The following behavior and event viewer error was also observed. When logging out of a Terminal Services session on a Active Directory Domain controller, the following error message would appear.
Event Type: Information Event Source: UPHClean Event Category: None Event ID: 1401 Date: 7/7/2008 Time: 8:40:22 AM User: XXXXXXXXXXXXXXXX
Computer: XXXXXXXXXXXXXXXXXX Description: The following handles in user profile hive XXXXXXXXXXXXX(S-X-5-XX-1708537768-1303643608-725345543-XXXXXX) have been remapped because they were preventing the profile from unloading successfully:
AeXAgentUIHost.exe (3436) HKCU (0x1ec)
If a non-admin user is added to the Remote Desktop Users local group on the Server and logs in without the /Console switch, then these errors and warnings appear.
The issue is caused by SessionManager calling OpenProcessToken on a thread that is impersonating the current interactive user.
If GetSessionId() in AeXUtility::TSSessions is modified to call OpenThreadToken before OpenProcessToken, the Agent will be able to correctly identify the current TS session ID.
This has been fixed in R8.
Applies To Notification Server 6.0.6074 R7 and earlier Active Directory Controllers
ID: SYD 32086
sydd2 (Altiris - Sydney) database
Imported Document ID: TECH40118
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe