No network drive mapping after joining Active Directory ?

Discussion in 'Active Directory' started by Patrick, Apr 21, 2010.

  1. Patrick

    Patrick Guest

    Dear Paul,

    4) I have enabled logging. I also observe that there is a DNS message
    but I have confirmed that the DNS IP addresses are exactly those on the
    Domain Controller. Besides, I also confirmed that the workstation is
    already has a A record entry in the DNS Server.

    USERENV(418.41c) 13:28:54:656 InitializePolicyProcessing: Initialised
    Machine Mutex/Events
    USERENV(418.41c) 13:28:54:687 InitializePolicyProcessing: Initialised
    User Mutex/Events
    USERENV(418.41c) 13:28:54:687 LibMain: Process Name:
    \??\C:\WINDOWS\system32\winlogon.exe
    USERENV(418.41c) 13:28:59:546 Entering CUserProfile::Initialize ...
    USERENV(418.41c) 13:28:59:546 CUserProfile::Initialize called by winlogon
    USERENV(418.41c) 13:28:59:546 CUserProfile::Initialize: critical section
    initialized
    USERENV(418.41c) 13:28:59:546 CSyncManager::Initialize: critical section
    initialized
    USERENV(418.41c) 13:28:59:546 CUserProfile::Initialize: registry key
    Software\Microsoft\Windows NT\CurrentVersion\ProfileList opened
    USERENV(418.41c) 13:28:59:546 CUserProfile::Initialize: Proccessing
    S-1-5-21-584252974-802680808-3957195257-500
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock
    <S-1-5-21-584252974-802680808-3957195257-500>
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:28:59:546 CHashTable::HashAdd:
    S-1-5-21-584252974-802680808-3957195257-500 added in bucket 0
    USERENV(418.41c) 13:28:59:546 CUserProfile::CleanupUserProfile: Enter
    critical section.
    USERENV(418.41c) 13:28:59:546 CUserProfile::GetRefCountAndFlags: Ref
    count is 0, state is 00000100
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock
    <S-1-5-21-584252974-802680808-3957195257-500>
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:28:59:546 CHashTable::HashDelete:
    S-1-5-21-584252974-802680808-3957195257-500 deleted
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:28:59:546 CUserProfile::CleanupUserProfile: Leave
    critical section
    USERENV(418.41c) 13:28:59:546 CUserProfile::Initialize: Proccessing
    S-1-5-21-584252974-802680808-3957195257-1018
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock
    <S-1-5-21-584252974-802680808-3957195257-1018>
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:28:59:546 CHashTable::HashAdd:
    S-1-5-21-584252974-802680808-3957195257-1018 added in bucket 7
    USERENV(418.41c) 13:28:59:546 CUserProfile::CleanupUserProfile: Enter
    critical section.
    USERENV(418.41c) 13:28:59:546 CUserProfile::GetRefCountAndFlags: Ref
    count is 0, state is 00000100
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock
    <S-1-5-21-584252974-802680808-3957195257-1018>
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:28:59:546 CHashTable::HashDelete:
    S-1-5-21-584252974-802680808-3957195257-1018 deleted
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:28:59:546 CUserProfile::CleanupUserProfile: Leave
    critical section
    USERENV(418.41c) 13:28:59:546 CUserProfile::Initialize: Proccessing
    S-1-5-21-584252974-802680808-3957195257-1015
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock
    <S-1-5-21-584252974-802680808-3957195257-1015>
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:28:59:546 CHashTable::HashAdd:
    S-1-5-21-584252974-802680808-3957195257-1015 added in bucket 4
    USERENV(418.41c) 13:28:59:546 CUserProfile::CleanupUserProfile: Enter
    critical section.
    USERENV(418.41c) 13:28:59:546 CUserProfile::GetRefCountAndFlags: Ref
    count is 0, state is 00000000
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock
    <S-1-5-21-584252974-802680808-3957195257-1015>
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:28:59:546 CHashTable::HashDelete:
    S-1-5-21-584252974-802680808-3957195257-1015 deleted
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:28:59:546 CUserProfile::CleanupUserProfile: Leave
    critical section
    USERENV(418.41c) 13:28:59:546 CUserProfile::Initialize: Proccessing
    S-1-5-21-584252974-802680808-3957195257-1013
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock
    <S-1-5-21-584252974-802680808-3957195257-1013>
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:28:59:546 CHashTable::HashAdd:
    S-1-5-21-584252974-802680808-3957195257-1013 added in bucket 2
    USERENV(418.41c) 13:28:59:546 CUserProfile::CleanupUserProfile: Enter
    critical section.
    USERENV(418.41c) 13:28:59:546 CUserProfile::GetRefCountAndFlags: Ref
    count is 0, state is 00000000
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock
    <S-1-5-21-584252974-802680808-3957195257-1013>
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:28:59:546 CHashTable::HashDelete:
    S-1-5-21-584252974-802680808-3957195257-1013 deleted
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:28:59:546 CUserProfile::CleanupUserProfile: Leave
    critical section
    USERENV(418.41c) 13:28:59:546 CUserProfile::Initialize: Proccessing
    S-1-5-21-584252974-802680808-3957195257-1011
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock
    <S-1-5-21-584252974-802680808-3957195257-1011>
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:28:59:546 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:28:59:546 CHashTable::HashAdd:
    S-1-5-21-584252974-802680808-3957195257-1011 added in bucket 0
    USERENV(418.41c) 13:28:59:546 CUserProfile::CleanupUserProfile: Enter
    critical section.
    USERENV(418.41c) 13:28:59:546 CUserProfile::GetRefCountAndFlags: Ref
    count is 0, state is 00000100
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock
    <S-1-5-21-584252974-802680808-3957195257-1011>
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:28:59:546 CHashTable::HashDelete:
    S-1-5-21-584252974-802680808-3957195257-1011 deleted
    USERENV(418.41c) 13:28:59:546 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:28:59:546 CUserProfile::CleanupUserProfile: Leave
    critical section
    USERENV(418.41c) 13:28:59:562 CUserProfile::Initialize: Proccessing
    S-1-5-21-3558745915-3620255497-2782363364-3180
    USERENV(418.41c) 13:28:59:562 CSyncManager::EnterLock
    <S-1-5-21-3558745915-3620255497-2782363364-3180>
    USERENV(418.41c) 13:28:59:562 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:28:59:562 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:28:59:562 CHashTable::HashAdd:
    S-1-5-21-3558745915-3620255497-2782363364-3180 added in bucket 13
    USERENV(418.41c) 13:28:59:562 CUserProfile::CleanupUserProfile: Enter
    critical section.
    USERENV(418.41c) 13:28:59:562 CUserProfile::GetRefCountAndFlags: Ref
    count is 0, state is 00000304
    USERENV(418.41c) 13:28:59:562 CSyncManager::LeaveLock
    <S-1-5-21-3558745915-3620255497-2782363364-3180>
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:28:59:578 CHashTable::HashDelete:
    S-1-5-21-3558745915-3620255497-2782363364-3180 deleted
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Leave
    critical section
    USERENV(418.41c) 13:28:59:578 CUserProfile::Initialize: Proccessing
    S-1-5-21-3558745915-3620255497-2782363364-2817
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock
    <S-1-5-21-3558745915-3620255497-2782363364-2817>
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:28:59:578 CHashTable::HashAdd:
    S-1-5-21-3558745915-3620255497-2782363364-2817 added in bucket 19
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Enter
    critical section.
    USERENV(418.41c) 13:28:59:578 CUserProfile::GetRefCountAndFlags: Ref
    count is 0, state is 00000100
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock
    <S-1-5-21-3558745915-3620255497-2782363364-2817>
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:28:59:578 CHashTable::HashDelete:
    S-1-5-21-3558745915-3620255497-2782363364-2817 deleted
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Leave
    critical section
    USERENV(418.41c) 13:28:59:578 CUserProfile::Initialize: Proccessing S-1-5-20
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock <S-1-5-20>
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:28:59:578 CHashTable::HashAdd: S-1-5-20 added in
    bucket 4
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Enter
    critical section.
    USERENV(418.41c) 13:28:59:578 CUserProfile::GetRefCountAndFlags: Ref
    count is 2, state is 00000000
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Ref
    Count is not 0
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock <S-1-5-20>
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:28:59:578 CHashTable::HashDelete: S-1-5-20 deleted
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Leave
    critical section
    USERENV(418.41c) 13:28:59:578 CUserProfile::Initialize: Proccessing S-1-5-19
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock <S-1-5-19>
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:28:59:578 CHashTable::HashAdd: S-1-5-19 added in
    bucket 12
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Enter
    critical section.
    USERENV(418.41c) 13:28:59:578 CUserProfile::GetRefCountAndFlags: Ref
    count is 1, state is 00000000
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Ref
    Count is not 0
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock <S-1-5-19>
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:28:59:578 CHashTable::HashDelete: S-1-5-19 deleted
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Leave
    critical section
    USERENV(418.41c) 13:28:59:578 CUserProfile::Initialize: Proccessing S-1-5-18
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock <S-1-5-18>
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:28:59:578 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:28:59:578 CHashTable::HashAdd: S-1-5-18 added in
    bucket 11
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Enter
    critical section.
    USERENV(418.41c) 13:28:59:578 CUserProfile::GetRefCountAndFlags: Ref
    count is 1, state is 00000000
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Ref
    Count is not 0
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock <S-1-5-18>
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:28:59:578 CHashTable::HashDelete: S-1-5-18 deleted
    USERENV(418.41c) 13:28:59:578 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:28:59:578 CUserProfile::CleanupUserProfile: Leave
    critical section
    USERENV(418.41c) 13:28:59:609 CUserProfile::Initialize:
    RpcServerRegisterIfEx successful
    USERENV(418.41c) 13:28:59:609 Exiting CUserProfile::Initialize, successful
    USERENV(44c.450) 13:29:00:625 LibMain: Process Name:
    C:\WINDOWS\system32\services.exe
    USERENV(458.45c) 13:29:01:312 LibMain: Process Name:
    C:\WINDOWS\system32\lsass.exe
    USERENV(418.41c) 13:29:01:781 IsSyncForegroundPolicyRefresh:
    Asynchronous, Reason: NoNeedForSync
    USERENV(540.544) 13:29:08:250 LibMain: Process Name:
    C:\WINDOWS\system32\svchost.exe
    USERENV(44c.450) 13:29:08:687 LoadUserProfile: Yes, we can impersonate
    the user. Running as self
    USERENV(44c.450) 13:29:08:687
    =========================================================
    USERENV(44c.450) 13:29:08:687 LoadUserProfile: Entering, hToken =
    <0x2a4>, lpProfileInfo = 0x7fca8
    USERENV(44c.450) 13:29:08:687 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(44c.450) 13:29:08:687 LoadUserProfile: lpProfileInfo->lpUserName
    = <NetworkService>
    USERENV(44c.450) 13:29:08:687 LoadUserProfile: NULL central profile path
    USERENV(44c.450) 13:29:08:687 LoadUserProfile: NULL default profile path
    USERENV(44c.450) 13:29:08:687 LoadUserProfile: NULL server name
    USERENV(44c.450) 13:29:08:687 GetInterface: Returning rpc binding handle
    USERENV(418.57c) 13:29:08:687 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.57c) 13:29:08:687 DropClientContext: Got client token
    0000060C, sid = S-1-5-18
    USERENV(418.57c) 13:29:08:687 MIDL_user_allocate enter
    USERENV(418.57c) 13:29:08:687 DropClientContext: load profile object
    successfully made
    USERENV(418.57c) 13:29:08:687 DropClientContext: Returning 0
    USERENV(44c.450) 13:29:08:687 LoadUserProfile: Calling DropClientToken
    (as self) succeeded
    USERENV(418.438) 13:29:08:687 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.438) 13:29:08:687 In LoadUserProfileP
    USERENV(418.438) 13:29:08:687 LoadUserProfile: Running as client
    USERENV(418.438) 13:29:08:687
    =========================================================
    USERENV(418.438) 13:29:08:687 LoadUserProfile: Entering, hToken =
    <0x614>, lpProfileInfo = 0x1132048
    USERENV(418.438) 13:29:08:687 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(418.438) 13:29:08:687 LoadUserProfile: lpProfileInfo->lpUserName
    = <NetworkService>
    USERENV(418.438) 13:29:08:687 LoadUserProfile: NULL central profile path
    USERENV(418.438) 13:29:08:687 LoadUserProfile: NULL default profile path
    USERENV(418.438) 13:29:08:687 LoadUserProfile: NULL server name
    USERENV(418.438) 13:29:08:687 LoadUserProfile: User sid: S-1-5-20
    USERENV(418.438) 13:29:08:687 CSyncManager::EnterLock <S-1-5-20>
    USERENV(418.438) 13:29:08:687 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.438) 13:29:08:687 CSyncManager::EnterLock: New entry created
    USERENV(418.438) 13:29:08:687 CHashTable::HashAdd: S-1-5-20 added in
    bucket 4
    USERENV(418.438) 13:29:08:687 LoadUserProfile: Wait succeeded. In
    critical section.
    USERENV(418.438) 13:29:08:703 RestoreUserProfile: Entering
