm list.
USERENV(318.92c) 17:15:37:515 ParseRegistryFile: Entering with
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-
EB920C4D61FD}\User\registry.pol>.
USERENV(318.92c) 17:15:37:546 SetRegistryValue: NoSimpleStartMenu => 1 [OK]
USERENV(318.92c) 17:15:37:546 SetRegistryValue: NoWelcomeScreen => 1 [OK]
USERENV(318.92c) 17:15:37:562 SetRegistryValue: NoDriveTypeAutoRun => 255
[OK]
USERENV(318.92c) 17:15:37:562 SetRegistryValue: NoThemesTab => 1 [OK]
USERENV(318.92c) 17:15:37:562 SetRegistryValue: ForceClassicControlPanel =>
1 [OK]
USERENV(318.92c) 17:15:37:562 SetRegistryValue: RestrictCpl => 1 [OK]
USERENV(318.92c) 17:15:37:578 SetRegistryValue: NoNetHood => 1 [OK]
USERENV(318.92c) 17:15:37:578 SetRegistryValue: DisablePersonalDirChange =>
1 [OK]
USERENV(318.92c) 17:15:37:578 SetRegistryValue: NoPropertiesMyDocuments => 1
[OK]
USERENV(318.92c) 17:15:37:578 SetRegistryValue: NoPropertiesMyComputer => 1
[OK]
USERENV(318.92c) 17:15:37:593 SetRegistryValue: NoPropertiesRecycleBin => 1
[OK]
USERENV(318.92c) 17:15:37:593 SetRegistryValue: NoSaveSettings => 1 [OK]
USERENV(318.92c) 17:15:37:593 SetRegistryValue: NoRecentDocsNetHood => 1
[OK]
USERENV(318.92c) 17:15:37:593 SetRegistryValue: NoWindowsUpdate => 1 [OK]
USERENV(318.92c) 17:15:37:593 SetRegistryValue: NoNetworkConnections => 1
[OK]
USERENV(318.92c) 17:15:37:609 SetRegistryValue: NoRun => 1 [OK]
USERENV(318.92c) 17:15:37:609 SetRegistryValue: ForceStartMenuLogOff => 1
[OK]
USERENV(318.92c) 17:15:37:609 SetRegistryValue: NoStartMenuNetworkPlaces =>
1 [OK]
USERENV(318.92c) 17:15:37:609 SetRegistryValue: NoResolveSearch => 1 [OK]
USERENV(318.92c) 17:15:37:625 SetRegistryValue: NoResolveTrack => 1 [OK]
USERENV(318.92c) 17:15:37:625 SetRegistryValue: NoStartMenuEjectPC => 1
[OK]
USERENV(318.92c) 17:15:37:625 SetRegistryValue: NoThumbnailCache => 1 [OK]
USERENV(318.92c) 17:15:37:640 SetRegistryValue: Deleted value <HideClock>.
USERENV(318.92c) 17:15:37:640 SetRegistryValue: NoFolderOptions => 1 [OK]
USERENV(318.92c) 17:15:37:640 SetRegistryValue: NoNetConnectDisconnect => 1
[OK]
USERENV(318.92c) 17:15:37:640 SetRegistryValue: NoManageMyComputerVerb => 1
[OK]
USERENV(318.92c) 17:15:37:640 SetRegistryValue: LinkResolveIgnoreLinkInfo =>
1 [OK]
USERENV(318.92c) 17:15:37:656 SetRegistryValue: NoHardwareTab => 1 [OK]
USERENV(318.92c) 17:15:37:656 SetRegistryValue: NoComputersNearMe => 1 [OK]
USERENV(318.92c) 17:15:37:656 SetRegistryValue: NoRunasInstallPrompt => 1
[OK]
USERENV(318.92c) 17:15:37:656 SetRegistryValue: PromptRunasInstallNetPath =>
1 [OK]
USERENV(318.92c) 17:15:37:671 SetRegistryValue: NoSharedDocuments => 1 [OK]
USERENV(318.92c) 17:15:37:671 SetRegistryValue: NoBandCustomize => 1 [OK]
USERENV(318.92c) 17:15:37:671 SetRegistryValue: NoToolbarCustomize => 1
[OK]
USERENV(318.92c) 17:15:37:671 SetRegistryValue: Deleted value
<StartMenuLogOff>.
USERENV(318.92c) 17:15:37:687 SetRegistryValue: Deleted value <NoClose>.
USERENV(318.92c) 17:15:37:687 RsopDeleteAllValues: Deleted <1>
USERENV(318.92c) 17:15:37:687 RsopDeleteAllValues: Deleted <2>
USERENV(318.92c) 17:15:37:687 RsopDeleteAllValues: Deleted <3>
USERENV(318.92c) 17:15:37:687 RsopDeleteAllValues: Deleted <4>
USERENV(318.92c) 17:15:37:703 SetRegistryValue: Deleted all values in
<Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl>.
USERENV(318.92c) 17:15:37:703 SetRegistryValue: DeleteAllvalues finished for
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl.
bRegOpSuccess = TRUE, bLoggingOk = TRUE.
USERENV(318.92c) 17:15:37:703 SetRegistryValue: 1 => access.cpl [OK]
USERENV(318.92c) 17:15:37:703 SetRegistryValue: 2 => desk.cpl [OK]
USERENV(318.92c) 17:15:37:718 SetRegistryValue: 3 => inetcpl.cpl [OK]
USERENV(318.92c) 17:15:37:718 SetRegistryValue: 4 => intl.cpl [OK]
USERENV(318.92c) 17:15:37:718 SetRegistryValue: 5 => main.cpl [OK]
USERENV(318.92c) 17:15:37:718 SetRegistryValue: 6 => mmsys.cpl [OK]
USERENV(318.92c) 17:15:37:734 SetRegistryValue: 7 => nvtuicpl.cpl [OK]
USERENV(318.92c) 17:15:37:734 SetRegistryValue: NoEntireNetwork => 1 [OK]
USERENV(318.92c) 17:15:37:734 SetRegistryValue: SetVisualStyle => [OK]
USERENV(318.92c) 17:15:37:734 SetRegistryValue: DisableRegistryTools => 1
[OK]
USERENV(318.92c) 17:15:37:750 SetRegistryValue: NoDispScrSavPage => 1 [OK]
USERENV(318.92c) 17:15:37:750 SetRegistryValue: NoAddRemovePrograms => 1
[OK]
USERENV(318.92c) 17:15:37:750 SetRegistryValue: DisableWindowsUpdateAccess
=> 1 [OK]
USERENV(318.92c) 17:15:37:750 SetRegistryValue: NoAudio => 1 [OK]
USERENV(318.92c) 17:15:37:750 SetRegistryValue: NoGeneralPage => 1 [OK]
USERENV(318.92c) 17:15:37:765 SetRegistryValue: NoAdvancedCalling => 1 [OK]
USERENV(318.92c) 17:15:37:765 SetRegistryValue: NoSecurityPage => 1 [OK]
USERENV(318.92c) 17:15:37:765 SetRegistryValue: NoAudioPage => 1 [OK]
USERENV(318.92c) 17:15:37:765 SetRegistryValue: NoVideoPage => 1 [OK]
USERENV(318.92c) 17:15:37:781 SetRegistryValue: MultiUILanguageID =>
00000409 [OK]
USERENV(318.92c) 17:15:37:781 SetRegistryValue: Cache => 1 [OK]
USERENV(318.92c) 17:15:37:781 SetRegistryValue: SecurityTab => 1 [OK]
USERENV(318.92c) 17:15:37:781 SetRegistryValue: ContentTab => 1 [OK]
USERENV(318.92c) 17:15:37:796 SetRegistryValue: ConnectionsTab => 1 [OK]
USERENV(318.92c) 17:15:37:796 SetRegistryValue: ProgramsTab => 1 [OK]
USERENV(318.92c) 17:15:37:796 SetRegistryValue: PrivacyTab => 1 [OK]
USERENV(318.92c) 17:15:37:796 SetRegistryValue: AdvancedTab => 1 [OK]
USERENV(318.92c) 17:15:37:812 SetRegistryValue: Connwiz Admin Lock => 1
[OK]
USERENV(318.92c) 17:15:37:812 SetRegistryValue: HomePage => 1 [OK]
USERENV(318.92c) 17:15:37:812 SetRegistryValue: Connection Settings => 1
[OK]
USERENV(318.92c) 17:15:37:812 SetRegistryValue: Proxy => 1 [OK]
USERENV(318.92c) 17:15:37:812 SetRegistryValue: Autoconfig => 1 [OK]
USERENV(318.92c) 17:15:37:828 SetRegistryValue: Messaging => 1 [OK]
USERENV(318.92c) 17:15:37:828 SetRegistryValue: Profiles => 1 [OK]
USERENV(318.92c) 17:15:37:828 SetRegistryValue: CalendarContact => 1 [OK]
USERENV(318.92c) 17:15:37:828 SetRegistryValue: NoExternalBranding => 1
[OK]
USERENV(318.92c) 17:15:37:843 SetRegistryValue: NoHelpItemSendFeedback => 1
[OK]
USERENV(318.92c) 17:15:37:843 SetRegistryValue: PreventRun => 1 [OK]
USERENV(318.92c) 17:15:37:843 SetRegistryValue: PreventAutoRun => 1 [OK]
USERENV(318.92c) 17:15:37:843 SetRegistryValue: RestrictAuthorMode => 1
[OK]
USERENV(318.92c) 17:15:37:859 SetRegistryValue: ScreenSaverIsSecure => 1
[OK]
USERENV(318.92c) 17:15:37:859 SetRegistryValue: ScreenSaveActive => 1 [OK]
USERENV(318.92c) 17:15:37:859 SetRegistryValue: SCRNSAVE.EXE => logon.scr
[OK]
USERENV(318.92c) 17:15:37:859 SetRegistryValue: ScreenSaveTimeOut => 900
[OK]
USERENV(318.92c) 17:15:37:875 SetRegistryValue: Locked Down => 1 [OK]
USERENV(318.92c) 17:15:37:875 SetRegistryValue: DialupAutodetect => 0 [OK]
USERENV(318.92c) 17:15:37:875 SetRegistryValue: EnableAutoProxyResultCache
=> 0 [OK]
USERENV(318.92c) 17:15:37:875 SetRegistryValue:
{D6526FE0-E651-11CF-99CB-00C04FD64497} => 1 [OK]
USERENV(318.92c) 17:15:37:890 SetRegistryValue: HideDirectoryFolder => 1
[OK]
USERENV(318.92c) 17:15:37:890 SetRegistryValue: DisableMedia => 1 [OK]
USERENV(318.92c) 17:15:37:890 SetRegistryValue: AlwaysInstallElevated => 0
[OK]
USERENV(318.92c) 17:15:37:890 SetRegistryValue: NoConfigCache => 1 [OK]
USERENV(318.92c) 17:15:37:890 SetRegistryValue: NoMakeAvailableOffline => 1
[OK]
USERENV(318.92c) 17:15:37:906 SetRegistryValue: NoCacheViewer => 1 [OK]
USERENV(318.92c) 17:15:37:906 SetRegistryValue: DisableCMD => 2 [OK]
USERENV(318.92c) 17:15:37:906 SetRegistryValue: PromptPasswordOnResume => 1
[OK]
USERENV(318.92c) 17:15:37:906 SetRegistryValue: PublishSharedFolders => 0
[OK]
USERENV(318.92c) 17:15:37:921 SetRegistryValue: PublishDfsRoots => 0 [OK]
USERENV(318.92c) 17:15:37:921 SetRegistryValue: SetAndLockSkin => 1 [OK]
USERENV(318.92c) 17:15:37:921 SetRegistryValue: DefaultSkin => [OK]
USERENV(318.92c) 17:15:37:921 SetRegistryValue: PreventCodecDownload => 1
[OK]
USERENV(318.92c) 17:15:37:937 SetRegistryValue: HideNetworkTab => 1 [OK]
USERENV(318.92c) 17:15:37:937 ParseRegistryFile: Leaving.
USERENV(318.92c) 17:15:37:968 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-
EB920C4D61FD}\Adm\conf.adm> to the Adm list.
USERENV(318.92c) 17:15:37:968 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-
EB920C4D61FD}\Adm\inetres.adm> to the Adm list.
USERENV(318.92c) 17:15:37:984 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-
EB920C4D61FD}\Adm\system.adm> to the Adm list.
USERENV(318.92c) 17:15:37:984 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-
EB920C4D61FD}\Adm\wmplayer.adm> to the Adm list.
