Login - Using Tempoary Profile Problem
Stephen
![Lanwench [MVP - Exchange]'s profile photo](https://lh3.googleusercontent.com/a/default-user=s40-c)
Lanwench [MVP - Exchange]
In news:dfv2i5$duj$1$8302...@news.demon.co.uk,
Stephen <ste...@langley-park.co.uk> typed:
Try downloading and installing the user profile hive cleanup utility
(microsoft.com/downloads)
What scheduled tasks run at night on this server?
Brandy Nee [MSFT]
Thank you for posting to the SBS Newsgroup.
I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!
According to your description, I understand that you have a SBS 2K3 domain,
and Windows 2003 is a member server. Domain clients login but their
profiles are not being loaded. If I have misunderstood your concern, please
let me know.
Please take your time to read through my explanation and steps below.
These error logs indicate that the user profiles in your Terminal Server is
either corrupted, or are not properly configured. Does the problem happen
when you login the server locally (without using Terminal Service (or
Remote Desktop) client?
[Note]: Please temporary disable all the third party software, e.g.
Anti-virus software. It may block the user.dat file when user logs off.
1> Did you manually move all your users'' profiles? Just a double check, is
drive C a local hard disk, external hard disk or a network mapped drive?
The general recommendations for duplicating a user profile, is to create a
new user and then copy the user profile. When copying, the following files
should be excluded, see:
- Ntuser.dat
- Ntuser.dat.log
- Ntuser.ini
811151 How to Copy User Data to a New User Profile
http://support.microsoft.com/?id=811151
For your additional information:
Moving the Documents and Settings folder in Windows server 2003/Windows XP
to another drive is not supported by Microsoft. Although you can try the
steps in the article below, we provide it for informational purposes only;
Microsoft makes no guarantee that this configuration functions properly for
Windows Server 20003/Windows XP.
236621 Cannot Move or Rename the Documents and Settings Folder
http://support.microsoft.com/?id=236621
2> If you have moved the Documents and Settings folder, I suspect that some
users'' ProfileImagePath registries are duplicated with other users''
ProfileImagePath. To resolve the issue, perform the following steps:
WARNING: If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. Microsoft
cannot guarantee that you can solve problems that result from using
Registry Editor incorrectly. Use Registry Editor at your own risk:
a. Run "WHOAMI /USER" (without quotation marks) to determine the user's
correct SID. [Note]: the whoami command is a built-in command in Windows
Server 2003.
b. Run "regedit" (without quotation marks).
c. Check the ProfileImagePath value under the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\ProfileList\<SID>
Note down this ProfileImagePath value.
d. Check the other ProfileList\<SID> keys for matching ProfileImagePath
values and deleted those keys. [Note]: Please make sure you have backed up
the registry key before you delete them.
Hope the information above helps. If anything is unclear, please feel free
to post back. I am looking forward to hearing from you!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>From: "Stephen" <ste...@langley-park.co.uk>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Login - Using Tempoary Profile Problem
>Date: Sat, 10 Sep 2005 17:44:58 +0100
>Lines: 182
>Message-ID: <dfv2i5$duj$1$8302...@news.demon.co.uk>
>NNTP-Posting-Host: ebacuk.demon.co.uk
>Mime-Version: 1.0
>Content-Type: multipart/alternative;
> boundary="----=_NextPart_000_0006_01C5B62F.5CD888E0"
>X-Trace: news.demon.co.uk 1126370694 14291 83.104.61.223 (10 Sep 2005
16:44:54 GMT)
>X-Complaints-To: ab...@demon.net
>NNTP-Posting-Date: Sat, 10 Sep 2005 16:44:54 +0000 (UTC)
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>X-Priority: 3
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MSMail-Priority: Normal
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!newshub.sdsu.edu!newsfeed.news2me.com!newsfeed2.easynews.com!newsfeed1
.easynews.com!easynews.com!easynews!news.he.net!xara.net!gxn.net!194.159.246
.34.MISMATCH!peer-uk.news.demon.net!kibo.news.demon.net!news.demon.co.uk!dem
on!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:152262
>X-Tomcat-NG: microsoft.public.windows.server.sbs
ste...@langley-park.co.uk
I have downloaded and installed this service....The service is listed
as running, and has no effect on my problem.