    USERENV(418.438) 13:29:08:703 IsCentralProfileReachable: Entering
    USERENV(418.438) 13:29:08:703 IsCentralProfileReachable: Null path. Leaving
    USERENV(418.438) 13:29:08:703 RestoreUserProfile: Profile path = <>
    USERENV(418.438) 13:29:08:703 ExtractProfileFromBackup: A profile
    already exists
    USERENV(418.438) 13:29:08:703 PatchNewProfileIfRequred: A profile
    already exists with the current sid, exitting
    USERENV(418.438) 13:29:08:703 CreateLocalProfileKey: Not setting
    additional Security
    USERENV(418.438) 13:29:08:703 GetExistingLocalProfileImage: Found entry
    in profile list for existing local profile
    USERENV(418.438) 13:29:08:703 GetExistingLocalProfileImage: Local
    profile image filename = <%SystemDrive%\Documents and
    Settings\NetworkService>
    USERENV(418.438) 13:29:08:703 GetExistingLocalProfileImage: Expanded
    local profile image filename = <C:\Documents and Settings\NetworkService>
    USERENV(418.438) 13:29:08:765 GetExistingLocalProfileImage: No local
    mandatory profile. Error = 2
    USERENV(418.438) 13:29:08:765 GetExistingLocalProfileImage: Found local
    profile image file ok <C:\Documents and Settings\NetworkService\ntuser.dat>
    USERENV(418.438) 13:29:08:765 GetExistingLocalProfileImage: Failed to
    query low profile unload time with error 2
    USERENV(418.438) 13:29:08:765 Local Existing Profile Image is reachable
    USERENV(418.438) 13:29:08:765 Local profile name is <C:\Documents and
    Settings\NetworkService>
    USERENV(418.438) 13:29:08:765 RestoreUserProfile: No central profile.
    Attempting to load local profile.
    USERENV(418.438) 13:29:08:796 MyRegLoadKey: Returning 00000000
    USERENV(418.438) 13:29:08:843 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(418.438) 13:29:08:843 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.438) 13:29:08:953 MyRegLoadKey: Returning 00000000
    USERENV(418.438) 13:29:08:953 CreateClassHive: existing user classes
    hive found
    USERENV(418.438) 13:29:08:953 RestoreUserProfile: About to Leave. Final
    Information follows:
    USERENV(418.438) 13:29:08:953 Profile was successfully loaded.
    USERENV(418.438) 13:29:08:953 lpProfile->lpRoamingProfile = <>
    USERENV(418.438) 13:29:08:953 lpProfile->lpLocalProfile = <C:\Documents
    and Settings\NetworkService>
    USERENV(418.438) 13:29:08:953 lpProfile->dwInternalFlags = 0x0
    USERENV(418.438) 13:29:08:953 RestoreUserProfile: Leaving.
    USERENV(418.438) 13:29:09:218 UpgradeProfile: Entering
    USERENV(418.438) 13:29:09:218 UpgradeProfile: Build numbers match
    USERENV(418.438) 13:29:09:218 UpgradeProfile: Leaving Successfully
    USERENV(418.438) 13:29:09:359 GetProfileType: Profile already loaded.
    USERENV(418.438) 13:29:09:359 LoadProfileInfo: Failed to query central
    profile with error 2
    USERENV(418.438) 13:29:09:375 GetProfileType: ProfileFlags is 0
    USERENV(418.438) 13:29:09:500 Profile Ref Count is 1
    USERENV(418.438) 13:29:09:500 LoadUserProfile: Leaving critical Section.
    USERENV(418.438) 13:29:09:500 CSyncManager::LeaveLock <S-1-5-20>
    USERENV(418.438) 13:29:09:500 CSyncManager::LeaveLock: Lock released
    USERENV(418.438) 13:29:09:500 CHashTable::HashDelete: S-1-5-20 deleted
    USERENV(418.438) 13:29:09:500 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.438) 13:29:09:500 LoadUserProfile: Impersonated user:
    00000614, 00000620
    USERENV(458.4a8) 13:29:09:515 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(458.4a8) 13:29:09:515 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(458.4a8) 13:29:09:515 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(458.4a8) 13:29:09:515 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.438) 13:29:09:546 LoadUserProfile: Reverted to user: 00000000
    USERENV(418.438) 13:29:09:546 LoadUserProfile: Reverted back to user
    <00000000>
    USERENV(418.438) 13:29:09:546 LoadUserProfile: Leaving with a value of 1.
    USERENV(418.438) 13:29:09:546
    =========================================================
    USERENV(418.438) 13:29:09:546 LoadUserProfileI: returning 0
    USERENV(44c.450) 13:29:09:546 LoadUserProfile: Running as self
    USERENV(44c.450) 13:29:09:546 LoadUserProfile: Calling LoadUserProfileI
    (as user) succeeded
    USERENV(44c.450) 13:29:09:546 LoadUserProfile: Returning success. Final
    Information follows:
    USERENV(44c.450) 13:29:09:546 lpProfileInfo->UserName = <NetworkService>
    USERENV(44c.450) 13:29:09:546 lpProfileInfo->lpProfilePath = <>
    USERENV(44c.450) 13:29:09:546 lpProfileInfo->dwFlags = 0x9
    USERENV(418.57c) 13:29:09:546 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.57c) 13:29:09:546 ReleaseClientContext: Releasing context
    USERENV(418.57c) 13:29:09:546 ReleaseClientContext_s: Releasing context
    USERENV(418.57c) 13:29:09:546 MIDL_user_free enter
    USERENV(44c.450) 13:29:09:546 ReleaseInterface: Releasing rpc binding handle
    USERENV(44c.450) 13:29:09:546 LoadUserProfile: Returning TRUE. hProfile
    = <0x334>
    USERENV(44c.450) 13:29:09:546 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(44c.450) 13:29:09:546 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(584.588) 13:29:09:609 LibMain: Process Name:
    C:\WINDOWS\system32\svchost.exe
    USERENV(600.604) 13:29:10:484 LibMain: Process Name: C:\Program
    Files\Windows Defender\MsMpEng.exe
    USERENV(628.62c) 13:29:10:578 LibMain: Process Name:
    C:\WINDOWS\System32\svchost.exe
    USERENV(418.41c) 13:29:10:765 IsSyncForegroundPolicyRefresh:
    Asynchronous, Reason: NoNeedForSync
    USERENV(44c.450) 13:29:11:171 LoadUserProfile: Yes, we can impersonate
    the user. Running as self
    USERENV(44c.450) 13:29:11:171
    =========================================================
    USERENV(44c.450) 13:29:11:171 LoadUserProfile: Entering, hToken =
    <0x374>, lpProfileInfo = 0x7fca8
    USERENV(44c.450) 13:29:11:171 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(44c.450) 13:29:11:171 LoadUserProfile: lpProfileInfo->lpUserName
    = <NetworkService>
    USERENV(44c.450) 13:29:11:171 LoadUserProfile: NULL central profile path
    USERENV(44c.450) 13:29:11:171 LoadUserProfile: NULL default profile path
    USERENV(44c.450) 13:29:11:171 LoadUserProfile: NULL server name
    USERENV(44c.450) 13:29:11:171 GetInterface: Returning rpc binding handle
    USERENV(418.65c) 13:29:11:187 IsSyncForegroundPolicyRefresh:
    Asynchronous, Reason: NoNeedForSync
    USERENV(418.438) 13:29:11:187 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.438) 13:29:11:187 DropClientContext: Got client token
    00000684, sid = S-1-5-18
    USERENV(418.438) 13:29:11:187 MIDL_user_allocate enter
    USERENV(418.438) 13:29:11:187 DropClientContext: load profile object
    successfully made
    USERENV(418.438) 13:29:11:187 DropClientContext: Returning 0
    USERENV(44c.450) 13:29:11:187 LoadUserProfile: Calling DropClientToken
    (as self) succeeded
    USERENV(418.57c) 13:29:11:187 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.57c) 13:29:11:187 In LoadUserProfileP
    USERENV(418.57c) 13:29:11:187 LoadUserProfile: Running as client
    USERENV(418.57c) 13:29:11:187
    =========================================================
    USERENV(418.57c) 13:29:11:187 LoadUserProfile: Entering, hToken =
    <0x688>, lpProfileInfo = 0x8a010
    USERENV(418.57c) 13:29:11:187 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(418.57c) 13:29:11:187 LoadUserProfile: lpProfileInfo->lpUserName
    = <NetworkService>
    USERENV(418.57c) 13:29:11:187 LoadUserProfile: NULL central profile path
    USERENV(418.57c) 13:29:11:187 LoadUserProfile: NULL default profile path
    USERENV(418.57c) 13:29:11:187 LoadUserProfile: NULL server name
    USERENV(418.57c) 13:29:11:187 LoadUserProfile: User sid: S-1-5-20
    USERENV(418.57c) 13:29:11:187 CSyncManager::EnterLock <S-1-5-20>
    USERENV(418.57c) 13:29:11:187 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.57c) 13:29:11:187 CSyncManager::EnterLock: New entry created
    USERENV(418.57c) 13:29:11:187 CHashTable::HashAdd: S-1-5-20 added in
    bucket 4
    USERENV(418.57c) 13:29:11:187 LoadUserProfile: Wait succeeded. In
    critical section.
    USERENV(418.57c) 13:29:11:203 TestIfUserProfileLoaded: Profile already
    loaded.
    USERENV(418.57c) 13:29:11:203 Profile Ref Count is 2
    USERENV(418.57c) 13:29:11:203 LoadUserProfile: Leaving critical Section.
    USERENV(418.57c) 13:29:11:203 CSyncManager::LeaveLock <S-1-5-20>
    USERENV(418.57c) 13:29:11:203 CSyncManager::LeaveLock: Lock released
    USERENV(418.57c) 13:29:11:203 CHashTable::HashDelete: S-1-5-20 deleted
    USERENV(418.57c) 13:29:11:203 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.57c) 13:29:11:203 LoadUserProfile: Impersonated user:
    00000688, 00000690
    USERENV(418.57c) 13:29:11:203 LoadUserProfile: Reverted to user: 00000000
    USERENV(418.57c) 13:29:11:203 LoadUserProfile: Reverted back to user
    <00000000>
    USERENV(418.57c) 13:29:11:203 LoadUserProfile: Leaving with a value of 1.
    USERENV(418.57c) 13:29:11:203
    =========================================================
    USERENV(418.57c) 13:29:11:203 LoadUserProfileI: returning 0
    USERENV(44c.450) 13:29:11:203 LoadUserProfile: Running as self
    USERENV(44c.450) 13:29:11:203 LoadUserProfile: Calling LoadUserProfileI
    (as user) succeeded
    USERENV(44c.450) 13:29:11:203 LoadUserProfile: Returning success. Final
    Information follows:
    USERENV(44c.450) 13:29:11:203 lpProfileInfo->UserName = <NetworkService>
    USERENV(44c.450) 13:29:11:203 lpProfileInfo->lpProfilePath = <>
    USERENV(44c.450) 13:29:11:203 lpProfileInfo->dwFlags = 0x9
    USERENV(418.438) 13:29:11:203 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.438) 13:29:11:203 ReleaseClientContext: Releasing context
    USERENV(418.438) 13:29:11:203 ReleaseClientContext_s: Releasing context
    USERENV(418.438) 13:29:11:203 MIDL_user_free enter
    USERENV(44c.450) 13:29:11:203 ReleaseInterface: Releasing rpc binding handle
    USERENV(44c.450) 13:29:11:203 LoadUserProfile: Returning TRUE. hProfile
    = <0x38c>
    USERENV(44c.450) 13:29:11:203 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(44c.450) 13:29:11:203 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(6ac.6b0) 13:29:11:218 LibMain: Process Name:
    C:\WINDOWS\system32\svchost.exe
    USERENV(44c.450) 13:29:11:218 LoadUserProfile: Yes, we can impersonate
    the user. Running as self
    USERENV(44c.450) 13:29:11:218
    =========================================================
    USERENV(44c.450) 13:29:11:218 LoadUserProfile: Entering, hToken =
    <0x3a0>, lpProfileInfo = 0x7fca8
    USERENV(44c.450) 13:29:11:218 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(44c.450) 13:29:11:218 LoadUserProfile: lpProfileInfo->lpUserName
    = <LocalService>
    USERENV(44c.450) 13:29:11:218 LoadUserProfile: NULL central profile path
    USERENV(44c.450) 13:29:11:218 LoadUserProfile: NULL default profile path
    USERENV(44c.450) 13:29:11:218 LoadUserProfile: NULL server name
    USERENV(44c.450) 13:29:11:218 GetInterface: Returning rpc binding handle
    USERENV(418.57c) 13:29:11:218 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.57c) 13:29:11:234 DropClientContext: Got client token
    00000688, sid = S-1-5-18
    USERENV(418.57c) 13:29:11:234 MIDL_user_allocate enter
    USERENV(418.57c) 13:29:11:234 DropClientContext: load profile object
    successfully made
    USERENV(418.57c) 13:29:11:234 DropClientContext: Returning 0
    USERENV(44c.450) 13:29:11:234 LoadUserProfile: Calling DropClientToken
    (as self) succeeded
    USERENV(418.438) 13:29:11:234 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.438) 13:29:11:234 In LoadUserProfileP
    USERENV(418.438) 13:29:11:234 LoadUserProfile: Running as client
    USERENV(418.438) 13:29:11:234
    =========================================================
    USERENV(418.438) 13:29:11:234 LoadUserProfile: Entering, hToken =
    <0x684>, lpProfileInfo = 0x113ac90
    USERENV(418.438) 13:29:11:234 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(418.438) 13:29:11:234 LoadUserProfile: lpProfileInfo->lpUserName
    = <LocalService>
    USERENV(418.438) 13:29:11:234 LoadUserProfile: NULL central profile path
    USERENV(418.438) 13:29:11:234 LoadUserProfile: NULL default profile path
    USERENV(418.438) 13:29:11:234 LoadUserProfile: NULL server name
    USERENV(418.438) 13:29:11:234 LoadUserProfile: User sid: S-1-5-19
    USERENV(418.438) 13:29:11:234 CSyncManager::EnterLock <S-1-5-19>
    USERENV(418.438) 13:29:11:234 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.438) 13:29:11:234 CSyncManager::EnterLock: New entry created
    USERENV(418.438) 13:29:11:234 CHashTable::HashAdd: S-1-5-19 added in
    bucket 12
    USERENV(418.438) 13:29:11:234 LoadUserProfile: Wait succeeded. In
    critical section.
    USERENV(418.438) 13:29:11:234 RestoreUserProfile: Entering
    USERENV(418.438) 13:29:11:234 IsCentralProfileReachable: Entering
    USERENV(418.438) 13:29:11:234 IsCentralProfileReachable: Null path. Leaving
    USERENV(418.438) 13:29:11:234 RestoreUserProfile: Profile path = <>
    USERENV(418.438) 13:29:11:234 ExtractProfileFromBackup: A profile
    already exists
    USERENV(418.438) 13:29:11:234 PatchNewProfileIfRequred: A profile
    already exists with the current sid, exitting
    USERENV(418.438) 13:29:11:234 CreateLocalProfileKey: Not setting
    additional Security
    USERENV(418.438) 13:29:11:234 GetExistingLocalProfileImage: Found entry
    in profile list for existing local profile
    USERENV(418.438) 13:29:11:234 GetExistingLocalProfileImage: Local
