User Profile Service Error 1512: Access Denied During Startup or Shutdown
Hello, I am using Windows 11 25h2.
Version: 26200.0837
Feature: Home
When shutting down or turning on the computer, the following error is logged to eventvwr.msc:
Windows cannot remove your registry file. The memory used by the registry could not be freed. This problem usually occurs because of services running with a user account. Try configuring the services to run with the LocalService or NetworkService account.
DETAILS - Access denied.
The eventvwr.msc log shown above appears twice, reflecting this event when the computer is shut down or started up.
The following steps were followed during installation:
• The official Windows 11 download page was used.
• Windows Media Tools was used.
• Once the OOBE screen was reached, CMD was opened by pressing Ctrl + F10 and the following command was entered:
C:\Windows\System32> start ms-cxh:localonly
• After completing the setup with the local account, I made the necessary settings. The settings are as follows:
| Fast Startup and hypersleep were disabled.
| Signed in with Microsoft Account.
• However, even after these steps, this error continued to appear. As a solution, I did the following:
C:\Windows\System32> net user UserName /add
| Then,
C:\Windows\System32> net localgroup Administrators UserName /add
After these settings, I logged into the account and definitively deleted everything related to the old account from the Settings menu, and no old data remained.
After logging in as the new user, I logged back in with the Microsoft Account.
However, I observed that this error persisted in eventvwr.msc.
The following commands were run for system integrity:
C:\Windows\System23> Dism /Online /Cleanup-Image /Checkhealth
C:\Windows\System23> Dism /Online /Cleanup-Image /ScanHealth
C:\Windows\System23> Sfc /Scannow
• All of these commands confirmed that there were no problems.
• For a more in-depth diagnosis, the following commands were run:
Get-content -path "C:\Windows\Logs\CBS\CBS.log" -Tail 150
Get-content -path "C:\Windows\Logs\DISM\DISM.log" -Tail 150
Logs from both PowerShell instances were reviewed, and no system integrity issues were observed.
The error I mentioned above has been present since installation.
It is located in Eventwvr.msc at:
• Windows Logs -> Application
Based on what I've done, could you please provide information on why this error might have occurred on the system and what steps should be taken to resolve it?