none
Domain guest account constantly getting "The user profile service service failed the logon"

    Question

  • Hi

    We are a business school, and as such have lots of "students" passing through. With XP we had a guest account called "user.guest" for any student who was only here for a day, so they could access the internet and nothing else.

    We have upgraded almost all of our staff machines with windows 7 "450/500" and have no issues with them. However when we have upgraded the training machines, we find that after a varying amount of time, machines will start to get the error. This seems to be completely random, and the only fix we have found currently is to delete the profilelist registery entry for the guest account. That is unsustainable as we have anywhere upto 1000 people passing through each day, and many just require internet access, so we dont want to have to create individual accounts for everyone, or to be constatly deleting registery keys.

    Is there some new special way of creating guest domain accounts for windows 7 that weve missed, or is this a bug that we will have to work around.

    Thanks

    *oh and the domain is 2008 R2 function level incase that makes a difference

    Monday, February 28, 2011 9:55 AM

Answers

  • Incase anyone else gets this error, It appears as though Service Pack one resolve's it.

    Since rolling out service pack one to our training machines, we havent received this error once.

    • Marked as answer by Ashridge Thursday, March 31, 2011 8:33 AM
    Thursday, March 31, 2011 8:33 AM

All replies

  • Hi,

     

    This issue may occur by the guest account profile corrupt or some components are not compatible with Windows 7. I suggest to create a new guest account and use that account instead. Reset or move GPO and restrictions for that account to see if the same issue occurs.

     

    Meanwhile, you can configure group policy to remove user profile if the old guest account is inactivated on clients for several days.

     

    Hope that helps.

     

    Regards,

    Leo   Huang

    TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, March 01, 2011 8:17 AM
  • Hi

    apologise i should have mentioned this before, we have already completely scrapped the account and associated profiles mulitple times, and created new ones. We know this process works as we use it for all our other 400 machines, there are also no profile related policys assigned to that account, other than it being mandatory.

    Is it still the case that we should set a policy to remove the profile from the machine when inactive.

     

    Thanks

    Tuesday, March 01, 2011 9:27 AM
  • Hi,

     

    I suggest to remove old profile because it may be corrupted, if someone still use the old account to login, the issue will occur. If you do not want to remove this profile, just disable the old guest account is the same way.

     

    Regards,

    Leo   Huang

    TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Wednesday, March 02, 2011 1:48 AM
  • Hi,

     

    Did your issue solved? Please feel free to give me any update.

     

    Thanks.

     

    Regards,

    Leo   Huang

    TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Friday, March 04, 2011 9:10 AM
  • Hi,

     

    As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to  reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish.

     

    BTW,  we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts.

     

    Regards,

    Leo   Huang

    TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Monday, March 07, 2011 2:18 AM
  • Hi Leo

    Apologise but this is in no way resolved, i've simply been busy due to sickness in the team.

    Im afraid i have to refer back to my previous answer, in that we have already tried deleting/recreating the account and associated profiles, using different names etc. but this hasnt helped at all.

    And its not the the accounts are unusable, simply that you will start to get the said error on random machines, which can be resolved by removing the registery entry for that profile, all the time the account will be in use by other machines without error. And the error only occurs on windows 7 machines, never XP. We have also tried using seperate accounts for xp and windows 7, but the windows 7 machines still get the issue.

     

    Regards

     

    Monday, March 07, 2011 1:39 PM
  • Hi,

     

    I found a KB about this error message and you can try the steps in that KB:

    http://support.microsoft.com/kb/947215

     

    This error may occur if the "Do not logon users with temporary profiles" Group Policy setting is configured. And if the user profile was manually deleted by using the command prompt or by using Windows Explorer. A profile that is manually deleted does not remove the security identifier (SID) from the profile list in the registry.

     

    You need to change some registry in Windows, and you’d better backup it before you want to change.

     

    Hope that helps.

