Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1526 Source: Userenv

Windows did not load your roaming profile and is attempting to log you on with your local profile.  Changes to the profile will not be copied to the server when you logoff. Windows did not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrator's group must be the owner of the folder.  Contact your network administrator.
This problem also appears on Windows XP SP2. After I followed the instruction in ME327462, I succeeded in solving this problem.
If Windows XP SP1 or Windows 2000 SP4 cannot save a user's profile because of incorrect security, the user receives this event is recorded in the event log. See ME327462 for more information.
The error occurred after  WinXP SP1 installation while logging to Netware Server. Fix:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
More info on Novell Knowledgebase TID10074402.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.