[TechEmperor]

Heh good luck. I can see the point about not allowing users to install software, but if you make them power users they can install anyway. Luckily our environment is one in which the users are able to have a reasonable degree of freedom and so are allowed to install software locally. Not like a call center or anything where the cube monkeys have to be kept in check.

[chuckhole]

The idea behind adding a user back into a roaming profile and then cleanly removing it was to refresh the local registry and profile settings. This may help clean up any remnants that could cause problems. Kind of like reinstalling software so that it can be properly uninstalled.

This path: \\NASSAUSERVER\netlogon\Default User
Does not exist. There is nothing but logon scripts in the netlogon folder.

I would hope so but you never know... however, it is puzzling as to why your PC was looking for it.

These are PC's that I have imaged and are SYSPREPed.

Excellent. I have also found where it is best to remove the computer from the domain before running SYSPREP.

[QUOTE=scobeedoo_157]Also on all the old machines everyone was set as local admins. I was logging on their new machines and setting them up as Power Users. I thought maybe it didn't like that either.
Possibly the SID is corrupt - somewhere along the line?[QUOTE]

Even non-admin accounts can add computers to a domain but the default limit is 10 times. You can change this as well. Being a Domain Admin is not required for the computers to synchronize their Kerberos key. This is a SYSTEM function.

It is only happening to users in one OU. I am thinking it could be the mapping of the Desktop and not being local admin?

I have two other OU's that map My Docs and Desktop but they have local admin rights.

Now this is really important. Is this the only group that can not save profiles? In ADU&C, right click on the OU and select properties. Open the Group Policy Manager and see what GPO's are being applied to that OU. Are they ENFORCED? Review the Details of the policies to see what changes are being applied. If you have to, move the users out of the OU, delete the OU and recreate it. The move your users back into the OU.

A note about GPO's: You stated that your PDC is a Windows 2003 server but your clients are Windows 2000? The templates (ADM files) that come with W2k3 are geared more towards Windows XP. You may want to review the templates that came with Windows 2000 server for differences. Generally, your would see more problems in the reverse situation though.

You should be able to get this working properly for your users without having to add users to the Local Administrators group. If your company policy is OK with it then do so, but from a technical standpoint, it is not a requirement. We have over 1500 PC's in our domain that run just fine without users being local Administrators. Power Users membership is pretty much a requirement.

[scoobydoo_157]

Two people this morning had their profiles reset.
One user is one of the ones where I deleted the computer/user from AD and created a new username. So this can't be a remnent bad roaming profile issue.

USERENV(580.74) 12:43:50:236 RegisterGPNotification: CreateEvent failed with 5
USERENV(660.59c) 11:33:38:826 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-186617772-1385606432-3750166687-1386, error 3
USERENV(660.59c) 11:33:59:842 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-186617772-1385606432-3750166687-1124, error 3
USERENV(ac.544) 11:40:37:779 ProcessGPOs: Extension Folder Redirection ProcessGroupPolicy failed, status 0x51b.
USERENV(690.5e0) 11:41:11:498 RegisterGPNotification: CreateEvent failed with 5



The other user was one where I deleted just the local profile off the PC and set her backup.

Desktop redirection is off. But these users were not local admins - looks like I will have to make them local admins.

[scoobydoo_157]

GPO for that OU is Link Enabled not Enforced.

Security Filtering is for Authenticated Users - Allowed Permissions - Read

[chuckhole]

Sorry, I messed up on your quote. The line I was going after was this one:

It is only happening to users in one OU. I am thinking it could be the mapping of the Desktop and not being local admin?

Maybe my response would make a little more sense. Is this the case? If so, there has to be a GPO being applied to that OU (or at least used to be) that is causing the problem.

GPO's can have three basic actions: IGNORE, YES/ENABLE, NO/DISABLE.

If you change a GPO from YES or NO to IGNORE, the setting will remain in effect on the PC's or users that it has already applied to. From that point on, it will not apply the previous setting. If you want to change a setting from YES, you have to apply NO and then IGNORE (or NO to YES then IGNORE). In either case, you apply the opposite to enforce a change. This is what makes chasing ghosts so difficult. The GPO templates (ADM files) typically get updated when you apply service packs. Each GPO will keep a copy of the ADM file that it was originally loaded with but if you reload a template or remove a template, the settings created by the previous template remain in effect until the opposite setting is enforced.

Based on some of the other results in your USERENV.LOG (referring to folders that do not exist), there is a ghost setting that is being applied.

The best way to tell is to move a user out of the OU that is causing trouble. Rename the user profile on the PC and then logon clean with that user.

[scoobydoo_157]

About an hour ago I had an user profile reset again and this time it was one that had local Admin rights.

I create a new OU with a new policy linked to only that OU to map My Docs.
I moved that one person in the new OU to see what happens.

