I get this message after I Ghosted 7 machines that have exact hardware and software package and I used Ghost Walker to change the SID.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 10/7/2005
Time: 5:29:57 PM
User: NT AUTHORITY\SYSTEM
Computer: IS_PC54
Description:
Windows saved user Domain\UserName registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at
Hope someone can Help.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 10/7/2005
Time: 5:29:57 PM
User: NT AUTHORITY\SYSTEM
Computer: IS_PC54
Description:
Windows saved user Domain\UserName registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at
Hope someone can Help.