USERENV(318.92c) 17:15:39:375 LogRegistry RsopData: Successfully logged
registry Rsop data
USERENV(318.92c) 17:15:39:375 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-E
B920C4D61FD}\Adm\wmplayer.adm
USERENV(318.92c) 17:15:39:390 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-E
B920C4D61FD}\Adm\system.adm
USERENV(318.92c) 17:15:39:390 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-E
B920C4D61FD}\Adm\inetres.adm
USERENV(318.92c) 17:15:39:390 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-E
B920C4D61FD}\Adm\conf.adm
USERENV(318.92c) 17:15:39:406 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-E
35BF05EE4A9}\Adm\system.adm
USERENV(318.92c) 17:15:39:406 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-E
35BF05EE4A9}\Adm\inetres.adm
USERENV(318.92c) 17:15:39:421 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-E
35BF05EE4A9}\Adm\conf.adm
USERENV(318.92c) 17:15:39:421 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-9
E7ADF6B89C3}\Adm\system.adm
USERENV(318.92c) 17:15:39:421 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-9
E7ADF6B89C3}\Adm\inetres.adm
USERENV(318.92c) 17:15:39:437 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-9
E7ADF6B89C3}\Adm\conf.adm
USERENV(318.92c) 17:15:39:437 LogAdmRsopData: Successfully logged Adm data
USERENV(318.92c) 17:15:39:453 ProcessGPOList: Extension Registry was able to
log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
USERENV(318.92c) 17:15:39:453 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:39:468 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:39:468 ProcessGPOs: Processing extension Wireless
USERENV(318.92c) 17:15:39:468 CompareGPOLists: The lists are the same.
USERENV(318.92c) 17:15:39:468 ProcessGPOs: Extension Wireless skipped with
flags 0x6.
USERENV(318.92c) 17:15:39:468 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:39:484 ProcessGPOs: Processing extension Folder
Redirection
USERENV(318.92c) 17:15:39:484 CompareGPOLists: One list is empty
USERENV(318.92c) 17:15:39:484 CompareGPOLists: One list is empty
USERENV(318.92c) 17:15:39:484 ProcessGPOList: Entering for extension Folder
Redirection
USERENV(318.92c) 17:15:39:500 UserPolicyCallback: Setting status UI to
Applying Folder Redirection policy...
USERENV(318.92c) 17:15:39:515 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(628.6d4) 17:15:39:703 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(318.92c) 17:15:39:875 UserPolicyCallback: Setting status UI to
Applying your personal settings...
USERENV(318.92c) 17:15:39:875 ProcessGPOList: Extension Folder Redirection
returned 0x0.
USERENV(318.92c) 17:15:39:875 ProcessGPOList: Extension Folder Redirection
was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
USERENV(318.92c) 17:15:39:890 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:39:890 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:39:890 ProcessGPOs: Processing extension Microsoft
Disk Quota
USERENV(318.92c) 17:15:39:906 CompareGPOLists: The lists are the same.
USERENV(318.92c) 17:15:39:906 ProcessGPOs: Extension Microsoft Disk Quota
skipped with flags 0x6.
USERENV(318.92c) 17:15:39:906 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:39:906 ProcessGPOs: Processing extension QoS Packet
Scheduler
USERENV(318.92c) 17:15:39:906 CompareGPOLists: The lists are the same.
USERENV(318.92c) 17:15:39:921 ProcessGPOs: Extension QoS Packet Scheduler
skipped with flags 0x6.
USERENV(318.92c) 17:15:39:921 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:39:921 ProcessGPOs: Processing extension Scripts
USERENV(318.92c) 17:15:39:921 CompareGPOLists: The lists are the same.
USERENV(318.92c) 17:15:39:937 ProcessGPOs: Extension Scripts skipped because
both deleted and changed GPO lists are empty.
USERENV(318.92c) 17:15:39:937 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:39:937 ProcessGPOs: Processing extension Security
USERENV(318.92c) 17:15:39:937 CompareGPOLists: The lists are the same.
USERENV(318.92c) 17:15:39:937 ProcessGPOs: Extension Security skipped with
flags 0x6.
USERENV(318.92c) 17:15:39:953 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:39:953 ProcessGPOs: Processing extension Internet
Explorer Branding
USERENV(318.92c) 17:15:39:953 CompareGPOLists: One list is empty
USERENV(318.92c) 17:15:39:953 ProcessGPOList: Entering for extension
Internet Explorer Branding
USERENV(318.92c) 17:15:39:953 UserPolicyCallback: Setting status UI to
Applying Internet Explorer Branding policy...
USERENV(318.92c) 17:15:39:968 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(318.92c) 17:15:41:171 ImpersonateUser: Failed to impersonate user
with 5.
USERENV(318.92c) 17:15:41:171 GetUserNameAndDomain Failed to impersonate
user
USERENV(318.92c) 17:15:41:171 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(318.92c) 17:15:41:187 ImpersonateUser: Failed to impersonate user
with 5.
USERENV(318.92c) 17:15:41:187 GetUserNameAndDomain Failed to impersonate
user
USERENV(318.92c) 17:15:41:187 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(318.92c) 17:15:41:875 ImpersonateUser: Failed to impersonate user
with 5.
USERENV(318.92c) 17:15:41:875 GetUserNameAndDomain Failed to impersonate
user
USERENV(318.92c) 17:15:41:890 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(318.92c) 17:15:42:468 UserPolicyCallback: Setting status UI to
Applying your personal settings...
USERENV(318.92c) 17:15:42:796 UserPolicyCallback: Setting status UI to
Applying your personal settings...
USERENV(318.92c) 17:15:42:796 ProcessGPOList: Extension Internet Explorer
Branding returned 0x0.
USERENV(318.92c) 17:15:42:812 ProcessGPOList: Extension Internet Explorer
Branding was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the
dirty bit
USERENV(318.92c) 17:15:42:812 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:42:812 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:42:828 ProcessGPOs: Processing extension EFS recovery
USERENV(318.92c) 17:15:42:828 CompareGPOLists: The lists are the same.
USERENV(318.92c) 17:15:42:828 ProcessGPOs: Extension EFS recovery skipped
with flags 0x6.
USERENV(318.92c) 17:15:42:828 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:42:828 ProcessGPOs: Processing extension Software
Installation
USERENV(318.92c) 17:15:42:843 CompareGPOLists: The lists are the same.
USERENV(318.92c) 17:15:42:843 CompareGPOLists: The lists are the same.
USERENV(318.92c) 17:15:42:843 ProcessGPOs: Extension Software Installation
skipped because both deleted and changed GPO lists are empty.
USERENV(318.92c) 17:15:42:843 ProcessGPOs: -----------------------
USERENV(318.92c) 17:15:42:843 ProcessGPOs: Processing extension IP Security
USERENV(318.92c) 17:15:42:859 CompareGPOLists: The lists are the same.
USERENV(318.92c) 17:15:42:859 ProcessGPOs: Extension IP Security skipped wit
h flags 0x6.
USERENV(318.92c) 17:15:42:859 SetFgRefreshInfo: Previous User Fg policy
Synchronous, Reason: FirstPolicyRefresh.
USERENV(318.92c) 17:15:42:859 SetFgRefreshInfo: Next User Fg policy
Asynchronous, Reason: NoNeedForSync.
USERENV(318.92c) 17:15:42:875 LeaveCriticalPolicySection: Critical section
0x940 has been released.
USERENV(318.92c) 17:15:42:875 ProcessGPOs: User Group Policy has been
applied.
USERENV(318.ae8) 17:15:42:875 PolicyChangedThread: Calling UpdateUser with
0.
USERENV(318.92c) 17:15:42:875 ProcessGPOs: Leaving with 1.
USERENV(318.ae8) 17:15:42:875 PolicyChangedThread: Broadcast message for 0.
USERENV(318.92c) 17:15:42:890 ApplyGroupPolicy: Leaving successfully.
USERENV(318.ae8) 17:15:42:953 PolicyChangedThread: Leaving
USERENV(318.aec) 17:15:42:984 GPOThread: Next refresh will happen in 111
minutes
USERENV(318.31c) 17:15:43:203 IsSyncForegroundPolicyRefresh: Asynchronous,
Reason: NoNeedForSync
USERENV(d74.da0) 17:15:52:875 LibMain: Process Name:
C:\WINDOWS\System32\msiexec.exe
USERENV(318.31c) 17:17:50:046 UnloadUserProfile: Entering, hProfile =
<0x748>
USERENV(318.31c) 17:17:50:062 UnloadUserProfile: In console winlogon process
USERENV(318.31c) 17:17:50:062 UnloadUserProfileP: Entering, hProfile =
<0x748>
USERENV(318.31c) 17:17:50:078 AbleToBypassCSC: Try to bypass CSC
USERENV(318.31c) 17:17:50:109 UnLoadUserProfileP: CSC bypassed.
USERENV(318.31c) 17:17:50:109 CSyncManager::EnterLock
<S-1-5-21-746137067-1844823847-1801674531-1232>
USERENV(318.31c) 17:17:50:109 CSyncManager::EnterLock: No existing entry
found
USERENV(318.31c) 17:17:50:109 CSyncManager::EnterLock: New entry created
USERENV(318.31c) 17:17:50:109 CHashTable::HashAdd:
S-1-5-21-746137067-1844823847-1801674531-1232 added in bucket 17
USERENV(318.31c) 17:17:50:125 UnloadUserProfileP: Wait succeeded. In
critical section.
USERENV(318.31c) 17:17:50:296 MyRegUnLoadKey: Failed to unmount hive
00000005
USERENV(318.31c) 17:17:50:296 MyRegUnLoadKey: Returning 0.
USERENV(318.31c) 17:17:50:296 DumpOpenRegistryHandle: 2 user registry
Handles leaked from
\Registry\User\S-1-5-21-746137067-1844823847-1801674531-1232
USERENV(318.31c) 17:17:50:312 UnloadUserProfileP: Didn't unload user profile
<err = 5>
USERENV(318.31c) 17:17:50:312 MyRegUnLoadKey: Failed to unmount hive
00000005
USERENV(318.31c) 17:17:50:312 MyRegUnLoadKey: Returning 0.
USERENV(318.31c) 17:17:50:312 UnLoadClassHive: failed to unload classes key
with 5
USERENV(318.31c) 17:17:50:328 UnloadUserProfileP: Didn't unload user
classes.
USERENV(318.31c) 17:17:50:328 DumpOpenRegistryHandle: 2 user registry
Handles leaked from
\Registry\User\S-1-5-21-746137067-1844823847-1801674531-1232_Classes
USERENV(318.31c) 17:17:50:328 HandleRegKeyLeak: RtlAdjustPrivilege
succeeded!
USERENV(318.31c) 17:17:50:468 HandleRegKeyLeak: RegSaveKey succeeded!
USERENV(318.31c) 17:17:50:468 HandleRegKeyLeak: RtlAdjustPrivilege
succeeded!
USERENV(318.31c) 17:17:50:484 HandleRegKeyLeak: hkCurrentUser closed
USERENV(318.31c) 17:17:50:484 Entering CUserProfile::WatchHiveRefCount:
S-1-5-21-746137067-1844823847-1801674531-1232, 3
USERENV(318.31c) 17:17:50:484 CUserProfile::WatchHiveRefCount: In critical
section
USERENV(318.31c) 17:17:50:484 CUserProfile::WatchHiveRefCount: NtUnloadKeyEx
succeeded for \Registry\User\S-1-5-21-746137067-1844823847-1801674531-1232
USERENV(318.31c) 17:17:50:484 Entering CUserProfile::AddWorkItem:
S-1-5-21-746137067-1844823847-1801674531-1232
USERENV(318.31c) 17:17:50:500 CHashTable::HashAdd:
S-1-5-21-746137067-1844823847-1801674531-1232 added in bucket 17
USERENV(318.31c) 17:17:50:500 CUserProfile::AddWorkItem: No thread
available, create a new one.
USERENV(318.31c) 17:17:50:500 CUserProfile::AddWorkItem: Signal event item
inserted
USERENV(318.31c) 17:17:50:500 CUserProfile::AddWorkItem: New thread created
USERENV(318.804) 17:17:50:500 Entering CUserProfile::WorkerThreadMain
USERENV(318.31c) 17:17:50:515 CUserProfile::AddWorkItem: Work Item inserted
USERENV(318.31c) 17:17:50:515 CUserProfile::AddWorkItem: thread woken up
USERENV(318.31c) 17:17:50:515 Exiting CUserProfile::AddWorkItem with
00000000
USERENV(318.31c) 17:17:50:515 CUserProfile::WatchHiveRefCount: NtUnloadKeyEx
succeeded for
\Registry\User\S-1-5-21-746137067-1844823847-1801674531-1232_Classes
USERENV(318.31c) 17:17:50:531 Entering CUserProfile::AddWorkItem:
S-1-5-21-746137067-1844823847-1801674531-1232_Classes
USERENV(318.31c) 17:17:50:531 CHashTable::HashAdd:
S-1-5-21-746137067-1844823847-1801674531-1232_Classes added in bucket 2
USERENV(318.31c) 17:17:50:531 CUserProfile::AddWorkItem: Work item inserted
USERENV(318.31c) 17:17:50:531 CUserProfile::AddWorkItem: thread woken up
USERENV(318.31c) 17:17:50:531 Exiting CUserProfile::AddWorkItem with
00000000
USERENV(318.31c) 17:17:50:546 HandleRegKeyLeak: Calling WatchHiveRefCount
(S-1-5-21-746137067-1844823847-1801674531-1232) succeeded
USERENV(318.804) 17:17:50:546 CUserProfile::WorkerThreadMain: Leave critical
section
USERENV(318.31c) 17:17:50:546 UnloadUserProfileP: flushing HKEY_USERS
USERENV(318.804) 17:17:50:546 CUserProfile::WorkerThreadMain: Back to
waiting...
