Solved

Laptops hang at "loading profile" after login w/ domain account when not on the domain

Posted on 2008-10-15
8
507 Views
Last Modified: 2011-10-19
Issue: Laptops hang at "loading profile" after login w/ domain account when not on the domain.
Laptop OS: Windows XP SP3
Domain Controller OS: Windows 2003 x64 SP2
Details: Laptops login fine when connected to the domain.
Recent Changes to Group Policy: none
Recent Software Installations: none
Other Recent Changes: I think DHCP and DNS was recently turned off on one of our servers.  Possibly also the server role was changed so it is no longer a domain controller.  We still have another domain controller running DHCP and DNS.  I will try to confirm these changes with the techs and get more details. Also there have been many Windows patches lately.
Possibly Related Event log messages:
- Event ID 1054, Source Userenv, User NT AUTHORITY\SYSTEM, Windows Cannot obtain the domain controller name for your computer network  (The specified domain either does not exist or could  not be contacted). Group Policy processing aborted.
- Event ID 1003, Source: Dhcp, User N/A, Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 0007E96DA6FE.  The following error occurred: The semaphore timeout period has expired.  Your computer will continue to try and obtain an address on it own from the network address (DHCP) server.
0
Comment
Question by:BuildingGreen
  • 5
  • 3
8 Comments
 
LVL 6

Expert Comment

by:tchamtieh
ID: 22723589
I would suggest removing it from the domain and adding it again.
0
 

Author Comment

by:BuildingGreen
ID: 22724645
I removed one of the laptops from the domain and rebooted. When logging on locally with the local administrator account, it got stuck at "loading browser customizations" for 11 minutes before completing the login.  
I rejoined the laptop to the domain and rebooted.  I successfully logged in with several domain accounts and local accounts.  I shut down, removed the network cable and tried logging in with several domain accounts and local accounts, but each time the login got stuck at "loading your personal settings for 8-15 minutes" before completing the login.
0
 

Author Comment

by:BuildingGreen
ID: 22727240
On advice on someone on the Microsoft Forums, they suggested I turn on logging in the registry for the userenv.log file, which can be used to troubleshoot logon problems. I did so.  I renamed the old userenv.log file.  I booted up and the login took 15 minutes as usual. I have attached the userenv.log and also included the text of the file below...
USERENV(340.344) 17:04:33:629 CUserProfile::GetRefCountAndFlags: RegQueryValueEx failed, key = S-1-5-21-1899891192-439553545-622671684-4446, error = 00000002
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Can not get ref count and flags
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not available at startup. retrying
USERENV(340.57c) 17:04:35:832 RetryDCContactAtMachineStartup:  Failed to query GpNetworkStartTimeoutPolicyValue with 2, exit.
USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not available after retries.
USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not available. aborting
USERENV(36c.644) 17:06:37:156 UnloadUserProfile: received a NULL hProfile.
USERENV(340.344) 17:16:00:997 ReportError: Impersonating user.
USERENV(340.224) 17:16:32:452 ProcessGPOs: The DC for domain SERA-NT is not available. aborting

userenv.log
0
 
LVL 6

Expert Comment

by:tchamtieh
ID: 22733623
Do you have a lot of mapped drives onlogon? Is the userprofile too large? Try adding the domain user to the Administrators group on the local machine and see if that helps at all.
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 

Author Comment

by:BuildingGreen
ID: 22734122
The number of mapped drives has not changed.  The issue is not userprofile specific as it happens with both large and small profiles, with domain profiles, local profiles, adminsitrator level profiles and power user level profiles.  It is happening with the local administrator account.
I moved one of the computers in question to a container with blocked inheritance and no group policy objects.  I restarted Windows and logged in with ethernet cable connected.  Then I shut down, removed the ethernet cable and tried logging in, but had the same problem.  So I have confirmed this is not group policy related.
I turned up the detail level for the userenv.log and attached the new file.

verbose-userenv.log
0
 

Author Comment

by:BuildingGreen
ID: 22736265

It looks like I have narrowed the problem down to a system service.   Eliminating half of the services at a time I should be able to find the problematic service after 7 tests (assuming it is only one particular service).  I can export the services to a CSV file and probably use that list to put everything back when I am done.  I wish I had a hunch on which service it was.   We can make sure the service is set the same way as working computers,  we can check that the account the service uses is the same, and if needed replace the executable for the service with one from a working computer.
0
 
LVL 6

Expert Comment

by:tchamtieh
ID: 22736325
When you look at the properties of the service and go to dependencies tab, it should give you a list of dependent services!! Try that.
0
 

Accepted Solution

by:
BuildingGreen earned 0 total points
ID: 22788247
It turns out the web client service was responsible for the long login issue.  I have disabled the web client service company-wide and the problem is resolved.  I'm not sure, however, what suddenly caused the web client service to be such a trouble-maker.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
implementing group policy without server reboot 9 61
Server 2003 x64 upgrade question 10 45
Add user group members to local Administrators 2 49
Can’t delete a file 14 143
Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now