    profile image filename = <%SystemDrive%\Documents and Settings\LocalService>
    USERENV(418.438) 13:29:11:234 GetExistingLocalProfileImage: Expanded
    local profile image filename = <C:\Documents and Settings\LocalService>
    USERENV(600.620) 13:29:11:234 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.438) 13:29:11:250 GetExistingLocalProfileImage: No local
    mandatory profile. Error = 2
    USERENV(418.438) 13:29:11:250 GetExistingLocalProfileImage: Found local
    profile image file ok <C:\Documents and Settings\LocalService\ntuser.dat>
    USERENV(418.438) 13:29:11:250 GetExistingLocalProfileImage: Failed to
    query low profile unload time with error 2
    USERENV(418.438) 13:29:11:250 Local Existing Profile Image is reachable
    USERENV(418.438) 13:29:11:250 Local profile name is <C:\Documents and
    Settings\LocalService>
    USERENV(418.438) 13:29:11:250 RestoreUserProfile: No central profile.
    Attempting to load local profile.
    USERENV(418.438) 13:29:11:375 MyRegLoadKey: Returning 00000000
    USERENV(418.438) 13:29:11:640 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(418.438) 13:29:11:656 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.438) 13:29:11:968 MyRegLoadKey: Returning 00000000
    USERENV(418.438) 13:29:11:968 CreateClassHive: existing user classes
    hive found
    USERENV(418.438) 13:29:12:000 RestoreUserProfile: About to Leave. Final
    Information follows:
    USERENV(418.438) 13:29:12:015 Profile was successfully loaded.
    USERENV(418.438) 13:29:12:015 lpProfile->lpRoamingProfile = <>
    USERENV(418.438) 13:29:12:015 lpProfile->lpLocalProfile = <C:\Documents
    and Settings\LocalService>
    USERENV(418.438) 13:29:12:046 lpProfile->dwInternalFlags = 0x0
    USERENV(418.438) 13:29:12:046 RestoreUserProfile: Leaving.
    USERENV(418.438) 13:29:12:250 UpgradeProfile: Entering
    USERENV(418.438) 13:29:12:250 UpgradeProfile: Build numbers match
    USERENV(418.438) 13:29:12:250 UpgradeProfile: Leaving Successfully
    USERENV(418.438) 13:29:12:250 GetProfileType: Profile already loaded.
    USERENV(418.438) 13:29:12:250 LoadProfileInfo: Failed to query central
    profile with error 2
    USERENV(418.438) 13:29:12:250 GetProfileType: ProfileFlags is 0
    USERENV(418.438) 13:29:13:140 Profile Ref Count is 1
    USERENV(418.438) 13:29:13:140 LoadUserProfile: Leaving critical Section.
    USERENV(418.438) 13:29:13:140 CSyncManager::LeaveLock <S-1-5-19>
    USERENV(418.438) 13:29:13:140 CSyncManager::LeaveLock: Lock released
    USERENV(418.438) 13:29:13:140 CHashTable::HashDelete: S-1-5-19 deleted
    USERENV(418.438) 13:29:13:140 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.438) 13:29:13:140 LoadUserProfile: Impersonated user:
    00000684, 000006f4
    USERENV(458.4c8) 13:29:13:140 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(458.4c8) 13:29:13:140 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(458.4c8) 13:29:13:218 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(458.4c8) 13:29:13:218 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.438) 13:29:13:359 LoadUserProfile: Reverted to user: 00000000
    USERENV(418.438) 13:29:13:359 LoadUserProfile: Reverted back to user
    <00000000>
    USERENV(418.438) 13:29:13:359 LoadUserProfile: Leaving with a value of 1.
    USERENV(418.438) 13:29:13:359
    =========================================================
    USERENV(418.438) 13:29:13:359 LoadUserProfileI: returning 0
    USERENV(44c.450) 13:29:13:359 LoadUserProfile: Running as self
    USERENV(44c.450) 13:29:13:359 LoadUserProfile: Calling LoadUserProfileI
    (as user) succeeded
    USERENV(44c.450) 13:29:13:359 LoadUserProfile: Returning success. Final
    Information follows:
    USERENV(44c.450) 13:29:13:359 lpProfileInfo->UserName = <LocalService>
    USERENV(44c.450) 13:29:13:359 lpProfileInfo->lpProfilePath = <>
    USERENV(44c.450) 13:29:13:406 lpProfileInfo->dwFlags = 0x9
    USERENV(418.57c) 13:29:13:406 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.57c) 13:29:13:406 ReleaseClientContext: Releasing context
    USERENV(418.57c) 13:29:13:406 ReleaseClientContext_s: Releasing context
    USERENV(418.57c) 13:29:13:406 MIDL_user_free enter
    USERENV(44c.450) 13:29:13:437 ReleaseInterface: Releasing rpc binding handle
    USERENV(44c.450) 13:29:13:437 LoadUserProfile: Returning TRUE. hProfile
    = <0x370>
    USERENV(44c.450) 13:29:13:609 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(44c.450) 13:29:13:625 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(760.764) 13:29:13:640 LibMain: Process Name:
    C:\WINDOWS\system32\svchost.exe
    USERENV(e8.ec) 13:29:19:203 LibMain: Process Name:
    C:\WINDOWS\system32\spoolsv.exe
    USERENV(44c.450) 13:29:19:281 LoadUserProfile: Yes, we can impersonate
    the user. Running as self
    USERENV(44c.450) 13:29:19:281
    =========================================================
    USERENV(44c.450) 13:29:19:281 LoadUserProfile: Entering, hToken =
    <0x3c8>, lpProfileInfo = 0x7fca8
    USERENV(44c.450) 13:29:19:281 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(44c.450) 13:29:19:281 LoadUserProfile: lpProfileInfo->lpUserName
    = <LocalService>
    USERENV(44c.450) 13:29:19:281 LoadUserProfile: NULL central profile path
    USERENV(44c.450) 13:29:19:281 LoadUserProfile: NULL default profile path
    USERENV(44c.450) 13:29:19:281 LoadUserProfile: NULL server name
    USERENV(44c.450) 13:29:19:281 GetInterface: Returning rpc binding handle
    USERENV(418.438) 13:29:19:296 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.438) 13:29:19:296 DropClientContext: Got client token
    000007D4, sid = S-1-5-18
    USERENV(418.438) 13:29:19:296 MIDL_user_allocate enter
    USERENV(418.438) 13:29:19:296 DropClientContext: load profile object
    successfully made
    USERENV(418.438) 13:29:19:296 DropClientContext: Returning 0
    USERENV(44c.450) 13:29:19:296 LoadUserProfile: Calling DropClientToken
    (as self) succeeded
    USERENV(418.57c) 13:29:19:296 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.57c) 13:29:19:296 In LoadUserProfileP
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: Running as client
    USERENV(418.57c) 13:29:19:296
    =========================================================
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: Entering, hToken =
    <0x7a4>, lpProfileInfo = 0x1150b40
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: lpProfileInfo->lpUserName
    = <LocalService>
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: NULL central profile path
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: NULL default profile path
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: NULL server name
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: User sid: S-1-5-19
    USERENV(418.57c) 13:29:19:296 CSyncManager::EnterLock <S-1-5-19>
    USERENV(418.57c) 13:29:19:296 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.57c) 13:29:19:296 CSyncManager::EnterLock: New entry created
    USERENV(418.57c) 13:29:19:296 CHashTable::HashAdd: S-1-5-19 added in
    bucket 12
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: Wait succeeded. In
    critical section.
    USERENV(418.57c) 13:29:19:296 TestIfUserProfileLoaded: Profile already
    loaded.
    USERENV(418.57c) 13:29:19:296 Profile Ref Count is 2
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: Leaving critical Section.
    USERENV(418.57c) 13:29:19:296 CSyncManager::LeaveLock <S-1-5-19>
    USERENV(418.57c) 13:29:19:296 CSyncManager::LeaveLock: Lock released
    USERENV(418.57c) 13:29:19:296 CHashTable::HashDelete: S-1-5-19 deleted
    USERENV(418.57c) 13:29:19:296 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: Impersonated user:
    000007a4, 000007b0
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: Reverted to user: 00000000
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: Reverted back to user
    <00000000>
    USERENV(418.57c) 13:29:19:296 LoadUserProfile: Leaving with a value of 1.
    USERENV(418.57c) 13:29:19:296
    =========================================================
    USERENV(418.57c) 13:29:19:296 LoadUserProfileI: returning 0
    USERENV(44c.450) 13:29:19:296 LoadUserProfile: Running as self
    USERENV(44c.450) 13:29:19:296 LoadUserProfile: Calling LoadUserProfileI
    (as user) succeeded
    USERENV(44c.450) 13:29:19:296 LoadUserProfile: Returning success. Final
    Information follows:
    USERENV(44c.450) 13:29:19:296 lpProfileInfo->UserName = <LocalService>
    USERENV(44c.450) 13:29:19:296 lpProfileInfo->lpProfilePath = <>
    USERENV(44c.450) 13:29:19:296 lpProfileInfo->dwFlags = 0x9
    USERENV(418.438) 13:29:19:296 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.438) 13:29:19:296 ReleaseClientContext: Releasing context
    USERENV(418.438) 13:29:19:296 ReleaseClientContext_s: Releasing context
    USERENV(418.438) 13:29:19:296 MIDL_user_free enter
    USERENV(44c.450) 13:29:19:296 ReleaseInterface: Releasing rpc binding handle
    USERENV(44c.450) 13:29:19:296 LoadUserProfile: Returning TRUE. hProfile
    = <0x3c0>
    USERENV(44c.450) 13:29:19:296 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(44c.450) 13:29:19:296 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(11c.120) 13:29:19:390 LibMain: Process Name:
    C:\WINDOWS\System32\SCardSvr.exe
    USERENV(44c.450) 13:29:19:828 LoadUserProfile: Yes, we can impersonate
    the user. Running as self
    USERENV(44c.450) 13:29:19:828
    =========================================================
    USERENV(44c.450) 13:29:19:828 LoadUserProfile: Entering, hToken =
    <0x3e0>, lpProfileInfo = 0x7fca8
    USERENV(44c.450) 13:29:19:828 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(44c.450) 13:29:19:828 LoadUserProfile: lpProfileInfo->lpUserName
    = <LocalService>
    USERENV(44c.450) 13:29:19:828 LoadUserProfile: NULL central profile path
    USERENV(44c.450) 13:29:19:828 LoadUserProfile: NULL default profile path
    USERENV(44c.450) 13:29:19:828 LoadUserProfile: NULL server name
    USERENV(44c.450) 13:29:19:828 GetInterface: Returning rpc binding handle
    USERENV(418.57c) 13:29:19:828 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.57c) 13:29:19:828 DropClientContext: Got client token
    000007B4, sid = S-1-5-18
    USERENV(418.57c) 13:29:19:828 MIDL_user_allocate enter
    USERENV(418.57c) 13:29:19:828 DropClientContext: load profile object
    successfully made
    USERENV(418.57c) 13:29:19:828 DropClientContext: Returning 0
    USERENV(44c.450) 13:29:19:843 LoadUserProfile: Calling DropClientToken
    (as self) succeeded
    USERENV(418.438) 13:29:19:843 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.438) 13:29:19:843 In LoadUserProfileP
    USERENV(418.438) 13:29:19:843 LoadUserProfile: Running as client
    USERENV(418.438) 13:29:19:843
    =========================================================
    USERENV(418.438) 13:29:19:843 LoadUserProfile: Entering, hToken =
    <0x7a0>, lpProfileInfo = 0x115d4d8
    USERENV(418.438) 13:29:19:843 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(418.438) 13:29:19:843 LoadUserProfile: lpProfileInfo->lpUserName
    = <LocalService>
    USERENV(418.438) 13:29:19:843 LoadUserProfile: NULL central profile path
    USERENV(418.438) 13:29:19:843 LoadUserProfile: NULL default profile path
    USERENV(418.438) 13:29:19:843 LoadUserProfile: NULL server name
    USERENV(418.438) 13:29:19:843 LoadUserProfile: User sid: S-1-5-19
    USERENV(418.438) 13:29:19:843 CSyncManager::EnterLock <S-1-5-19>
    USERENV(418.438) 13:29:19:843 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.438) 13:29:19:843 CSyncManager::EnterLock: New entry created
    USERENV(418.438) 13:29:19:843 CHashTable::HashAdd: S-1-5-19 added in
    bucket 12
    USERENV(418.438) 13:29:19:843 LoadUserProfile: Wait succeeded. In
    critical section.
    USERENV(418.438) 13:29:19:843 TestIfUserProfileLoaded: Profile already
    loaded.
    USERENV(418.438) 13:29:19:843 Profile Ref Count is 3
    USERENV(418.438) 13:29:19:843 LoadUserProfile: Leaving critical Section.
    USERENV(418.438) 13:29:19:843 CSyncManager::LeaveLock <S-1-5-19>
    USERENV(418.438) 13:29:19:843 CSyncManager::LeaveLock: Lock released
    USERENV(418.438) 13:29:19:843 CHashTable::HashDelete: S-1-5-19 deleted
    USERENV(418.438) 13:29:19:843 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.438) 13:29:19:843 LoadUserProfile: Impersonated user:
    000007a0, 00000780
    USERENV(418.438) 13:29:19:843 LoadUserProfile: Reverted to user: 00000000
    USERENV(418.438) 13:29:19:843 LoadUserProfile: Reverted back to user
    <00000000>
    USERENV(418.438) 13:29:19:843 LoadUserProfile: Leaving with a value of 1.
    USERENV(418.438) 13:29:19:843
    =========================================================
    USERENV(418.438) 13:29:19:843 LoadUserProfileI: returning 0
    USERENV(44c.450) 13:29:19:843 LoadUserProfile: Running as self
    USERENV(44c.450) 13:29:19:843 LoadUserProfile: Calling LoadUserProfileI
    (as user) succeeded
    USERENV(44c.450) 13:29:19:843 LoadUserProfile: Returning success. Final
    Information follows:
    USERENV(44c.450) 13:29:19:843 lpProfileInfo->UserName = <LocalService>
    USERENV(44c.450) 13:29:19:843 lpProfileInfo->lpProfilePath = <>
    USERENV(44c.450) 13:29:19:843 lpProfileInfo->dwFlags = 0x9
    USERENV(418.57c) 13:29:19:843 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.57c) 13:29:19:843 ReleaseClientContext: Releasing context
    USERENV(418.57c) 13:29:19:843 ReleaseClientContext_s: Releasing context
    USERENV(418.57c) 13:29:19:843 MIDL_user_free enter