Any other suggestions would be appreciated
Thank you & Best Regards
Stephen
ste...@langley-park.co.uk
Your understanding of my setup is correct...
1) User profiles were not manually moved, all users were created
through the Active Directory and setup individually. These accounts
have worked correctly until recently when this problem occurred.
2) Documents and Settings have not been moved, however My Documents
Folder has been redirected once again though AD and Group Policy setup
(AD is running on the SBS along with GP, My Documents is redirected to
the 2003 member server. I have investigated the registry settings (on
the member server only) and noted key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\ProfileList\<SID> does not exist, however SID's are
listed in various places, ie Key -
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group
Policy
The following (11) SID's appear all starting with the same sequence...
S-1-5-21-3030226590-1642170082-3786172808- and ending with 1131, 1139,
1140, 1141, 1142, 1143, 1144, 1145, 1146, 1149, 500
There is then another group listed as SID
S-1-5-21-3744492446-265361333-1686619757- and ending with 1136, 1137,
1138, 1139, 1140, 1141, 500...Using a utility i have confirmed that
this group of SID's actually match the users defined on the SBS
Finally there is 1 more SID listed
S-1-5-21-3834096281-4252308924-621211093-500, using the same utility i
have confirmed this SID belongs to the Administrator account on the
member server (this is the only account created directly on the member
server)
My interpretation of the above is, the 1st group is garbage and
probably belongs to the users i first created on the SBS before
reformatting and installing SBS 2003 again. The second and third groups
are legitimate and correct......I therefore believe there is some
garbage but this will have no effect on my problem.... Am I correct ?
Further investigation has provided me with more information...
I have tried installing user profile hive cleanup utility from
microsoft.com/downloads, however this has no effect at all.
I have installed "Process Explorer" from www.sysinternals.com. This
utility has confirmed a number of things..
>From a clean reboot of the member server each morning, users can login
/and out all day without any problems, using Process Explorer at the
end of each day, I have confirmed the files are not in use each
evening. The following morning before anyone logs in, using Process
Explorer reveals that both NTUSER.DAT and NTUSER.DAT.LOG for all users
are in use by the process SYSTEM. These users are not logged on...
I have checked the events log and can not see anything strange
happening during the night...I have even removed the Anti Virus
software and stopped all backups, all of which does not help my problem
Any more suggestions would be appreciated.
Brandy Nee [MSFT]
Thank you for posting back!
I am sorry to hear that the information in my previous reply did not work.
It seems that your issue is quite complicated. I have performed research on
your issue again, and I notice the following information. Please see:
1. In your reply, you mentioned "all users were created through the Active
Directory and setup individually". From this information, I understand that
you did not use the Add User Wizard to create user account. In this case, I
suggest you that run the Change User Permissions Wizard to apply template.
You can perform the test on one problematic client account. The Change User
Permissions Wizard locates at: Server Management\Standard Management\Users.
On the right pane, click Change User Permissions. Grant User Template for
one of the problematic client accounts and check whether the issue occurs
again.
2. If the issue persists, please run the Add User Wizard to create a new
user account, and use the user account to log in domain, will the issue
persists?
Add User Wizard locates at Server Management\Standard Management\Users. On
the right pane, click Add a User to run the Add User Wizard.
Please take your time to perform the steps to isolate the issue. I am
Best regards,
Brandy Nee
--------------------
>From: ste...@langley-park.co.uk
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: Login - Using Tempoary Profile Problem
>Date: 25 Sep 2005 05:07:20 -0700
>Organization: http://groups.google.com
>Lines: 64
>Message-ID: <1127650040....@z14g2000cwz.googlegroups.com>
>References: <dfv2i5$duj$1$8302...@news.demon.co.uk>
> <WD9FVq0t...@TK2MSFTNGXA01.phx.gbl>
>NNTP-Posting-Host: 83.104.61.223
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1127650046 29058 127.0.0.1 (25 Sep 2005
12:07:26 GMT)
>X-Complaints-To: groups...@google.com
>NNTP-Posting-Date: Sun, 25 Sep 2005 12:07:26 +0000 (UTC)
>In-Reply-To: <WD9FVq0t...@TK2MSFTNGXA01.phx.gbl>
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
.NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>Complaints-To: groups...@google.com
>Injection-Info: z14g2000cwz.googlegroups.com; posting-host=83.104.61.223;
> posting-account=DgHnRw0AAADNgHy75hJUd9i0gaJtt9xA
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.gigan
ews.com!postnews.google.com!z14g2000cwz.googlegroups.com!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:156247
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Stephen
The users were originally created with the wizard (I class this as
manually, sorry for the confusion)
The other point is the problem also occurs with the domain
administrator account...the administrator account for logging directly
onto the member server does not suffer from the problem
Best Regards
Stephen
Brandy Nee [MSFT]
Thank you for posting back!