USERENV(318.804) 17:17:50:562 CUserProfile::WorkerThreadMain: In critical
section
USERENV(318.804) 17:17:50:562 CUserProfile::WorkerThreadMain: Leave critical
section
USERENV(318.804) 17:17:50:562 CUserProfile::WorkerThreadMain: Back to
waiting...
USERENV(318.31c) 17:17:50:796 UnloadUserProfileP: deleting profile because
it is a guest user or cache needs to be deleted
USERENV(318.31c) 17:17:50:796 DeleteProfile: Fail to delete profile with
sid S-1-5-21-746137067-1844823847-1801674531-1232 as it is still in use.
USERENV(318.31c) 17:17:50:796 UnloadUserProfileP: DeleteProfileDirectory
returned false. Error = 87
USERENV(318.31c) 17:17:50:796 UnloadUserProfileP: Successfully deleted
profile because it is a guest/mandatory user
USERENV(318.31c) 17:17:50:812 CSyncManager::LeaveLock
<S-1-5-21-746137067-1844823847-1801674531-1232>
USERENV(318.31c) 17:17:50:812 CSyncManager::LeaveLock: Lock released
USERENV(318.31c) 17:17:50:812 CHashTable::HashDelete:
S-1-5-21-746137067-1844823847-1801674531-1232 deleted
USERENV(318.31c) 17:17:50:812 CSyncManager::LeaveLock: Lock deleted
USERENV(318.31c) 17:17:50:828 UnloadUserProfileP: Leave critical section.
USERENV(318.31c) 17:17:50:828 UnloadUserProfileP: Leaving with a return
value of 1
USERENV(318.31c) 17:17:50:828 UnloadUserProfile: UnloadUserProfileP
succeeded
USERENV(318.31c) 17:17:50:843 UnloadUserProfile: returning 1
***USERENV LOGGING 2) ***
USERENV(628.6d4) 17:29:07:552 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(318.fd4) 17:38:49:555 SetFgRefreshInfo: Next User Fg policy
Synchronous, Reason: NonCachedCredentials.
USERENV(318.31c) 17:38:49:570 LoadUserProfile: Yes, we can impersonate the
user. Running as self
USERENV(318.31c) 17:38:49:570
=========================================================
USERENV(318.31c) 17:38:49:570 LoadUserProfile: Entering, hToken = <0x2d8>,
lpProfileInfo = 0x6e734
USERENV(318.31c) 17:38:49:570 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(318.31c) 17:38:49:586 LoadUserProfile: lpProfileInfo->lpUserName =
<tbs000021>
USERENV(318.31c) 17:38:49:586 LoadUserProfile: lpProfileInfo->lpProfilePath
= <\\savalas\lo_profiles\tbs000021>
USERENV(318.31c) 17:38:49:586 LoadUserProfile: lpProfileInfo->lpDefaultPath
= <\\POITIER\netlogon\Default User>
USERENV(318.31c) 17:38:49:586 LoadUserProfile: NULL server name
USERENV(318.31c) 17:38:49:602 LoadUserProfile: In console winlogon process
USERENV(318.31c) 17:38:49:602 In LoadUserProfileP
USERENV(318.31c) 17:38:49:602
=========================================================
USERENV(318.31c) 17:38:49:602 LoadUserProfile: Entering, hToken = <0x2d8>,
lpProfileInfo = 0x6e734
USERENV(318.31c) 17:38:49:617 LoadUserProfile: lpProfileInfo->dwFlags =
<0x0>
USERENV(318.31c) 17:38:49:617 LoadUserProfile: lpProfileInfo->lpUserName =
<tbs000021>
USERENV(318.31c) 17:38:49:617 LoadUserProfile: lpProfileInfo->lpProfilePath
= <\\savalas\lo_profiles\tbs000021>
USERENV(318.31c) 17:38:49:617 LoadUserProfile: lpProfileInfo->lpDefaultPath
= <\\POITIER\netlogon\Default User>
USERENV(318.31c) 17:38:49:633 LoadUserProfile: NULL server name
USERENV(318.31c) 17:38:49:633 LoadUserProfile: User sid:
S-1-5-21-746137067-1844823847-1801674531-1232
USERENV(318.31c) 17:38:49:633 CSyncManager::EnterLock
<S-1-5-21-746137067-1844823847-1801674531-1232>
USERENV(318.31c) 17:38:49:633 CSyncManager::EnterLock: No existing entry
found
USERENV(318.31c) 17:38:49:649 CSyncManager::EnterLock: New entry created
USERENV(318.31c) 17:38:49:649 CHashTable::HashAdd:
S-1-5-21-746137067-1844823847-1801674531-1232 added in bucket 17
USERENV(318.31c) 17:38:49:649 LoadUserProfile: Wait succeeded. In critical
section.
USERENV(318.31c) 17:38:49:649 TestIfUserProfileLoaded: Profile already
loaded.
USERENV(318.31c) 17:38:49:664 MyRegLoadKey: Returning 00000000
USERENV(318.31c) 17:38:49:664 CreateClassHive: existing user classes hive
found
USERENV(318.31c) 17:38:49:664 Profile was loaded but the Ref Count is 1 !!!
USERENV(318.31c) 17:38:49:664 LoadUserProfile: Leaving critical Section.
USERENV(318.31c) 17:38:49:680 CSyncManager::LeaveLock
<S-1-5-21-746137067-1844823847-1801674531-1232>
USERENV(318.31c) 17:38:49:680 CSyncManager::LeaveLock: Lock released
USERENV(318.31c) 17:38:49:680 CHashTable::HashDelete:
S-1-5-21-746137067-1844823847-1801674531-1232 deleted
USERENV(318.31c) 17:38:49:680 CSyncManager::LeaveLock: Lock deleted
USERENV(318.31c) 17:38:49:696 LoadUserProfile: Reverted to user: 00000000
USERENV(318.31c) 17:38:49:696 LoadUserProfile: Leaving with a value of 1.
USERENV(318.31c) 17:38:49:711
=========================================================
USERENV(318.31c) 17:38:49:711 LoadUserProfile: LoadUserProfileP succeeded
USERENV(318.31c) 17:38:49:711 LoadUserProfile: Returning success. Final
Information follows:
USERENV(318.31c) 17:38:49:711 lpProfileInfo->UserName = <tbs000021>
USERENV(318.31c) 17:38:49:711 lpProfileInfo->lpProfilePath =
<\\savalas\lo_profiles\tbs000021>
USERENV(318.31c) 17:38:49:727 lpProfileInfo->dwFlags = 0x0
USERENV(318.31c) 17:38:49:727 LoadUserProfile: Returning TRUE. hProfile =
<0x62c>
USERENV(318.31c) 17:38:49:774 IsSyncForegroundPolicyRefresh: Synchronous,
Reason: NonCachedCredentials
USERENV(318.29c) 17:38:49:774 IsSyncForegroundPolicyRefresh: Synchronous,
Reason: NonCachedCredentials
USERENV(318.29c) 17:38:50:024 ApplyGroupPolicy: Entering. Flags = 6
USERENV(318.29c) 17:38:50:024 ProcessGPOs:
USERENV(318.29c) 17:38:50:040 ProcessGPOs:
USERENV(318.29c) 17:38:50:040 ProcessGPOs: Starting user Group Policy
(Background) processing...
USERENV(318.29c) 17:38:50:040 ProcessGPOs:
USERENV(318.29c) 17:38:50:040 ProcessGPOs:
USERENV(318.29c) 17:38:50:040 EnterCriticalPolicySection: User critical
section has been claimed. Handle = 0xc
USERENV(318.29c) 17:38:50:055 ProcessGPOs: Machine role is 2.
USERENV(318.29c) 17:38:50:055 PingComputer: Adapter speed 100000000 bps
USERENV(318.29c) 17:38:50:055 PingComputer: First time: 0
USERENV(318.29c) 17:38:50:071 PingComputer: Fast link. Exiting.
USERENV(318.29c) 17:38:50:086 ProcessGPOs: User name is: CN=Staff
Member,OU=backoffice,OU=users,OU=staff,DC=OURDOMAIN,DC=co,DC=uk, Domain name
is: OURDOMAIN
USERENV(318.29c) 17:38:50:086 ProcessGPOs: Domain controller is:
\\poitier.OURDOMAIN.co.uk Domain DN is OURDOMAIN.co.uk
USERENV(318.29c) 17:38:50:102 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(318.29c) 17:38:50:102 ReadGPExtensions: Rsop entry point not found
for dskquota.dll.
USERENV(318.29c) 17:38:50:102 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(318.29c) 17:38:50:102 ReadGPExtensions: Rsop entry point not found
for scecli.dll.
USERENV(318.29c) 17:38:50:102 ReadGPExtensions: Rsop entry point not found
for gptext.dll.
USERENV(318.29c) 17:38:50:603 ReadMembershipList: Old count 6 is different
from current count 8
USERENV(318.29c) 17:38:50:603 ReadMembershipList: Old count 6 is different
from current count 8
USERENV(318.29c) 17:38:50:603 ProcessGPOs: Logging Data for Target
<tbs000021>.
USERENV(318.29c) 17:38:50:634 GetWbemServices: CoCreateInstance succeeded
USERENV(318.29c) 17:38:50:712 ConnectToNameSpace: ConnectServer returned 0x0
USERENV(318.29c) 17:38:50:743 CSessionLogger::Log: logging new security grps
USERENV(318.29c) 17:38:50:931 LogRsopData: Successfully logged Rsop data
USERENV(318.29c) 17:38:50:931 ProcessGPOs: Logged Rsop Data successfully.
USERENV(318.29c) 17:38:50:978 ProcessGPOs: OpenThreadToken failed with error
1008, assuming thread is not impersonating
USERENV(318.29c) 17:38:50:978 ProcessGPOs: -----------------------
USERENV(318.29c) 17:38:50:993 ProcessGPOs: Processing extension Registry
USERENV(318.29c) 17:38:50:993 ReadStatus: Read Extension's Previous status
successfully.
USERENV(318.29c) 17:38:50:993 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:38:50:993 ProcessGPOList: Entering for extension
Registry
USERENV(318.29c) 17:38:51:009 UserPolicyCallback: Setting status UI to
Applying Registry policy...
USERENV(318.29c) 17:38:51:025 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(318.29c) 17:38:51:025 ResetPolicies: Entering.
USERENV(318.29c) 17:38:51:040 ParseRegistryFile: Entering with <C:\Documents
and Settings\tbs000021.OURDOMAIN\ntuser.pol>.