    USERENV(44c.450) 13:29:19:843 ReleaseInterface: Releasing rpc binding handle
    USERENV(44c.450) 13:29:19:843 LoadUserProfile: Returning TRUE. hProfile
    = <0x3dc>
    USERENV(44c.450) 13:29:19:843 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(44c.450) 13:29:19:843 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(15c.160) 13:29:19:890 LibMain: Process Name:
    C:\WINDOWS\system32\svchost.exe
    USERENV(418.65c) 13:29:21:640 ApplyGroupPolicy: Entering. Flags = f
    USERENV(418.65c) 13:29:21:640 ProcessGPOs:
    USERENV(418.65c) 13:29:21:640 ProcessGPOs:
    USERENV(418.65c) 13:29:21:640 ProcessGPOs: Starting computer Group
    Policy (Async forground) processing...
    USERENV(418.65c) 13:29:21:640 ProcessGPOs:
    USERENV(418.65c) 13:29:21:640 ProcessGPOs:
    USERENV(418.65c) 13:29:21:640 EnterCriticalPolicySectionEx: Entering
    with timeout 600000 and flags 0x0
    USERENV(418.65c) 13:29:21:640 EnterCriticalPolicySectionEx: Machine
    critical section has been claimed. Handle = 0x760
    USERENV(418.65c) 13:29:21:640 EnterCriticalPolicySectionEx: Leaving
    successfully.
    USERENV(418.65c) 13:29:21:640 ProcessGPOs: Machine role is 2.
    USERENV(418.65c) 13:29:21:890 IsSlowLink: Slow link transfer rate is 0.
    Always download policy.
    USERENV(254.258) 13:29:22:875 LibMain: Process Name:
    C:\WINDOWS\System32\svchost.exe
    USERENV(2f4.2f8) 13:29:33:546 LibMain: Process Name: C:\Program
    Files\Trend Micro\OfficeScan Client\ntrtscan.exe
    USERENV(260.298) 13:29:35:562 LibMain: Process Name: C:\Program
    Files\iolo\common\lib\ioloServiceManager.exe
    USERENV(760.60c) 13:29:37:593 ImpersonateUser: Failed to impersonate
    user with 5.
    USERENV(760.60c) 13:29:37:593 GetUserNameAndDomain Failed to impersonate
    user
    USERENV(760.60c) 13:29:37:593 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(760.60c) 13:29:37:593 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(2f4.350) 13:29:39:296 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.720) 13:29:41:703 IsSyncForegroundPolicyRefresh:
    Synchronous, Reason: ForcedSyncRefresh
    USERENV(418.41c) 13:29:41:953 LoadUserProfile: Yes, we can impersonate
    the user. Running as self
    USERENV(418.41c) 13:29:41:953
    =========================================================
    USERENV(418.41c) 13:29:41:953 LoadUserProfile: Entering, hToken =
    <0x7ec>, lpProfileInfo = 0x6e3e0
    USERENV(418.41c) 13:29:41:953 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x0>
    USERENV(418.41c) 13:29:41:953 LoadUserProfile: lpProfileInfo->lpUserName
    = <user1>
    USERENV(418.41c) 13:29:41:953 LoadUserProfile: NULL central profile path
    USERENV(418.41c) 13:29:42:000 LoadUserProfile:
    lpProfileInfo->lpDefaultPath = <\\DomainC4\netlogon\Default User>
    USERENV(418.41c) 13:29:42:062 LoadUserProfile: NULL server name
    USERENV(418.41c) 13:29:42:062 LoadUserProfile: In console winlogon process
    USERENV(418.41c) 13:29:42:062 In LoadUserProfileP
    USERENV(418.41c) 13:29:42:062
    =========================================================
    USERENV(418.41c) 13:29:42:062 LoadUserProfile: Entering, hToken =
    <0x7ec>, lpProfileInfo = 0x6e3e0
    USERENV(418.41c) 13:29:42:062 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x0>
    USERENV(418.41c) 13:29:42:062 LoadUserProfile: lpProfileInfo->lpUserName
    = <user1>
    USERENV(418.41c) 13:29:42:062 LoadUserProfile: NULL central profile path
    USERENV(418.41c) 13:29:42:062 LoadUserProfile:
    lpProfileInfo->lpDefaultPath = <\\DomainC4\netlogon\Default User>
    USERENV(418.41c) 13:29:42:062 LoadUserProfile: NULL server name
    USERENV(418.41c) 13:29:42:062 LoadUserProfile: User sid:
    S-1-5-21-3558745915-3620255497-2782363364-2817
    USERENV(418.41c) 13:29:42:062 CSyncManager::EnterLock
    <S-1-5-21-3558745915-3620255497-2782363364-2817>
    USERENV(418.41c) 13:29:42:062 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.41c) 13:29:42:062 CSyncManager::EnterLock: New entry created
    USERENV(418.41c) 13:29:42:062 CHashTable::HashAdd:
    S-1-5-21-3558745915-3620255497-2782363364-2817 added in bucket 19
    USERENV(418.41c) 13:29:42:062 LoadUserProfile: Wait succeeded. In
    critical section.
    USERENV(418.41c) 13:29:42:062 RestoreUserProfile: Entering
    USERENV(418.41c) 13:29:42:062 RestoreUserProfile: User is a Admin
    USERENV(418.41c) 13:29:42:062 IsCentralProfileReachable: Entering
    USERENV(418.41c) 13:29:42:062 IsCentralProfileReachable: Null path. Leaving
    USERENV(418.41c) 13:29:42:078 RestoreUserProfile: Profile path = <>
    USERENV(418.41c) 13:29:42:078 ExtractProfileFromBackup: A profile
    already exists
    USERENV(418.41c) 13:29:42:078 PatchNewProfileIfRequred: A profile
    already exists with the current sid, exitting
    USERENV(418.41c) 13:29:42:078 CreateLocalProfileKey: Not setting
    additional Security
    USERENV(418.41c) 13:29:42:078 GetExistingLocalProfileImage: Found entry
    in profile list for existing local profile
    USERENV(418.41c) 13:29:42:078 GetExistingLocalProfileImage: Local
    profile image filename = <%SystemDrive%\Documents and Settings\user1>
    USERENV(418.41c) 13:29:42:078 GetExistingLocalProfileImage: Expanded
    local profile image filename = <C:\Documents and Settings\user1>
    USERENV(418.41c) 13:29:42:078 GetExistingLocalProfileImage: No local
    mandatory profile. Error = 2
    USERENV(418.41c) 13:29:42:078 GetExistingLocalProfileImage: Found local
    profile image file ok <C:\Documents and Settings\user1\ntuser.dat>
    USERENV(418.41c) 13:29:42:078 GetExistingLocalProfileImage: Failed to
    query low profile unload time with error 2
    USERENV(418.41c) 13:29:42:078 Local Existing Profile Image is reachable
    USERENV(418.41c) 13:29:42:078 Local profile name is <C:\Documents and
    Settings\user1>
    USERENV(418.41c) 13:29:42:078 RestoreUserProfile: No central profile.
    Attempting to load local profile.
    USERENV(418.41c) 13:29:42:390 MyRegLoadKey: Returning 00000000
    USERENV(418.41c) 13:29:42:390 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.41c) 13:29:42:828 MyRegLoadKey: Returning 00000000
    USERENV(418.41c) 13:29:42:828 CreateClassHive: existing user classes
    hive found
    USERENV(418.41c) 13:29:42:828 RestoreUserProfile: About to Leave. Final
    Information follows:
    USERENV(418.41c) 13:29:42:828 Profile was successfully loaded.
    USERENV(418.41c) 13:29:42:828 lpProfile->lpRoamingProfile = <>
    USERENV(418.41c) 13:29:42:828 lpProfile->lpLocalProfile = <C:\Documents
    and Settings\user1>
    USERENV(418.41c) 13:29:42:828 lpProfile->dwInternalFlags = 0x100
    USERENV(418.41c) 13:29:42:828 RestoreUserProfile: Leaving.
    USERENV(418.41c) 13:29:42:875 UpgradeProfile: Entering
    USERENV(418.41c) 13:29:42:875 UpgradeProfile: Build numbers match
    USERENV(418.41c) 13:29:42:875 UpgradeProfile: Leaving Successfully
    USERENV(418.41c) 13:29:42:875 GetProfileType: Profile already loaded.
    USERENV(418.41c) 13:29:42:875 LoadProfileInfo: Failed to query central
    profile with error 2
    USERENV(418.41c) 13:29:42:875 GetProfileType: ProfileFlags is 0
    USERENV(418.41c) 13:29:43:203 Profile Ref Count is 1
    USERENV(418.41c) 13:29:43:203 LoadUserProfile: Leaving critical Section.
    USERENV(418.41c) 13:29:43:203 CSyncManager::LeaveLock
    <S-1-5-21-3558745915-3620255497-2782363364-2817>
    USERENV(418.41c) 13:29:43:203 CSyncManager::LeaveLock: Lock released
    USERENV(418.41c) 13:29:43:203 CHashTable::HashDelete:
    S-1-5-21-3558745915-3620255497-2782363364-2817 deleted
    USERENV(418.41c) 13:29:43:203 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.41c) 13:29:43:203 LoadUserProfile: Impersonated user:
    000007ec, 00000000
    USERENV(458.4a8) 13:29:43:218 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(458.4a8) 13:29:43:359 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.41c) 13:29:43:500 LoadUserProfile: Reverted to user: 00000000
    USERENV(418.41c) 13:29:43:500 LoadUserProfile: Leaving with a value of 1.
    USERENV(418.41c) 13:29:43:500
    =========================================================
    USERENV(418.41c) 13:29:43:500 LoadUserProfile: LoadUserProfileP succeeded
    USERENV(418.41c) 13:29:43:500 LoadUserProfile: Returning success. Final
    Information follows:
    USERENV(418.41c) 13:29:43:500 lpProfileInfo->UserName = <user1>
    USERENV(418.41c) 13:29:43:500 lpProfileInfo->lpProfilePath = <>
    USERENV(418.41c) 13:29:43:500 lpProfileInfo->dwFlags = 0x0
    USERENV(418.41c) 13:29:43:500 LoadUserProfile: Returning TRUE. hProfile
    = <0x810>
    USERENV(418.41c) 13:29:43:515 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.41c) 13:29:44:281 IsSyncForegroundPolicyRefresh:
    Synchronous, Reason: ForcedSyncRefresh
    USERENV(418.774) 13:29:44:281 IsSyncForegroundPolicyRefresh:
    Synchronous, Reason: ForcedSyncRefresh
    USERENV(790.784) 13:29:46:781 LibMain: Process Name:
    C:\WINDOWS\system32\wuauclt.exe
    USERENV(44c.450) 13:29:47:453 LoadUserProfile: Yes, we can impersonate
    the user. Running as self
    USERENV(44c.450) 13:29:47:453
    =========================================================
    USERENV(44c.450) 13:29:47:484 LoadUserProfile: Entering, hToken =
    <0x484>, lpProfileInfo = 0x7fca8
    USERENV(44c.450) 13:29:47:546 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(44c.450) 13:29:47:578 LoadUserProfile: lpProfileInfo->lpUserName
    = <NetworkService>
    USERENV(44c.450) 13:29:47:609 LoadUserProfile: NULL central profile path
    USERENV(44c.450) 13:29:47:640 LoadUserProfile: NULL default profile path
    USERENV(44c.450) 13:29:47:671 LoadUserProfile: NULL server name
    USERENV(44c.450) 13:29:47:703 GetInterface: Returning rpc binding handle
    USERENV(418.438) 13:29:47:765 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.438) 13:29:47:765 DropClientContext: Got client token
    0000038C, sid = S-1-5-18
    USERENV(418.438) 13:29:47:765 MIDL_user_allocate enter
    USERENV(418.438) 13:29:47:765 DropClientContext: load profile object
    successfully made
    USERENV(418.438) 13:29:47:765 DropClientContext: Returning 0
    USERENV(44c.450) 13:29:47:765 LoadUserProfile: Calling DropClientToken
    (as self) succeeded
    USERENV(418.57c) 13:29:47:796 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.57c) 13:29:47:796 In LoadUserProfileP
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: Running as client
    USERENV(418.57c) 13:29:47:796
    =========================================================
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: Entering, hToken =
    <0x390>, lpProfileInfo = 0x1133af0
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: lpProfileInfo->dwFlags =
    <0x9>
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: lpProfileInfo->lpUserName
    = <NetworkService>
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: NULL central profile path
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: NULL default profile path
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: NULL server name
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: User sid: S-1-5-20
    USERENV(418.57c) 13:29:47:796 CSyncManager::EnterLock <S-1-5-20>
    USERENV(418.57c) 13:29:47:796 CSyncManager::EnterLock: No existing entry
    found
    USERENV(418.57c) 13:29:47:796 CSyncManager::EnterLock: New entry created
    USERENV(418.57c) 13:29:47:796 CHashTable::HashAdd: S-1-5-20 added in
    bucket 4
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: Wait succeeded. In
    critical section.
    USERENV(418.57c) 13:29:47:796 TestIfUserProfileLoaded: Profile already
    loaded.
    USERENV(418.57c) 13:29:47:796 Profile Ref Count is 3
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: Leaving critical Section.
    USERENV(418.57c) 13:29:47:796 CSyncManager::LeaveLock <S-1-5-20>
    USERENV(418.57c) 13:29:47:796 CSyncManager::LeaveLock: Lock released
    USERENV(418.57c) 13:29:47:796 CHashTable::HashDelete: S-1-5-20 deleted
    USERENV(418.57c) 13:29:47:796 CSyncManager::LeaveLock: Lock deleted
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: Impersonated user:
    00000390, 000007e8
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: Reverted to user: 00000000
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: Reverted back to user
    <00000000>
    USERENV(418.57c) 13:29:47:796 LoadUserProfile: Leaving with a value of 1.
    USERENV(418.57c) 13:29:47:796
    =========================================================
    USERENV(418.57c) 13:29:47:796 LoadUserProfileI: returning 0
    USERENV(44c.450) 13:29:47:796 LoadUserProfile: Running as self
    USERENV(44c.450) 13:29:47:828 LoadUserProfile: Calling LoadUserProfileI
    (as user) succeeded
    USERENV(44c.450) 13:29:47:859 LoadUserProfile: Returning success. Final
    Information follows:
    USERENV(44c.450) 13:29:47:890 lpProfileInfo->UserName = <NetworkService>
    USERENV(44c.450) 13:29:47:890 lpProfileInfo->lpProfilePath = <>
    USERENV(44c.450) 13:29:47:890 lpProfileInfo->dwFlags = 0x9
    USERENV(418.438) 13:29:47:890 IProfileSecurityCallBack: client
    authenticated.
    USERENV(418.438) 13:29:47:890 ReleaseClientContext: Releasing context
    USERENV(418.438) 13:29:47:890 ReleaseClientContext_s: Releasing context
    USERENV(418.438) 13:29:47:890 MIDL_user_free enter
    USERENV(44c.450) 13:29:47:890 ReleaseInterface: Releasing rpc binding handle
    USERENV(44c.450) 13:29:47:890 LoadUserProfile: Returning TRUE. hProfile
    = <0x490>
    USERENV(44c.450) 13:29:47:890 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(44c.450) 13:29:47:890 ProcessAutoexec: Cannot process autoexec.bat.
     
