Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1000 Source: Userenv

Source
Userenv
Level
Error
Description
Windows cannot unload your registry file. If you have a roaming profile, your settings are not replicated. Contact your administrator. DETAIL - Access is denied. , Build number ((2195)).
Source
Userenv
Level
Error
Description
The Group Policy client-side extension <extension name> was passed flags (<number flags>) and returned a failure status code of (<status code>).
Source
Userenv
Level
Error
Description
Windows cannot determine the user or computer name. Return value (<return error code>).
Source
Userenv
Level
Error
Description
Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.
Source
Userenv
Level
Error
Description
Windows can not create profile directory \\<path to profile> You will be logged on with a local profile only. Changes to this profile will not be propagated to the server. Contact your network administrator. Detail: The system can not find the file specified.
Source
Userenv
Level
Error
Description
Windows cannot establish a connection to <domain name> with (<error code>).
Source
Userenv
Level
Error
Description
Your profile was not successfully loaded, but you have been logged on with the default system profile. Please correct the problem and log off. (<error code>)
Source
Userenv
Level
Error
Description
Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by this policy engine.
Source
Userenv
Level
Error
Description
Windows cannot access the registry information at \\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol with (<error code>).
Source
Userenv
Level
Warning
Description
Windows cannot copy file <path to source file> to location <path to destination file>. Contact your network administrator. DETAIL - <detail description>
Source
Userenv
Level
Error
Description
Windows cannot load extension <file name> with (<error number>).
Source
Userenv
Level
Error
Description
Windows cannot load the user's profile but has logged you on with the default profile for the system.

DETAIL - <error description>
Source
Userenv
Level
Error
Description
Windows cannot update your roaming profile. Contact your network administrator. DETAIL - <error message>.
Source
Userenv
Level
Error
Description
Windows cannot copy your profile because it contains encrypted files or directories. The keys to decrypt the files or directories are also stored in the profile and are not available now. Please decrypt the files and try again.
Source
Userenv
Level
Error
Description
Windows cannot log you on because the profile cannot be loaded.  Contact your network administrator. DETAIL - <details>.
Source
Userenv
Level
Error
Description
Windows cannot obtain the domain controller name for your computer network. Return value (<error code>).
Source
Userenv
Level
Information
Description
Windows could not save the registry settings in your user profile on its first try because another program or service was editing them. Windows tried again and saved them after <number> attempts.
Source
Userenv
Level
Error
Description
Windows cannot read the history of GPOs from the registry
Source
Userenv
Level
Error
Description
Windows cannot load the locally stored profile. Contact your network administrator.

DETAIL - <error message>.
Source
Userenv
Level
Error
Description
Windows cannot unload your registry class file. If you have a roaming profile, your settings are not replicated. Contact your administrator.

DETAIL Access is denied. , Build number ((2195)).
Source
Userenv
Level
Error
Description
Your roaming profile is not available, the operating system is attempting to log you on with your local profile. (<error code>)
Source
Userenv
Level
Error
Description
Windows cannot search for Organizational Unit hierarchy with (<error code>).
Source
Userenv
Level
Error
Description
Failed to access the registry information at \\domain.com\SysVol\domain.com\Policies\(Guid Number for Policy)\Machine\registry.pol with 53.
Source
Userenv
Level
Error
Description
Windows cannot do loopback processing when the computer is joined to a downlevel domain or is a member of a workgroup. Loopback processing will be disabled.
Source
Userenv
Level
Error
Description
Windows did not load your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Windows did not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrator's group must be the owner of the folder. Contact your network administrator.
Source
Userenv
Level
Error
Description
The logged on user's forest is different from the machine's forest. Cross Forest Group Policy processing is disabled and loopback processing has been enforced in this forest for this user account.
Source
Userenv
Level
Error
Description
RegLoadKey failed. Return value: <error details>.
Source
Userenv
Level
Error
Description
The operating system was unable to load the locally stored profile. A new local profile will be created. (<error code>).
Source
Userenv
Level
Error
Description
Windows cannot load your profile. Please increase the registry size and restart the computer.
Source
Userenv
Level
Error
Description
Attempt to determine whether user and machine accounts are in the same forest failed (<error code>).
Source
Userenv
Level
Error
Description
Insufficient system resources exist to complete the requested service for C:\Documents and Settings\ntuser.dat.
Source
Userenv
Level
Error
Description
Windows cannot claim critical section. Return value(8).
Source
Userenv
Level
Error
Description
Windows has backed up this user's profile. Windows will automatically try to use the backed up profile the next time this user logs on.
Source
Userenv
Level
Error
Description
Windows cannot create a temporary profile directory. Contact your network administrator.

DETAIL - <error message>.
Source
Userenv
Level
Error
Description
Windows cannot access the file gpt.ini for GPO <cn={0F5174F0-C67B-49B6-8AE2-400AF8923F2A},cn=policies,cn=system,DC=company,DC=NET. The file must be present at the location <\\Company.NET\sysvol\company.NET\Policies\{0F5174F0-C67B-49B6-8AE2-400AF8923F2A}\gpt.ini>. (Access is denied.). Group Policy processing aborted.
Source
Userenv
Level
Error
Description
Windows cannot query DllName registry entry for {GUID}.
Source
Userenv
Level
Error
Description
Windows ended GPO processing because the computer shut down or the user logged off.
Source
Userenv
Level
Error
Description
You do not have permission to access your central profile located at <path>. Contact your network administrator.
Source
Userenv
Level
Error
Description
Windows cannot process extension <extension> ProcessGroupPolicy. Return value (<error code>).

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...