Their USERENV.LOG:

USERENV(b0.8c) 15:40:37:562 LibMain: Process Name: \? \C:\WINNT\system32\winlogon.exe
USERENV(e4.e0) 15:40:39:453 LibMain: Process Name: C:\WINNT\system32\services.exe
USERENV(f0.ec) 15:40:39:812 LibMain: Process Name: C:\WINNT\system32\lsass.exe
USERENV(f0.ec) 15:40:43:937 LibMain: Process Name: C:\WINNT\system32\lsass.exe
USERENV(e4.160) 15:40:47:500 GetHkeyCU: RegOpenKey failed with error 2
USERENV(198.190) 15:40:48:812 LibMain: Process Name: C:\WINNT\system32\svchost.exe
USERENV(1f4.200) 15:40:55:765 LibMain: Process Name: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
USERENV(208.210) 15:40:57:390 LibMain: Process Name: C:\Program Files\Symantec AntiVirus\DefWatch.exe
USERENV(22c.25c) 15:40:58:328 LibMain: Process Name: C:\WINNT\SYSTEM32\DWRCS.EXE
USERENV(b0.248) 15:41:00:828 ApplyGroupPolicy: Entering. Flags = 7
USERENV(b0.248) 15:41:00:828 ProcessGPOs:
USERENV(b0.248) 15:41:00:828 ProcessGPOs:
USERENV(b0.248) 15:41:00:828 ProcessGPOs: Starting computer Group Policy processing...
USERENV(b0.248) 15:41:00:843 ProcessGPOs:
USERENV(b0.248) 15:41:00:843 ProcessGPOs:
USERENV(b0.248) 15:41:00:843 EnterCriticalPolicySection: Machine critical section has been claimed. Handle = 0x3bc
USERENV(b0.248) 15:41:00:890 ProcessGPOs: Machine role is 2.
USERENV(b0.248) 15:41:01:703 PingComputer: PingBufferSize set as 2048
USERENV(b0.248) 15:41:01:703 PingComputer: First time: 0
USERENV(b0.248) 15:41:01:718 PingComputer: Fast link. Exiting.
USERENV(2a4.2b0) 15:41:04:890 LibMain: Process Name: C:\Program Files\Symantec\Ghost\ngctw32.exe
USERENV(b0.248) 15:41:04:937 ProcessGPOs: User name is: CN=BCS-C007,CN=Computers,DC=OLYMPUS, Domain name is: OLYMPUS
USERENV(b0.248) 15:41:04:953 ProcessGPOs: Domain controller is: \\zeus.OLYMPUS Domain DN is OLYMPUS
USERENV(b0.248) 15:41:04:953 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(b0.248) 15:41:04:953 GetGPOInfo: ********************************
USERENV(b0.248) 15:41:04:968 GetGPOInfo: Entering...
USERENV(b0.248) 15:41:05:328 GetGPOInfo: Server connection established.
USERENV(b0.248) 15:41:05:359 GetGPOInfo: Bound successfully.
USERENV(b0.248) 15:41:05:375 SearchDSObject: Searching <DC=OLYMPUS>
USERENV(b0.248) 15:41:05:375 SearchDSObject: Found GPO(s):

<[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=OLYMPUS;0]>
USERENV(b0.248) 15:41:05:375 ProcessGPO: ==============================
USERENV(b0.248) 15:41:05:390 ProcessGPO: Deferring search for

<LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=OLYMPUS>
USERENV(b0.248) 15:41:05:421 SearchDSObject: Searching <CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=OLYMPUS>
USERENV(b0.248) 15:41:05:421 SearchDSObject: No GPO(s) for this object.
USERENV(b0.248) 15:41:05:421 EvaluateDeferredGPOs: Searching for GPOs in cn=policies,cn=system,DC=OLYMPUS
USERENV(b0.248) 15:41:05:437 ProcessGPO: ==============================
USERENV(b0.248) 15:41:05:437 ProcessGPO: Searching <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=OLYMPUS>
USERENV(b0.248) 15:41:05:437 ProcessGPO: Machine has access to this GPO.
USERENV(b0.248) 15:41:05:453 ProcessGPO: Found functionality version of: 2
USERENV(b0.248) 15:41:05:453 ProcessGPO: Found file system path of:

<\\OLYMPUS\sysvol\OLYMPUS\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(b0.248) 15:41:05:500 ProcessGPO: Found common name of: <{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(b0.248) 15:41:05:500 ProcessGPO: Found display name of: <Default Domain Policy>
USERENV(b0.248) 15:41:05:500 ProcessGPO: Found machine version of: GPC is 44, GPT is 44
USERENV(b0.248) 15:41:05:515 ProcessGPO: Found flags of: 0
USERENV(b0.248) 15:41:05:515 ProcessGPO: Found extensions:

[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA

-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-00C04FB94F17}]
USERENV(b0.248) 15:41:05:515 ProcessGPO: ==============================
USERENV(b0.248) 15:41:05:562 GetGPOInfo: Leaving with 1
USERENV(b0.248) 15:41:05:562 GetGPOInfo: ********************************
USERENV(b0.248) 15:41:05:562 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
USERENV(b0.248) 15:41:05:578 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:578 ProcessGPOs: Processing extension Registry
USERENV(b0.248) 15:41:05:578 CompareGPOLists: The lists are the same.
USERENV(b0.248) 15:41:05:593 CheckGPOs: No GPO changes and no security group membership change and extension Registry has NoGPOChanges set.
USERENV(b0.248) 15:41:05:593 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:593 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:593 ProcessGPOs: Processing extension Folder Redirection
USERENV(b0.248) 15:41:05:609 ProcessGPOs: Extension Folder Redirection skipped with flags 0x7.
USERENV(b0.248) 15:41:05:609 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:609 ProcessGPOs: Processing extension Microsoft Disk Quota
USERENV(b0.248) 15:41:05:625 CompareGPOLists: The lists are the same.
USERENV(b0.248) 15:41:05:625 CheckGPOs: No GPO changes but couldn't read extension Microsoft Disk Quota's status or policy time.
USERENV(b0.248) 15:41:05:625 ProcessGPOs: Extension Microsoft Disk Quota skipped because both deleted and changed GPO lists are empty.
USERENV(b0.248) 15:41:05:625 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:640 ProcessGPOs: Processing extension Scripts
USERENV(b0.248) 15:41:05:640 CompareGPOLists: The lists are the same.
USERENV(b0.248) 15:41:05:640 CheckGPOs: No GPO changes but couldn't read extension Scripts's status or policy time.
USERENV(b0.248) 15:41:05:656 ProcessGPOs: Extension Scripts skipped because both deleted and changed GPO lists are empty.
USERENV(b0.248) 15:41:05:656 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:656 ProcessGPOs: Processing extension Security
USERENV(b0.248) 15:41:05:656 CompareGPOLists: The lists are the same.
USERENV(b0.248) 15:41:05:671 CheckGPOs: No GPO changes and no security group membership change and extension Security has NoGPOChanges set.
USERENV(b0.248) 15:41:05:671 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:671 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:687 ProcessGPOs: Processing extension Internet Explorer Branding
USERENV(b0.248) 15:41:05:687 ProcessGPOs: Extension Internet Explorer Branding skipped with flags 0x7.
USERENV(b0.248) 15:41:05:687 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:687 ProcessGPOs: Processing extension EFS recovery
USERENV(b0.248) 15:41:05:703 CompareGPOLists: The lists are the same.
USERENV(b0.248) 15:41:05:703 CheckGPOs: No GPO changes and no security group membership change and extension EFS recovery has NoGPOChanges

set.
USERENV(b0.248) 15:41:05:703 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:703 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:718 ProcessGPOs: Processing extension Application Management
USERENV(b0.248) 15:41:05:718 CompareGPOLists: The lists are the same.
USERENV(b0.248) 15:41:05:718 CheckGPOs: No GPO changes but couldn't read extension Application Management's status or policy time.
USERENV(b0.248) 15:41:05:734 ProcessGPOs: Extension Application Management skipped because both deleted and changed GPO lists are empty.
USERENV(b0.248) 15:41:05:734 ProcessGPOs: -----------------------
USERENV(b0.248) 15:41:05:734 ProcessGPOs: Processing extension IP Security
USERENV(b0.248) 15:41:05:734 CompareGPOLists: The lists are the same.
USERENV(b0.248) 15:41:05:750 CheckGPOs: No GPO changes but couldn't read extension IP Security's status or policy time.
USERENV(b0.248) 15:41:05:750 ProcessGPOs: Extension IP Security skipped because both deleted and changed GPO lists are empty.
USERENV(b0.248) 15:41:05:750 LeaveCriticalPolicySection: Critical section 0x3bc has been released.
USERENV(b0.248) 15:41:05:765 ProcessGPOs: Computer Group Policy has been applied.
USERENV(b0.248) 15:41:05:765 ProcessGPOs: Leaving with 1.
USERENV(b0.248) 15:41:05:765 ApplyGroupPolicy: Leaving successfully.
USERENV(b0.1e8) 15:41:08:031 GPOThread: Next refresh will happen in 93 minutes
USERENV(318.314) 15:41:09:109 LibMain: Process Name: C:\WINNT\system32\MSTask.exe
USERENV(244.324) 15:41:10:343 LibMain: Process Name: C:\WINNT\System32\svchost.exe
USERENV(2f8.30c) 15:41:10:687 LibMain: Process Name: C:\Program Files\Symantec AntiVirus\SavRoam.exe
USERENV(364.360) 15:41:17:015 LibMain: Process Name: C:\Program Files\Symantec AntiVirus\Rtvscan.exe
USERENV(3b8.3bc) 15:41:25:315 LibMain: Process Name: C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
USERENV(394.39c) 15:41:28:033 LibMain: Process Name: C:\WINNT\system32\svchost.exe
USERENV(3f8.3f4) 15:41:31:471 LibMain: Process Name: C:\Program Files\Windows Defender\MsMpEng.exe
USERENV(244.298) 15:41:33:362 LibMain: Process Name: C:\WINNT\System32\svchost.exe
USERENV(244.4a8) 15:41:46:690 GetHkeyCU: RegOpenKey failed with error 2
USERENV(1cc.550) 15:41:54:924 LibMain: Process Name: C:\WINNT\system32\spoolsv.exe
USERENV(43c.438) 15:41:56:393 LibMain: Process Name: C:\WINNT\System32\WBEM\WinMgmt.exe
USERENV(384.420) 15:42:20:424 LibMain: Process Name: C:\WINNT\System32\WBEM\WinMgmt.exe
USERENV(b0.8c) 15:43:12:955 ================================================== =======
USERENV(b0.8c) 15:43:13:127 LoadUserProfile: Entering, hToken = <0x36c>, lpProfileInfo = 0x6f648
USERENV(b0.8c) 15:43:13:127 LoadUserProfile: Entering, hToken = <0x36c>, lpProfileInfo = 0x6f648
USERENV(b0.8c) 15:43:13:143 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(b0.8c) 15:43:13:143 LoadUserProfile: lpProfileInfo->lpUserName = <mlieber>
USERENV(b0.8c) 15:43:13:143 LoadUserProfile: NULL central profile path
USERENV(b0.8c) 15:43:13:143 LoadUserProfile: lpProfileInfo->lpDefaultPath = <\\ZEUS\netlogon\Default User>
USERENV(b0.8c) 15:43:13:158 LoadUserProfile: NULL server name
USERENV(b0.8c) 15:43:13:252 GetUserMutex: entering
USERENV(b0.8c) 15:43:13:690 GetUserMutex: Waiting...
USERENV(b0.8c) 15:43:13:705 GetUserMutex: Wait succeeded. Mutex currently held.
USERENV(b0.8c) 15:43:13:971 RestoreUserProfile: Entering
USERENV(b0.8c) 15:43:13:971 RestoreUserProfile: User is a Admin
USERENV(b0.8c) 15:43:13:987 IsCentralProfileReachable: Entering
USERENV(b0.8c) 15:43:13:987 IsCentralProfileReachable: Null path. Leaving
USERENV(b0.8c) 15:43:13:987 RestoreUserProfile: Profile path = <>
USERENV(b0.8c) 15:43:13:987 ExtractProfileFromBackup: A profile already exists
USERENV(b0.8c) 15:43:14:002 PatchNewProfileIfRequred: A profile already exists with the current sid, exitting
USERENV(b0.8c) 15:43:14:002 CreateLocalProfileKey: Not setting additional Security
USERENV(b0.8c) 15:43:14:002 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(b0.8c) 15:43:14:018 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and