USERENV(318.29c) 17:38:51:040 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetConnectDisc
onnect
USERENV(318.29c) 17:38:51:040 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoManageMyComput
erVerb
USERENV(318.29c) 17:38:51:056 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\LinkResolveIgnor
eLinkInfo
USERENV(318.29c) 17:38:51:056 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoHardwareTab
USERENV(318.29c) 17:38:51:056 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDFSTab
USERENV(318.29c) 17:38:51:056 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoComputersNearM
e
USERENV(318.29c) 17:38:51:056 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\MaxRecentDocs
USERENV(318.29c) 17:38:51:072 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRunasInstallPr
ompt
USERENV(318.29c) 17:38:51:072 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWindowsUpdate
USERENV(318.29c) 17:38:51:072 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetworkConnect
ions
USERENV(318.29c) 17:38:51:072 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun
USERENV(318.29c) 17:38:51:087 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceStartMenuLo
gOff
USERENV(318.29c) 17:38:51:087 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoChangeStartMen
u
USERENV(318.29c) 17:38:51:087 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoResolveSearch
USERENV(318.29c) 17:38:51:087 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoResolveTrack
USERENV(318.29c) 17:38:51:103 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\GreyMSIAds
USERENV(318.29c) 17:38:51:103 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetHood
USERENV(318.29c) 17:38:51:103 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsNetH
ood
USERENV(318.29c) 17:38:51:103 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisablePersonalD
irChange
USERENV(318.29c) 17:38:51:119 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktop
USERENV(318.29c) 17:38:51:119 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl
USERENV(318.29c) 17:38:51:119 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDeletePrinter
USERENV(318.29c) 17:38:51:119 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWelcomeScreen
USERENV(318.29c) 17:38:51:119 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoR
un
USERENV(318.29c) 17:38:51:134 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose
USERENV(318.29c) 17:38:51:134 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\1
USERENV(318.29c) 17:38:51:134 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\2
USERENV(318.29c) 17:38:51:134 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\3
USERENV(318.29c) 17:38:51:150 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\4
USERENV(318.29c) 17:38:51:150 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Network\NoEntireNetwork
USERENV(318.29c) 17:38:51:150 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage
USERENV(318.29c) 17:38:51:150 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispSettingsPage
USERENV(318.29c) 17:38:51:165 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryToo
ls
USERENV(318.29c) 17:38:51:165 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableProfileQuota
USERENV(318.29c) 17:38:51:165 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\ProfileQuotaMessag
e
USERENV(318.29c) 17:38:51:165 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\MaxProfileSize
USERENV(318.29c) 17:38:51:181 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\WarnUserTimeout
USERENV(318.29c) 17:38:51:181 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall\NoAddRemoveProg
rams
USERENV(318.29c) 17:38:51:181 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoDirectoryServices
USERENV(318.29c) 17:38:51:181 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoAddingDirectoryServers
USERENV(318.29c) 17:38:51:197 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoWebDirectory
USERENV(318.29c) 17:38:51:197 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoSendingFiles
USERENV(318.29c) 17:38:51:197 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoReceivingFiles
USERENV(318.29c) 17:38:51:197 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoOldWhiteBoard
USERENV(318.29c) 17:38:51:197 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoNewWhiteBoard
USERENV(318.29c) 17:38:51:212 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoAutoAcceptCalls
USERENV(318.29c) 17:38:51:212 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\CallSecurity
USERENV(318.29c) 17:38:51:212 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoAppSharing
USERENV(318.29c) 17:38:51:212 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoSharing
USERENV(318.29c) 17:38:51:228 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoAllowControl
USERENV(318.29c) 17:38:51:228 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoAudio
USERENV(318.29c) 17:38:51:228 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoFullDuplex
USERENV(318.29c) 17:38:51:228 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoChangeDirectSound
USERENV(318.29c) 17:38:51:244 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoSendingVideo
USERENV(318.29c) 17:38:51:244 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoReceivingVideo
USERENV(318.29c) 17:38:51:244 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoGeneralPage
USERENV(318.29c) 17:38:51:244 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoAdvancedCalling
USERENV(318.29c) 17:38:51:244 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoSecurityPage
USERENV(318.29c) 17:38:51:259 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoAudioPage
USERENV(318.29c) 17:38:51:259 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoVideoPage
USERENV(318.29c) 17:38:51:259 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Advanced
USERENV(318.29c) 17:38:51:259 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\HomePage
USERENV(318.29c) 17:38:51:275 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Connwiz Admin
Lock
USERENV(318.29c) 17:38:51:275 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Connection
Settings
USERENV(318.29c) 17:38:51:275 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Proxy
USERENV(318.29c) 17:38:51:275 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Autoconfig
USERENV(318.29c) 17:38:51:291 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Ratings
USERENV(318.29c) 17:38:51:291 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Certificates
USERENV(318.29c) 17:38:51:291 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Profiles
USERENV(318.29c) 17:38:51:291 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Messaging
USERENV(318.29c) 17:38:51:306 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\CalendarContact
USERENV(318.29c) 17:38:51:306 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions\NoSearchCustomization
USERENV(318.29c) 17:38:51:306 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions\NoAddingChannels
USERENV(318.29c) 17:38:51:306 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions\NoAddingSubscriptions
USERENV(318.29c) 17:38:51:306 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions\NoEditingSubscriptions
USERENV(318.29c) 17:38:51:322 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions\NoChannelLogging
USERENV(318.29c) 17:38:51:322 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions\NoScheduledUpdates
USERENV(318.29c) 17:38:51:322 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions\NoChannelUI
USERENV(318.29c) 17:38:51:322 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions\NoSubscriptionContent
USERENV(318.29c) 17:38:51:337 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions\NoEditingScheduleGroups
USERENV(318.29c) 17:38:51:337 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Restrictions\NoFindFiles
USERENV(318.29c) 17:38:51:337 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Restrictions\NoExternalBranding
USERENV(318.29c) 17:38:51:337 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Restrictions\NoHelpItemSendFeedback
USERENV(318.29c) 17:38:51:353 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\RestrictAuthorMode
USERENV(318.29c) 17:38:51:353 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\RestrictToPermittedSnapins
USERENV(318.29c) 17:38:51:353 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}\Restr
ict_Run
USERENV(318.29c) 17:38:51:353 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7}\Restr
ict_Run
USERENV(318.29c) 17:38:51:369 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A}\Restr
ict_Run
USERENV(318.29c) 17:38:51:369 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:369 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:369 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700}\Restr
ict_Run
USERENV(318.29c) 17:38:51:384 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF}\Restr
ict_Run
USERENV(318.29c) 17:38:51:384 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}\Restr
ict_Run
USERENV(318.29c) 17:38:51:384 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7}\Restr
ict_Run
USERENV(318.29c) 17:38:51:384 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}\Restr
ict_Run
USERENV(318.29c) 17:38:51:384 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753}\Restr
ict_Run
USERENV(318.29c) 17:38:51:400 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}\Restr
ict_Run
USERENV(318.29c) 17:38:51:400 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3}\Restr
ict_Run
USERENV(318.29c) 17:38:51:400 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}\Restr
ict_Run
USERENV(318.29c) 17:38:51:400 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{58221C65-EA27-11CF-ADCF-00AA00A80033}\Restr
ict_Run
USERENV(318.29c) 17:38:51:416 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{58221C66-EA27-11CF-ADCF-00AA00A80033}\Restr
ict_Run
USERENV(318.29c) 17:38:51:416 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{58221C67-EA27-11CF-ADCF-00AA00A80033}\Restr
ict_Run
USERENV(318.29c) 17:38:51:416 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642}\Restr
ict_Run
USERENV(318.29c) 17:38:51:416 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}\Restr
ict_Run
USERENV(318.29c) 17:38:51:431 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}\Restr
ict_Run
USERENV(318.29c) 17:38:51:431 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}\Restr
ict_Run
USERENV(318.29c) 17:38:51:431 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}\Restr
ict_Run
USERENV(318.29c) 17:38:51:431 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A}\Restr
ict_Run
USERENV(318.29c) 17:38:51:447 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}\Restr
ict_Run
USERENV(318.29c) 17:38:51:447 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}\Restr
ict_Run
USERENV(318.29c) 17:38:51:447 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}\Restr
ict_Run
USERENV(318.29c) 17:38:51:447 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566}\Restr
ict_Run
USERENV(318.29c) 17:38:51:463 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}\Restr
ict_Run
USERENV(318.29c) 17:38:51:463 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}\Restr
ict_Run
USERENV(318.29c) 17:38:51:463 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}\Restr
ict_Run
USERENV(318.29c) 17:38:51:463 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{90810500-38F1-11D1-9345-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:478 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{90810502-38F1-11D1-9345-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:478 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{90810504-38F1-11D1-9345-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:478 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}\Restr
ict_Run
USERENV(318.29c) 17:38:51:478 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}\Restr
ict_Run
USERENV(318.29c) 17:38:51:494 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B}\Restr
ict_Run
USERENV(318.29c) 17:38:51:494 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}\Restr
ict_Run
USERENV(318.29c) 17:38:51:494 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}\Restr
ict_Run
USERENV(318.29c) 17:38:51:494 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}\Restr
ict_Run
USERENV(318.29c) 17:38:51:494 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}\Restr
ict_Run
USERENV(318.29c) 17:38:51:509 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}\Restr
ict_Run
USERENV(318.29c) 17:38:51:509 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{C2FE4500-D6C2-11D0-A37B-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:509 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{C2FE4502-D6C2-11D0-A37B-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:509 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{C2FE4504-D6C2-11D0-A37B-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:525 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{C2FE4506-D6C2-11D0-A37B-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:525 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{C2FE4508-D6C2-11D0-A37B-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:525 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04}\Restr
ict_Run
USERENV(318.29c) 17:38:51:525 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}\Restr
ict_Run
USERENV(318.29c) 17:38:51:541 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}\Restr
ict_Run
USERENV(318.29c) 17:38:51:541 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}\Restr
ict_Run
USERENV(318.29c) 17:38:51:541 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}\Restr
ict_Run
USERENV(318.29c) 17:38:51:541 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}\Restr
ict_Run
USERENV(318.29c) 17:38:51:556 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}\Restr
ict_Run
USERENV(318.29c) 17:38:51:556 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}\Restr
ict_Run
USERENV(318.29c) 17:38:51:556 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}\Restr
ict_Run
USERENV(318.29c) 17:38:51:556 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\SystemCertificates\Trust\Certificates\
USERENV(318.29c) 17:38:51:572 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\SystemCertificates\Trust\CRLs\
USERENV(318.29c) 17:38:51:572 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\SystemCertificates\Trust\CTLs\
USERENV(318.29c) 17:38:51:572 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Control Panel\Desktop\ScreenSaveTimeOut
USERENV(318.29c) 17:38:51:572 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Control
Panel\Desktop\ScreenSaverIsSecure
USERENV(318.29c) 17:38:51:588 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Control Panel\Desktop\SCRNSAVE.EXE
USERENV(318.29c) 17:38:51:588 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Control Panel\Desktop\ScreenSaveActive
USERENV(318.29c) 17:38:51:588 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\CurrentVersion\Identities\Locked Down
USERENV(318.29c) 17:38:51:588 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\DialupAutodetect
USERENV(318.29c) 17:38:51:603 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\EnableAutoProxyResultCache
USERENV(318.29c) 17:38:51:603 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Directory UI\HideDirectoryFolder
USERENV(318.29c) 17:38:51:603 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\NetCache\SyncAtLogoff
USERENV(318.29c) 17:38:51:603 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\NetCache\GoOfflineAction
USERENV(318.29c) 17:38:51:603 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOffline
USERENV(318.29c) 17:38:51:619 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\NetCache\NoCacheViewer
USERENV(318.29c) 17:38:51:619 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\NetCache\NoReminders
USERENV(318.29c) 17:38:51:619 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network Connections\NC_LanConnect
USERENV(318.29c) 17:38:51:619 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network Connections\NC_LanProperties
USERENV(318.29c) 17:38:51:635 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network Connections\NC_RasMyProperties
USERENV(318.29c) 17:38:51:635 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network
