我有一台连接到域的 Windows 7 笔记本电脑。这台笔记本电脑位于我们非洲的地区办事处（我们在英国）。但是，非洲的一些域用户抱怨他们无法使用他们的凭据登录。
所以我决定远程访问笔记本电脑，看看我是否可以登录。我以域管理员身份登录，而不是以我自己的凭据登录，因为将我的个人资料从英国加载到内罗毕的服务器需要很长时间。
我设法以域管理员身份成功登录，所以没有发现问题所在。
然后我查看了事件日志并发现Warning: User Profile Service Error: 1530。
这与 Windows 中的用户配置文件和注册表有关。我以前遇到过用户配置文件错误，但从未遇到过这种情况。
The details are below:
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 22/04/2015 16:27:17
Event ID: 1530
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: IH-*PC_NAME*.*DOMAIN_NAME*.ORG.UK
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
16 user registry handles leaked from \Registry\User\S-1-5-21-779955827-3448407892-3122252932-1588:
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\Disallowed
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\TrustedPeople
Process 9600 (\Device\HarddiskVolume3\Windows\System32\msiexec.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\My
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Policies\Microsoft\SystemCertificates
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Policies\Microsoft\SystemCertificates
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Policies\Microsoft\SystemCertificates
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Policies\Microsoft\SystemCertificates
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\CA
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\trust
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\Root
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
<EventID>1530</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2015-04-22T13:27:17.139891900Z" />
<EventRecordID>18588</EventRecordID>
<Correlation />
<Execution ProcessID="1160" ThreadID="9224" />
<Channel>Application</Channel>
<Computer>LAPTOP1.*DOMAIN*.ORG.UK</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="EVENT_HIVE_LEAK">
<Data Name="Detail">16 user registry handles leaked from \Registry\User\S-1-5-21-779955827-3448407892-3122252932-1588:
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\Disallowed
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\TrustedPeople
Process 9600 (\Device\HarddiskVolume3\Windows\System32\msiexec.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\My
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Policies\Microsoft\SystemCertificates
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Policies\Microsoft\SystemCertificates
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Policies\Microsoft\SystemCertificates
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Policies\Microsoft\SystemCertificates
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\CA
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\trust
Process 1160 (\Device\HarddiskVolume3\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-779955827-3448407892-3122252932-1588\Software\Microsoft\SystemCertificates\Root
</Data>
</EventData>
</Event>
我想知道如何解决这个问题？用户仍然无法登录。此外，我该如何防止将来再次发生这种情况。
答案1
我终于搞明白了。我不知道为什么会出现这个错误信息——但我解决了这个问题。
我删除了下面的用户配置文件C:\Users\%Username%并重新启动系统。然后我以用户身份登录。
由于笔记本电脑是域的一部分，因此笔记本电脑将在服务器上查找刚刚删除的用户配置文件的新副本！似乎成功了。