What's the "UserNotPresentTraceSession" under Event Trace Sessions after the Anniversary Update?

After the Anniversary Update, there's a new entry running under Event Trace Sessions on Windows 10 called UserNotPresentTraceSession.

To check this, open the Performance snap-in and expand Event Trace Sessions.

The funny thing is that you don't have the option to disable this under Startup Event Trace Sessions like you have with all the other entries.

Ryakna

Posted 2016-09-03T03:01:30.513

Reputation: 1 020

Answers

Looking at the properties it captures Power related data (Sleepstudy, AdaptiveStandby) when no user is actively using the device.

Logger Name           : UserNotPresentTraceSession
Logger Id             : 14
Logger Thread Id      : 0000000000000354
Buffer Size           : 64
Maximum Buffers       : 24
Minimum Buffers       : 2
Number of Buffers     : 2
Free Buffers          : 1
Buffers Written       : 1
Events Lost           : 0
Log Buffers Lost      : 0
Real Time Buffers Lost: 0
Flush Timer           : 0
Age Limit             : 0
Log File Mode         : Circular PersistOnHybridShutdown NoPerProcessorBuffering
Maximum File Size     : 2
Log Filename          : C:\Windows\system32\SleepStudy\UserNotPresentSession.etl
Trace Flags           : "Microsoft-Windows-UserModePowerService":0x2c:0x4+"Microsoft-Windows-Kernel-Power":0xe03:0x4

magicandre1981

Posted 2016-09-03T03:01:30.513

Reputation: 86 560

Thank you. And apparently you cannot disable it, but can delete it. – Ryakna – 2016-09-07T08:41:17.820

On my build 14393.969 test system even if deleted the UserNotPresentTraceSession reappears after a reboot.

I have no use for this tracing and want to reduce system volume writes.

Any ideas how to rid the system of it entirely so that it doesn't come back? – NoelC – 2017-03-21T03:53:39.567

@NoelC stop trying to damage your system. leave it running it doesn't impact you, it helps to trouble shoot power saving issues – magicandre1981 – 2017-03-21T16:29:52.567

2Thanks, but I prefer control. – NoelC – 2017-03-22T16:52:29.707

@NoelC ask on msfn here you all destroy your Windows. maybe someone else helps you – magicandre1981 – 2017-03-22T16:53:32.200

LOL, 60 days 24/7 uptime with a level 10 Reliability Monitor reading (not to mention running the same Windows installation since 2013 and having it still be as efficient as ever) isn't exactly "destroyed". But thanks for your thoughts, Andre. :) – NoelC – 2017-03-23T19:42:25.127

I had a problem with "UserNotPresentSession.etl". It was overloading my SSD (100% activity, ~50MB/s writing) for example when I was playing GTA V. I didn't find any information how to disable it, but I found this reddit post: https://www.reddit.com/r/techsupport/comments/524d4s/disk_usage_raising_to_100/d7h7xwt/ where somebody described the same problem.

I found a solution for this problem, by setting "UserNotPresentSession.etl" to Read-only.

Go to: "C:\Windows\System32\SleepStudy".
Click the right mouse button on file: "UserNotPresentSession.etl" and then "Properties" from the list.
Check "Read-only" checkbox and save changes.
IMPORTANT: Restart your computer.

After that the disk is not longer abused. I experienced this problem on Windows 10 builds 14393 and 15063.

I hope this post will help people with the same issue.

Mona

Posted 2016-09-03T03:01:30.513

Reputation: 151

I'm glad i wasnt the only one who noticed this. Thanks :) – DeerSpotter – 2017-05-22T14:38:44.317