Connections\NC_RasAllUserProperties
USERENV(318.29c) 17:38:51:635 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network Connections\NC_RenameConnection
USERENV(318.29c) 17:38:51:635 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network Connections\NC_ChangeBindState
USERENV(318.29c) 17:38:51:650 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network
Connections\NC_RenameMyRasConnection
USERENV(318.29c) 17:38:51:650 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network
Connections\NC_AddRemoveComponents
USERENV(318.29c) 17:38:51:650 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network
Connections\NC_LanChangeProperties
USERENV(318.29c) 17:38:51:650 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network
Connections\NC_RasChangeProperties
USERENV(318.29c) 17:38:51:650 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network
Connections\NC_NewConnectionWizard
USERENV(318.29c) 17:38:51:666 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network Connections\NC_Statistics
USERENV(318.29c) 17:38:51:666 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network Connections\NC_DialupPrefs
USERENV(318.29c) 17:38:51:666 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network Connections\NC_AdvancedSettings
USERENV(318.29c) 17:38:51:666 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network
Connections\NC_ShowSharedAccessUI
USERENV(318.29c) 17:38:51:681 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network
Connections\NC_AllowAdvancedTCPIPConfig
USERENV(318.29c) 17:38:51:681 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network Connections\NC_DeleteConnection
USERENV(318.29c) 17:38:51:681 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network
Connections\NC_DeleteAllUserConnection
USERENV(318.29c) 17:38:51:681 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Network Connections\NC_RasConnect
USERENV(318.29c) 17:38:51:697 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\System\DisableCMD
USERENV(318.29c) 17:38:51:697 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Task Scheduler5.0\Property Pages
USERENV(318.29c) 17:38:51:697 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Task Scheduler5.0\Execution
USERENV(318.29c) 17:38:51:697 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Task Scheduler5.0\DragAndDrop
USERENV(318.29c) 17:38:51:713 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Task Scheduler5.0\Task Creation
USERENV(318.29c) 17:38:51:713 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Task Scheduler5.0\Task Deletion
USERENV(318.29c) 17:38:51:713 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Task Scheduler5.0\Disable Advanced
USERENV(318.29c) 17:38:51:713 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Task Scheduler5.0\Allow Browse
USERENV(318.29c) 17:38:51:713 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows NT\Driver Signing\BehaviorOnFailedVerify
USERENV(318.29c) 17:38:51:728 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows NT\Printers\Wizard\Downlevel Browse
USERENV(318.29c) 17:38:51:728 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Control Panel\Desktop\ScreenSaveTimeOut
USERENV(318.29c) 17:38:51:728 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows NT\Printers\Wizard\Downlevel Browse
USERENV(318.29c) 17:38:51:728 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSimpleStartMen
u
USERENV(318.29c) 17:38:51:744 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWelcomeScreen
USERENV(318.29c) 17:38:51:744 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoR
un
USERENV(318.29c) 17:38:51:744 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoThemesTab
USERENV(318.29c) 17:38:51:744 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceClassicCont
rolPanel
USERENV(318.29c) 17:38:51:760 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl
USERENV(318.29c) 17:38:51:760 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetHood
USERENV(318.29c) 17:38:51:760 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisablePersonalD
irChange
USERENV(318.29c) 17:38:51:760 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyDo
cuments
USERENV(318.29c) 17:38:51:775 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyCo
mputer
USERENV(318.29c) 17:38:51:775 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecy
cleBin
USERENV(318.29c) 17:38:51:775 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSaveSettings
USERENV(318.29c) 17:38:51:775 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsNetH
ood
USERENV(318.29c) 17:38:51:775 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWindowsUpdate
USERENV(318.29c) 17:38:51:791 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetworkConnect
ions
USERENV(318.29c) 17:38:51:791 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun
USERENV(318.29c) 17:38:51:791 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceStartMenuLo
gOff
USERENV(318.29c) 17:38:51:791 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuNetwo
rkPlaces
USERENV(318.29c) 17:38:51:807 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoResolveSearch
USERENV(318.29c) 17:38:51:807 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoResolveTrack
USERENV(318.29c) 17:38:51:807 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuEject
PC
USERENV(318.29c) 17:38:51:807 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoThumbnailCache
USERENV(318.29c) 17:38:51:822 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions
USERENV(318.29c) 17:38:51:822 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetConnectDisc
onnect
USERENV(318.29c) 17:38:51:822 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoManageMyComput
erVerb
USERENV(318.29c) 17:38:51:822 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\LinkResolveIgnor
eLinkInfo
USERENV(318.29c) 17:38:51:822 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoHardwareTab
USERENV(318.29c) 17:38:51:838 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoComputersNearM
e
USERENV(318.29c) 17:38:51:838 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRunasInstallPr
ompt
USERENV(318.29c) 17:38:51:838 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\PromptRunasInsta
llNetPath
USERENV(318.29c) 17:38:51:838 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSharedDocument
s
USERENV(318.29c) 17:38:51:853 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoBandCustomize
USERENV(318.29c) 17:38:51:853 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoToolbarCustomi
ze
USERENV(318.29c) 17:38:51:853 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\1
USERENV(318.29c) 17:38:51:853 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\2
USERENV(318.29c) 17:38:51:853 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\3
USERENV(318.29c) 17:38:51:869 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\4
USERENV(318.29c) 17:38:51:869 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\5
USERENV(318.29c) 17:38:51:869 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\6
USERENV(318.29c) 17:38:51:869 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl\7
USERENV(318.29c) 17:38:51:885 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Network\NoEntireNetwork
USERENV(318.29c) 17:38:51:885 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\SetVisualStyle
USERENV(318.29c) 17:38:51:885 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryToo
ls
USERENV(318.29c) 17:38:51:885 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage
USERENV(318.29c) 17:38:51:900 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall\NoAddRemoveProg
rams
USERENV(318.29c) 17:38:51:900 DeleteRegistryValue: Deleted
Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate\DisableWind
owsUpdateAccess
USERENV(318.29c) 17:38:51:900 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoAudio
USERENV(318.29c) 17:38:51:900 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoGeneralPage
USERENV(318.29c) 17:38:51:916 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoAdvancedCalling
USERENV(318.29c) 17:38:51:916 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoSecurityPage
USERENV(318.29c) 17:38:51:916 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoAudioPage
USERENV(318.29c) 17:38:51:916 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Conferencing\NoVideoPage
USERENV(318.29c) 17:38:51:916 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Control Panel\Desktop\MultiUILanguageID
USERENV(318.29c) 17:38:51:932 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Cache
USERENV(318.29c) 17:38:51:932 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\SecurityTab
USERENV(318.29c) 17:38:51:932 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\ContentTab
USERENV(318.29c) 17:38:51:932 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\ConnectionsTab
USERENV(318.29c) 17:38:51:947 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\ProgramsTab
USERENV(318.29c) 17:38:51:947 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\PrivacyTab
USERENV(318.29c) 17:38:51:947 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\AdvancedTab
USERENV(318.29c) 17:38:51:947 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Connwiz Admin
Lock
USERENV(318.29c) 17:38:51:963 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\HomePage
USERENV(318.29c) 17:38:51:963 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Connection
Settings
USERENV(318.29c) 17:38:51:963 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Proxy
USERENV(318.29c) 17:38:51:963 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Autoconfig
USERENV(318.29c) 17:38:51:963 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Messaging
USERENV(318.29c) 17:38:51:979 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\Profiles
USERENV(318.29c) 17:38:51:979 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet Explorer\Control Panel\CalendarContact
USERENV(318.29c) 17:38:51:979 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Restrictions\NoExternalBranding
USERENV(318.29c) 17:38:51:979 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Internet
Explorer\Restrictions\NoHelpItemSendFeedback
USERENV(318.29c) 17:38:51:994 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Messenger\Client\PreventRun
USERENV(318.29c) 17:38:51:994 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Messenger\Client\PreventAutoRun
USERENV(318.29c) 17:38:51:994 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\MMC\RestrictAuthorMode
USERENV(318.29c) 17:38:51:994 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Control
Panel\Desktop\ScreenSaverIsSecure
USERENV(318.29c) 17:38:51:994 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Control Panel\Desktop\ScreenSaveActive
USERENV(318.29c) 17:38:52:010 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Control Panel\Desktop\SCRNSAVE.EXE
USERENV(318.29c) 17:38:52:010 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Control Panel\Desktop\ScreenSaveTimeOut
USERENV(318.29c) 17:38:52:010 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\CurrentVersion\Identities\Locked Down
USERENV(318.29c) 17:38:52:010 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\DialupAutodetect
USERENV(318.29c) 17:38:52:026 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\EnableAutoProxyResultCache
USERENV(318.29c) 17:38:52:026 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\AllowedControls\{D6526FE0-E651-11CF-99CB-00C04FD64497}
USERENV(318.29c) 17:38:52:026 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Directory UI\HideDirectoryFolder
USERENV(318.29c) 17:38:52:026 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Installer\DisableMedia
USERENV(318.29c) 17:38:52:041 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\Installer\AlwaysInstallElevated
USERENV(318.29c) 17:38:52:041 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\NetCache\NoConfigCache
USERENV(318.29c) 17:38:52:041 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOffline
USERENV(318.29c) 17:38:52:057 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\NetCache\NoCacheViewer
USERENV(318.29c) 17:38:52:057 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\System\DisableCMD
USERENV(318.29c) 17:38:52:057 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows\System\Power\PromptPasswordOnResume
USERENV(318.29c) 17:38:52:057 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows NT\SharedFolders\PublishSharedFolders
USERENV(318.29c) 17:38:52:072 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\Windows NT\SharedFolders\PublishDfsRoots
USERENV(318.29c) 17:38:52:072 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\WindowsMediaPlayer\SetAndLockSkin
USERENV(318.29c) 17:38:52:072 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\WindowsMediaPlayer\DefaultSkin
USERENV(318.29c) 17:38:52:072 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\WindowsMediaPlayer\PreventCodecDownload
USERENV(318.29c) 17:38:52:072 DeleteRegistryValue: Deleted
Software\Policies\Microsoft\WindowsMediaPlayer\HideNetworkTab
USERENV(318.29c) 17:38:52:088 ParseRegistryFile: Leaving.
USERENV(318.29c) 17:38:52:088 ResetPolicies: Leaving.
USERENV(318.29c) 17:38:52:088 ParseRegistryFile: Entering with
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-
9E7ADF6B89C3}\User\registry.pol>.
USERENV(318.29c) 17:38:52:119 SetRegistryValue: NoNetConnectDisconnect => 1
[OK]
USERENV(318.29c) 17:38:52:119 SetRegistryValue: NoManageMyComputerVerb => 1
[OK]
USERENV(318.29c) 17:38:52:135 SetRegistryValue: LinkResolveIgnoreLinkInfo =>
1 [OK]
USERENV(318.29c) 17:38:52:135 SetRegistryValue: NoHardwareTab => 1 [OK]
USERENV(318.29c) 17:38:52:135 SetRegistryValue: NoDFSTab => 1 [OK]
USERENV(318.29c) 17:38:52:135 SetRegistryValue: NoComputersNearMe => 1 [OK]
USERENV(318.29c) 17:38:52:151 SetRegistryValue: MaxRecentDocs => 10 [OK]
USERENV(318.29c) 17:38:52:151 SetRegistryValue: NoRunasInstallPrompt => 1
[OK]
USERENV(318.29c) 17:38:52:151 SetRegistryValue: NoWindowsUpdate => 1 [OK]
USERENV(318.29c) 17:38:52:151 SetRegistryValue: NoNetworkConnections => 1
[OK]
USERENV(318.29c) 17:38:52:166 SetRegistryValue: NoRun => 1 [OK]
USERENV(318.29c) 17:38:52:166 SetRegistryValue: ForceStartMenuLogOff => 1
[OK]
USERENV(318.29c) 17:38:52:166 SetRegistryValue: NoChangeStartMenu => 1 [OK]
USERENV(318.29c) 17:38:52:166 SetRegistryValue: NoResolveSearch => 1 [OK]
USERENV(318.29c) 17:38:52:182 SetRegistryValue: NoResolveTrack => 1 [OK]
USERENV(318.29c) 17:38:52:182 SetRegistryValue: GreyMSIAds => 1 [OK]
USERENV(318.29c) 17:38:52:182 SetRegistryValue: NoNetHood => 1 [OK]
USERENV(318.29c) 17:38:52:182 SetRegistryValue: NoRecentDocsNetHood => 1
[OK]
USERENV(318.29c) 17:38:52:182 SetRegistryValue: DisablePersonalDirChange =>
1 [OK]
USERENV(318.29c) 17:38:52:198 SetRegistryValue: NoActiveDesktop => 1 [OK]
USERENV(318.29c) 17:38:52:198 SetRegistryValue: RestrictCpl => 1 [OK]
USERENV(318.29c) 17:38:52:198 SetRegistryValue: NoDeletePrinter => 1 [OK]
USERENV(318.29c) 17:38:52:198 SetRegistryValue: NoWelcomeScreen => 1 [OK]
USERENV(318.29c) 17:38:52:213 SetRegistryValue: NoDriveTypeAutoRun => 255
[OK]
USERENV(318.29c) 17:38:52:213 SetRegistryValue: NoClose => 1 [OK]
USERENV(318.29c) 17:38:52:213 SetRegistryValue: 1 => access.cpl [OK]
USERENV(318.29c) 17:38:52:229 SetRegistryValue: 2 => desk.cpl [OK]
USERENV(318.29c) 17:38:52:229 SetRegistryValue: 3 => inetcpl.cpl [OK]
USERENV(318.29c) 17:38:52:229 SetRegistryValue: 4 => intl.cpl [OK]
USERENV(318.29c) 17:38:52:229 SetRegistryValue: NoEntireNetwork => 1 [OK]
USERENV(318.29c) 17:38:52:244 SetRegistryValue: NoDispScrSavPage => 1 [OK]
USERENV(318.29c) 17:38:52:244 SetRegistryValue: NoDispSettingsPage => 1
[OK]
USERENV(318.29c) 17:38:52:244 SetRegistryValue: DisableRegistryTools => 1
[OK]
USERENV(318.29c) 17:38:52:244 SetRegistryValue: EnableProfileQuota => 1
[OK]
USERENV(318.29c) 17:38:52:260 SetRegistryValue: ProfileQuotaMessage => Your
profile is becoming very large, and may prevent you from logging on in
future. Try deleting your some temporary files. Ask a member of staff if
you require asistance. [OK]
USERENV(318.29c) 17:38:52:260 SetRegistryValue: MaxProfileSize => 20000
[OK]
USERENV(318.29c) 17:38:52:260 SetRegistryValue: Deleted value
<IncludeRegInProQuota>.
USERENV(318.29c) 17:38:52:260 SetRegistryValue: Deleted value <WarnUser>.