1. Please be more clarify, where do clients login and then got the issue:
Terminal Server or Client workstations?
2. You mentioned: "thin net clients", I need to know how you configure the
thin clients, is it hardware or software thin clients? What software did
you install on the client workstations?
3. Can you perform a test on one of the problematic client, please? If you
install thin client software on the workstation, please delete it. Then Go
to Start -> Run "mstsc" (without quotation marks), can you RDP to the other
computer desktops?
If the issue persists, please help to gather the userenv log for us to
analysis. Please refer to the following KB article for detail steps:
221833 How to enable user environment debug logging in retail builds of
Windows
http://support.microsoft.com/?id=221833
Thanks a lot for your time and cooperation and am looking forward to
hearing from you!
Best regards,
Brandy Nee
--------------------
>From: "Stephen" <ste...@langley-park.co.uk>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: Login - Using Tempoary Profile Problem
>Date: 28 Sep 2005 02:01:16 -0700
>Organization: http://groups.google.com
>Lines: 13
>Message-ID: <1127898076.4...@f14g2000cwb.googlegroups.com>
>References: <dfv2i5$duj$1$8302...@news.demon.co.uk>
> <1127650040....@z14g2000cwz.googlegroups.com>
> <SRkiJEpw...@TK2MSFTNGXA01.phx.gbl>
>NNTP-Posting-Host: 83.104.61.223
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1127898081 19017 127.0.0.1 (28 Sep 2005
09:01:21 GMT)
>X-Complaints-To: groups...@google.com
>NNTP-Posting-Date: Wed, 28 Sep 2005 09:01:21 +0000 (UTC)
>In-Reply-To: <SRkiJEpw...@TK2MSFTNGXA01.phx.gbl>
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
.NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>Complaints-To: groups...@google.com
>Injection-Info: f14g2000cwb.googlegroups.com; posting-host=83.104.61.223;
> posting-account=DgHnRw0AAADNgHy75hJUd9i0gaJtt9xA
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!postnews.google.com!f1
4g2000cwb.googlegroups.com!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:157066
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Stephen
The problem occurs from both Winterm thinnet clients and also Remote
Desktop Connections...
Regarding software, the winterm comes complete with it's own software
(a version of windows i think) and remote desktop connections are made
through RD on Windows XP
I think we are going down the wrong track, from what i can see when
users login / out during the course of each day, the respective NTUSER
files are being opened and released ok...This can be seen from "Process
Explorer" from www.sysinternals.com.
The problem as i see it is, during each weekday (not weekend) night
something happens on the network, which results in these files being
opened....This can also be seen by the date stamp on each file....I
have monitored these dates over the week, and found they don't occur
each day at the same time, but seem to get later as the week
progresses......Mon 3.32, Tues 3.54, Weds 4.16 and Thurs 4.37....
Since we are also connectd to our corparate network, i have asked
corperate IT to advise on processes they may have running during the
evening which may / maynot have an effect on our servers....As of yet i
have not received any replies....
Process Explorer indicates teh files are in use by the SYSTEM process,
is there any way in which the links can be followed through the SYSTEM
Process tree.., ultimatly i would like to know, what program accesed
the files, and at what time
I am planning on performing other tests next week, one of which is to
disconnect over servers from the corporate network overnight, and also
reboot late one evening, before the files are opened...
At this stage i don't think i will start the enviroment debugging...
Brandy Nee [MSFT]
Thank you for posting back!
I went back all your replies and I noticed the following information:
In your original post, you mentioned "users are now experiencing login
problems", I need to confirm with you which computer users log in, Terminal
Server or SBS Server?