    Patrick, Apr 28, 2010
    #21
    1. Advertisements

  2. Patrick

    Patrick Guest

    Dear Paul,

    5) Continue ...

    USERENV(c0.cc) 13:29:49:968 LibMain: Process Name: C:\Program
    Files\Windows Media Player\WMPNetwk.exe
    USERENV(418.65c) 13:30:12:656 ProcessGPOs: network name is mycompany.com
    USERENV(418.65c) 13:30:16:218 ProcessGPOs: User name is:
    CN=FINANCE1,OU=HeadOffice,OU=Workstations,DC=mycompany,DC=com, Domain
    name is: mycompany
    USERENV(418.65c) 13:30:16:218 ProcessGPOs: Domain controller is:
    \\DomainC4.mycompany.com Domain DN is mycompany.com
    USERENV(418.65c) 13:30:16:218 ReadGPExtensions: Rsop entry point not
    found for gptext.dll.
    USERENV(418.65c) 13:30:16:218 ReadGPExtensions: Rsop entry point not
    found for dskquota.dll.
    USERENV(418.65c) 13:30:16:218 ReadGPExtensions: Rsop entry point not
    found for gptext.dll.
    USERENV(418.65c) 13:30:16:281 ReadGPExtensions: Rsop entry point not
    found for C:\WINDOWS\system32\iedkcs32.dll.
    USERENV(418.65c) 13:30:16:281 ReadGPExtensions: Rsop entry point not
    found for C:\WINDOWS\system32\iedkcs32.dll.
    USERENV(418.65c) 13:30:16:281 ReadGPExtensions: Rsop entry point not
    found for scecli.dll.
    USERENV(418.65c) 13:30:16:281 ReadGPExtensions: Rsop entry point not
    found for C:\WINDOWS\System32\cscui.dll.
    USERENV(418.65c) 13:30:16:281 ReadGPExtensions: Rsop entry point not
    found for C:\WINDOWS\system32\iedkcs32.dll.
    USERENV(418.65c) 13:30:16:281 ReadGPExtensions: Rsop entry point not
    found for gptext.dll.
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
    USERENV(418.65c) 13:30:16:281 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {0E28E245-9368-4853-AD84-6DA3BA35BB75}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {17D89FEC-5C44-4972-B12D-241CAEF74509}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {1A6364EB-776B-4120-ADE1-B63A406A76B5}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
    USERENV(418.65c) 13:30:16:281 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {5794DAFD-BE60-433f-88A2-1A31939AC01F}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {6232C319-91AC-4931-9385-E70C2B099F0E}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {7150F9BF-48AD-4da4-A49C-29EF4A8369BA}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {728EE579-943C-4519-9EF7-AB56765798ED}
    USERENV(418.65c) 13:30:16:281 ReadExtStatus: Reading Previous Status for
    extension {74EE6C03-5363-4554-B161-627540339CAB}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {7B849a69-220F-451E-B3FE-2CB811AF94AE}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
    USERENV(418.65c) 13:30:16:296 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {91FBB303-0CD5-4055-BF42-E512A681B325}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {A3F3E39B-5D83-4940-B954-28315B82F0A8}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {AADCED64-746C-4633-A97C-D61349046527}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {B087BE9D-ED37-454f-AF9C-04291E351182}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
    USERENV(418.65c) 13:30:16:296 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {B587E2B1-4D59-4e7e-AED9-22B9DF11D053}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {C631DF4C-088F-4156-B058-4375F0853CD8}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {E47248BA-94CC-49c4-BBB5-9EB7F05183D0}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {E4F48E54-F38D-4884-BFB9-D4D2E5729C18}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {E5094040-C46C-4115-B030-04FB2E545B00}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {E62688F0-25FD-4c90-BFF5-F508B9D2E31F}
    USERENV(418.65c) 13:30:16:296 ReadExtStatus: Reading Previous Status for
    extension {F9C77450-3A41-477E-9310-9ACD617BD9E3}
    USERENV(418.65c) 13:30:16:296 ProcessGPOs: Calling GetGPOInfo for normal
    policy mode
    USERENV(418.65c) 13:30:16:328 GetGPOInfo: ********************************
    USERENV(418.65c) 13:30:16:328 GetGPOInfo: Entering...
    USERENV(418.65c) 13:30:16:546 GetGPOInfo: Server connection established.
    USERENV(418.65c) 13:30:16:593 GetGPOInfo: Bound successfully.
    USERENV(418.65c) 13:30:16:656 SearchDSObject: Searching
    <OU=HeadOffice,OU=Workstations,DC=mycompany,DC=com>
    USERENV(418.65c) 13:30:16:656 SearchDSObject: No GPO(s) for this object.
    USERENV(418.65c) 13:30:16:656 SearchDSObject: Searching
    <OU=Workstations,DC=mycompany,DC=com>
    USERENV(418.65c) 13:30:16:656 SearchDSObject: Found GPO(s):
    <[LDAP://CN={614546A6-25E6-416D-8A5D-B8A56FB3A986},CN=Policies,CN=System,DC=mycompany,DC=com;0]>
    USERENV(418.65c) 13:30:16:656 ProcessGPO: ==============================
    USERENV(418.65c) 13:30:16:656 ProcessGPO: Deferring search for
    <LDAP://CN={614546A6-25E6-416D-8A5D-B8A56FB3A986},CN=Policies,CN=System,DC=mycompany,DC=com>
    USERENV(418.65c) 13:30:16:656 SearchDSObject: Searching
    <DC=mycompany,DC=com>
    USERENV(418.65c) 13:30:16:656 SearchDSObject: Found GPO(s):
    <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mycompany,DC=com;0]>
    USERENV(418.65c) 13:30:16:656 ProcessGPO: ==============================
    USERENV(418.65c) 13:30:16:656 ProcessGPO: Deferring search for
    <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mycompany,DC=com>
    USERENV(418.65c) 13:30:16:671 SearchDSObject: Searching
    <CN=mycompany,CN=Sites,CN=Configuration,DC=mycompany,DC=com>
    USERENV(418.65c) 13:30:16:671 SearchDSObject: No GPO(s) for this object.
    USERENV(418.65c) 13:30:16:703 EvaluateDeferredGPOs: Searching for GPOs
    in cn=policies,cn=system,DC=mycompany,DC=com
    USERENV(418.65c) 13:30:16:718 ProcessGPO: ==============================
    USERENV(418.65c) 13:30:16:718 ProcessGPO: Searching
    <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mycompany,DC=com>
    USERENV(418.65c) 13:30:16:718 ProcessGPO: Machine has access to this GPO.
    USERENV(418.65c) 13:30:16:718 ProcessGPO: GPO passes the filter check.
    USERENV(418.65c) 13:30:16:718 ProcessGPO: Found functionality version
    of: 2
    USERENV(418.65c) 13:30:16:718 ProcessGPO: Found file system path of:
    <\\mycompany.com\sysvol\mycompany.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
    USERENV(418.65c) 13:30:17:484 ProcessGPO: Found common name of:
    <{31B2F340-016D-11D2-945F-00C04FB984F9}>
    USERENV(418.65c) 13:30:17:484 ProcessGPO: Found display name of:
    <Default Domain Policy>
    USERENV(418.65c) 13:30:17:484 ProcessGPO: Found machine version of: GPC
    is 54, GPT is 54
    USERENV(418.65c) 13:30:17:484 ProcessGPO: Found flags of: 0
    USERENV(418.65c) 13:30:17:484 ProcessGPO: Found extensions:
    [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
    USERENV(418.65c) 13:30:17:484 ProcessGPO: ==============================
    USERENV(418.65c) 13:30:17:484 ProcessGPO: ==============================
    USERENV(418.65c) 13:30:17:484 ProcessGPO: Searching
    <CN={614546A6-25E6-416D-8A5D-B8A56FB3A986},CN=Policies,CN=System,DC=mycompany,DC=com>
    USERENV(418.65c) 13:30:17:484 ProcessGPO: Machine has access to this GPO.
    USERENV(418.65c) 13:30:17:484 ProcessGPO: GPO passes the filter check.
    USERENV(418.65c) 13:30:17:500 ProcessGPO: Found functionality version
    of: 2
    USERENV(418.65c) 13:30:17:500 ProcessGPO: Found file system path of:
    <\\mycompany.com\SysVol\mycompany.com\Policies\{614546A6-25E6-416D-8A5D-B8A56FB3A986}>
    USERENV(418.65c) 13:30:17:515 ProcessGPO: Found common name of:
    <{614546A6-25E6-416D-8A5D-B8A56FB3A986}>
    USERENV(418.65c) 13:30:17:515 ProcessGPO: Found display name of:
    <Workstations>
    USERENV(418.65c) 13:30:17:515 ProcessGPO: Found machine version of: GPC
    is 189, GPT is 189
    USERENV(418.65c) 13:30:17:515 ProcessGPO: Found flags of: 0
    USERENV(418.65c) 13:30:17:515 ProcessGPO: Found extensions:
    [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B6664F-4972-11D1-A7CA-0000F87571E3}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
    USERENV(418.65c) 13:30:17:515 ProcessGPO: ==============================
    USERENV(418.65c) 13:30:17:609 GetGPOInfo: Leaving with 1
    USERENV(418.65c) 13:30:17:609 GetGPOInfo: ********************************
    USERENV(418.65c) 13:30:17:890 ProcessGPOs: Logging Data for Target
    <FINANCE1>.
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: OpenThreadToken failed with
    error 1008, assuming thread is not impersonating
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: Processing extension Registry
    USERENV(418.65c) 13:30:18:156 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.65c) 13:30:18:156 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:156 CheckGPOs: No GPO changes and no security
    group membership change and extension Registry has NoGPOChanges set.
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: Processing extension Wireless
    USERENV(418.65c) 13:30:18:156 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:156 CheckGPOs: No GPO changes but couldn't
    read extension Wireless's status or policy time.
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: Extension Wireless skipped
    because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: Processing extension Group
    Policy Environment
    USERENV(418.65c) 13:30:18:156 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:156 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Environment's status or policy time.
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: Extension Group Policy
    Environment skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: Processing extension Group
    Policy Local Users and Groups
    USERENV(418.65c) 13:30:18:156 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:156 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Local Users and Groups's status or policy time.
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: Extension Group Policy Local
    Users and Groups skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: Processing extension Group
    Policy Device Settings
    USERENV(418.65c) 13:30:18:156 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:156 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Device Settings's status or policy time.
    USERENV(418.65c) 13:30:18:156 ProcessGPOs: Extension Group Policy Device
    Settings skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Processing extension Folder
    Redirection
    USERENV(418.65c) 13:30:18:171 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:171 CheckGPOs: No GPO changes but couldn't
    read extension Folder Redirection's status or policy time.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Extension Folder Redirection
    skipped with flags 0x1000f.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Processing extension
    Microsoft Disk Quota
    USERENV(418.65c) 13:30:18:171 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:171 CheckGPOs: No GPO changes but couldn't
    read extension Microsoft Disk Quota's status or policy time.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Extension Microsoft Disk
    Quota skipped with flags 0x1000f.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Processing extension Group
    Policy Network Options
    USERENV(418.65c) 13:30:18:171 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:171 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Network Options's status or policy time.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Extension Group Policy
    Network Options skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Processing extension QoS
    Packet Scheduler
    USERENV(418.65c) 13:30:18:171 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:171 CheckGPOs: No GPO changes but couldn't
    read extension QoS Packet Scheduler's status or policy time.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Extension QoS Packet
    Scheduler skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Processing extension Scripts
    USERENV(418.65c) 13:30:18:171 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.65c) 13:30:18:171 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:171 CheckGPOs: No GPO changes and no security
    group membership change and extension Scripts has NoGPOChanges set.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Processing extension Internet
    Explorer Zonemapping
    USERENV(418.65c) 13:30:18:171 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:171 CheckGPOs: No GPO changes but couldn't
    read extension Internet Explorer Zonemapping's status or policy time.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Extension Internet Explorer
    Zonemapping skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Processing extension Group
    Policy Drive Maps
    USERENV(418.65c) 13:30:18:171 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:171 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Drive Maps's status or policy time.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: Extension Group Policy Drive
    Maps skipped with flags 0x1000f.
    USERENV(418.65c) 13:30:18:171 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:187 ProcessGPOs: Processing extension Group
    Policy Folders
    USERENV(418.65c) 13:30:18:187 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:234 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Folders's status or policy time.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Extension Group Policy
    Folders skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Processing extension Group
    Policy Network Shares
    USERENV(418.65c) 13:30:18:234 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:234 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Network Shares's status or policy time.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Extension Group Policy
    Network Shares skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Processing extension Group
    Policy Files
    USERENV(418.65c) 13:30:18:234 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:234 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Files's status or policy time.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Extension Group Policy Files
    skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Processing extension Group
    Policy Data Sources
    USERENV(418.65c) 13:30:18:234 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:234 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Data Sources's status or policy time.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Extension Group Policy Data
    Sources skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Processing extension Group
    Policy Ini Files
    USERENV(418.65c) 13:30:18:234 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:234 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Ini Files's status or policy time.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Extension Group Policy Ini
    Files skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Processing extension Internet
    Explorer User Accelerators
    USERENV(418.65c) 13:30:18:234 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:234 CheckGPOs: No GPO changes but couldn't
    read extension Internet Explorer User Accelerators's status or policy time.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Extension Internet Explorer
    User Accelerators skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:234 ProcessGPOs: Processing extension Security
    USERENV(418.65c) 13:30:18:234 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.65c) 13:30:18:250 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:250 CheckGPOs: No GPO changes and no security
    group membership change and extension Security has NoGPOChanges set.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Processing extension Group
    Policy Services
    USERENV(418.65c) 13:30:18:250 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:250 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Services's status or policy time.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Extension Group Policy
    Services skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Processing extension Internet
    Explorer Branding
    USERENV(418.65c) 13:30:18:250 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:250 CheckGPOs: No GPO changes but couldn't
    read extension Internet Explorer Branding's status or policy time.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Extension Internet Explorer
    Branding skipped with flags 0x1000f.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Processing extension Group
    Policy Folder Options
    USERENV(418.65c) 13:30:18:250 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:250 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Folder Options's status or policy time.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Extension Group Policy Folder
    Options skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Processing extension Group
    Policy Scheduled Tasks
    USERENV(418.65c) 13:30:18:250 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:250 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Scheduled Tasks's status or policy time.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Extension Group Policy
    Scheduled Tasks skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Processing extension Group
    Policy Registry
    USERENV(418.65c) 13:30:18:250 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:250 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Registry's status or policy time.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Extension Group Policy
    Registry skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Processing extension EFS recovery
    USERENV(418.65c) 13:30:18:250 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.65c) 13:30:18:250 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:250 CheckGPOs: No GPO changes and no security
    group membership change and extension EFS recovery has NoGPOChanges set.
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:250 ProcessGPOs: Processing extension 802.3
    Group Policy
    USERENV(418.65c) 13:30:18:250 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:250 CheckGPOs: No GPO changes but couldn't
    read extension 802.3 Group Policy's status or policy time.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Extension 802.3 Group Policy
    skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Processing extension Group
    Policy Printers
    USERENV(418.65c) 13:30:18:265 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:265 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Printers's status or policy time.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Extension Group Policy
    Printers skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Processing extension Group
    Policy Shortcuts
    USERENV(418.65c) 13:30:18:265 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:265 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Shortcuts's status or policy time.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Extension Group Policy
    Shortcuts skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Processing extension
    Microsoft Offline Files
    USERENV(418.65c) 13:30:18:265 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:265 CheckGPOs: No GPO changes but couldn't
    read extension Microsoft Offline Files's status or policy time.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Extension Microsoft Offline
    Files skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Processing extension Software
    Installation
    USERENV(418.65c) 13:30:18:265 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:265 CheckGPOs: No GPO changes but couldn't
    read extension Software Installation's status or policy time.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Extension Software
    Installation skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Processing extension Internet
    Explorer Machine Accelerators
    USERENV(418.65c) 13:30:18:265 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:265 CheckGPOs: No GPO changes but couldn't
    read extension Internet Explorer Machine Accelerators's status or policy
    time.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Extension Internet Explorer
    Machine Accelerators skipped because both deleted and changed GPO lists
    are empty.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Processing extension IP Security
    USERENV(418.65c) 13:30:18:265 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:265 CheckGPOs: No GPO changes but couldn't
    read extension IP Security's status or policy time.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Extension IP Security skipped
    because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Processing extension Group
    Policy Internet Settings
    USERENV(418.65c) 13:30:18:265 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:265 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Internet Settings's status or policy time.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: Extension Group Policy
    Internet Settings skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.65c) 13:30:18:265 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: Processing extension Group
    Policy Start Menu Settings
