Attempting to logon with your local profile

[SimonMag]

I have an issue with a roaming profile on a Windows 2000 Professional (SP4) PC.
When the user logs in they get the following message:

Windows did not load your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Windows did not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrators group must be the owner of the folder. Contact your network administrator.

Here is an extract from the USERENV.LOG:

USERENV(ac.88) 16:00:49:890 =========================================================
USERENV(ac.88) 16:00:49:890 LoadUserProfile: Entering, hToken = <0x924>, lpProfileInfo = 0x6f648
USERENV(ac.88) 16:00:49:890 LoadUserProfile: Entering, hToken = <0x924>, lpProfileInfo = 0x6f648
USERENV(ac.88) 16:00:49:890 LoadUserProfile: lpProfileInfo->dwFlags = <0x0>
USERENV(ac.88) 16:00:49:890 LoadUserProfile: lpProfileInfo->lpUserName = <TestUser>
USERENV(ac.88) 16:00:49:890 LoadUserProfile: lpProfileInfo->lpProfilePath = <\\FS_ELS\VOL1\USERS/HOME/TESTUSER\Windows NT 5.0 Workstation Profile>
USERENV(ac.88) 16:00:49:890 LoadUserProfile: NULL default profile path
USERENV(ac.88) 16:00:49:890 LoadUserProfile: NULL server name
USERENV(ac.88) 16:00:49:890 GetUserMutex: entering
USERENV(ac.88) 16:00:49:906 GetUserMutex: Waiting...
USERENV(ac.88) 16:00:49:906 GetUserMutex: Wait succeeded. Mutex currently held.
USERENV(ac.88) 16:00:49:906 ParseProfilePath: Entering, lpProfilePath = <\\FS_ELS\VOL1\USERS/HOME/TESTUSER\Windows NT 5.0 Workstation Profile>
USERENV(ac.88) 16:00:49:906 CheckXForestLogon: checking x-forest logon, user handle = 2340
USERENV(ac.88) 16:00:49:906 CheckXForestLogon: Stand-alone or NT4 domain, not x-forest logon.
USERENV(ac.88) 16:00:49:906 ParseProfilePath: Tick Count = 0
USERENV(ac.88) 16:00:49:906 ParseProfilePath: FindFirstFile found something with attributes <0x10>
USERENV(ac.88) 16:00:49:906 ParseProfilePath: Found a directory
USERENV(ac.88) 16:00:49:906 LoadUserProfile: ParseProfilePath returned a directory of <\\FS_ELS\VOL1\USERS/HOME/TESTUSER\Windows NT 5.0 Workstation Profile>
USERENV(ac.88) 16:00:49:906 RestoreUserProfile: Entering
USERENV(ac.88) 16:00:49:906 RestoreUserProfile: User is a Admin
USERENV(ac.88) 16:00:49:906 IsCentralProfileReachable: Entering
USERENV(ac.88) 16:00:49:906 CheckRoamingShareOwnership: checking ownership for \\FS_ELS\VOL1\USERS/HOME/TESTUSER\Windows NT 5.0 Workstation Profile
USERENV(ac.88) 16:00:49:906 CheckRoamingShareOwnership: owner is S-1-1-0!
USERENV(ac.88) 16:00:49:906 IsCentralProfileReachable: Ownership check failed with 8007051B
USERENV(ac.88) 16:00:49:906 RestoreUserProfile: IsCentralProfileReachable returned FALSE. error = 1307
USERENV(ac.88) 16:00:52:703 RestoreUserProfile: Profile path = <>
USERENV(ac.88) 16:00:52:703 GetExistingLocalProfileImage: Failed to query internal flags with error 2
USERENV(ac.88) 16:00:52:703 PatchNewProfileIfRequred: ExtractProfileFromBackup returned error 2
USERENV(ac.88) 16:00:52:703 PatchNewProfileIfRequred: No OldSidString found
USERENV(ac.88) 16:00:52:703 CreateLocalProfileKey: Not setting additional Security
USERENV(ac.88) 16:00:52:703 GetExistingLocalProfileImage: Found entry in profile list for existing local profile
USERENV(ac.88) 16:00:52:703 GetExistingLocalProfileImage: Local profile image filename = <%SystemDrive%\Documents and Settings\TestUser>
