Article ID: 810616 - Last Review: February 12, 2007 - Revision: 2.1

Warning error 1517 in Event Viewer after first restart

View products that this article applies to.
System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
Expand all | Collapse all

SYMPTOMS

After you run Sysprep on an installation of either Windows XP Professional or Windows XP Home Edition, the following warning message may be displayed in the application event log when you restart the computer:

Event Type: Error Event
Source: Userenv Event
Category: None
Event ID: 1517
Date: 01/18/01
Time: 10:41:52
User: NT AUTHORITY\SYSTEM Computer: <computer name>
Description: Windows saved user <domain\user> registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. This is often caused by services running as a user account, try configuring the services to run in the local system account.

Back to the top

CAUSE

The event occurs if a program or service has the Registry open while Windows XP is logging off.
Back to the top

RESOLUTION

You do not have to do anything. You can ignore the warning.
Back to the top

STATUS

This behavior is by design.
Back to the top
APPLIES TO
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Professional SP1
  • Microsoft Windows XP Professional SP2
  • Microsoft Windows XP Home Edition
  • Microsoft Windows XP Home Edition SP1
  • Microsoft Windows XP Home Edition SP2
Back to the top
Keywords: 
kbprb KB810616
Back to the top