I still suggest you that gather the userenv log for us to analysis. It is
just a simple step to enable it, and it is very important for us to
understand what is going on in the background as a user logs on. Please
refer to the following KB article for detail steps:
221833 How to enable user environment debug logging in retail builds of
Windows
http://support.microsoft.com/?id=221833
Interpreting Userenv log files
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Opera
tions/ccd7b430-99a5-40fd-b68a-6c1979e565a2.mspx
Please take your time to perform the steps above and collect the
information for us to troubleshoot your issue. If anything is unclear,
please feel free to let me know. I am looking forward to hearing from you!
Best regards,
Brandy Nee
>Date: 30 Sep 2005 02:22:14 -0700
>Organization: http://groups.google.com
>Lines: 40
>Message-ID: <1128072134....@o13g2000cwo.googlegroups.com>
>References: <dfv2i5$duj$1$8302...@news.demon.co.uk>
> <1127898076.4...@f14g2000cwb.googlegroups.com>
> <3WVvXrBx...@TK2MSFTNGXA01.phx.gbl>
>NNTP-Posting-Host: 83.104.61.223
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1128072139 14926 127.0.0.1 (30 Sep 2005
09:22:19 GMT)
>X-Complaints-To: groups...@google.com
>NNTP-Posting-Date: Fri, 30 Sep 2005 09:22:19 +0000 (UTC)
>In-Reply-To: <3WVvXrBx...@TK2MSFTNGXA01.phx.gbl>
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
.NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>Complaints-To: groups...@google.com
>Injection-Info: o13g2000cwo.googlegroups.com; posting-host=83.104.61.223;
> posting-account=DgHnRw0AAADNgHy75hJUd9i0gaJtt9xA
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!postnews.google.com!o1
3g2000cwo.googlegroups.com!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:157698
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Stephen
AD and GP are both setup on the SBS, which is the DC and also Licence
Server
Users login to the 2003 Member Server
I have not yet had chnace to trial my thoughts...In the meantime I was
going to setup the user enviroment log as requested....
Changes to the Registary are straight forward, however part of the
setup requires using a checked version of the file Userenv.dll, which i
am uanble to find....
My reasearch suggests i need to obtain this directly from Microsoft
??...Any Ideas ??
Brandy Nee [MSFT]
Thank you for posting back!
Please note, only for Microsoft Windows NT 4.0, it is functionality
required a checked (debug) build of the Userenv.dll. For client workstation
(Windows 2K or Windows XP), please follow KB 221833 to enable the user
environment debug logging and send the log file to me for analysis.
By the way, please help to gather some more information,
1. When did the issue occur? Did this issue occur before?
2. Did you follow these two documents to add Terminal Server into SBS 2K3
domain?
Adding a Server to Your Existing Small Business Server 2000 Network
http://www.microsoft.com/technet/prodtechnol/sbs/2000/maintain/addsrvrs.mspx
Deploying Windows Server 2003 Terminal Server to Host User Desktops
http://www.microsoft.com/technet/prodtechnol/sbs/2003/deploy/adstrmsr.mspx
Please take your time to perform the steps above and collect the
information for us to troubleshoot your issue. I am looking forward to
hearing from you!
Best regards,
Brandy Nee
>Date: 4 Oct 2005 05:11:52 -0700
>Organization: http://groups.google.com
>Lines: 21
>Message-ID: <1128427912.3...@g43g2000cwa.googlegroups.com>
>References: <dfv2i5$duj$1$8302...@news.demon.co.uk>
> <1128072134....@o13g2000cwo.googlegroups.com>
> <PE2ToBBy...@TK2MSFTNGXA01.phx.gbl>
>NNTP-Posting-Host: 83.104.61.223
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1128427917 22040 127.0.0.1 (4 Oct 2005
12:11:57 GMT)
>X-Complaints-To: groups...@google.com
>NNTP-Posting-Date: Tue, 4 Oct 2005 12:11:57 +0000 (UTC)
>In-Reply-To: <PE2ToBBy...@TK2MSFTNGXA01.phx.gbl>
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
.NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>Complaints-To: groups...@google.com
>Injection-Info: g43g2000cwa.googlegroups.com; posting-host=83.104.61.223;
> posting-account=DgHnRw0AAADNgHy75hJUd9i0gaJtt9xA
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!postnews.google.com!g4
3g2000cwa.googlegroups.com!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:158549
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Stephen
I have setup the user Enviroment log as requested...I will email you the
logfile for your review tomorrow
Thank you & Best Regards
Stephen
Brandy Nee [MSFT]
Thank you for posting back!
