Answered by:
Some users getting temp profile

Question
-
Some users are getting temp profile and generating even log:
Windows cannot find the local profile and is logging you on with a temporary profile.
Changes you make to this profile will be lost when you log off.As per the below article:
https://support.microsoft.com/en-in/kb/947242
.bak registry key is created for some users. Tried deleting for one user and it solved the issue.
However it keeps on happening for different users. How to solve this problem for all users and why does this issue happen?
Monday, April 18, 2016 3:05 PM
Answers
-
Do you have any printers mapped during the logon process? Can you disabled or update Printer drivers for that session? The cause could be some old Printer drivers or some application injecting drivers in the profile during load and it blocks the Profile to clean up during the logoff.
Delete backup or bak profile for the user on the server.
Step1 - Check AV if exlcusions are in place as per Citrix Recommendations
Step2 - Disable all printers or remove mapping for the user
Step 3 - Update printer driver if Step 2 is not possible
or Try UPD instead of vendor Printer drivers
Regards, Jim MSCS - MCP Disclaimer: This posting is provided AS IS with no warranties or guarantees , and confers no rights. When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer
Tuesday, April 19, 2016 1:08 PM
All replies
-
Hi
Do you have any software that is implementing any permissions or locking down user profiles?
Check GPO's or third party utilities that interfere in normal operations of the User profile during the loading process.
Deploy Procmon at the startup and check the logs.
Also check your DFS or File share your User profiles are hosted if roaming users, permissions, Drive integrity etc and Event logs, worth checking if any AV software is scanning user folders.
Regards, Jim MSCS - MCP Disclaimer: This posting is provided AS IS with no warranties or guarantees , and confers no rights. When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer
Monday, April 18, 2016 3:13 PM -
No only folder redirection is set. However the profile is stored on the server itself in C:\Users. These are Citrix servers.
Monday, April 18, 2016 3:30 PM -
Yes have seen this one and it causes profile corruption.
Follow this steps please.
-
Rename or delete the user’s folder in <SystemDrive>\Users.
-
Delete the Security Identifier (SID) that corresponds with the user’s account in the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList.
To locate the SID that corresponds to the user’s account, click each of the subkeys in the ProfileList, and observe the ProfileImagePath string value
Do you have Profile cleaner utility on the server?
Regards, Jim MSCS - MCP Disclaimer: This posting is provided AS IS with no warranties or guarantees , and confers no rights. When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer
Monday, April 18, 2016 3:35 PM -
-
Yes. However the question is for how many users I need to delete the SID.bak from registry. It keeps happening for different users. What is the latest version of UPHClean for Windows server 2008 R2?Monday, April 18, 2016 3:43 PM
-
It keeps happening for different users >>
Check via Procmon or process explorer what is happening with user profiles why they are failing, need to find the root cause.
Regards, Jim MSCS - MCP Disclaimer: This posting is provided AS IS with no warranties or guarantees , and confers no rights. When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer
Monday, April 18, 2016 3:54 PM -
Can you give me the steps on how to run procmon in this case?Monday, April 18, 2016 3:55 PM
-
Sure, check this guide
https://www.msigeek.com/6231/how-to-enable-system-boot-time-logging-using-process-monitor-tool
https://blogs.technet.microsoft.com/aviraj/2011/10/12/mystery-behind-sysinternals-process-monitor-procmon-exe-out-of-space-c-drive/
Regards, Jim MSCS - MCP Disclaimer: This posting is provided AS IS with no warranties or guarantees , and confers no rights. When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer
Monday, April 18, 2016 4:08 PM -
Good Day
Do you use a logon script?
If so is that located in the citrix servers?
Are you able to ping the server from a machine that has the problem?
I belive the problem is in the server not on the computer
RegardsMonday, April 18, 2016 4:20 PM -
Jsalian.. how to filter the procmon logs to see the data just for the users having issues. Does Ctrl+F works?
@Alvaro.. yes a logon script is associated on the users profile tab. The script is in the netlogon directory.
Monday, April 18, 2016 4:37 PM -
Do the user with problems has the LogonScript associated in his AD account?
i see that happened before and the users didnt had any logon script under AD
one of the servers with the logon script is not being visible to all computersMonday, April 18, 2016 5:05 PM -
Hi,
you can filter the logs with the username and check the logon process.
Click on Filter - Click on Filter or Ctrl L and drop down the User tab - type in or check for username and click on Add - Click Ok and look for unusual entries in the log file.
Regards, Jim MSCS - MCP Disclaimer: This posting is provided AS IS with no warranties or guarantees , and confers no rights. When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer
Tuesday, April 19, 2016 8:59 AM -
I see the below warning in event viewer:
Event ID: 1530
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: server1.contoso.net
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-4140388835-2967530427-3097324819-60005:
Process 2556 (\Device\HarddiskVolume3\Program Files (x86)\Citrix\system32\CpSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-4140388835-2967530427-3097324819-60004
Any idea how to solve this?
Tuesday, April 19, 2016 11:50 AM -
Samb what version of Citrix you are using Xenapp or XenDesktop?
Regards, Jim MSCS - MCP Disclaimer: This posting is provided AS IS with no warranties or guarantees , and confers no rights. When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer
Tuesday, April 19, 2016 12:28 PM -
-
Do you have any printers mapped during the logon process? Can you disabled or update Printer drivers for that session? The cause could be some old Printer drivers or some application injecting drivers in the profile during load and it blocks the Profile to clean up during the logoff.
Delete backup or bak profile for the user on the server.
Step1 - Check AV if exlcusions are in place as per Citrix Recommendations
Step2 - Disable all printers or remove mapping for the user
Step 3 - Update printer driver if Step 2 is not possible
or Try UPD instead of vendor Printer drivers
Regards, Jim MSCS - MCP Disclaimer: This posting is provided AS IS with no warranties or guarantees , and confers no rights. When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer
Tuesday, April 19, 2016 1:08 PM -
Hi Samb,
Here is an article below about troubleshooting temporary file may be helpful to you.
Temporary User Profile
https://helgeklein.com/blog/2011/11/temporary-user-profiles/
Best Regards,
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
Saturday, April 23, 2016 3:39 AM