Server 2008 folder rename error

We have a Citrix farm with five Windows Server 2008 servers. I have an issue with just one of the five servers. When I log into this server I always get logged in with a temp profile and I found that there is no profile folder in the C:\windows\users. Just to rule out permissions I tried to create a folder and I can create it but I cannot rename the folder I get the error "The file or folder does not exist." There is an audit error in the security log:

Log Name:           Security
Source:                 Microsoft-Windows-Security-Auditing
Date:                 7/21/2015 10:22:47 AM
Event ID:                 4656
Task Category:   File System
Level:                 Information
Keywords:           Audit Failure
User:                 N/A
Computer:           CitrixServer.Thedomain.com
Description:           A handle to an object was requested.

Subject:
      Security ID:              Domain\user
      Account Name:      user
      Account Domain:      Domain
      Logon ID:            0x21ecae2

Object:
      Object Server:      Security
      Object Type:              File
      Object Name:      C:\Windows\System32\compmgmt.msc
      Handle ID:              0x0

Process Information:
      Process ID:              0x47b0
      Process Name:      C:\Windows\System32\mmc.exe

Access Request Information:
      Transaction ID:      {00000000-0000-0000-0000-000000000000}
      Accesses:            READ_CONTROL
                                  SYNCHRONIZE
                                  WriteData (or AddFile)
                                  AppendData (or AddSubdirectory or CreatePipeInstance)
                                  WriteEA
                                  ReadAttributes
                                  WriteAttributes
                  
      Access Mask:                                        0x120196
      Privileges Used for Access Check:   -
      Restricted SID Count:                          0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
    <EventID>4656</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>12800</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8010000000000000</Keywords>
    <TimeCreated SystemTime="2015-07-21T14:22:47.779Z" />
    <EventRecordID>111716616</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="188" />
    <Channel>Security</Channel>
    <Computer>CitrixServer.TheDomain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="SubjectUserSid">S-1-5-21-1802200965-1025528083-318601546-26247</Data>
    <Data Name="SubjectUserName">user</Data>
    <Data Name="SubjectDomainName">Domain</Data>
    <Data Name="SubjectLogonId">0x21ecae2</Data>
    <Data Name="ObjectServer">Security</Data>
    <Data Name="ObjectType">File</Data>
    <Data Name="ObjectName">C:\Windows\System32\compmgmt.msc</Data>
    <Data Name="HandleId">0x0</Data>
    <Data Name="TransactionId">{00000000-0000-0000-0000-000000000000}</Data>
    <Data Name="AccessList">%%1538
                  %%1541
                  %%4417
                  %%4418
                  %%4420
                  %%4423
                  %%4424
                  </Data>
    <Data Name="AccessMask">0x120196</Data>
    <Data Name="PrivilegeList">-</Data>
    <Data Name="RestrictedSidCount">0</Data>
    <Data Name="ProcessId">0x47b0</Data>
    <Data Name="ProcessName">C:\Windows\System32\mmc.exe</Data>
  </EventData>
</Event>
Daniel UsreyServer Operations Engineer IIAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Radhakrishnan RSenior Technical LeadCommented:
Hi,

Correct me if i am wrong. The user profile location would be C:\Users but I assume you are looking into C:\Windows\Users?

Is the profile listed under>>Control Panel>>User Accounts>>Configure Advanced User profile properties>>Delete the temp profile, log off and login. Is that working?
0
Daniel UsreyServer Operations Engineer IIAuthor Commented:
You are correct. Sorry about that.
0
Mark GalvinManaging Director / Principal ConsultantCommented:
Hi

Sometimes, even after removing the profile the correct way, the system will keep a record in the registry. Browse to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList

Look for the user's SID listed there (if you click on them you can see which profile its for in the right hand pane), and see if you can find one that ends in .BAK. For example (xxx replacing the LONG SID): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-xxxxx-xxxx.bak

Delete the .bak version and nothing else. Then try and log in with the user.

Thanks
Mark
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Daniel UsreyServer Operations Engineer IIAuthor Commented:
Already been there is no SID for my user there. Part of the reason I think is because the system cannot create the profile folder because of the error I first mentioned. So when I get logged in there is no profile folder and no SID in the profile list.
0
Mark GalvinManaging Director / Principal ConsultantCommented:
This might be of use:
http://eventid.net/display-eventid-4656-source-Microsoft-Windows-Security-Auditing-eventno-10829-phase-1.htm

Although it mentions Vista, its worth a try.

Thanks
Mark
0
Daniel UsreyServer Operations Engineer IIAuthor Commented:
Been to that link already, it talks about configuring audit policy and if you do not want to see the events how to turn them off.
0
Radhakrishnan RSenior Technical LeadCommented:
Hi,

Is there any user profile related error in the event logs? if not, i'm doubt that you have profile corruption but something else.

Is the DNS set correctly in the NIC properties? worth to verify.
0
Daniel UsreyServer Operations Engineer IIAuthor Commented:
The only events relating to my profile are 1511 and 1505. This is working for other users. I am one of the administrators and as far as I know this is only happening to me. Not a corrupt profile when there does not seem to be one.  I can open the user profiles under system properties and there is no profile for my user, there is no SID in the registry under the profile list and no profile folder under C:\users.
0
Mark GalvinManaging Director / Principal ConsultantCommented:
Silly question, but I presume that the hard disk has not run out of disk space?
0
Daniel UsreyServer Operations Engineer IIAuthor Commented:
No it is 120 GB with 55 GB of free space. I have already been all over this before I posted the question here. I believe the problem is with the error I get when I try to create and change the name of a folder on the server. I can create the folder but when I try to rename it I get this error "The file or folder does not exist." The folder will remain as New Folder and I can delete it but I cannot rename it. So when I log in the profile folder cannot be created with my user name.
0
David Johnson, CD, MVPOwnerCommented:
The permissions for C:\Users may be wrong.
Everyone and Users should have: Read and Execute, List Folder Contents,Read
System Full Control
Administrators Full Control
The Owner should be SYSTEM
0
Daniel UsreyServer Operations Engineer IIAuthor Commented:
Thanks David but the file rights are correct. Again this is working for other users so if it was a right issue then it would be affecting all users not just me.
0
Daniel UsreyServer Operations Engineer IIAuthor Commented:
Nothing like overlooking the obvious. I started to compare the default user profiles on all five of the Citrix servers and this particular one looked okay but It must have had some corruption. I renamed it and copied the default profile from one of the other servers and now it is working. This would not have affected the regular Citrix users as they are using roaming profiles that are stored on a separate server. The other administrators were not having this issue because their profiles were already created and so there was no need for them to interact with the default profile. Anyway problem solved. Thanks for the suggestions and comments.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Daniel UsreyServer Operations Engineer IIAuthor Commented:
Replacing the default profile folder on the server was the solution for my problem.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.