Settings\mlieber.OLYMPUS>
USERENV(b0.8c) 15:43:14:018 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and

Settings\mlieber.OLYMPUS>
USERENV(b0.8c) 15:43:14:018 GetExistingLocalProfileImage: No local mandatory profile. Error = 2

[scoobydoo_157]

USERENV(b0.8c) 15:43:14:018 GetExistingLocalProfileImage: Local profile image filename we got from our profile list doesn't exit.

<C:\Documents and Settings\mlieber.OLYMPUS\ntuser.dat> Error = 32
USERENV(b0.8c) 15:43:14:471 CreateLocalProfileKey: Not setting additional Security
USERENV(b0.8c) 15:43:14:487 CreateLocalProfileImage: One way or another we haven't got an existing local profile, try and create one
USERENV(b0.8c) 15:43:14:502 GetUserDomainName: DomainName = <OLYMPUS>
USERENV(b0.8c) 15:43:14:502 CreateSecureDirectory: Entering with <C:\Documents and Settings\mlieber.OLYMPUS.000>
USERENV(b0.8c) 15:43:14:502 CreateSecureDirectory: Created the directory <C:\Documents and Settings\mlieber.OLYMPUS.000>
USERENV(b0.8c) 15:43:14:518 ComputeLocalProfileName: generated the profile directory <C:\Documents and Settings\mlieber.OLYMPUS.000>
USERENV(b0.8c) 15:43:15:174 Creating Local Profile
USERENV(b0.8c) 15:43:15:174 Local profile name is <C:\Documents and Settings\mlieber.OLYMPUS.000>
USERENV(b0.8c) 15:43:15:174 RestoreUserProfile: Working with a new user. Go straight to issuing a default profile.
USERENV(b0.8c) 15:43:15:174 RestoreUserProfile: Issuing default profile
USERENV(b0.8c) 15:43:15:190 CheckNetDefaultProfile: Entering, lpNetPath = <\\ZEUS\netlogon\Default User>
USERENV(b0.8c) 15:43:15:190 CheckXForestLogon: checking x-forest logon, user handle = 876
USERENV(b0.8c) 15:43:16:127 MyGetDomainDNSName: Successfully determined fqdn CN=Melanie Lieber,OU=Classified,OU=Bohemia,DC=OLYMPUS
USERENV(b0.8c) 15:43:16:127 MyGetDomainDNSName: Successfully obtained domain dns name OLYMPUS
USERENV(b0.8c) 15:43:16:127 CheckXForestLogon: not XForest logon.
USERENV(b0.8c) 15:43:16:205 CheckNetDefaultProfile: setting default profile to NULL
USERENV(b0.8c) 15:43:16:596 CheckNetDefaultProfile: Removing local copy of network default user profile.
USERENV(b0.8c) 15:43:16:612 Delnode_Recurse: Entering, lpDir = <C:\Documents and Settings\Default User (Network)>
USERENV(b0.8c) 15:43:16:612 CheckNetDefaultProfile: Leaving with a value of 0.
USERENV(b0.8c) 15:43:16:815 IssueDefaultProfile: Entering. LpDefaultProfile = <C:\Documents and Settings\Default User> lpLocalProfile =

<C:\Documents and Settings\mlieber.OLYMPUS.000>
USERENV(b0.8c) 15:43:16:815 CopyProfileDirectoryEx: Entering, lpSourceDir = <C:\Documents and Settings\Default User>, lpDestinationDir =

<C:\Documents and Settings\mlieber.OLYMPUS.000>, dwFlags = 0xc8101
USERENV(b0.8c) 15:43:16:893 RecurseDirectory: Adding C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\ to

the list of directories
USERENV(b0.8c) 15:43:16:893 RecurseDirectory: Adding C:\Documents and Settings\Default User\Application Data\Microsoft\ to the list of

directories

[scoobydoo_157]

