windows cannot log you on

  • Thread starter Thread starter ermanu
  • Start date Start date
E

ermanu

Hello,
on a windows 2000 prof. with sp4 (in a domain) PC when I try to logon
with a normal user I get the below error:
Windows cannot log you on because the profile cannot be loaded. Contact
your newtwork administrator.
Detail: access denied.

I've changed to everyone full control the C drive and reset permissions
on all child objects. But I still get the same error. When I add the
normal user to the local administrators groups he/she can logon
normally. But When I remove it from the local administrators group
he/she gets the same error. I've tried microsoft profile unloader but
nothing changed. I have removed the computer from domain deleted its
account and take it back to the domain but sitll the same problem.
What can I do?
Thank you
Erman Ulusoy
 
Hello,
on a windows 2000 prof. with sp4 (in a domain) PC when I try to logon
with a normal user I get the below error:
Windows cannot log you on because the profile cannot be loaded. Contact
your newtwork administrator.
Detail: access denied.

I've changed to everyone full control the C drive and reset permissions
on all child objects. But I still get the same error. When I add the
normal user to the local administrators groups he/she can logon
normally. But When I remove it from the local administrators group
he/she gets the same error. I've tried microsoft profile unloader but
nothing changed. I have removed the computer from domain deleted its
account and take it back to the domain but sitll the same problem.
What can I do?
Thank you
Erman Ulusoy

I suspect you made the permissions for the "Default User" folder
too restrictive. It's usually a hidden folder.
 
Hello pegasus thank you for your reply,
That was the first thing that I've checled but default user also is
everyone full control.
Do you have any other suggestion
thank you
 
Hello pegasus thank you for your reply,
That was the first thing that I've checled but default user also is
everyone full control.
Do you have any other suggestion
thank you

I will believe what you say when I see it with my own
eyes. Please run the batch file below, then paste the
result into your reply.

@echo off
cacls "c:\Documents and Settings" > c:\cacls.txt
cacls "c:\Documents and Settings\Default user\Desktop" >> c:\cacls.txt
cacls "c:\Documents and Settings\All Users\Desktop" >> c:\cacls.txt
cacls "c:\Documents and Settings\xxx\Desktop" >> c:\cacls.txt

"xxx" is the name of the problem user (if the folder exists!).
 
Hello pegasus thank you for your reply
here is the output you requested
c:\Documents and Settings Everyone:(OI)(CI)F

c:\Documents and Settings\Default user\Desktop Everyone:(OI)(CI)F

c:\Documents and Settings\All Users\Desktop Everyone:(OI)(CI)F

for the xxx (usertest1) folder it can't get the security with cacls as
there is no such a floder
thank you
 
Hello pegasus thank you for your reply
here is the output you requested
c:\Documents and Settings Everyone:(OI)(CI)F

c:\Documents and Settings\Default user\Desktop Everyone:(OI)(CI)F

c:\Documents and Settings\All Users\Desktop Everyone:(OI)(CI)F

for the xxx (usertest1) folder it can't get the security with cacls as
there is no such a floder
thank you

OK, your permissions look fine. You now need to determine if this
is a local issue or a domain issue, perhaps related to roaming profiles.
Create a local user, then see if the problem still occurs.

You should also check the permissions of the following folders:
c:\
c:\winnt
c:\winnt\system32
(assuming that Windows is installed in c:\WinNT).
 
Hello pegasus
All the folder are everyone full control.
I can't explain the situation
Thank you
 
Hello pegasus
All the folder are everyone full control.
I can't explain the situation
Thank you

I recommend you try all of my suggestions. So far you tried
half of them.
 
Hello pegaus,
we don't use roaming profiles and I get the same error for a local
user
thank you
 
Hello pegaus,
we don't use roaming profiles and I get the same error for a local
user
thank you

Try this:
1. Create a new user xxx with admin privileges.
2. Log on as xxx. A profile folder xxx will be created.
3. Log on as administrator.
4. Demote xxx to an ordinary user.
5. Start a Command Prompt.
6. Type this command: runas /user:xxx SomePassword.
7. While still in the Command Prompt under xxx, navigate
to the "All users" folder and the "Default User" folder.
Check his access level by creating and removing test folders
(e.g. cd "Default user", md Test, rd Test).
8 Pay attention to the fact that there may be more than one
"All Users" folder, e.g. "All Users.winnt".
9. Log on as xxx.
10. Repeat the steps 5, 7 .. 9.
11. Rename the "Default User" folder to "Default User.tmp", then
restore its original name.
 
Hello pegasus thank you for your reply,
1-I've created a new user in the domain usertest1.
2-I've logged on to tih computer with my domain admin account
3-I've added this user to the local administrators group in the problem
computer
4-I've logged on as usertest1 the profile folder is succesfully
created.
5-I've logged off
6-I've logged on again with my domain administrator account and denote
usertest1 to an ordinary user by removing it from the local
administrators group
7-I've started a command prompt
8-I've typed runas /user:usertest1 cmd
and then typed the password. But I get the access denied error. I've
tried the same on my PC and it's working.
I've checked the permission in c:\winnt\system32 everything seems
everyone full control.
thank you
 
Hello pegasus thank you for your reply,
1-I've created a new user in the domain usertest1.
2-I've logged on to tih computer with my domain admin account
3-I've added this user to the local administrators group in the problem
computer
4-I've logged on as usertest1 the profile folder is succesfully
created.
5-I've logged off
6-I've logged on again with my domain administrator account and denote
usertest1 to an ordinary user by removing it from the local
administrators group
7-I've started a command prompt
8-I've typed runas /user:usertest1 cmd
and then typed the password. But I get the access denied error. I've
tried the same on my PC and it's working.
I've checked the permission in c:\winnt\system32 everything seems
everyone full control.
thank you

The test is inconclusive. What about steps 9, 10 and 11?
 
Hello pegasus,
sorry about my late answer.
For the last 3 steps. I can't logon with the user xxx(usertest1).
So I can't complete all
Thank you
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top