RE: Problem Logging in With a Particular User's Account
- From: v-branee@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]")
- Date: Mon, 23 Jan 2006 05:46:04 GMT
Hello Chris,
Thank you for posting to the SBS Newsgroup.
I am sorry for the delayed response due to the weekend. Please understand
that the newsgroups are staffed weekdays by Microsoft Support professionals
to answer your systems and applications questions. Your understanding is
greatly appreciated!
I understand that you encounter Roaming Profile issue when trying to log in
domain. If I have misunderstood your issue, please let me know.
Based on my experience, this problem may occur if you use NetBIOS over
TCP/IP (NetBT) to connect to your network, and you have a roaming user
profile. You may need download the hotfix 831651, please refer to the
following article
831651 "The roaming profile cannot be found" error message when you log on
to
http://support.microsoft.com/?id=831651
============
If the issue persists after you apply the Hotfix 831651, please help to
gather following information for further research:
[Note]: Based on my experience, there are various factors can cause this
issue and we need time to troubleshoot this issue. I greatly appreciate
your understanding and co-operation!
1. What is the "particular account"? Is it a domain administrator account
or just a normal user account?
2. Does this issue occur to all domain clients or only certain clients?
3. If you use the "particular account" to log on another client
workstation, will this issue occur?
4. When did the issue occur? Did you make any changes on the SBS Server
recently? For example, move the user roaming profile?
5. Where did you find event IDs 40960, 40961, 1521 and 1511? On the SBS
Server or the client workstation?
6. You mentioned that "When the user logs in, he gets a message saying,
that the roaming profile could not be found, so it was logging him in using
a local profile. Then, it cannot find the profile, because its not on that
machine, so it presents a message saying it is logging in with a temporary
profile." Please type the error messages word by word to the Newsgroup for
accurate research.
7. Please refer to the KB 221833 to gather the Userenv.log.
221833 How to enable user environment debug logging in retail builds of
Windows
http://support.microsoft.com/default.aspx?scid=kb;EN-US;221833
You can zip the file as an attachment and send it to my mailbox:
v-branee@xxxxxxxxxxxxxx
8. If you create a new user account, will this issue occur?
Please take your time to perform the steps. I am looking forward to hearing
from you!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>From: "Chris Guimbellot" <cguimbellot@xxxxxxxxxxxxxxxxxxxxxxxxxx>
>Subject: Problem Logging in With a Particular User's Account
>Date: Fri, 20 Jan 2006 12:28:58 -0500
>Lines: 73
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>Message-ID: <O9K1AceHGHA.1728@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: mail.bookroomsnow.com 71.16.180.114
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:238242
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Hello,
>
>SBS2003, Windows XP Client.
>
>I have a computer that I am having problems with when logging in using a
>particular account. When the user logs in, he gets a message saying, that
>the roaming profile could not be found, so it was logging him in using a
>local profile. Then, it cannot find the profile, because its not on that
>machine, so it presents a message saying it is logging in with a temporary
>profile.
>
>I had these problems yesterday, and couldn't figure it out, so I
reformatted
>and reinstalled the OS. After that, I am still having the problem. No I
>don't know what to do.
>
>I checked the event viewer and got some entries that really scared me.
Here
>they are:
>
>IN THE SYSTEM LOG
>
>EventID: 40960
>Source: LSASRV
>Category: SPNEGO (Negotiator)
>Description:
>The Security System detected an attempted downgrade attack for server
>cifs/HI-SERVER. The failure code from authentication protocol Kerberos
was
>"There are currently no logon servers available to service the logon
>request.
> (0xc000005e)".
>
>EventID: 40961
>Source: LSASRV
>Category: SPNEGO (Negotiator)
>Description:
>The Security System could not establish a secured connection with the
server
>cifs/HI-SERVER. No authentication protocol was available.
>
>IN THE APPLICATION LOG
>
>EventID: 1521
>Source: Userenv
>Category: None
>Description:
>Windows cannot locate the server copy of your roaming profile and is
>attempting to log you on with your local profile. Changes to the profile
>will not be copied to the server when you logoff. Possible causes of this
>error include network problems or insufficient security rights. If this
>problem persists, contact your network administrator.
>
> DETAIL - The system detected a possible attempt to compromise security.
>Please ensure that you can contact the server that authenticated you.
>
>EventID: 1511
>Source: Userenv
>Category: None
>Description:
>Windows cannot find the local profile and is logging you on with a
temporary
>profile. Changes you make to this profile will be lost when you log off.
>
>
>I did some research and made sure the "Change primary DNS suffix when
domain
>membership changes" box under Computer Name Changes was checked. Short of
>that, I am pretty clueless. I know this must be some sort of DNS problem,
>but it only seems to happen when that specific user logs in. Also, I know
>nothing about DNS, so please be gentle. If I need to clarify, please let
me
>know.
>
>Thanks in advance,
>
>Chris
>
>
>
>
.
- References:
- Problem Logging in With a Particular User's Account
- From: Chris Guimbellot
- Problem Logging in With a Particular User's Account
- Prev by Date: RE: Restoring Active Directory
- Next by Date: Re: OK. GOOD NEWS SO FAR if you dont count companyweb
- Previous by thread: Problem Logging in With a Particular User's Account
- Next by thread: Re: One NIC card or Two
- Index(es):
Relevant Pages
|
