Link to home
Start Free TrialLog in
Avatar of Aljeebo
Aljeebo

asked on

Windows Script Host access denied error at login

Hi everyone, I wonder if you can help me?

I have NT Server and 25 XP Pro clients. Two users have a problem wherever they login. When the login script executes they receive the error: Windows Script Host error: Your settings failed to load - Access is Denied. Explorer loads but the user has no internet access. I'm assuming this is profile corruption? I have checked the user's permissions - they have never been altered.  How can I reset the profiles?

Many thanks

Al
Avatar of Gerald Negrota
Gerald Negrota
Flag of Italy image

Simple: delete the profile from the disk, if the users are using a local profile. Sure, first do a backup :-)
But first ... check better all the settings : policy, IE Scripting permisions, etc. Tri to login with a different user and if you receive the same error, you can even try to reset the permisions to the default by using SECPOL

[ START->RUN-> secpol.msc , ACTION (from menu), Import..., basicwk.inf (this is for Bacsic WorKstation) ... ]

No firewall activated, right ?! ;-)
when we need to reset a person's profile we just rename it to username.bak... this way the old profile is still there just incase we need something out of it... remember outlook (in non-exchange environments) and outlook express usually store their email stores in the profile folder... the easiest way to do it is to reboot (to make sure no files are locked in the profile directory)... log on as the domain or local administrator... navigate to the c:\documents and settings folder and rename to the desired folder to username.bak... logoff and logon as the user to create the new profile...

if this doesn't solve the issue you can perform similar steps to restore the profile...

reboot the computer... logon as the local or domain admin... navigate to the c:\documents and settings folder... delete the newly created profile and rename the username.bak profile back to the original name... logoff and logon as the user...

if the users are using roaming profiles then it's a little more complicated as the local copy of the profile and roaming copy of the profile would have to be renamed...
Avatar of Aljeebo
Aljeebo

ASKER

Thanks for your responses. Yes they are using roaming profiles - where is the roaming copy of the profile? UserDir on the server?
Thanks again.
Al
the roaming profile location is set in the users properties in active directory...

for roaming profiles you have to rename both the local profile (at every machine the user has logged onto) and the roaming profile... the reason for this if a user logs onto a workstation and it finds a copy of the local profile but not a copy of the roaming profile it will copy to the local profile and make it the roaming profile... and vice versa...

being as it seems like it may a local computer problem... just renaming the local copy of the profile may be to your advantage... inside everyones profile is a local settings folder that does not get propogated to the roaming profile location... the local settings may be what is causing your problems...

I would try just renaming the local copy first... if that does not work then you can rename both the local (you have to rename it again)  and roaming copies...
Avatar of Aljeebo

ASKER

Thanks kain, I'll be there tomorrow so I will try renaming the roaming profile. The annoying thing is, I would understand this a lot better if it was Active Directory, but it's NT Server - which I am not familiar with. It doesn't seem to be a local problem because I have logged onto 4 different machines with both accounts and have had the same error. So I guess even if they had previously logged in to all four machines, the profiles saved on the local machines must have originated from the roaming profile? I'll give it a go and get back to you. Thanks again.
Al
yeah... you'll have to rename the local and roaming profiles to reset the profile in that situation...

have you looked at the group memberships of an account that works and an account that doesn't work to look for any differences?
Avatar of Aljeebo

ASKER

yeah, same as others and nothing has changed. Is this feasible -access to the user's profile is denied when the script executes and attempts to update the local registry? And then exits?
I've seen crazier things happen when a user's profile gets corrupted.... sounds almost like the roaming profiles ntfs permissions have gotten screwed up so when they logon and the workstation goes to retrieve the roaming profile it can't get access to it...
Avatar of Aljeebo

ASKER

It certainly sounds like that! I'll post from the location tomorrow. Thanks for your help.
Al
Avatar of Aljeebo

ASKER

Hi there
I logged in as network administrator and tried to rename the user's profile but access denied. Also tried it logged in as local admin, any ideas?
Cheers
Al
ASKER CERTIFIED SOLUTION
Avatar of kain21
kain21
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Aljeebo

ASKER

Yeah right, of course, sorry...will do as you say...back soon.
Avatar of Aljeebo

ASKER

Thanks for your help kain. I didn't manage to fix the profiles, but all what you said should've fixed it. NT server with XP Pro, hmm, never again.
Thanks again
Al
I had a similar problem on my Windows XP box. The server that I'm running Active Directory on is Windows 2003. I found that for some reason the computer was reading that the user had a mandatory profile when they actually had a roaming profile.
The user previously had a mandatory and the computer was remembering that for some reason even though it had been changed.

To resolve my problem, I had to delete the locally cached user profile on the computer using the profile properties page on the advanced tab of the system properties window.

Hopefully this will help someone..