Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Laptops hang at "loading profile" after login w/ domain account when not on the domain

Posted on 2008-10-15
Medium Priority
Last Modified: 2011-10-19
Issue: Laptops hang at "loading profile" after login w/ domain account when not on the domain.
Laptop OS: Windows XP SP3
Domain Controller OS: Windows 2003 x64 SP2
Details: Laptops login fine when connected to the domain.
Recent Changes to Group Policy: none
Recent Software Installations: none
Other Recent Changes: I think DHCP and DNS was recently turned off on one of our servers.  Possibly also the server role was changed so it is no longer a domain controller.  We still have another domain controller running DHCP and DNS.  I will try to confirm these changes with the techs and get more details. Also there have been many Windows patches lately.
Possibly Related Event log messages:
- Event ID 1054, Source Userenv, User NT AUTHORITY\SYSTEM, Windows Cannot obtain the domain controller name for your computer network  (The specified domain either does not exist or could  not be contacted). Group Policy processing aborted.
- Event ID 1003, Source: Dhcp, User N/A, Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 0007E96DA6FE.  The following error occurred: The semaphore timeout period has expired.  Your computer will continue to try and obtain an address on it own from the network address (DHCP) server.
Question by:BuildingGreen
  • 5
  • 3

Expert Comment

ID: 22723589
I would suggest removing it from the domain and adding it again.

Author Comment

ID: 22724645
I removed one of the laptops from the domain and rebooted. When logging on locally with the local administrator account, it got stuck at "loading browser customizations" for 11 minutes before completing the login.  
I rejoined the laptop to the domain and rebooted.  I successfully logged in with several domain accounts and local accounts.  I shut down, removed the network cable and tried logging in with several domain accounts and local accounts, but each time the login got stuck at "loading your personal settings for 8-15 minutes" before completing the login.

Author Comment

ID: 22727240
On advice on someone on the Microsoft Forums, they suggested I turn on logging in the registry for the userenv.log file, which can be used to troubleshoot logon problems. I did so.  I renamed the old userenv.log file.  I booted up and the login took 15 minutes as usual. I have attached the userenv.log and also included the text of the file below...
USERENV(340.344) 17:04:33:629 CUserProfile::GetRefCountAndFlags: RegQueryValueEx failed, key = S-1-5-21-1899891192-439553545-622671684-4446, error = 00000002
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Can not get ref count and flags
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not available at startup. retrying
USERENV(340.57c) 17:04:35:832 RetryDCContactAtMachineStartup:  Failed to query GpNetworkStartTimeoutPolicyValue with 2, exit.
USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not available after retries.
USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not available. aborting
USERENV(36c.644) 17:06:37:156 UnloadUserProfile: received a NULL hProfile.
USERENV(340.344) 17:16:00:997 ReportError: Impersonating user.
USERENV(340.224) 17:16:32:452 ProcessGPOs: The DC for domain SERA-NT is not available. aborting

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Expert Comment

ID: 22733623
Do you have a lot of mapped drives onlogon? Is the userprofile too large? Try adding the domain user to the Administrators group on the local machine and see if that helps at all.

Author Comment

ID: 22734122
The number of mapped drives has not changed.  The issue is not userprofile specific as it happens with both large and small profiles, with domain profiles, local profiles, adminsitrator level profiles and power user level profiles.  It is happening with the local administrator account.
I moved one of the computers in question to a container with blocked inheritance and no group policy objects.  I restarted Windows and logged in with ethernet cable connected.  Then I shut down, removed the ethernet cable and tried logging in, but had the same problem.  So I have confirmed this is not group policy related.
I turned up the detail level for the userenv.log and attached the new file.


Author Comment

ID: 22736265

It looks like I have narrowed the problem down to a system service.   Eliminating half of the services at a time I should be able to find the problematic service after 7 tests (assuming it is only one particular service).  I can export the services to a CSV file and probably use that list to put everything back when I am done.  I wish I had a hunch on which service it was.   We can make sure the service is set the same way as working computers,  we can check that the account the service uses is the same, and if needed replace the executable for the service with one from a working computer.

Expert Comment

ID: 22736325
When you look at the properties of the service and go to dependencies tab, it should give you a list of dependent services!! Try that.

Accepted Solution

BuildingGreen earned 0 total points
ID: 22788247
It turns out the web client service was responsible for the long login issue.  I have disabled the web client service company-wide and the problem is resolved.  I'm not sure, however, what suddenly caused the web client service to be such a trouble-maker.

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?
Kernel Data Recovery is a renowned Data Recovery solution provider which offers wide range of softwares for both enterprise and home users with its cost-effective solutions. Let's have a quick overview of the journey and data recovery tools range he…

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question