Hi, I have an intresting issue only logged when I restart or shutdown, I'm running Windows 7 x64 Enterprise. I'm not getting any good hits via the web and before I contact M$ at $250 a call, I thought I may be able to get some help here. Here are the event log details. Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. EventRecordID 6943 Correlation - Execution [ ProcessID] 332 [ ThreadID] 3248 Channel Application Detail 5 user registry handles leaked from \Registry\User\S-1-5-21-1988435965-1580625058-1438372386-21155: Process 540 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1988435965-1580625058-1438372386-21155 Process 540 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1988435965-1580625058-1438372386-21155 Process 540 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1988435965-1580625058-1438372386-21155\Software\Microsoft\SystemCertificates\My Process 540 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1988435965-1580625058-1438372386-21155\Software\Microsoft\SystemCertificates\CA Process 540 (\Device\HarddiskVolume2\Windows\System32\lsass.exe) has opened key \REGISTRY\USER\S-1-5-21-1988435965-1580625058-1438372386-21155\Software\Microsoft\SystemCertificates\Disallowed Any help anyone can offer will be greatly appreciated. Thanks Travis

Hi, Thank for posting in Microsoft TechNet Forum. This behavior occurs because Windows automatically closes any registry handle to a user profile that is left open by an application. Windows 7 does this when Windows 7 tries to close a user profile. Event ID 1530 is logged as a Warning event, and this is by design, you could refer to the following article: Event ID: 1530 may be logged in the Application log on a Windows 7-based or Windows Vista-based client computer Meanwhile, you could refer to the similar issue: http://social.technet.microsoft.com/Forums/en-US/w7itprogeneral/thread/57d9f183-ab98-4ac3-82be-f1a0eeb71bf1 Hope it helps. Alex Zhao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.