Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Invoke-HKCURegistrySettingsForAllUsers: ntuser.dat registry hive not unloaded for Default profile #6

Closed
mmashwani opened this issue Apr 11, 2015 · 0 comments

Comments

@mmashwani
Copy link
Contributor

Issue migrated from CodePlex:
https://psappdeploytoolkit.codeplex.com/workitem/192

Issue is probably caused by some program in the user's environment that maintains a handle to the default registry profile.

It could be some security tool as will with a handle to the registry hive.

If your environment has a DLP protection tool installed in your environment, that is also worth looking into because those are designed to completely hide themselves from being visible to users and can only be detected with psexec. I remember having many problems with hangs and other issues when we first rolled out a DLP solution to the company.

At the very least, a default registry hive that does not unload will not cause corruption of that hive. I would assume that a domain login could still work even if the default hive was loaded because all new logins do is copy the .dat file for the default user to provision the new user.

@mmashwani mmashwani self-assigned this Apr 11, 2015
@mmashwani mmashwani changed the title Invoke-HKCURegistrySettingsForAllUsers - Default ntuser.dat not unloaded Invoke-HKCURegistrySettingsForAllUsers: ntuser.dat registry hive not unloaded for Default profile Apr 12, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant