Re: Problem Logging in With a Particular User's Account

Thanks for the response. I am sorry it has taken so long for me to to get
back to the board, but I have been out of town.

Regarding the message, I read the article you referred to and had alredy
had the most recent patched applied to the computer. That said, the only
other thing I have a question about is how can I figure out if I use NetBIOS
over
TCP/IP (NetBT) to connect to the network? I cant seem to find that anywhere.
Also, just to note, the computer was configured just like every other one on
my network, but I have had no problems with the others. Any ideas would be
appreciated. Thanks,

Chris

""Brandy Nee [MSFT]"" <v-branee@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:d6kHOB%23HGHA.3680@xxxxxxxxxxxxxxxxxxxxxxxx
Hello Chris,

Thank you for posting to the SBS Newsgroup.

I am sorry for the delayed response due to the weekend. Please understand
that the newsgroups are staffed weekdays by Microsoft Support
professionals
to answer your systems and applications questions. Your understanding is
greatly appreciated!

I understand that you encounter Roaming Profile issue when trying to log
in
domain. If I have misunderstood your issue, please let me know.

Based on my experience, this problem may occur if you use NetBIOS over
TCP/IP (NetBT) to connect to your network, and you have a roaming user
profile. You may need download the hotfix 831651, please refer to the
following article

831651 "The roaming profile cannot be found" error message when you log on
to
http://support.microsoft.com/?id=831651

============

If the issue persists after you apply the Hotfix 831651, please help to
gather following information for further research:

[Note]: Based on my experience, there are various factors can cause this
issue and we need time to troubleshoot this issue. I greatly appreciate
your understanding and co-operation!

1. What is the "particular account"? Is it a domain administrator account
or just a normal user account?

2. Does this issue occur to all domain clients or only certain clients?

3. If you use the "particular account" to log on another client
workstation, will this issue occur?

4. When did the issue occur? Did you make any changes on the SBS Server
recently? For example, move the user roaming profile?

5. Where did you find event IDs 40960, 40961, 1521 and 1511? On the SBS
Server or the client workstation?

6. You mentioned that "When the user logs in, he gets a message saying,
that the roaming profile could not be found, so it was logging him in
using
a local profile. Then, it cannot find the profile, because its not on that
machine, so it presents a message saying it is logging in with a temporary
profile." Please type the error messages word by word to the Newsgroup for
accurate research.

7. Please refer to the KB 221833 to gather the Userenv.log.

221833 How to enable user environment debug logging in retail builds of
Windows
http://support.microsoft.com/default.aspx?scid=kb;EN-US;221833

You can zip the file as an attachment and send it to my mailbox:
v-branee@xxxxxxxxxxxxxx

8. If you create a new user account, will this issue occur?

Please take your time to perform the steps. I am looking forward to
hearing
from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.



--------------------
From: "Chris Guimbellot" <cguimbellot@xxxxxxxxxxxxxxxxxxxxxxxxxx>
Subject: Problem Logging in With a Particular User's Account
Date: Fri, 20 Jan 2006 12:28:58 -0500
Lines: 73
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
X-RFC2646: Format=Flowed; Original
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
Message-ID: <O9K1AceHGHA.1728@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: mail.bookroomsnow.com 71.16.180.114
Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:238242
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hello,

SBS2003, Windows XP Client.

I have a computer that I am having problems with when logging in using a
particular account. When the user logs in, he gets a message saying, that
the roaming profile could not be found, so it was logging him in using a
local profile. Then, it cannot find the profile, because its not on that
machine, so it presents a message saying it is logging in with a temporary
profile.

I had these problems yesterday, and couldn't figure it out, so I
reformatted
and reinstalled the OS. After that, I am still having the problem. No I
don't know what to do.

I checked the event viewer and got some entries that really scared me.
Here
they are:

IN THE SYSTEM LOG

EventID: 40960
Source: LSASRV
Category: SPNEGO (Negotiator)
Description:
The Security System detected an attempted downgrade attack for server
cifs/HI-SERVER. The failure code from authentication protocol Kerberos
was
"There are currently no logon servers available to service the logon
request.
(0xc000005e)".

EventID: 40961
Source: LSASRV
Category: SPNEGO (Negotiator)
Description:
The Security System could not establish a secured connection with the
server
cifs/HI-SERVER. No authentication protocol was available.

IN THE APPLICATION LOG

EventID: 1521
Source: Userenv
Category: None
Description:
Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the profile
will not be copied to the server when you logoff. Possible causes of this
error include network problems or insufficient security rights. If this
problem persists, contact your network administrator.

DETAIL - The system detected a possible attempt to compromise security.
Please ensure that you can contact the server that authenticated you.

EventID: 1511
Source: Userenv
Category: None
Description:
Windows cannot find the local profile and is logging you on with a
temporary
profile. Changes you make to this profile will be lost when you log off.


I did some research and made sure the "Change primary DNS suffix when
domain
membership changes" box under Computer Name Changes was checked. Short of
that, I am pretty clueless. I know this must be some sort of DNS problem,
but it only seems to happen when that specific user logs in. Also, I know
nothing about DNS, so please be gentle. If I need to clarify, please let
me
know.

Thanks in advance,

Chris







.

Relevant Pages

  • Re: User getting "Account is Locked Out" for 2 days
    ... Then pull the network cable from that system to disconnect ... making this local profile newer than the one on the server. ... out what is going on...i have gone into his account and unchecked ...
    (microsoft.public.windows.server.sbs)
  • RE: user canot logon after prompted password change
    ... Create a new account with administrative rights. ... Log onto the server with that new account. ... Server Management or Active Directory Users and Computers then the profile ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: user migration
    ... I searched the file you mentioned in the server with 0 results. ... Connected as the domain administrator without migrating a profile ... Under documents and settings there are only two account, ... Administrator account without transferring the profile. ...
    (microsoft.public.windows.server.sbs)
  • Re: Mandatory profile
    ... be switch only 1 time from per server /deveice or user or viceversa. ... That is what I have been doing, I created the profile on the client ... I also tried the built in Administrator account with the same ... can rename the ntuser.dat to ntuser.man ...
    (microsoft.public.windows.server.networking)
  • User locked out
    ... he is logged in to the domain and can access a 2003 server fine. ... SBS 2003 won't let him access any resources until I go in an uncheck the ... "Locked out" in his profile. ... I tried logging in as different users on his ...
    (microsoft.public.windows.server.sbs)