How can I find out what the error is?

Rev

My laptop gives me an error message on shut down, it goes through the 'saving your setting' then 'windows is shutting down' as usual. Then about a second before it turns off an error box pops up.

It flashes up for barely a second so I don't get time to see what it's saying.

Any way I can find out?

I'm not having any problems at all with it, no new software installs, no settings changed and it's running fine. But I'm curious what the error message is.

Thanks for any help.

albertross_2

video it????

colin79666

ok next time it happens make a note of the exact time (this will help when search log files)

turn your laptop back on again and right click my computer > manage
in the left hand pane click event viewer and then System
the error should be listed there or in Application

Rev

Thanks for the replies. There's three for the time I shut down.

This one, from application:

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 02/03/2007
Time: 23:47:34
User: NT AUTHORITY\SYSTEM
Description:
Windows saved user Computer\User registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

This one from application:

Event Type: Information
Event Source: AcerMemUsageCheckService
Event Category: None
Event ID: 0
Date: 02/03/2007
Time: 23:47:27
User: N/A
Description:
PowerEvent handled successfully by the service.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

and this one, from system:

Event Type: Information
Event Source: EventLog
Event Category: None
Event ID: 6006
Date: 02/03/2007
Time: 23:47:35
User: N/A
Description:
The Event log service was stopped.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: ff 00 00 00 ÿ...



So how do I figure out which one is causing the pop up, and fix t.

Chippy_Minton

Start - Run - type services.msc - OK. Look for any service whose Log On As is not Local System or Network Service. Change it by double-clicking, then the Log On tab.

If there aren't any, try disabling the Acer Memory Check Service and see if the problem goes away. General tab - Startup type - Disabled.

colin79666

The finger of blame certainly points at the Acer program
as said above try temporarily disabling it

Rev

Thanks. Disabling the memory check seems to have done the trick.

Rev

Agh, I hate PC's. It's happening again already, all was fine last night and earlier today, few minutes ago I turned it off and it happened again.

Same errors seem to be showing up in the event viewer.

Any suggestions?

Thanks.

GreenNotM

Rev wrote:

Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 02/03/2007
Time: 23:47:34
User: NT AUTHORITY\SYSTEM
Description:
Windows saved user Computer\User registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

This one from application:

Event Type: Information
Event Source: AcerMemUsageCheckService

and this one, from system:

Event Type: Information
Event Source: EventLog

Hi it is this "event" causing the problems - this is warning event the others are only information.

You need to download this little utilility from MS The User Profile Hive Cleanup service

MS_TechNet wrote:

Overview

The User Profile Hive Cleanup service helps to ensure user sessions are completely terminated when a user logs off. System processes and applications occasionally maintain connections to registry keys in the user profile after a user logs off. In those cases the user session is prevented from completely ending. This can result in problems when using Roaming User Profiles in a server environment or when using locked profiles as implemented through the Shared Computer Toolkit for Windows XP.

On Windows 2000 you can benefit from this service if the application event log shows event id 1000 where the message text indicates that the profile is not unloading and that the error is "Access is denied". On Windows XP and Windows Server 2003 either event ids 1517 and 1524 indicate the same profile unload problem.

To accomplish this the service monitors for logged off users that still have registry hives loaded. When that happens the service determines which application have handles opened to the hives and releases them. It logs the application name and what registry keys were left open. After this the system finishes unloading the profile.

Rev

Thank you. I'll give it a try.

Rev

Nope, didn't work . Installed the patch and it's still coming up.