Please take your time to gather the userenv log file and with the two
questions in my last reply. I am always standing by and waiting for your
reply!
Best regards,
Brandy Nee
--------------------
>Thread-Topic: Login - Using Tempoary Profile Problem
>thread-index: AcXKaHRX5XANms4NQFiUBeBgXzcT3w==
>X-WBNR-Posting-Host: 213.131.100.29
>From: "=?Utf-8?B?U3RlcGhlbg==?=" <Ste...@discussions.microsoft.com>
>References: <dfv2i5$duj$1$8302...@news.demon.co.uk>
<WD9FVq0t...@TK2MSFTNGXA01.phx.gbl>
<1127650040....@z14g2000cwz.googlegroups.com>
<SRkiJEpw...@TK2MSFTNGXA01.phx.gbl>
<1127898076.4...@f14g2000cwb.googlegroups.com>
<3WVvXrBx...@TK2MSFTNGXA01.phx.gbl>
<1128072134....@o13g2000cwo.googlegroups.com>
<PE2ToBBy...@TK2MSFTNGXA01.phx.gbl>
<1128427912.3...@g43g2000cwa.googlegroups.com>
<2l#ZwtYyF...@TK2MSFTNGXA01.phx.gbl>
>Subject: Re: Login - Using Tempoary Profile Problem
>Date: Thu, 6 Oct 2005 04:24:02 -0700
>Lines: 128
>Message-ID: <63DAF0F4-A8AD-4437...@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:159306
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Brandy Nee [MSFT]
Thank you for posting back!
From the latest Userenv.log file, I found the following information:
USERENV(28c.2a4) 09:29:25:357 RestoreUserProfile: User is a Admin
USERENV(28c.2a4) 09:29:25:357 IsCentralProfileReachable: Entering
USERENV(28c.2a4) 09:29:25:357 IsCentralProfileReachable: Null path.
Leaving
USERENV(28c.2a4) 09:29:25:357 RestoreUserProfile: Profile path = <>
USERENV(28c.2a4) 09:29:25:357 ExtractProfileFromBackup: A profile already
exists
USERENV(28c.2a4) 09:29:25:357 PatchNewProfileIfRequred: A profile already
exists with the current sid, exitting
USERENV(28c.2a4) 09:29:25:357 CreateLocalProfileKey: user
<S-1-5-21-3834096281-4252308924-621211093-500> is local, not setting
preference key
USERENV(28c.2a4) 09:29:25:357 GetExistingLocalProfileImage: Found entry in
profile list for existing local profile
¡¡
USERENV(28c.2a4) 09:29:25:373 lpProfile->lpRoamingProfile = <>
USERENV(28c.2a4) 09:29:25:373 lpProfile->lpLocalProfile = <C:\Documents and
Settings\Administrator>
USERENV(28c.2a4) 09:29:25:373 lpProfile->dwInternalFlags = 0x100
USERENV(28c.2a4) 09:29:25:373 RestoreUserProfile: Leaving.
USERENV(28c.2a4) 09:29:25:373 UpgradeProfile: Entering
USERENV(28c.2a4) 09:29:25:373 UpgradeProfile: Build numbers match
USERENV(28c.2a4) 09:29:25:373 UpgradeProfile: Leaving Successfully
According to the log, the user (Administrator)'s local profile was
correctly loaded. Also, administrator is using local profile instead of a
temple profile.
So I need your help to gather following error information again:
a. What exact issue you current met now? In your Sunday reply, you
mentioned "After reviewing the attached files, I would like to bring your
attention to the following records....." is a different story from your
original issue "Windows cannot load the locally stored profile. Possible
causes of this error include insufficient security rights or a corrupt
local profile. If this problem persists, contact your network
administrator".
So I need to know what latest issue you meet now. Please capture a screen
shot for the current error message, we need to know what exact your issue
scope it is.
b. Userenv.log. Please ensure you gather the Userenv.log with the
problematic account whose profile cannot be loaded.
c. Event Log. When the issue occurs, on the problematic client workstation,
run "eventvwr" (without quotation marks), check whether there is any error.
