Link to home
Create AccountLog in
Avatar of Gavin Tech
Gavin TechFlag for United Kingdom of Great Britain and Northern Ireland

asked on

domain user keeps on getting temp profile when he loggs on and profile has to be set up again

I am working in an XP win 2003 server environment.
One of my users has an issue where every morning he logs onto the domain his domain profile is not used but a "temp" one is created instead. This is not hapenning to any other user and he has had his profile deleted and and recreated but still a temp profileis created when he logs on.
plz help!
Avatar of losip
losip

Can you just check in his account properties in AD that his user profile path is set using a UNC format (\\servername\profiles\username) rather than using a mapped drive (P:\username)?

Also, check the permissions on the profile directory to make sure he has read and write access like all the other users.  If this is done through group membership, make sure he's member of that group.
Check network connectivity; permissions on the profile folder; that the path to the folder is valid (if you are using roaming profiles); and that the profile is not corrupt. If none of this solves the issue then delete all the profiles stored on the local PC and any remote profiles on the server, get the user to log on to the local PC and create a new profile and save back to the server.
Try to remove the profile from Domain, move user account to another group, or even you can search google for username entry in Registry, I dont remeber exactly but you have to remove username.000 or something.
Sounds like a permissions problem to me..

Is he (locally)  user, power user or administrator?
Check wehter the NFTS permissions on the Documents & settings folder are correct..
Avatar of Muhammad Farjad Arshad
check this

Firstly login to the system as a local administrator and then move on to c:\Document and Settings now here rename your old profile like abc-1 then logg off now login with the user name abc it will create your new profile now give this profile administrative rights on the system and copy all your data from abc-1 to abc account .

Note:
abc is the profile name by which you want to loggin

hope this will help you
https://www.experts-exchange.com/questions/26387944/Account-profile-damaged-keeps-opening-to-Temp.html
Avatar of Gavin Tech

ASKER

I have given him domain admin permissions and moved him around to differnt OU's to see the outcome also but the same occurs. He has local admin rights also.

Im sure I removed all local profiles and recreated his but that failed also.
thanks farjadarshad: but that did not work as i tried that
Get the user to log onto a different computer.  Does the account create a temporary profile on the different PC?

If the answer is yes then it is a problem with his profile and you need to see what groups he is in.  If the answer is no, then the probem is with the original PC and you need to look closely at the relationship between the users account and how its permissions interact on that PC.

Snibborg
losip: please can you explain how i configure this.

(\\servername\profiles\username) = \\local-compname\documents and settings\username

is the above correct?

Have you gone through the steps I outlined above? It sounds like a connectivity or permissions problem to me. Check that the machine and user account is valid in AD; Check that there is a network connection (can the user access network resources?); Check that the path to the profile is correct in the user properties; Check the permissions on the profile (Share and NTFS); If you still have problems delete all profiles belonging to the user on the PC and delete from the server - then log on, create new profile and copy back to server.
For instructions on creating Roaming Profiles look at http://support.microsoft.com/kb/324749
i will double check and go through the above again. he is not using a roaming profile so there should be nothing on the server right?
Try and delete any temp profile under c:\documents and settings otherwise go to regedit and make sure there are no temp profiles under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

If so delete any profiles that have the profileimagepath set to 'temp'
Sorry gpersand, my comment was applicable to roaming profiles and does not apply to local profiles.
Log on with admin account. Take a copy of Users work (saved in My Documents) and anything else they want saving such as IE favourites. Save these to server for later. Right click my computer>Properties>Advanced and under User Profiles click Settings. Select the users profile(s) and delete. Get them to log on, log off, and on again to check it all works. Copy all work etc. from server back to their local profile.
To answer your earlier question. If they don't have profiles configured in their user properties (in AD) they will use a local account stored on the local PC (any that they log on to). These will not be saved to a server.
Sorry above should have read: "they will use a local profile stored on the local PC"
run following

AntiVirus

1.Eset Nod32
2.Symantec Endpoint
3.Norton360
4.AVG
5.Kaspersky

Antispyware and Antimalware

1. Malewarebytes >>          http:www.malwarebytes.org
2. Superantispyware >>     http://www.superantispyware.com/
3. Hitmanpro's Surfright >> http://www.surfright.nl/en/hitmanpro
4. Hijack this >>                   http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html
5. Combofix >>                    http://www.bleepingcomputer.com/combofix/how-to-use-combofix
6. Bitdefender >>                http://kb.bitdefender.com/site/KnowledgeBase/consumer/#627
7. SPybot                            http://www.filehippo.com/download_spybot_search_destroy/
8. CCleaner                         http://www.filehippo.com/download_ccleaner/
9. Registry Cleaner             http://www.eusing.com/free_registry_cleaner/registry_cleaner.htm
thanks all , ill keep you posted.
First try to login from that user to other system.
I think it will not get the temp profile there
check the permissions an local policy for that system. may the user does not able to get write permission.

U can also try this
delete the user and create it again then login.
Ensure that the user is a member of the Domain Users group and that this group is a member of the local workstations' Users and Everyone groups.  Also try taking ownership of the user's profile folder structure (all sub-folders), then add the domain user account and apply to all files and folders.
If it is just on one machine this would make some sense that is is a local machine issue.  If it happens on every machine the user tries to login to, then it is an domain account issue.
If you are recreating the User's domain account, be sure that the old SID is not getting used on the local machine.  You should be able to isolate this in the local machine's registry.
thanks guys, the user in question is a very important member of our stockbroking firm and has not let me use his pc today but should be fine tomorrow where I will test
Process Monitor can enable boot logging, so you can see whats happening in EXTREME DETAIL............

Troubleshooting with Process Monitor
http://blogs.technet.com/b/askperf/archive/2007/06/01/troubleshooting-with-process-monitor.aspx

Options>Select Enable Boot Logging, and reboot.... After reboot, launch Procmon to compile the logs.....

Then you can look at the times to see if you have any permissions failures, by using the filtering/search above....

I would also look at the following. Steps through the login/profile location process of the logon.....

How to enable user environment debug logging in retail builds of ...
http://support.microsoft.com/kb/221833

How do you use userenv.log to troubleshoot
http://www.pcreview.co.uk/forums/thread-1529306.php

Understanding How to Read a Userenv Log – Part 1 - Ask the ...
http://blogs.technet.com/b/askds/archive/2008/11/11/understanding-how-to-read-a-userenv-log-part-1.aspx

Interpreting Userenv log files: Group Policy
http://technet.microsoft.com/en-us/library/cc786775(WS.10).aspx

You can do one thing, this has worked for me many times.

Run command chkdsk c: /F

This should resolve your problem.

ASKER CERTIFIED SOLUTION
Avatar of Gavin Tech
Gavin Tech
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer
The PC-Related result could still point to the local profile and not necesarily the PC itself.  After saving a copy of the user's profile, delete the active profile from the PC and have the user login to create a new one.  This should finalize whether the issue is profile or machine related.
yeah tried that a few times but same problem.
decided on a newbuild as solutions did not work for me