    USERENV(418.65c) 13:30:18:281 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:281 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Start Menu Settings's status or policy time.
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: Extension Group Policy Start
    Menu Settings skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: Processing extension Group
    Policy Regional Options
    USERENV(418.65c) 13:30:18:281 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:281 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Regional Options's status or policy time.
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: Extension Group Policy
    Regional Options skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: Processing extension Group
    Policy Power Options
    USERENV(418.65c) 13:30:18:281 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:281 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Power Options's status or policy time.
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: Extension Group Policy Power
    Options skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: -----------------------
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: Processing extension Group
    Policy Applications
    USERENV(418.65c) 13:30:18:281 CompareGPOLists: The lists are the same.
    USERENV(418.65c) 13:30:18:281 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Applications's status or policy time.
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: Extension Group Policy
    Applications skipped because both deleted and changed GPO lists are empty.
    USERENV(418.65c) 13:30:18:281 SetFgRefreshInfo: Previous Machine Fg
    policy Asynchronous, Reason: NoNeedForSync.
    USERENV(418.65c) 13:30:18:281 ProcessGPOs: No WMI logging done in this
    policy cycle.
    USERENV(418.65c) 13:30:18:375 LeaveCriticalPolicySection: Critical
    section 0x760 has been released.
    USERENV(418.65c) 13:30:18:375 ProcessGPOs: Computer Group Policy has
    been applied.
    USERENV(418.65c) 13:30:18:375 ProcessGPOs: Leaving with 1.
    USERENV(418.65c) 13:30:18:375 ApplyGroupPolicy: Leaving successfully.
    USERENV(418.858) 13:30:18:375 GPOThread: Next refresh will happen in
    103 minutes
    USERENV(418.774) 13:30:18:578 ApplyGroupPolicy: Entering. Flags = 6
    USERENV(418.774) 13:30:18:578 ProcessGPOs:
    USERENV(418.774) 13:30:18:578 ProcessGPOs:
    USERENV(418.774) 13:30:18:578 ProcessGPOs: Starting user Group Policy
    (Background) processing...
    USERENV(418.774) 13:30:18:578 ProcessGPOs:
    USERENV(418.774) 13:30:18:578 ProcessGPOs:
    USERENV(418.774) 13:30:18:578 EnterCriticalPolicySectionEx: Entering
    with timeout 600000 and flags 0x0
    USERENV(418.774) 13:30:18:578 EnterCriticalPolicySectionEx: User
    critical section has been claimed. Handle = 0x82c
    USERENV(418.774) 13:30:18:578 EnterCriticalPolicySectionEx: Leaving
    successfully.
    USERENV(418.774) 13:30:18:578 ProcessGPOs: Machine role is 2.
    USERENV(418.774) 13:30:18:578 PingComputer: PingBufferSize set as 2048
    USERENV(860.868) 13:30:18:703 LibMain: Process Name:
    C:\WINDOWS\system32\userinit.exe
    USERENV(418.774) 13:30:18:812 PingComputer: Adapter speed 1000000000 bps
    USERENV(418.774) 13:30:18:812 PingComputer: First time: 2
    USERENV(418.774) 13:30:18:812 PingComputer: Fast link. Exiting.
    USERENV(418.774) 13:30:19:140 ProcessGPOs: User name is:
    CN=user1,OU=HeadOffice,OU=mycompany,DC=mycompany,DC=com, Domain name is:
    mycompany
    USERENV(418.774) 13:30:19:140 ProcessGPOs: Domain controller is:
    \\DomainC4.mycompany.com Domain DN is mycompany.com
    USERENV(418.774) 13:30:19:312 ReadGPExtensions: Rsop entry point not
    found for gptext.dll.
    USERENV(418.774) 13:30:19:312 ReadGPExtensions: Rsop entry point not
    found for dskquota.dll.
    USERENV(418.774) 13:30:19:312 ReadGPExtensions: Rsop entry point not
    found for gptext.dll.
    USERENV(418.774) 13:30:19:328 ReadGPExtensions: Rsop entry point not
    found for C:\WINDOWS\system32\iedkcs32.dll.
    USERENV(418.774) 13:30:19:328 ReadGPExtensions: Rsop entry point not
    found for C:\WINDOWS\system32\iedkcs32.dll.
    USERENV(418.774) 13:30:19:328 ReadGPExtensions: Rsop entry point not
    found for scecli.dll.
    USERENV(418.774) 13:30:19:328 ReadGPExtensions: Rsop entry point not
    found for C:\WINDOWS\System32\cscui.dll.
    USERENV(418.774) 13:30:19:328 ReadGPExtensions: Rsop entry point not
    found for C:\WINDOWS\system32\iedkcs32.dll.
    USERENV(418.774) 13:30:19:328 ReadGPExtensions: Rsop entry point not
    found for gptext.dll.
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
    USERENV(418.774) 13:30:19:375 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {0E28E245-9368-4853-AD84-6DA3BA35BB75}
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {17D89FEC-5C44-4972-B12D-241CAEF74509}
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {1A6364EB-776B-4120-ADE1-B63A406A76B5}
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {25537BA6-77A8-11D2-9B6C-0000F8080861}
    USERENV(418.774) 13:30:19:375 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {3610eda5-77ef-11d2-8dc5-00c04fa31a66}
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {426031c0-0b47-4852-b0ca-ac3d37bfcb39}
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {42B5FAAE-6536-11d2-AE5A-0000F87571E3}
    USERENV(418.774) 13:30:19:375 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}
    USERENV(418.774) 13:30:19:375 ReadExtStatus: Reading Previous Status for
    extension {5794DAFD-BE60-433f-88A2-1A31939AC01F}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {6232C319-91AC-4931-9385-E70C2B099F0E}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {7150F9BF-48AD-4da4-A49C-29EF4A8369BA}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {728EE579-943C-4519-9EF7-AB56765798ED}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {74EE6C03-5363-4554-B161-627540339CAB}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {7B849a69-220F-451E-B3FE-2CB811AF94AE}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {827D319E-6EAC-11D2-A4EA-00C04F79F83A}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {91FBB303-0CD5-4055-BF42-E512A681B325}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}
    USERENV(418.774) 13:30:19:390 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {A3F3E39B-5D83-4940-B954-28315B82F0A8}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {AADCED64-746C-4633-A97C-D61349046527}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {B087BE9D-ED37-454f-AF9C-04291E351182}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {B587E2B1-4D59-4e7e-AED9-22B9DF11D053}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {C631DF4C-088F-4156-B058-4375F0853CD8}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {c6dc5466-785a-11d2-84d0-00c04fb169f7}
    USERENV(418.774) 13:30:19:390 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {e437bc1c-aa7d-11d2-a382-00c04f991e27}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {E47248BA-94CC-49c4-BBB5-9EB7F05183D0}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {E4F48E54-F38D-4884-BFB9-D4D2E5729C18}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {E5094040-C46C-4115-B030-04FB2E545B00}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {E62688F0-25FD-4c90-BFF5-F508B9D2E31F}
    USERENV(418.774) 13:30:19:390 ReadExtStatus: Reading Previous Status for
    extension {F9C77450-3A41-477E-9310-9ACD617BD9E3}
    USERENV(418.774) 13:30:19:390 ProcessGPOs: Calling GetGPOInfo for normal
    policy mode
    USERENV(418.774) 13:30:19:390 GetGPOInfo: ********************************
    USERENV(418.774) 13:30:19:390 GetGPOInfo: Entering...
    USERENV(418.774) 13:30:19:390 GetGPOInfo: Server connection established.
    USERENV(418.774) 13:30:19:421 GetGPOInfo: Bound successfully.
    USERENV(418.774) 13:30:19:421 SearchDSObject: Searching
    <OU=HeadOffice,OU=mycompany,DC=mycompany,DC=com>
    USERENV(418.774) 13:30:19:437 SearchDSObject: Found GPO(s):
    <[LDAP://CN={1FC858B6-0F09-42AD-B7C7-082F429121CA},CN=Policies,CN=System,DC=mycompany,DC=com;0]>
    USERENV(418.774) 13:30:19:437 ProcessGPO: ==============================
    USERENV(418.774) 13:30:19:437 ProcessGPO: Deferring search for
    <LDAP://CN={1FC858B6-0F09-42AD-B7C7-082F429121CA},CN=Policies,CN=System,DC=mycompany,DC=com>
    USERENV(418.774) 13:30:19:437 SearchDSObject: Searching
    <OU=mycompany,DC=mycompany,DC=com>
    USERENV(418.774) 13:30:19:437 SearchDSObject: Found GPO(s):
    <[LDAP://CN={6D7BEC14-4BF7-4F9B-BAF2-1D4D5B0CF038},CN=Policies,CN=System,DC=mycompany,DC=com;0]>
    USERENV(418.774) 13:30:19:437 ProcessGPO: ==============================
    USERENV(418.774) 13:30:19:437 ProcessGPO: Deferring search for
    <LDAP://CN={6D7BEC14-4BF7-4F9B-BAF2-1D4D5B0CF038},CN=Policies,CN=System,DC=mycompany,DC=com>
    USERENV(418.774) 13:30:19:437 SearchDSObject: Searching
    <DC=mycompany,DC=com>
    USERENV(418.774) 13:30:19:437 SearchDSObject: Found GPO(s):
    <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mycompany,DC=com;0]>
    USERENV(418.774) 13:30:19:437 ProcessGPO: ==============================
    USERENV(418.774) 13:30:19:437 ProcessGPO: Deferring search for
    <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mycompany,DC=com>
    USERENV(418.774) 13:30:19:453 SearchDSObject: Searching
    <CN=mycompany,CN=Sites,CN=Configuration,DC=mycompany,DC=com>
    USERENV(418.774) 13:30:19:453 SearchDSObject: No GPO(s) for this object.
    USERENV(418.774) 13:30:19:453 EvaluateDeferredGPOs: Searching for GPOs
    in cn=policies,cn=system,DC=mycompany,DC=com
    USERENV(418.774) 13:30:19:468 ProcessGPO: ==============================
    USERENV(418.774) 13:30:19:468 ProcessGPO: Searching
    <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=mycompany,DC=com>
    USERENV(418.774) 13:30:19:468 ProcessGPO: User has access to this GPO.
    USERENV(418.774) 13:30:19:468 ProcessGPO: GPO passes the filter check.
    USERENV(418.774) 13:30:19:468 ProcessGPO: Found functionality version
    of: 2
    USERENV(418.774) 13:30:19:468 ProcessGPO: Found file system path of:
    <\\mycompany.com\sysvol\mycompany.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
    USERENV(418.774) 13:30:19:515 ProcessGPO: Found common name of:
    <{31B2F340-016D-11D2-945F-00C04FB984F9}>
    USERENV(418.774) 13:30:19:515 ProcessGPO: Found display name of:
    <Default Domain Policy>
    USERENV(418.774) 13:30:19:515 ProcessGPO: Found user version of: GPC
    is 2, GPT is 2
    USERENV(418.774) 13:30:19:515 ProcessGPO: Found flags of: 0
    USERENV(418.774) 13:30:19:515 ProcessGPO: Found extensions:
    [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}]
    USERENV(418.774) 13:30:19:515 ProcessGPO: ==============================
    USERENV(418.774) 13:30:19:515 ProcessGPO: ==============================
    USERENV(418.774) 13:30:19:515 ProcessGPO: Searching
    <CN={6D7BEC14-4BF7-4F9B-BAF2-1D4D5B0CF038},CN=Policies,CN=System,DC=mycompany,DC=com>
    USERENV(418.774) 13:30:19:515 ProcessGPO: User has access to this GPO.
    USERENV(418.774) 13:30:19:515 FilterCheck: Found WMI Filter id of: < >
    USERENV(418.774) 13:30:19:515 ProcessGPO: GPO passes the filter check.
    USERENV(418.774) 13:30:19:515 ProcessGPO: Found functionality version
    of: 2
    USERENV(418.774) 13:30:19:515 ProcessGPO: Found file system path of:
    <\\mycompany.com\SysVol\mycompany.com\Policies\{6D7BEC14-4BF7-4F9B-BAF2-1D4D5B0CF038}>
    USERENV(418.774) 13:30:19:531 ProcessGPO: Found common name of:
    <{6D7BEC14-4BF7-4F9B-BAF2-1D4D5B0CF038}>
    USERENV(418.774) 13:30:19:531 ProcessGPO: Found display name of:
    <mycompany>
    USERENV(418.774) 13:30:19:531 ProcessGPO: Found user version of: GPC
    is 93, GPT is 93
    USERENV(418.774) 13:30:19:531 ProcessGPO: Found flags of: 0
    USERENV(418.774) 13:30:19:531 ProcessGPO: Found extensions:
    [{25537BA6-77A8-11D2-9B6C-0000F8080861}{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}{53D6AB1D-2488-11D1-A28C-00C04FB94F17}][{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}][{C6DC5466-785A-11D2-84D0-00C04FB169F7}{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}]
    USERENV(418.774) 13:30:19:531 ProcessGPO: ==============================
    USERENV(418.774) 13:30:19:546 ProcessGPO: ==============================
    USERENV(418.774) 13:30:19:546 ProcessGPO: Searching
    <CN={1FC858B6-0F09-42AD-B7C7-082F429121CA},CN=Policies,CN=System,DC=mycompany,DC=com>
    USERENV(418.774) 13:30:19:546 ProcessGPO: User has access to this GPO.
    USERENV(418.774) 13:30:19:546 ProcessGPO: GPO passes the filter check.
    USERENV(418.774) 13:30:19:546 ProcessGPO: Found functionality version
    of: 2
    USERENV(418.774) 13:30:19:546 ProcessGPO: Found file system path of:
    <\\mycompany.com\SysVol\mycompany.com\Policies\{1FC858B6-0F09-42AD-B7C7-082F429121CA}>
    USERENV(418.774) 13:30:19:562 ProcessGPO: Found common name of:
    <{1FC858B6-0F09-42AD-B7C7-082F429121CA}>
    USERENV(418.774) 13:30:19:562 ProcessGPO: Found display name of:
    <HeadOffice>
    USERENV(418.774) 13:30:19:562 ProcessGPO: Found user version of: GPC
    is 16, GPT is 16
    USERENV(418.774) 13:30:19:562 ProcessGPO: Found flags of: 0
    USERENV(418.774) 13:30:19:562 ProcessGPO: Found extensions:
    [{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]
    USERENV(418.774) 13:30:19:562 ProcessGPO: ==============================
    USERENV(418.774) 13:30:19:562 GetGPOInfo: GPO Local Group Policy
    doesn't contain any data since the version number is 0. It will be skipped.
    USERENV(418.774) 13:30:19:562 GetGPOInfo: Leaving with 1
    USERENV(418.774) 13:30:19:562 GetGPOInfo: ********************************
    USERENV(418.774) 13:30:19:562 ProcessGPOs: Logging Data for Target <user1>.
    USERENV(418.774) 13:30:19:578 ProcessGPOs: OpenThreadToken failed with
    error 1008, assuming thread is not impersonating
    USERENV(418.774) 13:30:19:578 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:19:578 ProcessGPOs: Processing extension Registry
    USERENV(418.774) 13:30:19:578 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.774) 13:30:19:578 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:19:578 CheckGPOs: No GPO changes and no security
    group membership change and extension Registry has NoGPOChanges set.
    USERENV(418.774) 13:30:19:578 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:19:578 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:19:578 ProcessGPOs: Processing extension Wireless
    USERENV(418.774) 13:30:19:578 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:19:578 CheckGPOs: No GPO changes but couldn't
    read extension Wireless's status or policy time.
    USERENV(418.774) 13:30:19:578 ProcessGPOs: Extension Wireless skipped
    with flags 0x6.
    USERENV(418.774) 13:30:19:578 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:19:578 ProcessGPOs: Processing extension Group
    Policy Environment
    USERENV(418.774) 13:30:19:578 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:19:578 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:19:578 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Environment's status or policy time.
    USERENV(418.774) 13:30:19:578 ProcessGPOs: Extension Group Policy
    Environment skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:19:578 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:19:578 ProcessGPOs: Processing extension Group
    Policy Local Users and Groups
    USERENV(418.774) 13:30:19:578 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:19:578 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:19:578 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Local Users and Groups's status or policy time.
    USERENV(418.774) 13:30:19:578 ProcessGPOs: Extension Group Policy Local
    Users and Groups skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.774) 13:30:19:578 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:19:578 ProcessGPOs: Processing extension Group
    Policy Device Settings
    USERENV(418.774) 13:30:19:578 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:19:578 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:19:578 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Device Settings's status or policy time.
    USERENV(418.774) 13:30:19:578 ProcessGPOs: Extension Group Policy Device
    Settings skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:19:578 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:19:578 ProcessGPOs: Processing extension Folder
    Redirection
    USERENV(418.774) 13:30:19:578 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.774) 13:30:19:578 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:19:578 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:19:593 CheckGPOs: No GPO changes but called in
    force refresh flag or extension Folder Redirection needs to run force
    refresh in foreground processing
    USERENV(418.774) 13:30:19:593 ProcessGPOList: Entering for extension
    Folder Redirection
    USERENV(418.774) 13:30:19:593 UserPolicyCallback: Setting status UI to
    Applying Folder Redirection policy...
    USERENV(418.774) 13:30:19:625 ProcessGPOList: Passing in the force
    refresh flag to Extension Folder Redirection
    USERENV(418.774) 13:30:19:625 GetWbemServices: CoCreateInstance succeeded
    USERENV(418.774) 13:30:20:609 ConnectToNameSpace: ConnectServer returned 0x0
    USERENV(418.774) 13:30:21:640 LogExtSessionStatus: Successfully logged
    Extension Session data
    USERENV(418.774) 13:30:22:125 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:22:125 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:22:328 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:22:328 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:22:343 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:22:343 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:22:343 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:22:359 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:22:359 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(85c.864) 13:30:22:953 LibMain: Process Name:
    C:\WINDOWS\system32\userinit.exe
    USERENV(418.774) 13:30:24:484 UserPolicyCallback: Setting status UI to
    Applying your personal settings...
    USERENV(418.774) 13:30:24:484 ProcessGPOList: Extension Folder
    Redirection returned 0x0.
    USERENV(418.774) 13:30:24:484 ProcessGPOList: Extension Folder
    Redirection was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing
    the dirty bit
    USERENV(418.774) 13:30:24:781 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:24:781 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:24:781 ProcessGPOs: Processing extension
    Microsoft Disk Quota
    USERENV(418.774) 13:30:24:781 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:24:781 CheckGPOs: No GPO changes but couldn't
    read extension Microsoft Disk Quota's status or policy time.
    USERENV(418.774) 13:30:24:781 ProcessGPOs: Extension Microsoft Disk
    Quota skipped with flags 0x6.
    USERENV(418.774) 13:30:24:781 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:24:781 ProcessGPOs: Processing extension Group
    Policy Network Options
    USERENV(418.774) 13:30:24:781 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:24:781 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:24:781 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Network Options's status or policy time.
    USERENV(418.774) 13:30:24:781 ProcessGPOs: Extension Group Policy
    Network Options skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.774) 13:30:24:796 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:24:796 ProcessGPOs: Processing extension QoS
    Packet Scheduler
    USERENV(418.774) 13:30:24:796 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:24:796 CheckGPOs: No GPO changes but couldn't
    read extension QoS Packet Scheduler's status or policy time.
    USERENV(418.774) 13:30:24:796 ProcessGPOs: Extension QoS Packet
    Scheduler skipped with flags 0x6.
    USERENV(418.774) 13:30:24:796 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:24:796 ProcessGPOs: Processing extension Scripts
    USERENV(418.774) 13:30:24:796 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.774) 13:30:24:796 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:24:796 CheckGPOs: No GPO changes but called in
    force refresh flag or extension Scripts needs to run force refresh in
    foreground processing
    USERENV(418.774) 13:30:24:796 ProcessGPOList: Entering for extension Scripts
    USERENV(418.774) 13:30:24:796 UserPolicyCallback: Setting status UI to
    Applying Scripts policy...
    USERENV(418.774) 13:30:24:796 ProcessGPOList: Passing in the force
    refresh flag to Extension Scripts
    USERENV(418.774) 13:30:24:890 LogExtSessionStatus: Successfully logged
    Extension Session data
    USERENV(418.774) 13:30:25:078 ProcessGPOList: Extension Scripts returned
    0x0.
    USERENV(418.774) 13:30:25:078 ProcessGPOList: Extension Scripts was able
    to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
    USERENV(418.774) 13:30:25:078 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:078 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:078 ProcessGPOs: Processing extension Internet
    Explorer Zonemapping
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CheckGPOs: No GPO changes but couldn't
    read extension Internet Explorer Zonemapping's status or policy time.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Extension Internet Explorer
