Solved

Laptops hang at "loading profile" after login w/ domain account when not on the domain

Posted on 2008-10-15
8
506 Views
Last Modified: 2011-10-19
Issue: Laptops hang at "loading profile" after login w/ domain account when not on the domain.
Laptop OS: Windows XP SP3
Domain Controller OS: Windows 2003 x64 SP2
Details: Laptops login fine when connected to the domain.
Recent Changes to Group Policy: none
Recent Software Installations: none
Other Recent Changes: I think DHCP and DNS was recently turned off on one of our servers.  Possibly also the server role was changed so it is no longer a domain controller.  We still have another domain controller running DHCP and DNS.  I will try to confirm these changes with the techs and get more details. Also there have been many Windows patches lately.
Possibly Related Event log messages:
- Event ID 1054, Source Userenv, User NT AUTHORITY\SYSTEM, Windows Cannot obtain the domain controller name for your computer network  (The specified domain either does not exist or could  not be contacted). Group Policy processing aborted.
- Event ID 1003, Source: Dhcp, User N/A, Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 0007E96DA6FE.  The following error occurred: The semaphore timeout period has expired.  Your computer will continue to try and obtain an address on it own from the network address (DHCP) server.
0
Comment
Question by:BuildingGreen
  • 5
  • 3
8 Comments
 
LVL 6

Expert Comment

by:tchamtieh
Comment Utility
I would suggest removing it from the domain and adding it again.
0
 

Author Comment

by:BuildingGreen
Comment Utility
I removed one of the laptops from the domain and rebooted. When logging on locally with the local administrator account, it got stuck at "loading browser customizations" for 11 minutes before completing the login.  
I rejoined the laptop to the domain and rebooted.  I successfully logged in with several domain accounts and local accounts.  I shut down, removed the network cable and tried logging in with several domain accounts and local accounts, but each time the login got stuck at "loading your personal settings for 8-15 minutes" before completing the login.
0
 

Author Comment

by:BuildingGreen
Comment Utility
On advice on someone on the Microsoft Forums, they suggested I turn on logging in the registry for the userenv.log file, which can be used to troubleshoot logon problems. I did so.  I renamed the old userenv.log file.  I booted up and the login took 15 minutes as usual. I have attached the userenv.log and also included the text of the file below...
USERENV(340.344) 17:04:33:629 CUserProfile::GetRefCountAndFlags: RegQueryValueEx failed, key = S-1-5-21-1899891192-439553545-622671684-4446, error = 00000002
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Can not get ref count and flags
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not available at startup. retrying
USERENV(340.57c) 17:04:35:832 RetryDCContactAtMachineStartup:  Failed to query GpNetworkStartTimeoutPolicyValue with 2, exit.
USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not available after retries.
USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not available. aborting
USERENV(36c.644) 17:06:37:156 UnloadUserProfile: received a NULL hProfile.
USERENV(340.344) 17:16:00:997 ReportError: Impersonating user.
USERENV(340.224) 17:16:32:452 ProcessGPOs: The DC for domain SERA-NT is not available. aborting

userenv.log
0
 
LVL 6

Expert Comment

by:tchamtieh
Comment Utility
Do you have a lot of mapped drives onlogon? Is the userprofile too large? Try adding the domain user to the Administrators group on the local machine and see if that helps at all.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:BuildingGreen
Comment Utility
The number of mapped drives has not changed.  The issue is not userprofile specific as it happens with both large and small profiles, with domain profiles, local profiles, adminsitrator level profiles and power user level profiles.  It is happening with the local administrator account.
I moved one of the computers in question to a container with blocked inheritance and no group policy objects.  I restarted Windows and logged in with ethernet cable connected.  Then I shut down, removed the ethernet cable and tried logging in, but had the same problem.  So I have confirmed this is not group policy related.
I turned up the detail level for the userenv.log and attached the new file.

verbose-userenv.log
0
 

Author Comment

by:BuildingGreen
Comment Utility

It looks like I have narrowed the problem down to a system service.   Eliminating half of the services at a time I should be able to find the problematic service after 7 tests (assuming it is only one particular service).  I can export the services to a CSV file and probably use that list to put everything back when I am done.  I wish I had a hunch on which service it was.   We can make sure the service is set the same way as working computers,  we can check that the account the service uses is the same, and if needed replace the executable for the service with one from a working computer.
0
 
LVL 6

Expert Comment

by:tchamtieh
Comment Utility
When you look at the properties of the service and go to dependencies tab, it should give you a list of dependent services!! Try that.
0
 

Accepted Solution

by:
BuildingGreen earned 0 total points
Comment Utility
It turns out the web client service was responsible for the long login issue.  I have disabled the web client service company-wide and the problem is resolved.  I'm not sure, however, what suddenly caused the web client service to be such a trouble-maker.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now