Problem with terminal user roaming profiles

[Tomasz Onyszko]

I wrote about my problem on win2000.general and networking group but I think
maybe on this groups somebody will help me
======== post #1 =======
Hi
Today one of my servers from terminal servers farm has a problem with
copying user profiles, usera are not getting their profiles instead of this
they are getiting temporary profiles with name like TEMP.DOMAIN. Folder
redirection policy for this user seems to work fine.

An error is logged in the Application log

===================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 2003-09-02
Time: 10:53:03
User: NT AUTHORITY\SYSTEM
Computer: Description:
Windows cannot load the profile and is logging you on with a temporary
profile. Changes you make to this profile will be lost when you log off.
====================

also strange error in system log occurs
===========
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10009
Date: 2003-09-02
Time: 10:28:22
User: NT AUTHORITY\SYSTEM
Computer:
Description:
DCOM was unable to communicate with the computer <computer name> using any
of the configured protocols.
===========

but I doubt that this is connected with this.

On other servers in farm all works just fine.

When I log on I can browse network and server where profiles are stored and
I can get to the user profile folder so this isn't permissions problem.

Maybe this is a problem with something eles and problems with profiles aee
only symptoms of this main problem

I'm not an administrator of this server but I'm servicing it in a case of
emergency - sys admin from this comapny claims that nothing has bee changed
on this server yestarday and few days earlier and I have to trust him in
this.

So - any ideas what can be wrong.
===============

========= post #2 =============
OK, little self auto update
In Userenv.log I have following entries when users logs on and logs off
========
USERENV(16cc.14bc) 11:40:41:096 ReconcileDirectory: Failed to copy over the
attributes src <\\server\UserProfiles\TerminalService\tonyszko\Templates> to
destination directory <C:\Documents and Settings\tonyszko\Templates>. Error
= 5
USERENV(16cc.14bc) 11:40:41:096 CopyProfileDirectoryEx: Failed to create the
destination directory <C:\Documents and Settings\tonyszko\Templates>. Error
= 5
USERENV(16cc.14bc) 11:40:46:033 RestoreUserProfile: Deleting cached profile
directory <C:\Documents and Settings\tonyszko>.
USERENV(16cc.14bc) 11:40:46:893 DeleteProfile: Failed to delete the appmgmt
dir C:\WINNT\system32\appmgmt\S-1-5-21-1547161642-1801674531-725345543-1393,
error 2
USERENV(16cc.12e4) 11:40:48:658 CallDFS: NtOpenFile failed with 0xc0000034
USERENV(16cc.12e4) 11:40:48:955 ProcessGPOs: Extension Folder Redirection
ProcessGroupPolicy failed, status 0x51b.
USERENV(16cc.14bc) 11:41:05:095 DeleteProfile: Failed to delete the appmgmt
dir C:\WINNT\system32\appmgmt\S-1-5-21-1547161642-1801674531-725345543-1393,
error 2

 

[Matthew Harris [MVP]]

You have a few Error #5's in there, which are an
indication of an access denied or permissions error. Can
you verify the permissions are correct on the profile
directories?

-M

-----Original Message-----
I wrote about my problem on win2000.general and networking group but I think
maybe on this groups somebody will help me
======== post #1 =======
Hi
Today one of my servers from terminal servers farm has a problem with
copying user profiles, usera are not getting their profiles instead of this
they are getiting temporary profiles with name like TEMP.DOMAIN. Folder
redirection policy for this user seems to work fine.

An error is logged in the Application log

===================
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 2003-09-02
Time: 10:53:03
User: NT AUTHORITY\SYSTEM
Computer: Description:
Windows cannot load the profile and is logging you on with a temporary
profile. Changes you make to this profile will be lost when you log off.
====================

also strange error in system log occurs
===========
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10009
Date: 2003-09-02
Time: 10:28:22
User: NT AUTHORITY\SYSTEM
Computer:
Description:
DCOM was unable to communicate with the computer

of the configured protocols.
===========

but I doubt that this is connected with this.

On other servers in farm all works just fine.

When I log on I can browse network and server where profiles are stored and
I can get to the user profile folder so this isn't permissions problem.

Maybe this is a problem with something eles and problems with profiles aee
only symptoms of this main problem

I'm not an administrator of this server but I'm servicing it in a case of
emergency - sys admin from this comapny claims that nothing has bee changed
on this server yestarday and few days earlier and I have to trust him in
this.

So - any ideas what can be wrong.
===============

========= post #2 =============
OK, little self auto update
In Userenv.log I have following entries when users logs on and logs off
========
USERENV(16cc.14bc) 11:40:41:096 ReconcileDirectory: Failed to copy over the
attributes src

destination directory <C:\Documents and

Settings\tonyszko\Templates>. Error

= 5
USERENV(16cc.14bc) 11:40:41:096 CopyProfileDirectoryEx: Failed to create the
destination directory <C:\Documents and

Settings\tonyszko\Templates>. Error

 

[Tomasz Onyszko]

W wolnej burzy wypowiedzi przedstawionej w
:[email protected],

You have a few Error #5's in there, which are an
indication of an access denied or permissions error. Can
you verify the permissions are correct on the profile
directories?

In the mean i've resolved this issue. I know that this entry in log indicate
some problem with access permission, but I can't figure out what was a cause
of this problems. After eliminating few posible sources I turn off antivirus
software (which is eTrust 7.0) and all start to work properly.

This was a human mistake - administrator of this network trys to impreve
network security by tunnikg etrust configurationa and he puts no extension
files on imediatly blocking list (without checking). This results in
blocking access to all directories.