    Zonemapping skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Processing extension Group
    Policy Drive Maps
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Drive Maps's status or policy time.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Extension Group Policy Drive
    Maps skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Processing extension Group
    Policy Folders
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Folders's status or policy time.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Extension Group Policy
    Folders skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Processing extension Group
    Policy Network Shares
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Network Shares's status or policy time.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Extension Group Policy
    Network Shares skipped with flags 0x6.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Processing extension Group
    Policy Files
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Files's status or policy time.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Extension Group Policy Files
    skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Processing extension Group
    Policy Data Sources
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Data Sources's status or policy time.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Extension Group Policy Data
    Sources skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Processing extension Group
    Policy Ini Files
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:093 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Ini Files's status or policy time.
    USERENV(418.774) 13:30:25:093 ProcessGPOs: Extension Group Policy Ini
    Files skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:25:109 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:109 ProcessGPOs: Processing extension Internet
    Explorer User Accelerators
    USERENV(418.774) 13:30:25:109 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:109 CheckGPOs: No GPO changes but couldn't
    read extension Internet Explorer User Accelerators's status or policy time.
    USERENV(418.774) 13:30:25:109 ProcessGPOs: Extension Internet Explorer
    User Accelerators skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.774) 13:30:25:109 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:109 ProcessGPOs: Processing extension Security
    USERENV(418.774) 13:30:25:109 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:109 CheckGPOs: No GPO changes but couldn't
    read extension Security's status or policy time.
    USERENV(418.774) 13:30:25:109 ProcessGPOs: Extension Security skipped
    with flags 0x6.
    USERENV(418.774) 13:30:25:109 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:109 ProcessGPOs: Processing extension Group
    Policy Services
    USERENV(418.774) 13:30:25:109 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:109 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Services's status or policy time.
    USERENV(418.774) 13:30:25:109 ProcessGPOs: Extension Group Policy
    Services skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:25:109 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:25:109 ProcessGPOs: Processing extension Internet
    Explorer Branding
    USERENV(418.774) 13:30:25:109 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.774) 13:30:25:109 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:25:109 CheckGPOs: No GPO changes but called in
    force refresh flag or extension Internet Explorer Branding needs to run
    force refresh in foreground processing
    USERENV(418.774) 13:30:25:109 ProcessGPOList: Entering for extension
    Internet Explorer Branding
    USERENV(418.774) 13:30:25:109 UserPolicyCallback: Setting status UI to
    Applying Internet Explorer Branding policy...
    USERENV(418.774) 13:30:25:109 ProcessGPOList: Passing in the force
    refresh flag to Extension Internet Explorer Branding
    USERENV(418.774) 13:30:25:156 LogExtSessionStatus: Successfully logged
    Extension Session data
    USERENV(418.774) 13:30:26:171 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(860.868) 13:30:26:281 GetProfileType: Profile already loaded.
    USERENV(860.868) 13:30:26:281 LoadProfileInfo: Failed to query central
    profile with error 2
    USERENV(860.868) 13:30:26:281 GetProfileType: ProfileFlags is 0
    USERENV(8f0.8f4) 13:30:28:562 LibMain: Process Name:
    C:\WINDOWS\system32\sessmgr.exe
    USERENV(418.774) 13:30:28:671 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:29:718 ImpersonateUser: Failed to impersonate
    user with 5.
    USERENV(418.774) 13:30:29:718 GetUserNameAndDomain Failed to impersonate
    user
    USERENV(418.774) 13:30:29:718 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(418.774) 13:30:29:718 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(628.920) 13:30:30:718 GetProfileType: Profile already loaded.
    USERENV(628.920) 13:30:30:718 LoadProfileInfo: Failed to query central
    profile with error 2
    USERENV(628.920) 13:30:30:718 GetProfileType: ProfileFlags is 0
    USERENV(418.774) 13:30:33:984 ImpersonateUser: Failed to impersonate
    user with 5.
    USERENV(418.774) 13:30:33:984 GetUserNameAndDomain Failed to impersonate
    user
    USERENV(418.774) 13:30:33:984 GetUserDNSDomainName: Domain name is NT
    Authority. No DNS domain name available.
    USERENV(418.774) 13:30:33:984 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:34:234 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:34:296 UserPolicyCallback: Setting status UI to
    Applying your personal settings...
    USERENV(418.774) 13:30:34:296 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.774) 13:30:35:046 UserPolicyCallback: Setting status UI to
    Applying your personal settings...
    USERENV(418.774) 13:30:35:046 ProcessGPOList: Extension Internet
    Explorer Branding returned 0x0.
    USERENV(418.774) 13:30:35:046 ProcessGPOList: Extension Internet
    Explorer Branding was able to log data. RsopStatus = 0x0, dwRet = 0,
    Clearing the dirty bit
    USERENV(418.774) 13:30:35:062 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:35:062 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:35:062 ProcessGPOs: Processing extension Group
    Policy Folder Options
    USERENV(418.774) 13:30:35:062 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:062 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:062 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Folder Options's status or policy time.
    USERENV(418.774) 13:30:35:062 ProcessGPOs: Extension Group Policy Folder
    Options skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:35:062 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:35:062 ProcessGPOs: Processing extension Group
    Policy Scheduled Tasks
    USERENV(418.774) 13:30:35:062 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:062 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:062 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Scheduled Tasks's status or policy time.
    USERENV(418.774) 13:30:35:062 ProcessGPOs: Extension Group Policy
    Scheduled Tasks skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.774) 13:30:35:062 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:35:062 ProcessGPOs: Processing extension Group
    Policy Registry
    USERENV(418.774) 13:30:35:062 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:062 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:062 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Registry's status or policy time.
    USERENV(418.774) 13:30:35:062 ProcessGPOs: Extension Group Policy
    Registry skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:35:062 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:35:062 ProcessGPOs: Processing extension EFS recovery
    USERENV(418.774) 13:30:35:062 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:062 CheckGPOs: No GPO changes but couldn't
    read extension EFS recovery's status or policy time.
    USERENV(418.774) 13:30:35:062 ProcessGPOs: Extension EFS recovery
    skipped with flags 0x6.
    USERENV(418.774) 13:30:35:078 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:35:078 ProcessGPOs: Processing extension 802.3
    Group Policy
    USERENV(418.774) 13:30:35:078 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:078 CheckGPOs: No GPO changes but couldn't
    read extension 802.3 Group Policy's status or policy time.
    USERENV(418.774) 13:30:35:078 ProcessGPOs: Extension 802.3 Group Policy
    skipped with flags 0x6.
    USERENV(418.774) 13:30:35:078 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:35:078 ProcessGPOs: Processing extension Group
    Policy Printers
    USERENV(418.774) 13:30:35:078 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:078 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:078 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Printers's status or policy time.
    USERENV(418.774) 13:30:35:078 ProcessGPOs: Extension Group Policy
    Printers skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:35:078 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:35:078 ProcessGPOs: Processing extension Group
    Policy Shortcuts
    USERENV(418.774) 13:30:35:078 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:078 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:078 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Shortcuts's status or policy time.
    USERENV(418.774) 13:30:35:078 ProcessGPOs: Extension Group Policy
    Shortcuts skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:35:078 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:35:078 ProcessGPOs: Processing extension
    Microsoft Offline Files
    USERENV(418.774) 13:30:35:078 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:078 CheckGPOs: No GPO changes but couldn't
    read extension Microsoft Offline Files's status or policy time.
    USERENV(418.774) 13:30:35:078 ProcessGPOs: Extension Microsoft Offline
    Files skipped with flags 0x6.
    USERENV(418.774) 13:30:35:078 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:35:078 ProcessGPOs: Processing extension Software
    Installation
    USERENV(418.774) 13:30:35:078 ReadStatus: Read Extension's Previous
    status successfully.
    USERENV(418.774) 13:30:35:078 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:078 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:35:078 CheckGPOs: No GPO changes but called in
    force refresh flag or extension Software Installation needs to run force
    refresh in foreground processing
    USERENV(418.774) 13:30:35:078 ProcessGPOList: Entering for extension
    Software Installation
    USERENV(418.774) 13:30:35:078 UserPolicyCallback: Setting status UI to
    Applying Software Installation policy...
    USERENV(418.774) 13:30:35:078 ProcessGPOList: Passing in the force
    refresh flag to Extension Software Installation
    USERENV(418.774) 13:30:35:140 LogExtSessionStatus: Successfully logged
    Extension Session data
    USERENV(418.774) 13:30:35:437 UserPolicyCallback: Setting status UI to
    Applying software installation settings...
    USERENV(418.774) 13:30:36:000 UserPolicyCallback: Setting status UI to
    Applying your personal settings...
    USERENV(418.774) 13:30:36:046 ProcessGPOList: Extension Software
    Installation returned 0x0.
    USERENV(418.774) 13:30:36:046 ProcessGPOList: Extension Software
    Installation was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing
    the dirty bit
    USERENV(418.774) 13:30:36:125 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:36:125 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Processing extension Internet
    Explorer Machine Accelerators
    USERENV(418.774) 13:30:36:125 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:125 CheckGPOs: No GPO changes but couldn't
    read extension Internet Explorer Machine Accelerators's status or policy
    time.
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Extension Internet Explorer
    Machine Accelerators skipped because both deleted and changed GPO lists
    are empty.
    USERENV(418.774) 13:30:36:125 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Processing extension IP Security
    USERENV(418.774) 13:30:36:125 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:125 CheckGPOs: No GPO changes but couldn't
    read extension IP Security's status or policy time.
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Extension IP Security skipped
    with flags 0x6.
    USERENV(418.774) 13:30:36:125 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Processing extension Group
    Policy Internet Settings
    USERENV(418.774) 13:30:36:125 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:125 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:125 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Internet Settings's status or policy time.
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Extension Group Policy
    Internet Settings skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.774) 13:30:36:125 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Processing extension Group
    Policy Start Menu Settings
    USERENV(418.774) 13:30:36:125 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:125 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:125 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Start Menu Settings's status or policy time.
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Extension Group Policy Start
    Menu Settings skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:36:125 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Processing extension Group
    Policy Regional Options
    USERENV(418.774) 13:30:36:125 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:125 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:125 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Regional Options's status or policy time.
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Extension Group Policy
    Regional Options skipped because both deleted and changed GPO lists are
    empty.
    USERENV(418.774) 13:30:36:125 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:36:125 ProcessGPOs: Processing extension Group
    Policy Power Options
    USERENV(418.774) 13:30:36:125 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:125 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:140 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Power Options's status or policy time.
    USERENV(418.774) 13:30:36:140 ProcessGPOs: Extension Group Policy Power
    Options skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:36:140 ProcessGPOs: -----------------------
    USERENV(418.774) 13:30:36:140 ProcessGPOs: Processing extension Group
    Policy Applications
    USERENV(418.774) 13:30:36:140 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:140 CompareGPOLists: The lists are the same.
    USERENV(418.774) 13:30:36:140 CheckGPOs: No GPO changes but couldn't
    read extension Group Policy Applications's status or policy time.
    USERENV(418.774) 13:30:36:140 ProcessGPOs: Extension Group Policy
    Applications skipped because both deleted and changed GPO lists are empty.
    USERENV(418.774) 13:30:36:140 SetFgRefreshInfo: Previous User Fg policy
    Synchronous, Reason: ForcedSyncRefresh.
    USERENV(418.774) 13:30:36:140 SetFgRefreshInfo: Next User Fg policy
    Asynchronous, Reason: NoNeedForSync.
    USERENV(418.774) 13:30:36:250 LeaveCriticalPolicySection: Critical
    section 0x82c has been released.
    USERENV(418.774) 13:30:36:250 ProcessGPOs: User Group Policy has been
    applied.
    USERENV(418.774) 13:30:36:250 ProcessGPOs: Leaving with 1.
    USERENV(418.774) 13:30:36:250 ApplyGroupPolicy: Leaving successfully.
    USERENV(418.9d4) 13:30:36:312 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.658) 13:30:36:531 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.9c0) 13:30:37:203 PolicyChangedThread: Calling UpdateUser
    with 0.
    USERENV(418.9c4) 13:30:37:203 GPOThread: Next refresh will happen in 91
    minutes
    USERENV(a34.a38) 13:30:37:765 LibMain: Process Name:
    C:\WINDOWS\system32\userinit.exe
    USERENV(418.41c) 13:30:39:703 IsSyncForegroundPolicyRefresh:
    Asynchronous, Reason: NoNeedForSync
    USERENV(418.a9c) 13:30:39:703 IsSyncForegroundPolicyRefresh:
    Asynchronous, Reason: NoNeedForSync
    USERENV(418.a9c) 13:30:39:703 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(aac.ab0) 13:30:39:890 LibMain: Process Name:
    C:\WINDOWS\system32\userinit.exe
    USERENV(ae0.ae4) 13:30:40:359 LibMain: Process Name:
    C:\WINDOWS\system32\userinit.exe
    USERENV(aac.ab0) 13:30:42:140 GetProfileType: Profile already loaded.
    USERENV(aac.ab0) 13:30:42:140 GetProfileType: ProfileFlags is 0
    USERENV(af8.afc) 13:30:42:843 LibMain: Process Name:
    C:\WINDOWS\system32\WgaTray.exe
    USERENV(af8.afc) 13:30:42:859 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(af8.afc) 13:30:42:953 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(b38.b3c) 13:30:43:203 LibMain: Process Name:
    C:\WINDOWS\system32\NOTEPAD.EXE
    USERENV(458.478) 13:30:43:328 ImpersonateUser: Failed to impersonate
    user with 5.
    USERENV(458.478) 13:30:43:328 GetUserNameAndDomain Failed to impersonate
    user
    USERENV(458.478) 13:30:43:328 ImpersonateUser: Failed to impersonate
    user with 5.
    USERENV(458.478) 13:30:43:328 GetUserDNSDomainName: Failed to
    impersonate user
    USERENV(458.478) 13:30:43:328 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(bb8.bbc) 13:30:45:125 LibMain: Process Name:
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    USERENV(ba0.ba4) 13:30:46:890 LibMain: Process Name: C:\WINDOWS\Explorer.EXE
    USERENV(2f4.8e0) 13:30:47:296 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(2f4.8e0) 13:30:48:484 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.9c0) 13:30:52:687 PolicyChangedThread: UpdateUser failed with 6.
    USERENV(418.9c0) 13:30:52:968 PolicyChangedThread: Broadcast message for 0.
    USERENV(2f4.8e0) 13:31:05:281 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(2f4.8e0) 13:31:05:359 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(418.9c0) 13:31:11:515 PolicyChangedThread: Leaving
    USERENV(ba0.d6c) 13:31:11:734 GetProfileType: Profile already loaded.
    USERENV(ba0.d6c) 13:31:11:734 GetProfileType: ProfileFlags is 0
    USERENV(ba0.d6c) 13:31:11:937 GetProfileType: Profile already loaded.
    USERENV(ba0.d6c) 13:31:11:937 GetProfileType: ProfileFlags is 0
    USERENV(ba0.ba4) 13:31:12:781 GetProfileType: Profile already loaded.
    USERENV(ba0.ba4) 13:31:12:781 GetProfileType: ProfileFlags is 0
    USERENV(ba0.df8) 13:31:25:484 ImpersonateUser: Failed to impersonate
    user with 5.
    USERENV(ba0.df8) 13:31:25:484 GetUserNameAndDomain Failed to impersonate
    user
    USERENV(ba0.df8) 13:31:25:609 ImpersonateUser: Failed to impersonate
    user with 5.
    USERENV(ba0.df8) 13:31:25:656 GetUserDNSDomainName: Failed to
    impersonate user
    USERENV(ba0.df8) 13:31:25:718 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(2f4.350) 13:31:26:265 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(2f4.350) 13:31:26:375 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(2f4.350) 13:31:26:375 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(ba0.df8) 13:31:26:656 ImpersonateUser: Failed to impersonate
    user with 5.
    USERENV(ba0.df8) 13:31:26:656 GetUserNameAndDomain Failed to impersonate
    user
    USERENV(ba0.df8) 13:31:26:656 ImpersonateUser: Failed to impersonate
    user with 5.
    USERENV(ba0.df8) 13:31:26:656 GetUserDNSDomainName: Failed to
    impersonate user
    USERENV(ba0.df8) 13:31:26:656 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(628.b8) 13:32:00:250 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(628.c48) 13:32:23:453 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(f98.f9c) 13:32:31:875 LibMain: Process Name:
    C:\WINDOWS\system32\imapi.exe
    USERENV(418.9f4) 13:32:36:562 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(164.180) 13:32:38:421 LibMain: Process Name:
    C:\WINDOWS\system32\userinit.exe
    USERENV(ef4.ef8) 13:32:52:671 LibMain: Process Name:
    C:\WINDOWS\system32\msfeedssync.exe
    USERENV(628.110) 13:32:53:312 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(aa4.abc) 13:33:15:734 LibMain: Process Name: C:\WINDOWS\regedit.exe
    USERENV(b04.b08) 13:33:17:140 LibMain: Process Name:
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    USERENV(9b8.d28) 13:33:21:578 LibMain: Process Name: C:\Program
    Files\Trend Micro\BM\TMBMSRV.exe
    USERENV(9b8.d28) 13:33:22:000 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(15c.d14) 13:33:26:390 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(9b8.834) 13:33:31:328 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(828.cbc) 13:33:33:687 LibMain: Process Name: C:\Program
    Files\Windows Defender\MSASCui.exe
    USERENV(15c.d14) 13:33:41:375 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(998.bac) 13:33:50:265 LibMain: Process Name: C:\Program
    Files\Trend Micro\OfficeScan Client\pccntmon.exe
    USERENV(628.110) 13:34:24:687 ProcessAutoexec: Cannot process autoexec.bat.
    USERENV(8d0.878) 13:36:28:390 LibMain: Process Name:
    C:\WINDOWS\system32\NOTEPAD.EXE
    USERENV(e2c.e38) 13:36:35:265 LibMain: Process Name:
    C:\WINDOWS\system32\NOTEPAD.EXE
     
