Hi,
We have 4 new HP blade Servers running Windows 2008 R2 that are being used for our RDS Farm. We are using Roaming Profiles together with Desktop and My Documents Folder Redirection (all stored
on a VMware virtual Windows 2008 R2 File Server, in two separate shares). The Local cached profiles are deleted at logoff.
I first noticed an issue when the users were assigned new profile folders at logon (i.e. username.domainname.001, ....002,.....003). There were also some entries in the Event Log:
Windows cannot delete the profile directory C:\Users\username.local.004. This error may be caused by files in this directory being used by another
program.
DETAIL - The directory is not empty.
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services
that hold your registry file may not function properly afterwards.
DETAIL -
8 user registry handles leaked from \Registry\User\S-1-5-21-1387933182-683456859-2293757137-438153_Classes:
Process 4256 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1387933182-683456859-2293757137-438153_CLASSES
Process 4256 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1387933182-683456859-2293757137-438153_CLASSES
Process 4256 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1387933182-683456859-2293757137-438153_CLASSES\Local
Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell
Process 4256 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1387933182-683456859-2293757137-438153_CLASSES\Local
Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell
Process 4256 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1387933182-683456859-2293757137-438153_CLASSES\Local
Settings\Software\Microsoft\Windows\Shell
Process 4256 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1387933182-683456859-2293757137-438153_CLASSES\Local
Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}
Process 4256 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1387933182-683456859-2293757137-438153_CLASSES\Local
Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell
Process 4256 (\Device\HarddiskVolume1\Windows\explorer.exe) has opened key \REGISTRY\USER\S-1-5-21-1387933182-683456859-2293757137-438153_CLASSES\Local
Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{7D49D726-3C21-4F05-99AA-FDC2C9474656}
I came across some similar postings and I used Process Monitor and Process Explorer to try and pinpoint what app could be preventing the locally cached profile from being deleted and holding
onto those registry files. The only culprit was explorer.exe. The folders left behind would vary and sometimes they would contain files (e.g. index.dat, thumbcache) and sometimes they would be empty. The type of folders would be:
C:\Users\username\AppData\Roaming\Microsoft\Windows
C:\Users\username\AppData\Local\Microsoft\Windows\Explorer
I uninstalled the AV client and also ran msconfig to disable all non Microsoft Services – this didn’t make any difference.
I disabled the deletion of cache profiles and this only solved the first error, not the registry issue. This also resulted in a black screen appearing for approx 5mins when the users logged off.
I next tried disabling the folder redirection policy and this fixed the problem - no more registry key errors or black screen at logoff. I did come across another posting where someone had an
issue with the Desktop Redirection. I tried enabling the redirection of My Documents but removing Desktop Redirection. This seems to be working now. Has anyone come across this issue or might help with an explanation?