11

I created a Windows Domain account that works on MYDOMAIN. All computers attached to MYDOMAIN can use the credentials I have created for log on except for one.

On PROBLEMSERVER01 when I try to log in with MYDOMAIN \ myuser I get the following error (other accounts previously created are working):

User Profile Service service failed the sign-in.

User Profile cannot be loaded.

OK

When I log on to the server and check C:\Users I do not see a folder associated with the account I created. When I check each registry's S-1-5 folders under the the ProfileImagePath entry there is no entry for my user. http://support.microsoft.com/kb/947215

If I try to create the account locally on the machine it appears to work upon creation (no errors there), but if I try to log in I get the same message and no entries are added to the registry.

User Profile Service service failed the sign-in.

User Profile cannot be loaded.

OK

Event log data after trying to sign in:

User Logoff Notification for Customer Experience Improvement Program

User Logon Notification for Customer Experience Improvement Program

The Windows Error Reporting Service service entered the stopped state

The Windows Error Reporting Service service entered the running state

A LDAP connection with domain controller DC01.MYDOMAIN.localhost for domain MYDOMAIN is established

I have also tried copying the C:\Users\Default folder from a known good server to this one with no change in results.

  • @RyanRies, ProfileList is the parent directory that contains the S-15-XX... folders. Inside of these folders contains ProfileImagePath Ex. i.imgur.com/QZ4SE6p.png – 에이바 Dec 9 '14 at 20:25
  • 1
    Does either the username or the password you've created, with the issues described, have any characters which would only be available in some localisations which are included on the rest of the server builds but not the affected? This is a long-shot but I can't think of much else which may cause what you describe – BE77Y Dec 15 '14 at 14:57
  • 1
    I think this MUST be something with the C:\Users\Default folder. Try to copy it again from an blank winServer 2012 System and do a Filesize check if the Byte-number really is the same. And also check if the Filerights are correct. particularly for you C:\Users\Default folder! – frupfrup Dec 16 '14 at 14:59
  • 2
    Sysinternals procmon.exe has an option for boot logging. You might be able to use it to catch the problem as it happens during the login process. – JasonAzze Dec 19 '14 at 15:58
  • 1
    What does a "GPRESULT /R" on this sever give you for the user parameters ? This is maybe not related but I once had a similar issue because two computer had the same name in my domain.... – NooJ Dec 22 '14 at 13:31
1

If you are using Server 2012 R2 with April 2014 update (KB2919355) and also seeing Event ID 1500 in Application log ("Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.") as well as Event ID 1509 ("Windows cannot copy file \?\UNC\contoso.com\Users\Profiles\User1.V4\AppData\Roaming\ApplicationName\Program Settings\0000.ex to location \?\C:\Users\User1\AppData\Roaming\ApplicationName\Program Settings\0000.ex. This error may be caused by network problems or insufficient security rights.") then it is known issue with available coldfix from Microsoft:
https://support.microsoft.com/en-us/kb/2985344

0

The first thing to try in a situation like this is to remove the computer/server from the domain.

Reboot computer/server.

Delete the computer account in the domain.

Add the computer/server back to the domain again.

Reboot the computer/server.

Login and be happy.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.