     

    Regards,

    Leo   Huang

    TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Wednesday, March 09, 2011 1:49 AM
  • Hi

    As stated earlyer, we dont have any policys set against that profile, other than it being mandatory, if the folder is missing it will just log you on with a tempory profile.

    Maybe a better example would help.

    We have 10 machines in our library, that all use this account and nothing else, the machines are purley used for students to browse the internet. All 10 will happily work for a random amount of time, before 1 will stop being able to login, all the others continue to function correctly, upon checking the machine that cant login, we find nothing appers wrong, the local copy of the profile is present and does not appear corrupt, the user is listed in profile list and it appears the same as the machines which are still working. The only way we have found to resolve the issue is to remove the entry for that account from the profile list, at which time the machine will start to function again. This will then occur on a different machine, and so on.

    We have checked and there are no group policys against the machines or user accounts, and we have tried starting from scratch, with a new user account and profile, but still come across the same issue.

    During all of this, our xp machines have been running fine without an issue.

    Regards

    Thursday, March 10, 2011 9:14 AM
  • The problem may be caused  by permissions on the profile.

    1. Granted the guest users Full Control permissions on his profile folder and propagated
    this down to all files and subfolders.
    2. Had the guest user take ownership of the folder and propagated this down to all files
    and subfolders.

    And sometime it was caused by the antivirus programs like MacAfee, you should:

    1.) Remove McAffee Enterprise Access Protection (seen in both versions 8.5 and 8.7) from the client machine(s) experiencing the issue.

    2.) Disable the "Protect cached files from password and email address stealers" option:

    Start McAfee VirusScan Console

    Select the Properties for the “Access Protection” task

    Remove the Block on “Password cached files from password and email address stealers" in the Maximum Protect Category

     

    If the issue still persists, can you go to Event Viewer and share me the error log and Upload to SkyDrive?

     

     

    Regards,

    Leo   Huang

    TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Friday, March 11, 2011 1:28 AM
  • Hi Leo

    Account hasn't had full control or ownership of the profile.

    AV is something we hadn't considered though, so as suggested we have made the changes to our AV policy.

    I had a look through the Events on one of the machines which has just started doing it. But there was little of use, the only log was:

    "Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

     DETAIL - Unspecified error"

    Like all previous issues, deleting the profillist entry for this account promptly fixed the machine in question, and all others didnt experiance an issue.

    Friday, March 11, 2011 1:58 PM
  • Hi,

     

    Sorry for my late reply.

     

    Sometimes the issue is caused by the Default profile missing. Please go to users folder and check default profile is exist.

     

    Also right click c:\users, give everyone full control to the folder.

     

    These similar thread may be helpful to you:

    http://www.techsupportforum.com/forums/f103/windows-cannot-log-you-on-because-your-profile-cannot-be-loaded-236300.html

    http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Remote_Desktop-Terminal_Services/Q_23305208.html

     

    Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

     

    Hope that helps.

     

    Regards,

    Leo   Huang

    TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Monday, March 14, 2011 8:39 AM
  • Hi

    We have tried the suggested AV changes, but have had another machine present this issue. As with all previous times there appears nothing wrong with the machine itself, and the issue is resolved by removing the profilelist entry, no other machines experianced the issue at the same time.

    We checked the machine and can confirm that the default profile was not missing.

    I dont see why we would need to give "Everyone" full control of the user folder, as we have never had to do this with any other user account or operating system.

     

    Tuesday, March 15, 2011 8:47 AM
  • Well, I will escalate your question. Other senior support engineer would help you to find the solution.

     

    Thank you for your understanding.

     

    Regards,

    Leo   Huang

    TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Wednesday, March 16, 2011 1:13 AM
  • Incase anyone else gets this error, It appears as though Service Pack one resolve's it.

    Since rolling out service pack one to our training machines, we havent received this error once.

    • Marked as answer by Ashridge Thursday, March 31, 2011 8:33 AM
    Thursday, March 31, 2011 8:33 AM