USERENV(b0.8c) 15:43:19:580 CopyProfileDirectoryEx: Setting Directory TimeStamps all Directories
USERENV(b0.8c) 15:43:19:612 CopyProfileDirectoryEx: Set times on all directories
USERENV(b0.8c) 15:43:19:612 CopyProfileDirectoryEx: Leaving with a return value of 1
USERENV(b0.8c) 15:43:21:783 MyRegLoadKey: Mutex released. Returning 0.
USERENV(b0.8c) 15:43:21:783 IssueDefaultProfile: Leaving successfully
USERENV(b0.8c) 15:43:21:799 RestoreUserProfile: Successfully setup the local default.
USERENV(b0.8c) 15:43:21:799 SetupNewHive: Entering
USERENV(b0.8c) 15:43:21:799 SetDefaultUserHiveSecurity: Entering
USERENV(b0.8c) 15:43:21:830 SecureUserKey: Entering
USERENV(b0.8c) 15:43:21:846 SecureUserKey: Leaving with a return value of 1
USERENV(b0.8c) 15:43:21:846 SecureUserKey: Entering
USERENV(b0.8c) 15:43:21:846 SecureUserKey: Leaving with a return value of 1
USERENV(b0.8c) 15:43:22:393 SetupNewHive: Leaving with a return value of 1
USERENV(b0.8c) 15:43:22:877 MyRegLoadKey: Mutex released. Returning 0.
USERENV(b0.8c) 15:43:22:877 CreateClassHive: existing user classes hive not found
USERENV(b0.8c) 15:43:22:893 SetDefaultUserHiveSecurity: Entering
USERENV(b0.8c) 15:43:22:893 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(b0.8c) 15:43:22:893 Profile was successfully loaded.
USERENV(b0.8c) 15:43:22:893 lpProfile->lpRoamingProfile = <>
USERENV(b0.8c) 15:43:22:908 lpProfile->lpLocalProfile = <C:\Documents and Settings\mlieber.OLYMPUS.000>
USERENV(b0.8c) 15:43:22:908 lpProfile->dwInternalFlags = 0x304
USERENV(b0.8c) 15:43:22:908 RestoreUserProfile: Leaving.
USERENV(b0.8c) 15:43:22:955 UpgradeProfile: Entering
USERENV(b0.8c) 15:43:23:158 UpgradeProfile: Build numbers match
USERENV(b0.8c) 15:43:23:158 UpgradeProfile: Leaving Successfully
USERENV(b0.8c) 15:43:23:158 LoadUserProfile: Releasing mutex.
USERENV(b0.8c) 15:43:23:174 LoadUserProfile: Leaving with a value of 1.
USERENV(b0.8c) 15:43:23:174 LoadUserProfile: hProfile = <0x384>
USERENV(b0.8c) 15:43:23:174 ================================================== =======
USERENV(b0.5ac) 15:43:23:940 ApplyGroupPolicy: Entering. Flags = 6
USERENV(b0.5ac) 15:43:23:940 ProcessGPOs:
USERENV(b0.5ac) 15:43:23:955 ProcessGPOs:
USERENV(b0.5ac) 15:43:23:955 ProcessGPOs: Starting user Group Policy processing...
USERENV(b0.5ac) 15:43:23:955 ProcessGPOs:
USERENV(b0.5ac) 15:43:23:955 ProcessGPOs:
USERENV(b0.5ac) 15:43:23:971 EnterCriticalPolicySection: User critical section has been claimed. Handle = 0x334
USERENV(b0.5ac) 15:43:23:971 ProcessGPOs: Machine role is 2.
USERENV(b0.5ac) 15:43:23:971 PingComputer: PingBufferSize set as 2048
USERENV(b0.5ac) 15:43:23:987 PingComputer: First time: 0
USERENV(b0.5ac) 15:43:23:987 PingComputer: Fast link. Exiting.
USERENV(b0.5ac) 15:43:23:987 ProcessGPOs: User name is: CN=Melanie Lieber,OU=Classified,OU=Bohemia,DC=OLYMPUS, Domain name is: OLYMPUS
USERENV(b0.5ac) 15:43:23:987 ProcessGPOs: Domain controller is: \\zeus.OLYMPUS Domain DN is OLYMPUS
USERENV(b0.5ac) 15:43:24:002 MyGetDomainDNSName: Successfully determined fqdn CN=Melanie Lieber,OU=Classified,OU=Bohemia,DC=OLYMPUS
USERENV(b0.5ac) 15:43:24:002 MyGetDomainDNSName: Successfully obtained domain dns name OLYMPUS
USERENV(b0.5ac) 15:43:24:002 ProcessGPOs: Calling GetGPOInfo for normal policy mode
USERENV(b0.5ac) 15:43:24:018 GetGPOInfo: ********************************
USERENV(b0.5ac) 15:43:24:018 GetGPOInfo: Entering...
USERENV(b0.5ac) 15:43:24:033 GetGPOInfo: Server connection established.
USERENV(b0.5ac) 15:43:24:033 GetGPOInfo: Bound successfully.
USERENV(b0.5ac) 15:43:24:049 SearchDSObject: Searching <OU=Classified,OU=Bohemia,DC=OLYMPUS>
USERENV(b0.5ac) 15:43:24:049 SearchDSObject: Found GPO(s):

<[LDAP://cn={9339C346-C388-4270-9574-922B2ADF6AF7},cn=policies,cn=system,DC=OLYMPUS;0]>
USERENV(b0.5ac) 15:43:24:049 ProcessGPO: ==============================
USERENV(b0.5ac) 15:43:24:049 ProcessGPO: Deferring search for

<LDAP://cn={9339C346-C388-4270-9574-922B2ADF6AF7},cn=policies,cn=system,DC=OLYMPUS>
USERENV(b0.5ac) 15:43:24:065 SearchDSObject: Searching <OU=Bohemia,DC=OLYMPUS>
USERENV(b0.5ac) 15:43:24:065 SearchDSObject: Found GPO(s): < >
USERENV(b0.5ac) 15:43:24:065 SearchDSObject: Searching <DC=OLYMPUS>
USERENV(b0.5ac) 15:43:24:065 SearchDSObject: Found GPO(s):

