Intermittent roaming profile error 1521 Windows 7, Server 2008 R2 RODC

Posted on 2011-10-06
Last Modified: 2012-05-12

We have a strange problem with a remote network running on a Read Only Domain Controller; sometimes, when a user logs in their roaming profile fails to load, causing them to fall back to a local profile (and preventing access to shares on the network). The error from Event Viewer shows the following:

Error ID 1521
Access Denied

The permissions to the profiles must be correct as users often manage to log in completely normally. I have yet to find any consistent pattern to the problem.

The client PCs are all running Windows 7 Pro and the RODC is running Windows 2008 R2. We have three DCs on the main network, 2 x Win 2003, 1 x Win 2008 R2

Can anyone help?
Question by:Richard_Macbeth
    LVL 9

    Expert Comment

    Try to remove the particulat client machine from the domain and put it back also try disabling the firewall if any on the client.

    Also make sure that you have latest patches installed on the machines.

    If still issue persist, please attach the complete event log and also want to know that the issue is with the selected user or it is randomly selected users.

    Sometimes it also happens due to network issue, so please check this aswell.(the connectivity between the client and server).
    LVL 1

    Author Comment

    I will try removing and re-adding the PC, however:

    - The domain firewall is already disabled
    - The PCs are all patched up to date
    - I certainly don't have any evidence of a network problem - I can RDP to the workstations and the RODC
    - This happens with different users and different PCs apparently at random.
    - I don't think that there are any other relevant error messages in the logs, but I'll try and get them together anyway
    LVL 1

    Accepted Solution

    We eventually gave up on this, demoted the sever and promoted it to a full DC - it's fine now. I suspect some kind of permissions issue or something along those lines, but we never did find out for sure.
    LVL 1

    Author Closing Comment

    No solution found - eventually gave up and converted to a full DC instead. Other sites have working RODCs.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Suggested Solutions

    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    Article by: Lee
    Windows 7 Ultimate and Enterprise (and 2008 R2) introduced a new feature you may not be aware of - Boot from VHD.   Boot from VHD (or what Microsoft refers to asNative Boot allows you to install Windows to a VHD (Virtual Hard Disk) file that is t…
    This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
    This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now