X

See if warning event 1534 slows down your Windows 10 device

Windows 10 October 2018 Update is most probably the most troublesome feature upgrade so far. Microsoft has been resolving many errors with it, but some are left for users to resolve.

For example, the warning events with ID 1534 for User Profile Service in the Application log:

  • Profile notification of event Load for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.
  • Profile notification of event Unload for component {B31118B2-1F49-48E5-B6F5-BC21CAEC56FB} failed, error code is See Tracelogging for error details.

It does not matter whether your Windows 10 computer is brand new or it’s been around since the early days of Windows 7 and has been upgraded a few times, these two events can decrease the performance of your device.

The events are related to updating Start menu tiles and there’s something wrong with the process since Windows 10 October 2018 Update (version 1809) was released and re-released.
Previous versions of Windows 10 are not known to be slowed down by this bug.

A short video about resolving event ID 1534 in Windows 10 October 2018 Update

Here’s a video tutorial on how to get rid of repeated events with ID 1534 and speed up your computer.

How to find out if your Windows 10 PC is affected by event ID 1534

Your device must run Windows 10 October 2018 Update, version 1809: open Settings app (keyboard shortcut Windows Key+I), navigate to System, About and see the version number in the Windows specifications section.

Windows 10, Settings, System, About, Windows specifications

Open Start again, type event, expand Event Viewer and choose Run as administrator.

Windows 10, Start. Type ‘event’ and choose ‘Run as administrator’.

Depending on the speed of your PC and its system drive, displaying the Event Viewer window and the list of events might take from a few seconds to about a minute.

Expand Windows Logs from the left pane and click or tap Application. Then look for warning events with ID 1534. There should be loads of these if your device is affected by this flaw.
Alternatively, right-click or touch and hold Application log, select Find and look for number 1534.

Here’s an example of these events:

Windows 10, Event Viewer, warning event 1534

In case you do not see such events, relax and find something better to do. For example, read how you can use Event Viewer for detecting application and system problems and tracking user account actions.

All others, move on to the instructions below.

How to delete the troublesome TDL key with Windows 10’s Registry Editor

Close Event Viewer. Then open Start, type regedit and choose Run as administrator for Registry Editor.

Windows 10, Start. Type ‘regedit’ and choose ‘Run as administrator’.

Warning: messing with other entries in Registry Editor can lead to Windows stability and startup problems.
Follow the instructions carefully and do not change or delete anything else. You have been warned and you are on your own if you decide to continue.

In the Registry Editor window, use the left pane to navigate to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileNotification\TDL
Note that the correct path includes \Microsoft\Windows NT\, not \Microsoft\Windows\.

The TDL key is owned by a built-in, hidden security principal named TrustedInstaller, therefore even administrators cannot delete it without taking ownership of the key first.

Right-click or touch and hold TDL and choose Permissions.

Windows 10, Registry Editor. Right-click the ‘TDL’ key and choose ‘Permissions’.

In the Permissions for TDL window, click the Advanced button on the bottom right.

PS! If you see a SID number (starts with S-I-15-3-1024) instead of a name in the list, please do not remove it! This is probably a capability SID for system access. In Windows 10 version 1809, there are over 300 capability SIDs and removing their access to Registry keys or file system could cause problems in the future.

Windows 10, Registry Editor, Permissions for TDL key. Click ‘Advanced’.

The very first line displays the current owner of the key, click or touch Change.

Windows 10, Registry Editor, Advanced Security Settings for TDL. Click ‘Change’ to modify ownership.

In the Select User or Group window, type administrators (the full word, not just a part of it), click the Check Names button on the right and then click OK. This selects the local Administrators group on your device.
Note that your computer is probably not called IT-Y70, so do not get confused if the window you see contains a bit different information.

Windows 10, Registry Editor, Select User or Group. Type ‘administrators’, click ‘Check Names’ and then OK.

Back in the Advanced Security Settings for TDL window, tick the Replace owner on subcontainers and objects check box and click OK.

Windows 10, Registry Editor, Advanced Security Settings for TDL, modified owner. Tick the ‘Replace owner’ check box and click OK.

You’ll see the Permissions for TDL window again. Click to select the Administrators group from the top part and then tick the Full Control check box in the Allow column.
Click OK to get complete control over the troublesome TDL key.

Windows 10, Registry Editor, Permissions for TDL after taking ownership. Select ‘Administrators’, tick the ‘Full Control’ check box and click OK.

Now, right-click or touch and hold the TDL key in Registry Editor window and choose Delete.

Windows 10, Registry Editor, TDL key after taking ownership. Right-click ‘TDL’ and choose ‘Delete’.

As expected, Windows confirms your bold move: click Yes.

Windows 10, Registry Editor, Confirm Key Delete. Click Yes.

Next, scroll down the left pane and see if you can find the Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\ entry.

If it does not exist, you have 32-bit Windows 10 installed and you can now safely restart your computer to resolve the problem.

In case the WOW6432Node key exists, your device has 64-bit Windows 10 installed.
Please browse to the Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\ProfileNotification\TDL key.

Windows 10, Registry Editor, the other TDL key on 64-bit Windows.

Repeat the exact same taking ownership and applying full control process for the second TDL key: right-click, Permissions, Advanced, Change, etc.

Finally, delete the second TDL key and restart your PC to fix the Windows 10 October 2018 Update problem with event ID 1534.

Your device should be faster now.