If yes, double click it, click the Copy button and paste the full content
to the Newsgroup for further comparison.
d. Capture a screen shot for the issue.
Please take your time to perform the steps above and collect the
information for us to troubleshoot your issue. I am looking forward to
hearing from you!
Best regards,
Stephen
Please see my replies below.....
You are correct, the above info relates to the administrator logging
onto the member server and not the domain...This is not the problem,
and has never been the problem.....
>
> So I need your help to gather following error information again:
>
> a. What exact issue you current met now? In your Sunday reply, you
> mentioned "After reviewing the attached files, I would like to bring your
> attention to the following records....." is a different story from your
> original issue "Windows cannot load the locally stored profile. Possible
> causes of this error include insufficient security rights or a corrupt
> local profile. If this problem persists, contact your network
> administrator".
>
> So I need to know what latest issue you meet now. Please capture a screen
> shot for the current error message, we need to know what exact your issue
> scope it is.
>
I thnk you are misunderstanding me......
a) The issue/problem is as per my very 1st email, nothing has
changed...My understanding of the reason is...... the file
NTUSER.DAT.LOG is somehow being opened / locked by another process,
this results in the problem occuring when ALL users login, I was
brining to your attention that the date and time stamp on the file was
exactly the same as the entery in the UserEnv.Log file..This happened
when no users were logged onto the system...It may be a coincidence,
however i have more data which shows the same story...I will email you
directly
> b. Userenv.log. Please ensure you gather the Userenv.log with the
> problematic account whose profile cannot be loaded.
b) I don't think the Userenv.log files previously emailed to you
contain teh problem, I now have this information and will email you
directly
>
> c. Event Log. When the issue occurs, on the problematic client workstation,
> run "eventvwr" (without quotation marks), check whether there is any error.
> If yes, double click it, click the Copy button and paste the full content
> to the Newsgroup for further comparison.
c) I also have ths information for you
>
> d. Capture a screen shot for the issue.
d) I also have this info
Brandy Nee [MSFT]
I have read through all the log files you sent me and I found the following
error information:
USERENV(294.1f8) 06:43:03:840 GetExistingLocalProfileImage: Expanded local
profile image filename = <C:\Documents and Settings\srl>
USERENV(294.1f8) 06:43:03:840 GetExistingLocalProfileImage: No local
mandatory profile. Error = 2
USERENV(294.1f8) 06:43:03:840 GetExistingLocalProfileImage: Found local
profile image file ok <C:\Documents and Settings\srl\ntuser.dat>
USERENV(294.1f8) 06:43:03:840 GetExistingLocalProfileImage: Failed to
query low profile unload time with error 2
USERENV(294.1f8) 06:43:03:840 Local Existing Profile Image is reachable
USERENV(294.1f8) 06:43:03:840 Local profile name is <C:\Documents and
Settings\srl>
USERENV(294.1f8) 06:43:03:840 RestoreUserProfile: No central profile.
Attempting to load local profile.
USERENV(294.1f8) 06:43:03:840 MyRegLoadKey: Failed to load subkey
<S-1-5-21-3744492446-265361333-1686619757-1134>, error =32
USERENV(294.1f8) 06:43:03:840 MyRegLoadKey: Returning 00000020
USERENV(294.1f8) 06:43:03:840 RestoreUserProfile: MyRegLoadKey returned
FALSE.
USERENV(294.1f8) 06:43:03:840 ReportError: Impersonating user.
USERENV(294.1f8) 06:43:03:855 ReportError: Logging Error <Windows cannot
load the locally stored profile. Possible causes of this error include
insufficient security rights or a corrupt local profile. If this problem
persists, contact your network administrator.
DETAIL - The process cannot access the file because it is being used by
another process.
>
The problem profile belongs to the account srl. When attempting to load
respective local profile, the system returns error 32 (error = 32). I
suggest installing Uphclean on the machine to ensure no other applications
will hook the user's profile. Then, let's verify the result. Please see:
User Profile Hive Cleanup Service
http://www.microsoft.com/downloads/details.aspx?FamilyID=1b286e6d-8912-4e18-
b570-42470e2f3582&displaylang=en
Hope this information. Please take your time to perform the steps above. If
anything is unclear, please feel free to let me know. I am looking forward
to hearing from you!