USERENV(318.29c) 17:38:52:276 SetRegistryValue: WarnUserTimeout => 60 [OK]
USERENV(318.29c) 17:38:52:276 SetRegistryValue: NoAddRemovePrograms => 1
[OK]
USERENV(318.29c) 17:38:52:276 SetRegistryValue: NoDirectoryServices => 1
[OK]
USERENV(318.29c) 17:38:52:276 SetRegistryValue: NoAddingDirectoryServers =>
1 [OK]
USERENV(318.29c) 17:38:52:291 SetRegistryValue: NoWebDirectory => 1 [OK]
USERENV(318.29c) 17:38:52:291 SetRegistryValue: NoSendingFiles => 1 [OK]
USERENV(318.29c) 17:38:52:291 SetRegistryValue: NoReceivingFiles => 1 [OK]
USERENV(318.29c) 17:38:52:291 SetRegistryValue: NoOldWhiteBoard => 1 [OK]
USERENV(318.29c) 17:38:52:307 SetRegistryValue: NoNewWhiteBoard => 1 [OK]
USERENV(318.29c) 17:38:52:307 SetRegistryValue: NoAutoAcceptCalls => 1 [OK]
USERENV(318.29c) 17:38:52:307 SetRegistryValue: CallSecurity => 1 [OK]
USERENV(318.29c) 17:38:52:307 SetRegistryValue: NoAppSharing => 1 [OK]
USERENV(318.29c) 17:38:52:323 SetRegistryValue: NoSharing => 1 [OK]
USERENV(318.29c) 17:38:52:323 SetRegistryValue: NoAllowControl => 1 [OK]
USERENV(318.29c) 17:38:52:323 SetRegistryValue: NoAudio => 1 [OK]
USERENV(318.29c) 17:38:52:323 SetRegistryValue: NoFullDuplex => 1 [OK]
USERENV(318.29c) 17:38:52:338 SetRegistryValue: NoChangeDirectSound => 1
[OK]
USERENV(318.29c) 17:38:52:338 SetRegistryValue: NoSendingVideo => 1 [OK]
USERENV(318.29c) 17:38:52:338 SetRegistryValue: NoReceivingVideo => 1 [OK]
USERENV(318.29c) 17:38:52:338 SetRegistryValue: NoGeneralPage => 1 [OK]
USERENV(318.29c) 17:38:52:354 SetRegistryValue: NoAdvancedCalling => 1 [OK]
USERENV(318.29c) 17:38:52:354 SetRegistryValue: NoSecurityPage => 1 [OK]
USERENV(318.29c) 17:38:52:354 SetRegistryValue: NoAudioPage => 1 [OK]
USERENV(318.29c) 17:38:52:354 SetRegistryValue: NoVideoPage => 1 [OK]
USERENV(318.29c) 17:38:52:370 SetRegistryValue: Advanced => 1 [OK]
USERENV(318.29c) 17:38:52:370 SetRegistryValue: HomePage => 1 [OK]
USERENV(318.29c) 17:38:52:370 SetRegistryValue: Connwiz Admin Lock => 1
[OK]
USERENV(318.29c) 17:38:52:370 SetRegistryValue: Connection Settings => 1
[OK]
USERENV(318.29c) 17:38:52:370 SetRegistryValue: Proxy => 1 [OK]
USERENV(318.29c) 17:38:52:385 SetRegistryValue: Autoconfig => 1 [OK]
USERENV(318.29c) 17:38:52:385 SetRegistryValue: Ratings => 1 [OK]
USERENV(318.29c) 17:38:52:385 SetRegistryValue: Certificates => 1 [OK]
USERENV(318.29c) 17:38:52:401 SetRegistryValue: Profiles => 1 [OK]
USERENV(318.29c) 17:38:52:401 SetRegistryValue: Messaging => 1 [OK]
USERENV(318.29c) 17:38:52:401 SetRegistryValue: CalendarContact => 1 [OK]
USERENV(318.29c) 17:38:52:401 SetRegistryValue: NoSearchCustomization => 1
[OK]
USERENV(318.29c) 17:38:52:416 SetRegistryValue: NoAddingChannels => 1 [OK]
USERENV(318.29c) 17:38:52:416 SetRegistryValue: NoAddingSubscriptions => 1
[OK]
USERENV(318.29c) 17:38:52:416 SetRegistryValue: NoEditingSubscriptions => 1
[OK]
USERENV(318.29c) 17:38:52:416 SetRegistryValue: NoChannelLogging => 1 [OK]
USERENV(318.29c) 17:38:52:432 SetRegistryValue: NoScheduledUpdates => 1
[OK]
USERENV(318.29c) 17:38:52:432 SetRegistryValue: NoChannelUI => 1 [OK]
USERENV(318.29c) 17:38:52:432 SetRegistryValue: NoSubscriptionContent => 1
[OK]
USERENV(318.29c) 17:38:52:432 SetRegistryValue: NoEditingScheduleGroups => 1
[OK]
USERENV(318.29c) 17:38:52:448 SetRegistryValue: NoFindFiles => 1 [OK]
USERENV(318.29c) 17:38:52:448 SetRegistryValue: NoExternalBranding => 1
[OK]
USERENV(318.29c) 17:38:52:448 SetRegistryValue: NoHelpItemSendFeedback => 1
[OK]
USERENV(318.29c) 17:38:52:448 SetRegistryValue: RestrictAuthorMode => 1
[OK]
USERENV(318.29c) 17:38:52:448 SetRegistryValue: RestrictToPermittedSnapins
=> 1 [OK]
USERENV(318.29c) 17:38:52:463 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:463 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:463 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:463 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:479 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:479 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:479 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:495 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:495 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:495 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:495 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:510 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:510 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:510 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:510 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:526 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:526 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:526 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:526 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:542 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:542 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:542 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:542 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:542 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:557 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:557 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:557 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:573 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:573 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:573 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:573 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:588 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:588 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:588 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:588 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:604 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:604 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:604 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:604 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:620 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:620 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:620 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:620 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:635 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:635 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:635 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:635 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:651 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:651 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:651 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:651 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:667 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:667 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:667 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:667 SetRegistryValue: Restrict_Run => 1 [OK]
USERENV(318.29c) 17:38:52:682 SetRegistryValue: ScreenSaveTimeOut => 900
[OK]
USERENV(318.29c) 17:38:52:682 SetRegistryValue: ScreenSaverIsSecure => 1
[OK]
USERENV(318.29c) 17:38:52:682 SetRegistryValue: SCRNSAVE.EXE => logon.scr
[OK]
USERENV(318.29c) 17:38:52:682 SetRegistryValue: ScreenSaveActive => 1 [OK]
USERENV(318.29c) 17:38:52:698 SetRegistryValue: Locked Down => 1 [OK]
USERENV(318.29c) 17:38:52:698 SetRegistryValue: DialupAutodetect => 0 [OK]
USERENV(318.29c) 17:38:52:698 SetRegistryValue: EnableAutoProxyResultCache
=> 0 [OK]
USERENV(318.29c) 17:38:52:698 SetRegistryValue: HideDirectoryFolder => 1
[OK]
USERENV(318.29c) 17:38:52:714 SetRegistryValue: SyncAtLogoff => 0 [OK]
USERENV(318.29c) 17:38:52:714 SetRegistryValue: GoOfflineAction => 1 [OK]
USERENV(318.29c) 17:38:52:714 SetRegistryValue: NoMakeAvailableOffline => 1
[OK]
USERENV(318.29c) 17:38:52:714 SetRegistryValue: NoCacheViewer => 1 [OK]
USERENV(318.29c) 17:38:52:729 SetRegistryValue: NoReminders => 1 [OK]
USERENV(318.29c) 17:38:52:729 SetRegistryValue: NC_LanConnect => 0 [OK]
USERENV(318.29c) 17:38:52:729 SetRegistryValue: NC_LanProperties => 0 [OK]
USERENV(318.29c) 17:38:52:745 SetRegistryValue: NC_RasMyProperties => 0
[OK]
USERENV(318.29c) 17:38:52:745 SetRegistryValue: NC_RasAllUserProperties => 0
[OK]
USERENV(318.29c) 17:38:52:745 SetRegistryValue: NC_RenameConnection => 0
[OK]
USERENV(318.29c) 17:38:52:745 SetRegistryValue: NC_ChangeBindState => 0
[OK]
USERENV(318.29c) 17:38:52:760 SetRegistryValue: NC_RenameMyRasConnection =>
0 [OK]
USERENV(318.29c) 17:38:52:760 SetRegistryValue: NC_AddRemoveComponents => 0
[OK]
USERENV(318.29c) 17:38:52:760 SetRegistryValue: NC_LanChangeProperties => 0
[OK]
USERENV(318.29c) 17:38:52:760 SetRegistryValue: NC_RasChangeProperties => 0
[OK]
USERENV(318.29c) 17:38:52:760 SetRegistryValue: NC_NewConnectionWizard => 0
[OK]
USERENV(318.29c) 17:38:52:776 SetRegistryValue: NC_Statistics => 0 [OK]
USERENV(318.29c) 17:38:52:776 SetRegistryValue: NC_DialupPrefs => 0 [OK]
USERENV(318.29c) 17:38:52:776 SetRegistryValue: NC_AdvancedSettings => 0
[OK]
USERENV(318.29c) 17:38:52:776 SetRegistryValue: NC_ShowSharedAccessUI => 0
[OK]
USERENV(318.29c) 17:38:52:792 SetRegistryValue: NC_AllowAdvancedTCPIPConfig
=> 0 [OK]
USERENV(318.29c) 17:38:52:792 SetRegistryValue: NC_DeleteConnection => 0
[OK]
USERENV(318.29c) 17:38:52:792 SetRegistryValue: NC_DeleteAllUserConnection
=> 0 [OK]
USERENV(318.29c) 17:38:52:792 SetRegistryValue: NC_RasConnect => 0 [OK]
USERENV(318.29c) 17:38:52:807 SetRegistryValue: DisableCMD => 2 [OK]
USERENV(318.29c) 17:38:52:807 SetRegistryValue: Property Pages => 1 [OK]
USERENV(318.29c) 17:38:52:807 SetRegistryValue: Execution => 1 [OK]
USERENV(318.29c) 17:38:52:807 SetRegistryValue: DragAndDrop => 1 [OK]
USERENV(318.29c) 17:38:52:823 SetRegistryValue: Task Creation => 1 [OK]
USERENV(318.29c) 17:38:52:823 SetRegistryValue: Task Deletion => 1 [OK]
USERENV(318.29c) 17:38:52:823 SetRegistryValue: Disable Advanced => 1 [OK]
USERENV(318.29c) 17:38:52:823 SetRegistryValue: Allow Browse => 1 [OK]
USERENV(318.29c) 17:38:52:839 SetRegistryValue: BehaviorOnFailedVerify => 2
[OK]
USERENV(318.29c) 17:38:52:839 SetRegistryValue: Downlevel Browse => 1 [OK]
USERENV(318.29c) 17:38:52:839 SetRegistryValue: Deleted value <Printers Page
URL>.
USERENV(318.29c) 17:38:52:839 ParseRegistryFile: Leaving.
USERENV(318.29c) 17:38:52:886 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-
9E7ADF6B89C3}\Adm\conf.adm> to the Adm list.
USERENV(318.29c) 17:38:52:886 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-
9E7ADF6B89C3}\Adm\inetres.adm> to the Adm list.
USERENV(318.29c) 17:38:52:901 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-
9E7ADF6B89C3}\Adm\system.adm> to the Adm list.
USERENV(318.29c) 17:38:52:901 ParseRegistryFile: Entering with
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-
E35BF05EE4A9}\User\registry.pol>.
USERENV(318.29c) 17:38:52:932 SetRegistryValue: Deleted value
<NoDeletePrinter>.
USERENV(318.29c) 17:38:52:932 SetRegistryValue: Deleted value
<NoAddPrinter>.
USERENV(318.29c) 17:38:52:932 SetRegistryValue: ScreenSaveTimeOut => 1800
[OK]
USERENV(318.29c) 17:38:52:948 SetRegistryValue: Downlevel Browse => 1 [OK]
USERENV(318.29c) 17:38:52:948 ParseRegistryFile: Leaving.
USERENV(318.29c) 17:38:52:979 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-
E35BF05EE4A9}\Adm\conf.adm> to the Adm list.
USERENV(318.29c) 17:38:52:979 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-
E35BF05EE4A9}\Adm\inetres.adm> to the Adm list.
USERENV(318.29c) 17:38:52:995 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-
E35BF05EE4A9}\Adm\system.adm> to the Adm list.
USERENV(318.29c) 17:38:52:995 ParseRegistryFile: Entering with
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-
EB920C4D61FD}\User\registry.pol>.
USERENV(318.29c) 17:38:53:026 SetRegistryValue: NoSimpleStartMenu => 1 [OK]
USERENV(318.29c) 17:38:53:026 SetRegistryValue: NoWelcomeScreen => 1 [OK]
USERENV(318.29c) 17:38:53:026 SetRegistryValue: NoDriveTypeAutoRun => 255
[OK]
USERENV(318.29c) 17:38:53:042 SetRegistryValue: NoThemesTab => 1 [OK]
USERENV(318.29c) 17:38:53:042 SetRegistryValue: ForceClassicControlPanel =>
1 [OK]
USERENV(318.29c) 17:38:53:042 SetRegistryValue: RestrictCpl => 1 [OK]
USERENV(318.29c) 17:38:53:058 SetRegistryValue: NoNetHood => 1 [OK]
USERENV(318.29c) 17:38:53:058 SetRegistryValue: DisablePersonalDirChange =>
1 [OK]
USERENV(318.29c) 17:38:53:058 SetRegistryValue: NoPropertiesMyDocuments => 1
[OK]
USERENV(318.29c) 17:38:53:058 SetRegistryValue: NoPropertiesMyComputer => 1
[OK]
USERENV(318.29c) 17:38:53:058 SetRegistryValue: NoPropertiesRecycleBin => 1
[OK]
USERENV(318.29c) 17:38:53:073 SetRegistryValue: NoSaveSettings => 1 [OK]
USERENV(318.29c) 17:38:53:073 SetRegistryValue: NoRecentDocsNetHood => 1
[OK]
USERENV(318.29c) 17:38:53:073 SetRegistryValue: NoWindowsUpdate => 1 [OK]
USERENV(318.29c) 17:38:53:073 SetRegistryValue: NoNetworkConnections => 1
[OK]
USERENV(318.29c) 17:38:53:089 SetRegistryValue: NoRun => 1 [OK]
USERENV(318.29c) 17:38:53:089 SetRegistryValue: ForceStartMenuLogOff => 1
[OK]
USERENV(318.29c) 17:38:53:089 SetRegistryValue: NoStartMenuNetworkPlaces =>
1 [OK]
USERENV(318.29c) 17:38:53:089 SetRegistryValue: NoResolveSearch => 1 [OK]
USERENV(318.29c) 17:38:53:104 SetRegistryValue: NoResolveTrack => 1 [OK]
USERENV(318.29c) 17:38:53:104 SetRegistryValue: NoStartMenuEjectPC => 1
[OK]
USERENV(318.29c) 17:38:53:104 SetRegistryValue: NoThumbnailCache => 1 [OK]
USERENV(318.29c) 17:38:53:104 SetRegistryValue: Deleted value <HideClock>.
USERENV(318.29c) 17:38:53:120 SetRegistryValue: NoFolderOptions => 1 [OK]
USERENV(318.29c) 17:38:53:120 SetRegistryValue: NoNetConnectDisconnect => 1
[OK]
USERENV(318.29c) 17:38:53:120 SetRegistryValue: NoManageMyComputerVerb => 1
[OK]
USERENV(318.29c) 17:38:53:120 SetRegistryValue: LinkResolveIgnoreLinkInfo =>
1 [OK]
USERENV(318.29c) 17:38:53:136 SetRegistryValue: NoHardwareTab => 1 [OK]
USERENV(318.29c) 17:38:53:136 SetRegistryValue: NoComputersNearMe => 1 [OK]
USERENV(318.29c) 17:38:53:136 SetRegistryValue: NoRunasInstallPrompt => 1
[OK]
USERENV(318.29c) 17:38:53:136 SetRegistryValue: PromptRunasInstallNetPath =>
1 [OK]
USERENV(318.29c) 17:38:53:151 SetRegistryValue: NoSharedDocuments => 1 [OK]
USERENV(318.29c) 17:38:53:151 SetRegistryValue: NoBandCustomize => 1 [OK]
USERENV(318.29c) 17:38:53:151 SetRegistryValue: NoToolbarCustomize => 1
[OK]
USERENV(318.29c) 17:38:53:151 SetRegistryValue: Deleted value
<StartMenuLogOff>.
USERENV(318.29c) 17:38:53:167 SetRegistryValue: Deleted value <NoClose>.
USERENV(318.29c) 17:38:53:167 RsopDeleteAllValues: Deleted <1>
USERENV(318.29c) 17:38:53:167 RsopDeleteAllValues: Deleted <2>
USERENV(318.29c) 17:38:53:167 RsopDeleteAllValues: Deleted <3>
USERENV(318.29c) 17:38:53:183 RsopDeleteAllValues: Deleted <4>
USERENV(318.29c) 17:38:53:183 SetRegistryValue: Deleted all values in
<Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl>.
USERENV(318.29c) 17:38:53:183 SetRegistryValue: DeleteAllvalues finished for
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl.
bRegOpSuccess = TRUE, bLoggingOk = TRUE.
USERENV(318.29c) 17:38:53:183 SetRegistryValue: 1 => access.cpl [OK]
USERENV(318.29c) 17:38:53:183 SetRegistryValue: 2 => desk.cpl [OK]
USERENV(318.29c) 17:38:53:198 SetRegistryValue: 3 => inetcpl.cpl [OK]
USERENV(318.29c) 17:38:53:198 SetRegistryValue: 4 => intl.cpl [OK]
USERENV(318.29c) 17:38:53:198 SetRegistryValue: 5 => main.cpl [OK]
USERENV(318.29c) 17:38:53:198 SetRegistryValue: 6 => mmsys.cpl [OK]
USERENV(318.29c) 17:38:53:214 SetRegistryValue: 7 => nvtuicpl.cpl [OK]
USERENV(318.29c) 17:38:53:214 SetRegistryValue: NoEntireNetwork => 1 [OK]
USERENV(318.29c) 17:38:53:214 SetRegistryValue: SetVisualStyle => [OK]
USERENV(318.29c) 17:38:53:214 SetRegistryValue: DisableRegistryTools => 1
[OK]
USERENV(318.29c) 17:38:53:230 SetRegistryValue: NoDispScrSavPage => 1 [OK]
USERENV(318.29c) 17:38:53:230 SetRegistryValue: NoAddRemovePrograms => 1
[OK]
USERENV(318.29c) 17:38:53:230 SetRegistryValue: DisableWindowsUpdateAccess
=> 1 [OK]
USERENV(318.29c) 17:38:53:230 SetRegistryValue: NoAudio => 1 [OK]
USERENV(318.29c) 17:38:53:245 SetRegistryValue: NoGeneralPage => 1 [OK]
USERENV(318.29c) 17:38:53:245 SetRegistryValue: NoAdvancedCalling => 1 [OK]
USERENV(318.29c) 17:38:53:245 SetRegistryValue: NoSecurityPage => 1 [OK]
USERENV(318.29c) 17:38:53:245 SetRegistryValue: NoAudioPage => 1 [OK]
USERENV(318.29c) 17:38:53:261 SetRegistryValue: NoVideoPage => 1 [OK]
USERENV(318.29c) 17:38:53:261 SetRegistryValue: MultiUILanguageID =>
00000409 [OK]
USERENV(318.29c) 17:38:53:261 SetRegistryValue: Cache => 1 [OK]
USERENV(318.29c) 17:38:53:261 SetRegistryValue: SecurityTab => 1 [OK]
USERENV(318.29c) 17:38:53:276 SetRegistryValue: ContentTab => 1 [OK]
USERENV(318.29c) 17:38:53:276 SetRegistryValue: ConnectionsTab => 1 [OK]
USERENV(318.29c) 17:38:53:276 SetRegistryValue: ProgramsTab => 1 [OK]
USERENV(318.29c) 17:38:53:276 SetRegistryValue: PrivacyTab => 1 [OK]
USERENV(318.29c) 17:38:53:292 SetRegistryValue: AdvancedTab => 1 [OK]
USERENV(318.29c) 17:38:53:292 SetRegistryValue: Connwiz Admin Lock => 1
[OK]
USERENV(318.29c) 17:38:53:292 SetRegistryValue: HomePage => 1 [OK]
USERENV(318.29c) 17:38:53:292 SetRegistryValue: Connection Settings => 1
[OK]
USERENV(318.29c) 17:38:53:308 SetRegistryValue: Proxy => 1 [OK]
USERENV(318.29c) 17:38:53:308 SetRegistryValue: Autoconfig => 1 [OK]
USERENV(318.29c) 17:38:53:308 SetRegistryValue: Messaging => 1 [OK]
USERENV(318.29c) 17:38:53:308 SetRegistryValue: Profiles => 1 [OK]
USERENV(318.29c) 17:38:53:323 SetRegistryValue: CalendarContact => 1 [OK]
USERENV(318.29c) 17:38:53:323 SetRegistryValue: NoExternalBranding => 1
[OK]
USERENV(318.29c) 17:38:53:323 SetRegistryValue: NoHelpItemSendFeedback => 1
[OK]
USERENV(318.29c) 17:38:53:323 SetRegistryValue: PreventRun => 1 [OK]
USERENV(318.29c) 17:38:53:339 SetRegistryValue: PreventAutoRun => 1 [OK]
USERENV(318.29c) 17:38:53:339 SetRegistryValue: RestrictAuthorMode => 1
[OK]
USERENV(318.29c) 17:38:53:339 SetRegistryValue: ScreenSaverIsSecure => 1
[OK]
USERENV(318.29c) 17:38:53:339 SetRegistryValue: ScreenSaveActive => 1 [OK]
USERENV(318.29c) 17:38:53:339 SetRegistryValue: SCRNSAVE.EXE => logon.scr
[OK]
USERENV(318.29c) 17:38:53:355 SetRegistryValue: ScreenSaveTimeOut => 900
[OK]
USERENV(318.29c) 17:38:53:355 SetRegistryValue: Locked Down => 1 [OK]
USERENV(318.29c) 17:38:53:355 SetRegistryValue: DialupAutodetect => 0 [OK]
USERENV(318.29c) 17:38:53:355 SetRegistryValue: EnableAutoProxyResultCache
=> 0 [OK]
USERENV(318.29c) 17:38:53:370 SetRegistryValue:
{D6526FE0-E651-11CF-99CB-00C04FD64497} => 1 [OK]
USERENV(318.29c) 17:38:53:370 SetRegistryValue: HideDirectoryFolder => 1
[OK]
USERENV(318.29c) 17:38:53:370 SetRegistryValue: DisableMedia => 1 [OK]
USERENV(318.29c) 17:38:53:370 SetRegistryValue: AlwaysInstallElevated => 0
[OK]
USERENV(318.29c) 17:38:53:386 SetRegistryValue: NoConfigCache => 1 [OK]
USERENV(318.29c) 17:38:53:386 SetRegistryValue: NoMakeAvailableOffline => 1
[OK]
USERENV(318.29c) 17:38:53:386 SetRegistryValue: NoCacheViewer => 1 [OK]
USERENV(318.29c) 17:38:53:386 SetRegistryValue: DisableCMD => 2 [OK]
USERENV(318.29c) 17:38:53:402 SetRegistryValue: PromptPasswordOnResume => 1
[OK]
USERENV(318.29c) 17:38:53:402 SetRegistryValue: PublishSharedFolders => 0
[OK]
USERENV(318.29c) 17:38:53:402 SetRegistryValue: PublishDfsRoots => 0 [OK]
USERENV(318.29c) 17:38:53:402 SetRegistryValue: SetAndLockSkin => 1 [OK]
USERENV(318.29c) 17:38:53:417 SetRegistryValue: DefaultSkin => [OK]
USERENV(318.29c) 17:38:53:417 SetRegistryValue: PreventCodecDownload => 1
[OK]
USERENV(318.29c) 17:38:53:417 SetRegistryValue: HideNetworkTab => 1 [OK]
USERENV(318.29c) 17:38:53:417 ParseRegistryFile: Leaving.
USERENV(318.29c) 17:38:53:464 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-
EB920C4D61FD}\Adm\conf.adm> to the Adm list.
USERENV(318.29c) 17:38:53:464 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-
EB920C4D61FD}\Adm\inetres.adm> to the Adm list.
USERENV(318.29c) 17:38:53:480 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-
EB920C4D61FD}\Adm\system.adm> to the Adm list.
USERENV(318.29c) 17:38:53:480 AllocAdmFileInfo: Adding File name
<\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-
EB920C4D61FD}\Adm\wmplayer.adm> to the Adm list.
