Microsoft Sleep Study Writing All Over C: Drive, an SSD

Starting a few days ago, just after a Windows Automatic Update, the System process is almost constantly writing 180,000 Bps to a file C:\Windows\System32\SleepStudy\UserNotPresentSession.etl.  This is a desktop computer with all the CPU's sleep states disabled because I run Einstein@Home 24/7.  Therefore none of the preconditions for the Sleep Study to occur are present.  However, I can find no way to turn it off.  Does anyone know of a method of disabling the writing of the Sleep Study log?

Also, the same update made it so Internet Explorer freezes absolutely cold if Google is used to search, although IE continues to use about 4% of a CPU.  The only remedy is to use Task Manager to kill IE.  Does anyone know of a remedy for this?

Configuration: Supermicro X10SAT motherboard, Xeon E3-1220 V3 CPU, 16 GB ECC memory, Windows 10 Anniversary Edition Update, 1 EVGA GTX 970 video card, 7 hard disks (5 internal and 2 external), 1 DVD/CD/Blu-Ray burner, 3 sound devices, and a scanner.

Thank you in advance for any assistance you may care to provide.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

Perhaps you can try adjusting your startup programs.

Press Control+Shift+Escape > Select the Startup tab > Scroll through the list and select programs to disable that you do not want starting automatically, when your computer turns on > Reboot your system

Hope that helps.

5 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Perhaps you can try adjusting your startup programs.

Press Control+Shift+Escape > Select the Startup tab > Scroll through the list and select programs to disable that you do not want starting automatically, when your computer turns on > Reboot your system

Hope that helps.

 Thank you for your help.  I did as you suggested and found the Windows host  process (Rundll32) was starting 7 copies of cm106eye.exe, a USB sound device utility, but nothing else, especially nothing relevant to the Microsoft Sleep Study continually writing 180,000 Bps to a file on my SSD.  This computer does not have a battery, except in the UPS, and therefore, at this time, cannot use the outcome of a sleep study.

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Although it is true that the problem appeared just after a large Windows Automatic Update, the action that stopped the problem from occurring was to turn off Nero TuneItUp, which took to turning turbo mode off and on depending on what it thought was download activity.  Since the NTP time client, NTPD, cannot or does not cope with constant changes in CPU frequency, I had to turn TuneItUp off.  Since I did that I have not observed Windows 10 writing to C:\Windows\System32\SleepStudy\UserNotPresentSession.etl.

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

So, has your issue been solved?

2 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

So, has your issue been solved?

No, not entirely.  There are 88 files in C:\Windows\System32\SleepStudy, for a total of 14,223,276 bytes.  Except for the period 10/14/2016 thru 10/20/2016, when no files were written, at least one *.etl file has been written to this directory every day in October, including 13 files on 10/22 and 11 files on 10/23.  Three *.etl files have already been written today, at 12:04 AM, 1:44 AM, and 6:16 AM, but they don't amount to much as they are 22,. 84, and 40 KB in length respectively.  C:\Windows\System32\SleepStudy\UserNotPresentSession.etl was last written or modified at 10/26/2016 11:33 AM and is 2,048 KB in length.  There is no chance whatever that I was not here at my desk working at 11:33 AM on Wednesday.

The improvements to the situation are twofold: The existing UserNotPresentSession.etl file is the only multi-megabyte file that has been written to my knowledge since 10/13, and since I turned off Nero TuneItUp, I have not caught the System process writing to C:\Windows\System32\SleepStudy\UserNotPresentSession.etl in the Resource Monitor, Disk tab, Disk Activity window, whereas before I turned off TuneItUp pro the System process was writing about 180,000 Bps to C:\Windows\System32\SleepStudy\UserNotPresentSession.etl  every time I looked.

As an aside, I would sure like to find out why the System process is constantly (read almost always) writing to C:\ProgramData\TEMP:F9CFE070.  The System is only writing 36 Bps, but it is frequently doing that, and the file cannot be found mentioned in File Explorer, Process Monitor, or Process Explorer or with the command console.

Thank you very much for your interest in this matter.

4 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Having the same issue, I searched and found this post 

"

After the Anniversary Update, there's a new entry running under Event Trace Sessions on Windows 10 called UserNotPresentTraceSession.

To check this, open the Performance snap-in and expand Event Trace Sessions.

The funny thing is that you don't have the option to disable this under Startup Event Trace Sessionslike you have with all the other entries"

Source: http://superuser.com/questions/1120499/whats-the-usernotpresenttracesession-under-event-trace-sessions-after-the-ann

and managed to stop the process. Deleting it may be the only option to make it persistent across reboots.

[edit] Nope, after deleting it, it reappears.

Cheers

Mike

8 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I opened the event trace session in the file folder that's constantly written to (35 MB/sec) using Microsoft Message analyzer.  I see a lot of it has to do with user input detection and Microsoft_Kernel_power.  Setting all my power options to maximum

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

The UserNotPresentTraceSession has not reappeared on my system.

Your advice worked for me; I cannot thank you enough.  In C:\Windows\System32\SleepStudy, there were files written with dates for every day in the last two months, until 12/28/16, the day I deleted the UserNotPresentTraceSession. 

Actually, I have changed my mind (as a result of an article in EETimes) about all the data Microsoft gathers in Windows 10 and returns to itself.  The truth is that Microsoft has always done and used the latest research to improve Windows.  It is the key to the company's success.  I wrote a paper about the intersection of Marketing and Computer Science for a graduate school course which showed that, at the time, Windows contained the latest research in user interface design, and pretty much always had since the inception of Windows.  I just wish Microsoft would tell us what it is doing and why.  It would make it a lot easier to support the company.

I could not stand Microsoft writing megabytes every day to the SSD, though; I have already gone thru three SSDs for this computer in as many years, and it takes days to recover from a lost system disk.

Again, I am very grateful for your help.  A thousand thanks.

7 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi,

We're glad to hear that the issue has been resolve.
Please don't hesitate to post back if you have any other concern and we'll be happy to assist you.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

What the hell gives MICROSOFT the right to monitor ALL aspects of my computer and have more control over it than I do.???????

I guarantee MY NEXT COMPUTER WILL NOT HAVE WINDOWS !

Starting a few days ago, just after a Windows Automatic Update, the System process is almost constantly writing 180,000 Bps to a file C:\Windows\System32\SleepStudy\UserNotPresentSession.etl.  This is a desktop computer with all the CPU's sleep states disabled because I run Einstein@Home 24/7.  Therefore none of the preconditions for the Sleep Study to occur are present.  However, I can find no way to turn it off.  Does anyone know of a method of disabling the writing of the Sleep Study log?

Also, the same update made it so Internet Explorer freezes absolutely cold if Google is used to search, although IE continues to use about 4% of a CPU.  The only remedy is to use Task Manager to kill IE.  Does anyone know of a remedy for this?

Configuration: Supermicro X10SAT motherboard, Xeon E3-1220 V3 CPU, 16 GB ECC memory, Windows 10 Anniversary Edition Update, 1 EVGA GTX 970 video card, 7 hard disks (5 internal and 2 external), 1 DVD/CD/Blu-Ray burner, 3 sound devices, and a scanner.

Thank you in advance for any assistance you may care to provide.

21 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

 
 

Question Info


Last updated July 31, 2023 Views 22,754 Applies to: