Followup to Windows 2000 unable to unload registry hive

From: Tony Chow (tchow@BLUETENTACLE.COM)
Date: 02/11/02 

Date:         Mon, 11 Feb 2002 01:47:41 -0800
From: Tony Chow <tchow@BLUETENTACLE.COM>
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

I have found two more articles dealing with this issue in MSKB: Q281267
and Q289564.

Both fixes have not been officially released.

The common cause of the registry hive's inability to unload in all cases
is registry handle leaks. Win32 gurus may correct me here, but
apparently any application that commits this sin can cause a profile to
get stuck. So far four different Windows components--IE, Winlogon,
MSInfo32.exe, and Terminal Services--have been identified as culprits,
and there's no guarantee that more of the same won't rear their ugly
heads in the future, in Microsoft's or other vendors' products.

The moral of the story, it seems, is that no single patch can rid of
this problem completely, and that administrators are well advised to not
to count on profiles always unloading correctly. If any important data
is contained in the profiles, get it out of there, ideally in a way
transparent to the user (see my previous post for a workaround.)

______________________________________
There is no problem so difficult that it cannot be solved by brute
strength and ignorance. --William's Law

oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
Delivery co-sponsored by Qualys - Make Your Network Secure
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
Go Beyond PARTIAL Security: FREE White Paper

Stop hassling with half-baked ENTERPRISE SECURITY.
FREE White Paper shows you how to ensure TOTAL security for your Internet
perimeter with the most current and most complete PROACTIVE Vulnerability
Assessment solution. Get your FREE White Paper now. Click here!
https://www.qualys.com/forms/techwhite_86.html
oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

Relevant Pages

  • Re: Summary of issues with W2K SP2 Security Rollup - Q311401
    ... SmartArray controller are using SNMP to access the registry, ... Stop hassling with half-baked ENTERPRISE SECURITY. ... FREE White Paper shows you how to ensure TOTAL security for your Internet ...
    (NT-Bugtraq)
  • Re: I cant select text using word 2007.
    ... With this being a new load with no profiles on the machine, ... Logging in as another user loads templates and add-ins from a different ... It's highly unlikely that the problem is the result of a security patch -- ... If you hover over the scroll bar, ...
    (microsoft.public.word.application.errors)
  • Re: Default User Serurity Permission
    ... and then the [File Security] section. ... and once a new MMC console opens, ... > profiles, I just changed them. ... >>Restore XP to installation Security Defaults ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Conectivity at Home
    ... systems are all secured via profiles and passwords. ... having a shared folder setup for "everyone" is a breach of such security. ... If your network is behind a NAT router, then your file sharing is more or less ... A designated folder for sharing to "Everyone" isn't a breach of security, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Add the Adminsitrators security group to roaming user profiles
    ... I want to be able to give a certain security group access to user profiles by ... using a gpo. ...
    (microsoft.public.windows.server.active_directory)