    Patrick, Apr 28, 2010
    #22
    1. Advertisements

  3. If it's running interactively, then it's a good indication that the
    GPOs are not applying.

    Can you provide an ipconfig /all of this workstation, a working
    workstation, and of two of your DCs, please? This will help evaluate
    your configuration.

    Ace
     
    Ace Fekay [MVP - Directory Services, MCT], Apr 28, 2010
    #23
  4. Is the logon script called "autoexec.bat?" The log is showing the
    following:
    If it's not the logon script, is autoexec.bat referenced elsewhere?

    Also, you said you've "confirmed" that the DNS IP addresses are
    exactly those on the DC. Can we see an ipconfig /all of botht the DC
    and this client, as well as a workstation that is currently working?
    There is other information in the ipconfigs that help us diagnose
    basic configuration issues, or at least to confirm on the engineering
    side they are correct.

    Thanks,
    Ace
     
    Ace Fekay [MVP - Directory Services, MCT], Apr 28, 2010
    #24
  5. Patrick,

    Is this workstation or laptop on a wireless?
    Still curious why it is trying to process autoexec.bat?
    The following is indicative of DNS resolution issues. This is why I've
    asked for an ipconfig /all of the DC, this workstation and a
    workstation that it is working on.
    This error:
    ">USERENV(418.65c) 13:30:16:218 ReadGPExtensions: Rsop entry point not
    The following is quoted from the link below, by a Microsoft engineer
    regarding the RSOP error in the log:
    http://www.tomshardware.com/forum/219968-46-user-policy-doesn-apply

    RSOP entry point not found:
    ==============
    "This portion failing means that there is either an issue with LDAP
    name resolution to that object, or permissions on that object are not
    set for the user context to be able to access it (Read Allow and Apply
    Group Policy Allow). These permissions would normally need to be set
    explicitly (not there by default).

    Please repost if this does not help.

    --
    Tim Springston
    Microsoft Corporation

    This posting is provided "AS IS" with no warranties, and confers no
    rights.
    ==============


    Ace








     
    Ace Fekay [MVP - Directory Services, MCT], Apr 28, 2010
    #25
  6. Patrick

    Patrick Guest

    Dear Ace,

    Thanks for your advice.

    I have created an autoexec.bat file at C:\ and the error
    "USERENV(44c.450) 13:29:47:890 ProcessAutoexec: Cannot process
    autoexec.bat" is fixed (According to the following thread).
    http://www.brianmadden.com/forums/t/25945.aspx

    I am able to start RSOP.MMC on the workstation and get the following
    error message:
     
    Patrick, Apr 29, 2010
    #26
  7. Patrick,

    There really is no reason to n
    Please provide the ipconfig /all as previously requested. It will help
    us rule out basic config problems.

    Also, other things that can cause this:
    1. Bad hard drive on the workstation.
    2. User does not have permissions to the logon script location.
    3. Incorrect DNS addresses.
    4. Domain controllers are multihomed (more than one NIC and/or RRAS is
    installed on the DCs).
    5. Workstation was imaged from a non-Sysprepped image.

    There are others that come to mind, but this is the basis. That's why
    I've been asking for the ipconfigs to rule out DNS misconfigs, Primary
    DNS Suffix, subnetand other info the ipconfigs provide.


    Ace
     
    Ace Fekay [MVP - Directory Services, MCT], Apr 29, 2010
    #27
  8. Patrick

    Patrick Guest

    Dear Ace and Paul,

    We finally find out the reason why logon script is not run. This is
    because the file assocation for VBS file is with Notepad. After
    changing it to Microsoft Windows Script Host, VBS is run and drives are
    mapped successfully.

    However, we still get the following message in log:
    GetUserDNSDomainName: Domain name is NT Authority. No DNS domain name
    available.
    ReadGPExtensions: Rsop entry point not found for gptext.dll.

    Many thanks for your advice and I learn a lot from it.

    Thanks again.
    Patrick
     
    Patrick, May 4, 2010
    #28

  9. Good to hear you figured out why the VB script wouldn't run.

    As for the "No DNS domain name available" error, as I've previously
    mentioned, we need configuration information to help. Please see my
    previous posts for the information we need to assist.

    Without this info, it will be difficult to assist.

    Ace
     
    Ace Fekay [MVP - Directory Services, MCT], May 4, 2010
    #29
  10. Glad to hear you got it resolved. It always feels good to find a solution
    to a tough problem.

    --
    Paul Bergson
    MVP - Directory Services
    MCITP - Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    Microsoft's Thrive IT Pro of the Month - June 2009

    http://www.pbbergs.com

    Please no e-mails, any questions should be posted in the NewGroups. This
    posting is provided "AS IS" with no warranties and confers no rights.
     
    Paul Bergson [MVP-DS], May 5, 2010
    #30
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.