Select the product you need help with
- Internet Explorer
- Windows Phone
- More products
You experience log off problems on a Windows XP-based, Windows Server 2003-based, Windows 2000-based, or Windows NT 4.0-based computer
Article ID: 837115 - View products that this article applies to.
When you try to log off your computer, you cannot log off, or event messages that are logged in the Application log indicate that the user profile was not unloaded. This problem may occur if Microsoft Windows or third-party programs do not stop running when you try to log off your computer. This article contains a step-by-step method to help you resolve this problem.
If you are viewing this Web content on the computer that has the problem, you can use the automatic detection and fix tool that this content contains. The tool will help make the troubleshooting process faster, more accurate, and much easier for you. If you are not on the computer that has the problem, print this Web content, and use it on the computer that has the problem.
Note Many shutdown problems are not caused by user profile unloading errors. For more information about shutdown problems, click the following article numbers to view the articles in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/308029/ )Advanced troubleshooting for shutdown problems in Windows XP
(http://support.microsoft.com/kb/324268/ )How to troubleshoot shutdown problems in Windows Server 2003
315409Note Windows Vista and Windows Server 2008 include the functionality of the automatic detection and fix tool (UPHClean) that this content contains. If you are experiencing prooblems logging off Windows Vista and Windows Server 2008, vist the following Microsoft Web sites.
(http://support.microsoft.com/kb/315409/ )How to troubleshoot shutdown problems in Windows 2000
When you try to log off a computer that is running Windows Server 2003, Windows XP, Windows 2000, or Windows NT 4.0, you may experience one or more of the following symptoms:
To resolve this problem, use the Microsoft User Profile Hive Cleanup Service (UPHClean). UPHClean monitors the computer while you log off, and then UPHClean unloads and reconciles user profiles so that you can log off. This method shows how to install and to run UPHClean.
Note UPHClean is supported under the following operating systems:
Important This method requires you to browse away from the page that you are now viewing. By browsing away from this page, the content that you are now viewing will no longer be displayed. So, before you continue, you might find it helpful to create a shortcut to this Web page on your desktop so that you can easily return to this page by double-clicking the shortcut. To create a shortcut to this Web page on your desktop, follow these steps:
Estimated Time: 10 minutes or more, depending on your Internet connection speed.
To use the Microsoft User Profile Hive Cleanup Service (UPHClean), follow these steps:
Note If you receive an error when you install UPHClean, try the following:
VerificationTo verify that this method worked, log off Windows. Windows should log off immediatley. Open the Application log and detemine if any event messages indicate that there were user profile errors. For more information about the event messages in the Application log, see the Event messages in the Application log section.
If this method worked: If you can log off Windows, and there are no event messages that indicate that there were user profile unloading errors, you have successfully corrected the problem.
If this method did not work: If you cannot log off Windows, or there are event messages that indicate that there were user profile unloading errors, this method did not work. You might want to ask someone for help, or you might want to try Advanced Troubleshooting.
If the resources listed in this article do not help you resolve the problem or if you experience symptoms that differ from those that are described in this article, search the Microsoft Knowledge Base for more information. To search the Microsoft Knowledge Base, visit the following Microsoft Web site:
Then, type the text of the error message that you receive, or type a description of the problem, in the search field.
If the problem is not resolved, unfortunately this content is unable to help you any further. So, you might want to ask someone for help, or you might want to visit the following Microsoft Web site:
User profiles and user accounts
Your user profile is a collection of settings that make the computer look and work the way that you want it to look and to work. Your user profile contains your settings for desktop backgrounds, for screen savers, for pointer preferences, for sound settings, and for other features. User profiles make sure that your personal preferences are used when you log on to Windows.
A user profile differs from a user account that you use to log on to Windows. Each user account has at least one user profile associated with it.
A user account defines the actions a user can perform in Windows. On a stand-alone computer or on a computer that is a member of a workgroup, a user account establishes the permissions that are assigned to each user. On a computer that is part of a network domain, a user must be a member of at least one group. The permissions and the rights that are granted to a group are assigned to its members.
For information about user profile hives, visit the following Microsoft Web sites:
User profile hives
User Profile Hive Cleanup serviceThe User Profile Hive Cleanup service helps make sure that user sessions are completely ended when a user logs off. System processes and applications occasionally maintain connections to registry keys in the user profile after a user logs off. In those cases, the user session is prevented from completely ending. This can result in problems when you use roaming user profiles in a network environment or when locked profiles are used as implemented through the Shared Computer Toolkit for Windows XP.
In Windows 2000, you can benefit from the User Profile Hive Cleanup service if the Application log shows event ID 1000, and the message text indicates that the profile is not unloading and that the error is "Access is denied." On Windows XP and on Windows Server 2003, event IDs 1517 and 1524 indicate the same problem.
The User Profile Hive Cleanup service monitors for users who have logged off and for whom registry hives are still loaded. When this occurs, the service determines which applications have handles that are opened to the hives and releases them. It logs the application name and what registry keys were left open. After this occurs, the system finishes unloading the profile.
For more information about UPHClean, visit the following Microsoft Web sites:
The UPHClean blog
The UPHClean Readme.txt file
Note An event message can result for many reasons. When you receive an event, confirm that it has the same description every time. This will help you determine whether the event is caused by a user profile error.
How to view the Application logTo view the Application log, do the following:
Windows Vista and Windows Server 2008The functionality of UPHClean (v1.6) is included in the Windows Vista and Windows Server 2008 User Profile Service. The User Profile Service performs all the necessary work to prevent user profile log off errors from occuring.
When the User Profile Service takes action to prevent a user profile from unloading, it logs event 1530.
Windows XP and Windows Server 2003
Event Type: Error
Event Type: Error
Windows NT 4.0
How to uninstall the User Profile Hive Cleanup service
Article ID: 837115 - Last Review: June 18, 2012 - Revision: 8.1