Best regards,
Brandy Nee
--------------------
>From: "Stephen" <ste...@langley-park.co.uk>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: Login - Using Tempoary Profile Problem
>Date: 11 Oct 2005 12:27:27 -0700
>Organization: http://groups.google.com
>Lines: 95
>Message-ID: <1129058847....@g44g2000cwa.googlegroups.com>
>References: <dfv2i5$duj$1$8302...@news.demon.co.uk>
> <RLQD$SYzFH...@TK2MSFTNGXA02.phx.gbl>
>NNTP-Posting-Host: 83.104.61.223
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>Content-Transfer-Encoding: quoted-printable
>X-Trace: posting.google.com 1129058854 15796 127.0.0.1 (11 Oct 2005
19:27:34 GMT)
>X-Complaints-To: groups...@google.com
>NNTP-Posting-Date: Tue, 11 Oct 2005 19:27:34 +0000 (UTC)
>In-Reply-To: <RLQD$SYzFH...@TK2MSFTNGXA02.phx.gbl>
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
.NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>Complaints-To: groups...@google.com
>Injection-Info: g44g2000cwa.googlegroups.com; posting-host=83.104.61.223;
> posting-account=DgHnRw0AAADNgHy75hJUd9i0gaJtt9xA
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.
sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.com!
postnews.google.com!g44g2000cwa.googlegroups.com!not-for-mail
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:212045
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Stephen
You are correct, srl was the login used and also logged in the
information i supplied, however it occurs in exactly the same manner
for ALL users
As the Process Explorer sceen dumps show, the NTUSER.DAT.LOG file is in
use, therefore you would expect to have a login problem....The Event
log also shows exactly the same, NTUSER.DAT.LOG file in use.
Regarding User Profile Hive Cleanup Service, i found this sometime ago
and thought is may help solve the problem.....This service is already
installed. This is indicated in the Processer Explorer Dump.txt files,
section pasted below
svchost.exe 1628 Generic Host Process for Win32 Serviceicrosoft
Corporation
svchost.exe 1712 Generic Host Process for Win32 ServicesMicrosoft
Corporation
uphclean.exe 1824 User Profile Hive Cleanup Service Microsoft
Corporation
svchost.exe 456 Generic Host Process for Win32 Services Microsoft
Corporation
lsass.exe 708 LSA Shell Microsoft Corporation
Best Regards
Stephen
Brandy Nee [MSFT]
Thank you for posting back!
I understand that you have installed User Profile Hive Cleanup Service on
client workstation, may I confirm with you whether it works now? If not,
what is the latest results?
Best regards,
Brandy Nee
--------------------
>Thread-Topic: Login - Using Tempoary Profile Problem
>thread-index: AcXPTxWsyCfm/vfFQjiWSoDyFj9pEQ==
>X-WBNR-Posting-Host: 83.104.61.223
>From: "=?Utf-8?B?U3RlcGhlbg==?=" <Ste...@discussions.microsoft.com>
>References: <dfv2i5$duj$1$8302...@news.demon.co.uk>
<RLQD$SYzFH...@TK2MSFTNGXA02.phx.gbl>
<1129058847....@g44g2000cwa.googlegroups.com>
<RSLZncx...@TK2MSFTNGXA02.phx.gbl>
>Subject: Re: Login - Using Tempoary Profile Problem
>Date: Wed, 12 Oct 2005 10:05:02 -0700
>Lines: 11
>Message-ID: <4F69C86F-951D-4ABB...@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:212314
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Hi Brandy
>
>Please see the last line of your analysis
>>
>> DETAIL - The process cannot access the file because it is being used by
>> another process.
>
>This backups my thoughts and findings...Thie file is IN USE, i belive by
>process C:\WINDOWS\system32\wbem\wmiprvse.exe
>
>Stephen
>
Stephen
As per me previous message, this service was installed sometime ago to
try and resolve the problem, which it didn't as the problem still
exists...
What next ?
Thank you & Best Regards
Stephen
Brandy Nee [MSFT]
Thank you for posting back!