<[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=OLYMPUS;0]>
USERENV(b0.5ac) 15:43:24:080 ProcessGPO: ==============================
USERENV(b0.5ac) 15:43:24:080 ProcessGPO: Deferring search for

<LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=OLYMPUS>
USERENV(b0.5ac) 15:43:24:096 SearchDSObject: Searching <CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=OLYMPUS>
USERENV(b0.5ac) 15:43:24:096 SearchDSObject: No GPO(s) for this object.
USERENV(b0.5ac) 15:43:24:112 EvaluateDeferredGPOs: Searching for GPOs in cn=policies,cn=system,DC=OLYMPUS
USERENV(b0.5ac) 15:43:24:112 ProcessGPO: ==============================
USERENV(b0.5ac) 15:43:24:112 ProcessGPO: Searching <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=OLYMPUS>
USERENV(b0.5ac) 15:43:24:112 ProcessGPO: User has access to this GPO.
USERENV(b0.5ac) 15:43:24:127 ProcessGPO: Found functionality version of: 2
USERENV(b0.5ac) 15:43:24:127 ProcessGPO: Found file system path of:

<\\OLYMPUS\sysvol\OLYMPUS\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(b0.5ac) 15:43:24:143 ProcessGPO: Found common name of: <{31B2F340-016D-11D2-945F-00C04FB984F9}>
USERENV(b0.5ac) 15:43:24:143 ProcessGPO: Found display name of: <Default Domain Policy>
USERENV(b0.5ac) 15:43:24:143 ProcessGPO: Found user version of: GPC is 1, GPT is 1
USERENV(b0.5ac) 15:43:24:158 ProcessGPO: Found flags of: 0
USERENV(b0.5ac) 15:43:24:158 ProcessGPO: Found extensions: [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
USERENV(b0.5ac) 15:43:24:158 ProcessGPO: ==============================
USERENV(b0.5ac) 15:43:24:158 ProcessGPO: ==============================
USERENV(b0.5ac) 15:43:24:174 ProcessGPO: Searching <cn={9339C346-C388-4270-9574-922B2ADF6AF7},cn=policies,cn=system,DC=OLYMPUS>
USERENV(b0.5ac) 15:43:24:174 ProcessGPO: User has access to this GPO.
USERENV(b0.5ac) 15:43:24:174 ProcessGPO: Found functionality version of: 2
USERENV(b0.5ac) 15:43:24:190 ProcessGPO: Found file system path of:

<\\OLYMPUS\SysVol\OLYMPUS\Policies\{9339C346-C388-4270-9574-922B2ADF6AF7}>
USERENV(b0.5ac) 15:43:24:190 ProcessGPO: Found common name of: <{9339C346-C388-4270-9574-922B2ADF6AF7}>
USERENV(b0.5ac) 15:43:24:205 ProcessGPO: Found display name of: <Bohemia Classified>
USERENV(b0.5ac) 15:43:24:205 ProcessGPO: Found user version of: GPC is 14, GPT is 14
USERENV(b0.5ac) 15:43:24:205 ProcessGPO: Found flags of: 0
USERENV(b0.5ac) 15:43:24:205 ProcessGPO: Found extensions:

[{25537BA6-77A8-11D2-9B6C-0000F8080861}{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC

-0000F87571E3}][{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
USERENV(b0.5ac) 15:43:24:221 ProcessGPO: ==============================
USERENV(b0.5ac) 15:43:24:221 GetGPOInfo: GPO Local Group Policy doesn't contain any data since the version number is 0. It will be skipped.
USERENV(b0.5ac) 15:43:24:268 GetGPOInfo: Leaving with 1
USERENV(b0.5ac) 15:43:24:268 GetGPOInfo: ********************************
USERENV(b0.5ac) 15:43:24:815 ProcessGPOs: OpenThreadToken failed with error 1008, assuming thread is not impersonating
USERENV(b0.5ac) 15:43:24:830 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:24:830 ProcessGPOs: Processing extension Registry
USERENV(b0.5ac) 15:43:24:830 CompareGPOLists: One list is empty
USERENV(b0.5ac) 15:43:24:830 ProcessGPOList: Entering for extension Registry
USERENV(b0.5ac) 15:43:24:846 UserPolicyCallback: Setting status UI to Applying Registry policy...
USERENV(b0.5ac) 15:43:24:846 ResetPolicies: Entering.
USERENV(b0.5ac) 15:43:24:846 SetRegPermissionsOnPoliciesKey: Resetting permission on the policy key
USERENV(b0.5ac) 15:43:24:862 SetRegPermissionsOnPoliciesKey: Resetting permission on the policy key
USERENV(b0.5ac) 15:43:24:862 ParseRegistryFile: Entering with <C:\Documents and Settings\mlieber.OLYMPUS.000\ntuser.pol>.
USERENV(b0.5ac) 15:43:24:862 ParseRegistryFile: Leaving.
USERENV(b0.5ac) 15:43:24:862 ResetPolicies: Leaving.
USERENV(b0.5ac) 15:43:24:877 ParseRegistryFile: Entering with

