Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1401 Source: UPHClean

The following handles in user profile hive <server>\<user> (S-1-5-21-2897372762-2933521463-2593353803-1006) have been remapped because they were preventing the profile from unloading successfully:

This event was appearing on our Citrix Server when a user was logging off. The only users it was happening to did not have a Home Folder specified under the Profile in Active Directory. Access to the Citrix Servers local drives was being restricted. Specifying an alternate Home Folder resolved the issue.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.