USERENV(ac.88) 16:00:52:703 GetExistingLocalProfileImage: Expanded local profile image filename = <C:\Documents and Settings\TestUser>
USERENV(ac.88) 16:00:52:703 GetExistingLocalProfileImage: Failed to query internal flags with error 2
USERENV(ac.88) 16:00:52:703 GetExistingLocalProfileImage: No local mandatory profile. Error = 2
USERENV(ac.88) 16:00:52:703 GetExistingLocalProfileImage: Found local profile image file ok <C:\Documents and Settings\TestUser\ntuser.dat>
USERENV(ac.88) 16:00:52:703 GetExistingLocalProfileImage: Failed to query low profile unload time with error 2
USERENV(ac.88) 16:00:52:703 Local Existing Profile Image is reachable
USERENV(ac.88) 16:00:52:703 Local profile name is <C:\Documents and Settings\TestUser>
USERENV(ac.88) 16:00:52:703 RestoreUserProfile: No central profile. Attempting to load local profile.
USERENV(ac.88) 16:00:52:734 MyRegLoadKey: Mutex released. Returning 0.
USERENV(ac.88) 16:00:52:734 GetUserDNSDomainName: Computer is running standalone. No DNS domain name available.
USERENV(ac.88) 16:00:52:859 MyRegLoadKey: Mutex released. Returning 0.
USERENV(ac.88) 16:00:52:859 CreateClassHive: existing user classes hive not found
USERENV(ac.88) 16:00:52:859 SetDefaultUserHiveSecurity: Entering
USERENV(ac.88) 16:00:52:859 RestoreUserProfile: About to Leave. Final Information follows:
USERENV(ac.88) 16:00:52:859 Profile was successfully loaded.
USERENV(ac.88) 16:00:52:859 lpProfile->lpRoamingProfile = <>
USERENV(ac.88) 16:00:52:859 lpProfile->lpLocalProfile = <C:\Documents and Settings\TestUser>
USERENV(ac.88) 16:00:52:859 lpProfile->dwInternalFlags = 0x100
USERENV(ac.88) 16:00:52:859 RestoreUserProfile: Leaving.
USERENV(ac.88) 16:00:52:875 UpgradeProfile: Entering
USERENV(ac.88) 16:00:52:875 UpgradeProfile: Build numbers match
USERENV(ac.88) 16:00:52:875 UpgradeProfile: Leaving Successfully
USERENV(ac.88) 16:00:52:875 LoadUserProfile: Releasing mutex.
USERENV(ac.88) 16:00:52:875 LoadUserProfile: Leaving with a value of 1.
USERENV(ac.88) 16:00:52:875 LoadUserProfile: hProfile = <0x5b8>

The user profiles are stored on a Home directory on a Netware server, the user has the rights to create/write/read to the directory.

Does anyone have any ideas?

Simon.

 

[wolluf]

Been a long time since I've had anything to do with netware - so bear with me if my terminology is wrong. Does the user actually have full rights to the directory which contains their profile? I'm not sure how windows implements that requirement for the user or Administrator's group to be the owner of the folder with netware, as that's a win2k/2k3 server situation. But if you can, I'd increase the user's rights to the storage area for their profile folder.

(I've just recently had similar problem with XP wiorkstations and 2k3 server - got that message when the dministrator's group was owner and user had full permission (ie, the message was lying!) - had to make the user owner to get it to work.

 

[SimonMag]

Thanks for the tip, I have managed to fix the issue, it was to do with the policies and DLU we have running with ZEN, the pc had the older version of the zen agent 3.2 which was looking at ZEN 6.5 policies (as we run both Zenworks 3.2 and 6.5 at the same time. Zen 3.2 will not look at run Zen 6.5 policies but Zen 6.5 will run 3.2 policies. So I upgraded the Zen agent on the machine and it now works fine.