Link to home
Start Free TrialLog in
Avatar of skeleton_key
skeleton_keyFlag for United States of America

asked on

Windows 2003 Terminal Server Cannot Load the Locally Stored Profile

For the past several months we periodically have trouble logging in with our AD profiles.  We get the following message:

"Windows cannot load the locally stored profile.  Possible causes of this error include insufficient security rights or a corrupt local profile.  If this problem persists, contact your network administrator".

We've tried the following:

- Renaming the old profile and creating a new one
- Installed User Profile Hive Cleanup Service from Microsoft. (Created a scheduled task for this to run several times per week).

Anyone have any other suggestions?  Again, this seems to be periodic and doesn't happen all of the time.  The users that it happens to are all local admins of the term server.
Avatar of Michael Pfister
Michael Pfister
Flag of Germany image

Do you have local terminal server profiles or do you redirect them to the network?

> - Installed User Profile Hive Cleanup Service from Microsoft. (Created a scheduled task for this to run several times per week).
The UPHC service automatically runs, so what are you "scheduling"? UPHC should create events in the event log everytime a user logs off...

Any other events when the profile load error happens? Have you run chkdsks to the drive the local profiles are stored?
Avatar of skeleton_key

ASKER

These are local terminal server profiles, they actually exist at C:\Documents and Settings\.

I scheduled uphclean.exe to run at 1am everyday, I guess that step is not needed since this is a service that is already running?

As for other event errors, I see about 4 a day at the same time from Userenv:

Event ID 1151: Windows cannot find the local profile and is logging you on with a temporary profile.  Changes you make to this profile will be lost when you log off.

Event ID 1515: Windows has backed up this user's profile.  Windows will automatically try to use the backed up profile the next time this user logs on.

Event ID 1502: Windows cannot load the locally stored profile.  Possible causes of this error include insufficient security rights or a corrupt local profile.  If this problem persists, contact your network administrator.  DETAIL - The process cannot access the file because it is being used by another process.

Event ID 1508: Windows was unable to load the registry.  This is often caused by insufficient memory or insufficient security rights.  DETAIL - The process cannot access the file because it is being used by another process.  for C:\Documents and Settings\administrator.SKELETONKEY\ntuser.dat.

I'd also like to mention that a terminal server is not the only role off this box.  It is also a FileMaker server.

I have not run chkdsk yet.







No, uphclean should be installed as a service and should not run by scheduler. You should see informational events regarding its work, source UPHClean.

Whats brand/version of virus scan software is installed on your system?
Yes, I see the informational events from UPHClean about it remapping user profiles in our hive because they were preventing the profiles from unloading successfully.

We are running Sophos Anti-Virus, version 7.3.3.

I took off the scheduled task for UPHClean as well.


Hm strange. Normally UPHClean solves this kind of probs...
Try excluding the entire "\Documents and Settings" directory with subdirs from Sophos. It may be a bit of a security risk but worth a try...
I just excluded that Documents and Settings directory from Sophos.  Since this is a periodic problem, I won't be able to determine if this has helped right away.  If anyone else has any comments or suggestions in the meantime, please feel free to chime in.
I've scheduled some downtime to run chkdsk on that drive.  I'll report back with anything I find.
We had similar problems before tuning memory configuration
http://support.microsoft.com/kb/316739
Avatar of gwcmaint
gwcmaint

We are experiencing the same issues.  Did excluding c:\documents and settings from your antivirus product work?  Please let us know.
gwcmaint, no, excluding the documents and settings folder did not help.
We need to dig deeper, see
"How to enable user environment debug logging in retail builds of Windows"
http://support.microsoft.com/kb/221833/EN-US/


Set  UserEnvDebugLevel to 0x00030002

and

"Error Message: Windows Cannot Find the Local Profile and Is Logging You On with a Temporary Profile"
http://support.microsoft.com/kb/257580/en-us


ASKER CERTIFIED SOLUTION
Avatar of gwcmaint
gwcmaint

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
We've not figured this out, but plan on rebuilding this server for other reasons as well as this.  Thanks for your help.