none
The User Profile Service service failed the logon. User profile cannot be loaded.

    Question

  • I have gone through the common answers to this question and wasn't successful at fixing the problem.

    The problem machines are running Windows 7 Ultimate, where at least one of the machine was upgraded from Pro using Anytime Upgrade.

    I am running a small office network with 20 client computers. Recently, we changed some processes and implemented remote desktop sessions to some programs running on an application server running 2008 R2 through SSL VPN. Two of the computers in the office are not letting the addition of existing company users, profiles of which work perfectly on the server when logging in from another machine. Adding the same profiles to other clients works perfectly.

    I have deleted all profiles on one of the problem computers through Advanced System Settings and even deleted the last, my admin SID from the registry, at which point I couldn't login and got the same message. Start-up repair allowed me back in, but non-admin users still couldn't be created, with the same error message.

    I don't see any orphaned,  or .bak SIDs in the registry. Do not logon users with temporary profiles GPO setting is not configured.

    Does anyone have any clue as to why something like this would persist?

    Thanks!

    Saturday, June 22, 2013 3:29 PM

Answers

All replies

  • What I understand from the problem is even when a user login first time via RDP, profile does not load and it failed.

    It is loaded from a C:\users\defaultuser profile so what if you replace C:\Users\Default user folder from working to a non-working server and see if that makes a different.

    Thanks

    Saturday, June 22, 2013 4:09 PM
  • Hello,

    are the machines you use created from an image/clone that is NOT prepared with sysprep?


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Saturday, June 22, 2013 6:52 PM
  • Since we are so small, it's not cost-effective for us to deal with volume licenses due to very few settings on the clients. With that said, we have purchased some volume licenses, and I have not used sysprep so far. The machines in question have OEM licenses installed. I will try to move C:\Users\Default from a working machine to the non-working.
    Sunday, June 23, 2013 12:53 AM
  • Hello,

    small or big company, doesn't matter. Cloning machines without sysprep is NOT supported from Microsoft and result in problems you will NOT have.

    http://support.microsoft.com/kb/314828

    http://technet.microsoft.com/en-us/library/dd744512(WS.10).aspx

    http://support.microsoft.com/kb/828287

    So please run sysprep on each machine and then try again. Be aware that changes are done on the machines as listed in the articles above. But again this is a MUST you have to do.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Sunday, June 23, 2013 9:33 AM
  • Actually, with the OEM installations, we did not do any image cloning. So I am completely stumped as to why 2 of the machines won't allow us to create new user profiles on them. Copying a C:\users\Default over from a working computer did not work :-(

    I am going to see if a non-admin user can create profiles on other computers. I get a sense that it's some sort of permissions issue, but I am not sure where...

    Monday, June 24, 2013 2:43 PM
  • I reinstalled Windows on the problem machine and was able to add a new non-admin AD user. Does anyone know if an existing SID could somehow hide on a local machine, where it won't even show up in the registry?
    Monday, June 24, 2013 9:40 PM