<\\OLYMPUS\SysVol\OLYMPUS\Policies\{9339C346-C388-4270-9574-922B2ADF6AF7}\User\registry.pol>.
USERENV(b0.5ac) 15:43:25:315 SetRegistryValue: ForceStartMenuLogOff => 1 [OK]
USERENV(b0.5ac) 15:43:25:315 SetRegistryValue: NoSMConfigurePrograms => 1 [OK]
USERENV(b0.5ac) 15:43:25:315 SetRegistryValue: DisableCachingOfSSLPages => 1 [OK]
USERENV(b0.5ac) 15:43:25:330 SetRegistryValue: Persistent => 0 [OK]
USERENV(b0.5ac) 15:43:25:330 ParseRegistryFile: Leaving.
USERENV(b0.5ac) 15:43:25:596 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:25:596 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:25:596 ProcessGPOs: Processing extension Folder Redirection
USERENV(b0.5ac) 15:43:25:612 CompareGPOLists: The lists are the same.
USERENV(b0.5ac) 15:43:25:612 ProcessGPOList: Entering for extension Folder Redirection
USERENV(b0.5ac) 15:43:25:612 UserPolicyCallback: Setting status UI to Applying Folder Redirection policy...
USERENV(b0.5ac) 15:43:26:455 UserPolicyCallback: Setting status UI to Applying personal document settings...
USERENV(b0.5ac) 15:43:29:549 UserPolicyCallback: Setting status UI to Applying personal document settings...
USERENV(b0.5ac) 15:43:29:799 UserPolicyCallback: Setting status UI to Applying your personal settings...
USERENV(b0.5ac) 15:43:29:799 ProcessGPOList: Extension Folder Redirection returned 0x0.
USERENV(b0.5ac) 15:43:29:799 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:29:815 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:29:815 ProcessGPOs: Processing extension Microsoft Disk Quota
USERENV(b0.5ac) 15:43:29:815 ProcessGPOs: Extension Microsoft Disk Quota skipped with flags 0x6.
USERENV(b0.5ac) 15:43:29:815 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:29:830 ProcessGPOs: Processing extension Scripts
USERENV(b0.5ac) 15:43:29:830 CompareGPOLists: The lists are the same.
USERENV(b0.5ac) 15:43:29:830 ProcessGPOs: Extension Scripts skipped because both deleted and changed GPO lists are empty.
USERENV(b0.5ac) 15:43:29:830 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:29:846 ProcessGPOs: Processing extension Security
USERENV(b0.5ac) 15:43:29:846 ProcessGPOs: Extension Security skipped with flags 0x6.
USERENV(b0.5ac) 15:43:29:846 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:29:862 ProcessGPOs: Processing extension Internet Explorer Branding
USERENV(b0.5ac) 15:43:29:862 CompareGPOLists: One list is empty
USERENV(b0.5ac) 15:43:29:862 ProcessGPOList: Entering for extension Internet Explorer Branding
USERENV(b0.5ac) 15:43:29:862 UserPolicyCallback: Setting status UI to Applying Internet Explorer Branding policy...
USERENV(b0.5ac) 15:43:31:737 GetHkeyCU: RegOpenKey failed with error 2
USERENV(5a8.5b0) 15:43:32:783 LibMain: Process Name: C:\WINNT\system32\rundll32.exe
USERENV(b0.5ac) 15:43:32:877 UserPolicyCallback: Setting status UI to Applying your personal settings...
USERENV(b0.5ac) 15:43:32:908 ProcessGPOList: Extension Internet Explorer Branding returned 0x0.
USERENV(b0.5ac) 15:43:32:924 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:32:924 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:32:924 ProcessGPOs: Processing extension EFS recovery
USERENV(b0.5ac) 15:43:32:924 ProcessGPOs: Extension EFS recovery skipped with flags 0x6.
USERENV(b0.5ac) 15:43:32:940 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:32:940 ProcessGPOs: Processing extension Application Management
USERENV(b0.5ac) 15:43:32:940 CompareGPOLists: The lists are the same.
USERENV(b0.5ac) 15:43:32:955 CheckGPOs: No GPO changes but couldn't read extension Application Management's status or policy time.
USERENV(b0.5ac) 15:43:32:955 ProcessGPOs: Extension Application Management skipped because both deleted and changed GPO lists are empty.
USERENV(b0.5ac) 15:43:32:955 ProcessGPOs: -----------------------
USERENV(b0.5ac) 15:43:32:955 ProcessGPOs: Processing extension IP Security
USERENV(b0.5ac) 15:43:32:971 ProcessGPOs: Extension IP Security skipped with flags 0x6.
USERENV(b0.5ac) 15:43:32:987 LeaveCriticalPolicySection: Critical section 0x334 has been released.
USERENV(b0.5ac) 15:43:32:987 ProcessGPOs: User Group Policy has been applied.
USERENV(b0.5ac) 15:43:32:987 ProcessGPOs: Leaving with 1.
USERENV(b0.5ac) 15:43:32:987 ApplyGroupPolicy: Leaving successfully.
USERENV(b0.5a8) 15:43:33:080 PolicyChangedThread: Entering with 0.
USERENV(b0.5b0) 15:43:33:080 GPOThread: Next refresh will happen in 116 minutes
USERENV(b0.5a8) 15:43:33:080 PolicyChangedThread: Leaving
USERENV(5b8.53c) 15:43:34:315 LibMain: Process Name: C:\WINNT\system32\userinit.exe
USERENV(5b8.53c) 15:43:34:487 CheckXForestLogon: checking x-forest logon, user handle = 104
USERENV(5b8.53c) 15:43:38:565 MyGetDomainDNSName: Successfully determined fqdn CN=Melanie Lieber,OU=Classified,OU=Bohemia,DC=OLYMPUS
USERENV(5b8.53c) 15:43:38:565 MyGetDomainDNSName: Successfully obtained domain dns name OLYMPUS
USERENV(5b8.53c) 15:43:38:580 CheckXForestLogon: not XForest logon.
USERENV(e4.2b4) 15:43:42:690 ImpersonateUser: Failed to impersonate user with 5.