I have read through whole of the post again, and I have made a summary for
it.
=====================
Summary:
All domain users log in TS in SBS 2K3 Domain face following error message.
Error message: "Windows cannot load the locally stored profile. Possible
causes of this error include insufficient security rights or a corrupt
local profile. If this problem persists, contact your network
administrator."
Event IDs: 1058, 1502, 1515 and 1511.
======================
What we have tried:
1> KB 811151 and KB 236621.
2> Check whether users' ProfileImagePath registries are duplicated with
other users' ProfileImagePath.
3> Disable all third party software.
4> Recreate a new user.
5> Enable Userenv log and noticed that the problem profile belongs to the
account srl.
6> Install User Profile Hive Cleanup Service to check whether profile is
hooked by other process.
=======================
After reviewing the whole history of the post and researching, I suggest
that we try the following steps to check whether there is any 3rd party
software interference and isolate whether this is a TS issue.
1. If you log on the Terminal Server console, will this issue occur?
2. Please start the Terminal Server in Safe Mode, can this issue be
reproduced?
3. Start the Terminal Server in Safe Mode, will this issue be reproduced if
you log on locally?
Please take your time to perform these three steps and let me know the
results.
I am greatly appreciated your time and cooperation, and am looking forward
Stephen
Please see answers below
> 1. If you log on the Terminal Server console, will this issue occur?
Yesy - I have seen the occur with the administrator account (other useres
not checked) from the console
> 2. Please start the Terminal Server in Safe Mode, can this issue be
> reproduced?
With the TS in safe mode (with networking enabled) ALL users are unable to
logon (to the domain) from the Thin Net Clients
> 3. Start the Terminal Server in Safe Mode, will this issue be reproduced if
> you log on locally?
While in safe mode, with networking enabled, It is possible to logon locally
and so far I have not experianced the problem
Let me know your thoughts
Brandy Nee [MSFT]
Thank you for posting back!
From your reply, you mentioned users can log on Terminal Server locally in
Safe Mode, let's perform a clean boot on the TS To see whether there is any
third party interference. Please see:
a. Click Start->Run, type "MSCONFIG" (without the quotation marks) and
click OK.
b. In the System Configuration Utility (MSConfig) window, click the
"Startup" tab.
c. Click to clear all the check marks from the list box under "Startup".
d. Click the Services tab, check the "Hide all Microsoft Services" box and
then click the "Disable All" button to disable the non-Microsoft services.
e. Click OK to close the MSConfig window. Click Yes when you are asked to
restart your computer in order to enable the changes.
f. After restarting, please check whether this issue still exists.
This issue seems to be getting complicated, so we suggest that contact
Microsoft Product Support Services via telephone for better solution and a
dedicated Support Professional can assist with your request. Please be
advised that contacting phone support will be a charged call.
To obtain the phone numbers for specific technology request please take a
look at the web site listed below.
http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS
If you are outside the US please see http://support.microsoft.com for
regional support phone numbers.
I am sorry for any inconvenience brought up to you, and am greatly
appreciated your time and understanding!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Login - Using Tempoary Profile Problem
>thread-index: AcXUhg3PaPg6Gx2XRPK2MDEEo/aVgQ==
>X-WBNR-Posting-Host: 213.131.100.29
>From: "=?Utf-8?B?U3RlcGhlbg==?=" <Ste...@discussions.microsoft.com>
>References: <dfv2i5$duj$1$8302...@news.demon.co.uk>
<RLQD$SYzFH...@TK2MSFTNGXA02.phx.gbl>
<1129058847....@g44g2000cwa.googlegroups.com>
<RSLZncx...@TK2MSFTNGXA02.phx.gbl>
<4F69C86F-951D-4ABB...@microsoft.com>
<AKJnIe#zFHA...@TK2MSFTNGXA01.phx.gbl>
<1129204258.3...@g49g2000cwa.googlegroups.com>
<N4vKkvK0...@TK2MSFTNGXA01.phx.gbl>
>Subject: Re: Login - Using Tempoary Profile Problem
>Date: Wed, 19 Oct 2005 01:21:07 -0700
>Lines: 25
>Message-ID: <1EA95ABE-1EE8-4FDB...@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162604
>X-Tomcat-NG: microsoft.public.windows.server.sbs