Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a user account which needs to be renamed on a production server running Server 2003. The ntuser.dat and ntuser.dat.log files on a service account (not logged in at the moment) still have active handles from the system #4 process.

Is it safe to close these handles? I would generally do a reboot and rename on a user workstation but this server has about 100 active users at any given time.

share|improve this question
up vote 1 down vote accepted

As a preventive solution you should be using UPHClean to help unloading profiles upon user logoff.

The UPHClean readme states that the root of the problem are buggy services holding open user registry handles even after logoff. If you just throw the switch, these services are likely to misbehave. Take a look at the list of services running within the system process to do a risk-benefit analysis.

share|improve this answer
I have thought about using the UPHClean utility in the past. This behavior generally hasn't been a problem. I recently upgraded to a new set of domain controllers and ever since this one set of file handles has remained open. – Tim Brigham Dec 2 '11 at 21:19

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.