USERENV(318.29c) 17:38:56:545 LogRegistry RsopData: Successfully logged
registry Rsop data
USERENV(318.29c) 17:38:56:592 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-E
B920C4D61FD}\Adm\wmplayer.adm
USERENV(318.29c) 17:38:56:592 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-E
B920C4D61FD}\Adm\system.adm
USERENV(318.29c) 17:38:56:592 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-E
B920C4D61FD}\Adm\inetres.adm
USERENV(318.29c) 17:38:56:607 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{D58D644A-D777-4D28-AAC9-E
B920C4D61FD}\Adm\conf.adm
USERENV(318.29c) 17:38:56:607 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-E
35BF05EE4A9}\Adm\system.adm
USERENV(318.29c) 17:38:56:623 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-E
35BF05EE4A9}\Adm\inetres.adm
USERENV(318.29c) 17:38:56:623 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{345818BC-19D7-4567-99FD-E
35BF05EE4A9}\Adm\conf.adm
USERENV(318.29c) 17:38:56:623 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-9
E7ADF6B89C3}\Adm\system.adm
USERENV(318.29c) 17:38:56:639 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-9
E7ADF6B89C3}\Adm\inetres.adm
USERENV(318.29c) 17:38:56:639 CAdmFileLogger::Log: Logging
\\OURDOMAIN.co.uk\SysVol\OURDOMAIN.co.uk\Policies\{54D7A961-A508-4381-B8CC-9
E7ADF6B89C3}\Adm\conf.adm
USERENV(318.29c) 17:38:56:654 LogAdmRsopData: Successfully logged Adm data
USERENV(318.29c) 17:38:56:654 ProcessGPOList: Extension Registry was able to
log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
USERENV(318.29c) 17:38:56:670 ProcessGPOs: -----------------------
USERENV(318.29c) 17:38:56:670 ProcessGPOs: -----------------------
USERENV(318.29c) 17:38:56:670 ProcessGPOs: Processing extension Wireless
USERENV(318.29c) 17:38:56:670 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:38:56:685 ProcessGPOs: Extension Wireless skipped with
flags 0x6.
USERENV(318.29c) 17:38:56:685 ProcessGPOs: -----------------------
USERENV(318.29c) 17:38:56:685 ProcessGPOs: Processing extension Folder
Redirection
USERENV(318.29c) 17:38:56:685 ReadStatus: Read Extension's Previous status
successfully.
USERENV(318.29c) 17:38:56:685 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:38:56:701 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:38:56:701 ProcessGPOList: Entering for extension Folder
Redirection
USERENV(318.29c) 17:38:56:701 UserPolicyCallback: Setting status UI to
Applying Folder Redirection policy...
USERENV(318.29c) 17:38:56:732 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(318.29c) 17:38:59:344 UserPolicyCallback: Setting status UI to
Applying your personal settings...
USERENV(318.29c) 17:38:59:359 ProcessGPOList: Extension Folder Redirection
returned 0x0.
USERENV(318.29c) 17:38:59:359 ProcessGPOList: Extension Folder Redirection
was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
USERENV(318.29c) 17:38:59:375 ProcessGPOs: -----------------------
USERENV(318.29c) 17:38:59:375 ProcessGPOs: -----------------------
USERENV(318.29c) 17:38:59:375 ProcessGPOs: Processing extension Microsoft
Disk Quota
USERENV(318.29c) 17:38:59:375 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:38:59:391 ProcessGPOs: Extension Microsoft Disk Quota
skipped with flags 0x6.
USERENV(318.29c) 17:38:59:391 ProcessGPOs: -----------------------
USERENV(318.29c) 17:38:59:391 ProcessGPOs: Processing extension QoS Packet
Scheduler
USERENV(318.29c) 17:38:59:391 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:38:59:391 ProcessGPOs: Extension QoS Packet Scheduler
skipped with flags 0x6.
USERENV(318.29c) 17:38:59:406 ProcessGPOs: -----------------------
USERENV(318.29c) 17:38:59:406 ProcessGPOs: Processing extension Scripts
USERENV(318.29c) 17:38:59:406 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:38:59:406 ProcessGPOs: Extension Scripts skipped because
both deleted and changed GPO lists are empty.
USERENV(318.29c) 17:38:59:406 ProcessGPOs: -----------------------
USERENV(318.29c) 17:38:59:422 ProcessGPOs: Processing extension Security
USERENV(318.29c) 17:38:59:422 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:38:59:422 ProcessGPOs: Extension Security skipped with
flags 0x6.
USERENV(318.29c) 17:38:59:422 ProcessGPOs: -----------------------
USERENV(318.29c) 17:38:59:422 ProcessGPOs: Processing extension Internet
Explorer Branding
USERENV(318.29c) 17:38:59:438 ReadStatus: Read Extension's Previous status
successfully.
USERENV(318.29c) 17:38:59:438 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:38:59:438 ProcessGPOList: Entering for extension
Internet Explorer Branding
USERENV(318.29c) 17:38:59:438 UserPolicyCallback: Setting status UI to
Applying Internet Explorer Branding policy...
USERENV(318.29c) 17:38:59:469 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(318.29c) 17:39:00:704 ImpersonateUser: Failed to impersonate user
with 5.
USERENV(318.29c) 17:39:00:720 GetUserNameAndDomain Failed to impersonate
user
USERENV(318.29c) 17:39:00:720 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(318.29c) 17:39:00:720 ImpersonateUser: Failed to impersonate user
with 5.
USERENV(318.29c) 17:39:00:720 GetUserNameAndDomain Failed to impersonate
user
USERENV(318.29c) 17:39:00:736 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(318.29c) 17:39:01:126 ImpersonateUser: Failed to impersonate user
with 5.
USERENV(318.29c) 17:39:01:126 GetUserNameAndDomain Failed to impersonate
user
USERENV(318.29c) 17:39:01:142 GetUserDNSDomainName: Domain name is NT
Authority. No DNS domain name available.
USERENV(318.29c) 17:39:01:705 UserPolicyCallback: Setting status UI to
Applying your personal settings...
USERENV(318.29c) 17:39:02:127 UserPolicyCallback: Setting status UI to
Applying your personal settings...
USERENV(318.29c) 17:39:02:127 ProcessGPOList: Extension Internet Explorer
Branding returned 0x0.
USERENV(318.29c) 17:39:02:127 ProcessGPOList: Extension Internet Explorer
Branding was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the
dirty bit
USERENV(318.29c) 17:39:02:143 ProcessGPOs: -----------------------
USERENV(318.29c) 17:39:02:143 ProcessGPOs: -----------------------
USERENV(318.29c) 17:39:02:143 ProcessGPOs: Processing extension EFS recovery
USERENV(318.29c) 17:39:02:159 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:39:02:159 ProcessGPOs: Extension EFS recovery skipped
with flags 0x6.
USERENV(318.29c) 17:39:02:159 ProcessGPOs: -----------------------
USERENV(318.29c) 17:39:02:159 ProcessGPOs: Processing extension Software
Installation
USERENV(318.29c) 17:39:02:159 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:39:02:174 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:39:02:174 ProcessGPOs: Extension Software Installation
skipped because both deleted and changed GPO lists are empty.
USERENV(318.29c) 17:39:02:174 ProcessGPOs: -----------------------
USERENV(318.29c) 17:39:02:174 ProcessGPOs: Processing extension IP Security
USERENV(318.29c) 17:39:02:190 CompareGPOLists: The lists are the same.
USERENV(318.29c) 17:39:02:190 ProcessGPOs: Extension IP Security skipped
with flags 0x6.
USERENV(318.29c) 17:39:02:190 SetFgRefreshInfo: Previous User Fg policy
Synchronous, Reason: NonCachedCredentials.
USERENV(318.29c) 17:39:02:190 SetFgRefreshInfo: Next User Fg policy
Asynchronous, Reason: NoNeedForSync.
USERENV(318.29c) 17:39:02:190 LeaveCriticalPolicySection: Critical section
0xc has been released.
USERENV(318.29c) 17:39:02:205 ProcessGPOs: User Group Policy has been
applied.
USERENV(318.da0) 17:39:02:205 PolicyChangedThread: Calling UpdateUser with
0.
USERENV(318.29c) 17:39:02:205 ProcessGPOs: Leaving with 1.
USERENV(318.da0) 17:39:02:205 PolicyChangedThread: Broadcast message for 0.
USERENV(318.f10) 17:39:02:221 GPOThread: Next refresh will happen in 105
minutes
USERENV(318.da0) 17:39:02:284 PolicyChangedThread: Leaving
USERENV(318.31c) 17:39:02:549 IsSyncForegroundPolicyRefresh: Asynchronous,
Reason: NoNeedForSync
USERENV(318.31c) 17:39:34:481 UnloadUserProfile: Entering, hProfile =
<0x62c>
USERENV(318.31c) 17:39:34:481 UnloadUserProfile: In console winlogon process
USERENV(318.31c) 17:39:34:497 UnloadUserProfileP: Entering, hProfile =
<0x62c>
USERENV(318.31c) 17:39:34:497 AbleToBypassCSC: Try to bypass CSC
USERENV(318.31c) 17:39:34:528 UnLoadUserProfileP: CSC bypassed.
USERENV(318.31c) 17:39:34:528 CSyncManager::EnterLock
<S-1-5-21-746137067-1844823847-1801674531-1232>
USERENV(318.31c) 17:39:34:528 CSyncManager::EnterLock: No existing entry
found
USERENV(318.31c) 17:39:34:528 CSyncManager::EnterLock: New entry created
USERENV(318.31c) 17:39:34:544 CHashTable::HashAdd:
S-1-5-21-746137067-1844823847-1801674531-1232 added in bucket 17
USERENV(318.31c) 17:39:34:544 UnloadUserProfileP: Wait succeeded. In
critical section.
USERENV(318.31c) 17:39:34:653 MyRegUnloadKey: user hive is already scheduled
for unloading
USERENV(318.31c) 17:39:34:669 MyRegUnLoadKey: Returning 0.
USERENV(318.31c) 17:39:34:669 UnloadUserProfileP: Didn't unload user profile
<err = 19>
USERENV(318.31c) 17:39:34:669 MyRegUnLoadKey: Failed to unmount hive
00000005
USERENV(318.31c) 17:39:34:684 MyRegUnLoadKey: Returning 0.
USERENV(318.31c) 17:39:34:684 UnLoadClassHive: failed to unload classes key
with 5
USERENV(318.31c) 17:39:34:684 UnloadUserProfileP: Didn't unload user
classes.
USERENV(318.31c) 17:39:34:684 DumpOpenRegistryHandle: 2 user registry
Handles leaked from
\Registry\User\S-1-5-21-746137067-1844823847-1801674531-1232_Classes
USERENV(318.31c) 17:39:34:684 HandleRegKeyLeak: RtlAdjustPrivilege
succeeded!
USERENV(318.31c) 17:39:34:794 HandleRegKeyLeak: RegSaveKey succeeded!
USERENV(318.31c) 17:39:34:794 HandleRegKeyLeak: RtlAdjustPrivilege
succeeded!
USERENV(318.31c) 17:39:34:794 HandleRegKeyLeak: hkCurrentUser closed
USERENV(318.31c) 17:39:34:794 Entering CUserProfile::WatchHiveRefCount:
S-1-5-21-746137067-1844823847-1801674531-1232, 2
USERENV(318.31c) 17:39:34:794 CUserProfile::WatchHiveRefCount: In critical
section
USERENV(318.31c) 17:39:34:809 CUserProfile::WatchHiveRefCount:
S-1-5-21-746137067-1844823847-1801674531-1232_Classes already in work list
USERENV(318.31c) 17:39:34:809 HandleRegKeyLeak: Calling WatchHiveRefCount
(S-1-5-21-746137067-1844823847-1801674531-1232) succeeded
USERENV(318.31c) 17:39:34:809 UnloadUserProfileP: flushing HKEY_USERS
USERENV(318.31c) 17:39:35:075 UnloadUserProfileP: deleting profile because
it is a guest user or cache needs to be deleted
USERENV(318.31c) 17:39:35:075 DeleteProfile: Fail to delete profile with
sid S-1-5-21-746137067-1844823847-1801674531-1232 as it is still in use.
USERENV(318.31c) 17:39:35:075 UnloadUserProfileP: DeleteProfileDirectory
returned false. Error = 87
USERENV(318.31c) 17:39:35:075 UnloadUserProfileP: Successfully deleted
profile because it is a guest/mandatory user
USERENV(318.31c) 17:39:35:091 CSyncManager::LeaveLock
<S-1-5-21-746137067-1844823847-1801674531-1232>
USERENV(318.31c) 17:39:35:091 CSyncManager::LeaveLock: Lock released
USERENV(318.31c) 17:39:35:091 CHashTable::HashDelete:
S-1-5-21-746137067-1844823847-1801674531-1232 deleted
USERENV(318.31c) 17:39:35:091 CSyncManager::LeaveLock: Lock deleted
USERENV(318.31c) 17:39:35:107 UnloadUserProfileP: Leave critical section.
USERENV(318.31c) 17:39:35:107 UnloadUserProfileP: Leaving with a return
value of 1
USERENV(318.31c) 17:39:35:107 UnloadUserProfile: UnloadUserProfileP
succeeded
USERENV(318.31c) 17:39:35:122 UnloadUserProfile: returning 1