Link to home
Start Free TrialLog in
Avatar of Rob Samuel
Rob SamuelFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Help - AD domain user is being logged off PCs

I have an AD user that I've got a serious (and confusing) problem with...when the user signs into his PC he gets immediately signed out.

I tried repairing the Windows 10 start menu database (as that's what the errors first indicated), but that didn't work so I tried logging the user into a different PC and the same thing happens (and on 2 other Dell / HP desktops & 1x Windows 7 laptop). However, when I log in as that user onto my own laptop (MacBook Pro running Windows 10 in VMware Fusion) it works fine.

Attached are the only common logs I can see on each PC that I've tried to log the user into.

Does anyone have any ideas? The user is off today and back in the office tomorrow mid morning so I need to resolve the issue asap.

Thanks in advance!
SOLUTION
Avatar of Sam Simon Nasser
Sam Simon Nasser
Flag of Palestine, State of image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Rob Samuel

ASKER

Thanks Sam, I'll give that a try now...just looking on AD I can see two attributes that differ between this user and a working user:

mS-DS-ConsistenceGuid
userParameters
Screen-Shot-2018-02-21-at-13.23.17.png
Screen-Shot-2018-02-21-at-13.25.42.png
Hi Sam, would this still apply when I am logging the user onto a totally different Windows 10 PC for the first time?
@rob, it's preferred to use NTuser.dat of the same PC. as mentioned above, use admin user file to replace the NTuser.dat of the user.
for the above parameters, try copying them to notepad and save it, then clear them from the attributes, see if this makes a difference.
Thanks Sam, I'll try it on the PC now but I can't understand why it's happening when I log this user into someone else's Windows 10 PC for the first time (no previous profile for user present)...also, I've re-formatted/re-installed Windows 10 on this user's PC...give me 10 mins to try your recommendation and I'll let you know my findings.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Hello There
Hello There

McKnife comment from similar thread:
Symptoms point to drive letters being mixed up. Cure is to delete hklm\system\mounteddevices from a setup disk. Can add more tomorrow.
Otherwise just recreate the profile.
Hi,

I've spent some time on the user's PC and carried out the following steps but I'm still having this issue where the user is being logged off straight away:

NTuser.dat - Even though I only reinstalled Windows 10 on the user's PC yesterday afternoon, I have replaced the NTuser.dat file in the default profile folder, rebooted then tried to log in as the troublesome user.

HKLM/Software/Microsoft/Windows NT/CurrentVersion/Winlogon - I have checked this and the UserInit key does only contain C:Windows\system3\userinit.exe

AD attributes - I tried clearing both attributes, logged in as the user and still had the same issue.

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon - I can confirm that Shell=explorer.exe and Userinit = userinit.exe

HKLM\system\mounteddevices - The drives listed are similar to my own laptop so I can't see any issues there.

I'm running out of ideas now so I might have to create the user a fresh user profile then migrate all of his e-mails to the new profile, etc. It's a job I don't particulary want to do but I think it's the only way around it at this stage :(
Creating a new profile is the best for you here. Time spent on investigating and fixing this issue isn't worth the effort you would have to put in it.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks for your help guys, much appreciated! I have created a new profile and am in the process of exporting the old mailbox to a PST so I can import it into the new profile.