I have a client running a server with their line of business software configured as a remote application. I have one user that when he attempts to run the line of business software as a remote application he receives a APPCRASH error.However if another user launches the remote application and then signs in as the problem user there is no APPCRASH.
The following information is reported with the error:
Faulting application name: impress.exe, version: 5.1.102.0, time stamp: 0x522f820aFaulting module name: impress.exe, version: 5.1.102.0, time stamp: 0x522f820a
Exception code: 0xc0000005
Fault offset: 0x003fe41f
Faulting process id: 0x268
Faulting application start time: 0x01cf11ffa8811e46
Faulting application path: C:\data\Impress\impress.exe
Faulting module path: C:\data\Impress\impress.exe
Report Id: 238e8dfc-7df6-11e3-b1b6-001e678ee8f8
After the app crash the is a warning in the event log, but its about 43 seconds later; Event 1530, user Profile Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-2105745629-1987324649-1874639966-1224:
Process 328 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2105745629-1987324649-1874639966-1224\Printers\DevModePerUser
just trying to find some sort of hint as to way the remote application would crash for just one user. it is my luck that the one user is the owner.