Problem
One of my installed Apllication’s Windows Service not started automatically and I tried to start it manually, but it again failed to start, then I have started to analyze through event logs and find the below warning event 1530 with error message “Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards“.
Log Name: Application Source: Microsoft-Windows-User Profiles Service Date: 4/8/2015 01:45:18 AM Event ID: 1530 Level: Warning Computer: myPC.myDomain.Com Description: Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from RegistryUserS-1-5-21-745457877-148782331-813991262-2636_Classes: Process 1984 (DeviceHarddiskVolume3Program Files Program FilesMTSMyService.exe) has opened key REGISTRYUSERS-1-5-21-745457877-148782331-813991262-2636_CLASSES
Cause
After I have analyzed some time, found this warning event was logged due to service account (The service account used only to run widows service and it was not used to login into system). This warning event (1530) is logged by the behavior of system design.
Other related links
– http://support.microsoft.com/en-us/kb/947238
– http://answers.microsoft.com/en-us/windows/forum/windows_7-security/event-id1530-microsoft-windows-user-profiles/a1ca9fd0-5449-46b6-aae2-35e3edcf8425
– http://social.technet.microsoft.com/wiki/contents/articles/3134.user-profile-service-event-1530-the-windows-operating-system-detected-that-your-registry-file-is-still-in-use-by-other-applications-or-services.aspx