[chuckhole]

This looks cold normal. The PC applied all of the computer based GPO's, created the profile and then applied the user based GPO's. Are you still having good results after a few reboots?

[scoobydoo_157]

Everything has been good today so far.

I question why it thinks it should be a mandatory profile:

USERENV(b0.8c) 15:43:14:018 GetExistingLocalProfileImage: No local mandatory profile. Error = 2

Then her profile exists - it says it doesn't and then creates a .000 of her profile.

USERENV(b0.8c) 15:43:14:002 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(b0.8c) 15:43:14:018 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and

Settings\mlieber.OLYMPUS>
USERENV(b0.8c) 15:43:14:018 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and

Settings\mlieber.OLYMPUS>
USERENV(b0.8c) 15:43:14:018 GetExistingLocalProfileImage: No local mandatory profile. Error = 2

USERENV(b0.8c) 15:43:14:018 GetExistingLocalProfileImage: Local profile image filename we got from our profile list doesn't exit.

<C:\Documents and Settings\mlieber.OLYMPUS\ntuser.dat> Error = 32
USERENV(b0.8c) 15:43:14:471 CreateLocalProfileKey: Not setting additional Security
USERENV(b0.8c) 15:43:14:487 CreateLocalProfileImage: One way or another we haven't got an existing local profile, try and create one
USERENV(b0.8c) 15:43:14:502 GetUserDomainName: DomainName = <OLYMPUS>
USERENV(b0.8c) 15:43:14:502 CreateSecureDirectory: Entering with <C:\Documents and Settings\mlieber.OLYMPUS.000>
USERENV(b0.8c) 15:43:14:502 CreateSecureDirectory: Created the directory <C:\Documents and Settings\mlieber.OLYMPUS.000>
USERENV(b0.8c) 15:43:14:518 ComputeLocalProfileName: generated the profile directory <C:\Documents and Settings\mlieber.OLYMPUS.000>
USERENV(b0.8c) 15:43:15:174 Creating Local Profile

[TechEmperor]

Did you say you stopped using roaming profiles? Did you remove the Profile path in active directory from the users Profile tab? I've found that even if roaming profiles are turned off if that path exists it will cause all kinds of havoc.

[chuckhole]

Did you say you stopped using roaming profiles? Did you remove the Profile path in active directory from the users Profile tab? I've found that even if roaming profiles are turned off if that path exists it will cause all kinds of havoc.

You definitely have to remove all information from the user accounts that refers to roaming profiles. Check the home folder information as well.

Search your network and your PC's that you are testing with for the file NTUSER.MAN. This is the Mandatory Profile image. If you do find one, then you will need to dig into why it existst and remove them.

[chuckhole]

I have managed to recreate your problem (at least the same symptoms) on one of our PC's here. I did so along the lines of what TechEmporer had described. I created a local orphan of the Roaming Profile by deleting the profile from the server and removing the profile share but left the profile settings in the user account. I then deleted any local profiles for that user and logged the user in.

It complained about not finding the roaming profile and would not save a local copy of the profile. I then removed the Roaming Profile settings from the user account. At the PC with the user logged on, I added printers and desktop shortcuts and logged the user off. No local saved copy. After logging the user back in again, all the changes were lost - no printers, no desktop icons, no preferences, NADA.

TO REPAIR: I added the user account back to a valid Roaming Profile and verified after a couple of logons that the profile was created and saving properly as a local copy. I then removed the user Roaming Profile settings and left the share in place. After a couple of logons and verifying that the local profile is being properly saved and settings retained, I have deleted the Roaming Profile and share.

[scoobydoo_157]

TO REPAIR: I added the user account back to a valid Roaming Profile and verified after a couple of logons that the profile was created and saving properly as a local copy. I then removed the user Roaming Profile settings and left the share in place. After a couple of logons and verifying that the local profile is being properly saved and settings retained, I have deleted the Roaming Profile and share.

What share are you talking of?

Do you mean user.domain off the local machine.

Or the share in Profile$\username

[chuckhole]

All referencese to profile share are to \\server\Profile$\%username%. This must be a UNC path. One of the methods I used to force things to get messed up in the user account was to use a drive letter instead of a UNC path.

Deleting the share is only what I did to clean things up and prove that there were no continuing problems with this user account afterwards. I would recommend leaving your share in place for a while.

Note: This user is a pretty nice guy but he was none too happy with me for the past couple of days. I do not want to think of how many users you are having to deal with on this.

[scoobydoo_157]

UPDATE:

I tried some additional steps regarding the problem as it kept happening after following chuckhole's advice.

I also tried editing the local policy on the box.
On w2k:
Computer Config > Admin > System > Logon
"Only allow local user profiles"
That did not work.

On win xp:
Computer Config > Admin > User Profiles

On a win xp box I configured the "Only allow local user profiles" policy settings keeping the same username, it has been a week and no reset of the profile yet.


On the w2k boxes,
The user's it was effecting, I had to create different logon's and then they were fine.

[chuckhole]

Good news. I hope all goes well.