none
The User Profile Service service failed the logon. User profile cannot be loaded. RRS feed

  • Question

  • Hi Guys,

    I am experiencing a problem with Remote Desktop Services running on Windows Server 2008 R2.  The RDS deployment is setup as a server farm with the following servers:

    • RD-SH-01 (Session Host)
    • RD-SH-02 (Session Host)
    • RD-SH-03 (Session Host)
    • RD-BROKER (Connection Broker and RD Licensing Server)
    • RD-REMOTEACCESS (RD Web Access and RD Gateway)

    All servers in the farm are operating as normal however sometimes when a RD Session Host reboots or has no logged in users for a period of time, the User Profile Service starts rejecting login requests and returns the following error message:

    The User Profile Service service failed the logon.

    User profile cannot be loaded.

    Due to the way the Connection Broker works in 2008 R2, a server failing to take logon requests correctly has the ability to take down the entire farm which is what my customer is experiencing in their environment.

    The RD Farm is setup to use folder redirection and roaming profiles to ensure the user gets a consistant experience regardless what server in the farm they connect to. All servers in the farm are identical in system configuration, lockdown policies and RDS configuration which is mostly administered through Group Policy.

    To resolve a failed session host a simple server reboot of the effected host is required.  Sometimes up to 3 or 4 reboots are required before the host starts taking connections normally again.  Also rebooting a session host for maintenance during for Windows Updates or other purposes may also introduce the problem.

    This morning I had a call from my customer and the issue was occurring to RD-SH-01 - the server needed to be rebooted 4 times before it started processing user logons as normal.

    I don't understand how multiple reboots magically resolve the issue, perhaps a system service is starting before another service which it is dependent upon?  Has anyone else out there had a similar problem?

    Any suggestions or feedback would be greatly appreciated.

    Kind Regards,


    Clint Boessen MVP - Exchange Server, MCSE, MCITPx6, Dip Network Engineering
    Perth, Western Australia

    Blog: http://clintboessen.blogspot.com
    Employer: http://www.avantgardetechnologies.com.au

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Monday, July 28, 2014 2:56 AM

All replies

  • Hi Clint,

    Thank you for posting in Windows Server Forum.

    Please check that you have any security permission on any files/folders in C:\Users\Default folder. “discovered it was caused by a security problem on a few files/folders in the C:\Users\Default folder. I was able to easily fix it by going into the Advanced Security Settings for the C:\Users\Default folder and checking the box to "Replace all childobject permission with inheritable permissions from this object".” (Quoted from this thread).

    In addition, you can edit registry setting and delete the SID of particular users and then logon the user it will create a new user profile after this check the result. You can find SID on below path.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

    More information.
    You receive a "The User Profile Service failed the logon” error message
    http://support.microsoft.com/kb/947215

    Hope it helps!

    Thanks.

    Dharmesh Solanki


    Thursday, July 31, 2014 1:26 AM
    Moderator
  • Hi Dharmesh,

    Thanks for taking the time to post on this thread.

    The permissions on the C:\Users\Default profile are default.  The Default profile is only used when generating a new profile for users - these users already have profiles which are setup to roam to a file server share.

    In regards to the ProfileList registry key, when SID's exist under that RegKey this results in TEMP profiles, not the error I'm experienced.

    Both of these solutions you posted are not related to my problem.  As explained the problem we are experiencing is intermittent and a server reboot(s) eventually resolves it - until the next reboot.  If it was something along the lines of invalid permissions / registry keys, rebooting the server would not resolve the problem.

    Regards,


    Clint Boessen MVP - Exchange Server, MCSE, MCITPx6, Dip Network Engineering
    Perth, Western Australia

    Blog: http://clintboessen.blogspot.com
    Employer: http://www.avantgardetechnologies.com.au

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.


    Thursday, July 31, 2014 1:49 PM
  • Hi

    We are experiencing exactly the same issues (1 Broker and License, 3 Hosts, all on 2008R2). Restarting the broker service is solving the problem in our case.

    But we do not have any other solution at the moment. So if anyone is having an idea it would be fine to share it.

    Regards,

    Michael

    Thursday, September 4, 2014 9:53 AM
  • We have tried replacing the permissions on the default folder as well. We deleted all the user profiles to let them reload and that did not resolve the problem. It’s still internment, more specifically when we get more than 15 users on a given server, then that server will mostly likely fail but it seems to effect only one server in the farm at a time and its random on which one if affects for the day. Any guidance would be much appreciated.

    Friday, November 7, 2014 4:40 PM
  • Hey There

    Any News on this one? We have the exact same issue here like Cwray20 described. All 2008 Servers, one SB and 6 Session hosts load balanced via NLB. We tried everything described above and still no luck.

    It is a severe issue that arised from one day to the other.

    Please advice.

    Friday, February 27, 2015 9:44 AM
  • Excelent. Thnks you.

    rfcc

    Monday, August 20, 2018 9:38 PM