Event 1530 when every Remote Desktop user logs off. RDS Windows 2008 R2.

Redirected Printers, should not be overlapping sessions...

Our Remote Desktop users and Redirected Printers.   Every login after the first they're getting what clearly appears to be the current + previous sessions multiple redirected printer sessions #s.  Very frustrating.  See attached image.

This really hints of the previous Login Sessions not closing properly, user profile logjam.

We're now focusing on the Event 1530 errors as a likely culprit.   This event occurs at every user Log off.  Below an a typical example of the event.  

We read numerous forum posts and tried many of the suggestions. 
1. Yes we have disabled Printer Redirection in Group Policy, same events occur
2. Yes we tried the UPHClean service which was popular back with W2K3 Terminal Server, it won't install on 2008 R2 and as its been replaced the MS User Profile Service.
3. No A/V software installed, no MSE or Defender.
4. User Profiles are at default location, on C:\Users\ of RDS Host.  Very simple new setup.

 

Do we need to research these Processes shown below individually?  Process 652 shown twice?  Or any other solution you can suggest allowing the Redirected Printers to refresh/clear user profiles properly.    How do we rid ourselves of Event 1530?

Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          2/18/2013 4:37:25 PM
Event ID:      1530
Task Category: None
Level:         Warning
Keywords:     
User:          SYSTEM
Computer:      RDS.Domain.com
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. 

 DETAIL -
 3 user registry handles leaked from \Registry\User\S-1-5-21-3730962552-3612442801-2705850247-2101:

Process 652 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3730962552-3612442801-2705850247-2101

Process 980 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3730962552-3612442801-2705850247-2101\Printers\DevModePerUser

Process 652 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-3730962552-3612442801-2705850247-2101\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

 

Any hints and comments would be greatly appreciated.

  • Edited by JohnReam Tuesday, February 19, 2013 12:09 AM
February 19th, 2013 12:07am

We think that the Event 1530 is the KEY problem:

Process 980 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-....\Printers\DevModePerUser

And in the above Process tree, we think it's the UmRdpService aka Remote Desktop Services UserMode Port Redirector. 

Why is the User Profile Service (W2K8R2 RDS server) failing?  The old UPH utility worked just fine for this annoyance on W2K3 TS.
Free Windows Admin Tool Kit Click here and download it now
February 19th, 2013 6:32pm

This issue is a big problem for our company and the our traveling users of Remote Desktop.

$100 CASH REWARD FOR ANY INFORMATION LEADING TO AN ANSWER TO THIS QUESTION.

The Event ID error is 1530,  Process 980 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-....\Printers\DevModePerUser


Anyone?   Does anyone have printer redirection working properly under RDS Windows 2008 R2?



  • Edited by JohnReam Wednesday, February 20, 2013 9:58 PM
February 20th, 2013 9:57pm

 
This is a workaround for:  Event 1530 when every Remote Desktop user logs off.    This clears out some of the User Profile that the RDS Logoff was supposed to do automatically, but failed during the Event 1530.

Option Explicit
On Error Resume Next
Dim objShell, x
Set objShell = WScript.CreateObject("WScript.Shell")
objShell.run("REG.EXE DELETE ""HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Devices"" /va /f")
objShell.run("REG.EXE DELETE ""HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\PrinterPorts"" /va /f")
Set objShell = Nothing
WScript.quit


This workaround does not address the underlying cause, the Event 1530. Only relieves the mess with Redirected Printers.
Its all about the 1530 Events.   The Redirected Printers are just a victims. 
We're not sure if other areas are being hosed, none that I can obviously see. 
Possible infinite growth occurring in system Registry and/or User Profile Hives.

 

Free Windows Admin Tool Kit Click here and download it now
March 1st, 2013 11:07pm

Any uppdates to this problem, we have a newly installed TS/Citrix XenApp 6.5 enviroment.  We get alot of errors and a lots of printerproblems.
August 31st, 2015 3:24am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics