Domain User Profile Not Loading Correctly Except The User Is Required To Change Password

We just received our new batch of 34 notebooks, and have put them all on our domain.

We first noticed the problem as IE search suggestions not working, and users can't download anything (if they right-click and select 'Save As', nothing happens).

We've traced this back to a problem with the 'Temporary Internet Files' folder. If we open IE settings, this shows as blank. When we look at the location of the folder (User\AppData\Local\Microsoft\Windows\), the folder shows as a shortcut. From looking at other machines, it's normal for this to show as a shortcut in 'Appdata\Local', but it should be a real hidden system folder in User\AppData\Local\Microsoft\Windows\.

This problem only affects domain users, and not local users. Interestingly, if we login with our primary domain admin account we don't get the problem, but if we copy this account in AD then the fault appears.

The work-arounds which solve the problem are:

1. In IE Settings, select 'Move folder' and point it to another location.

2. Delete the shortcut in 'User\AppData\Local\Microsoft\Windows\'. IE then re-creates it correctly.

However, We suspected this problem was a symptom of a larger issue, and these are just patching up one part of it. We found Metro apps were all showing with an X saying 'This app can't install'.

we have tested the SOE these computers came with on a different domain and did not have an issue nor do we have an issue with local users

we had done a test with the notebook in the computer OU and the admin users in the users OU and had all domain level GPOs disabled and still no change

then we tried a staff user (Staff-A)that just so happened required a password change on login and everything worked perfectly. IE worked, start menu was correct and working, desktop background was a picture and not a solid colour and we realized it was appearing the same as the local accounts so first thought was staff accounts were ok for some reason. So tested another staff account (Staff-B) on but this also got the same faults as above.

Then small light bulb moment the the password change was the difference so on the one notebook we removed both profiles then changed the Staff-B to require password change on next logon and leave Staff-A with the earlier set password and found Staff-B worked and Staff-A failed

nothing is standing out in the event-logs on the DC or the test notebook. 

We are  running 2012 r2 standard DC which is an upgrade from 2012 

Group Polices some date back to server 2003 (although shouldn't  matter as all were disabled for testing and have been enabled when working with password change)

Notebooks are Acer Travelmate P446 running Australian Victorian Department of Education and Training Ver. 5.0.1 SOE with 8.1 and Office 2013 

Any ideas/suggestions would be much appreciated! 

June 17th, 2015 6:10am

Are the users that are having problems local admins ? if they aren't local admins it could be a permissions issue

Can you run a GPResult /r from a command line on one of these notebooks just to make sure no group policies are causing any problems ?

Are these machines from a domain migration ?

Free Windows Admin Tool Kit Click here and download it now
June 17th, 2015 10:40am

Thank for the quick response 

yes they are set as local admin

yes checked the GPResult - no GPOs

could you please elaborate on what you mean from the last question - we did migrate the users from one domain to another 5 years ago due to a miss spell and that was on a 2008 server then that was upgraded to each new version of server along with the forest and domain function level raised as well to today at 2012 R2. as for the notebook as far as we know they come to us with the SOE syspreped  

June 17th, 2015 6:58pm

Hi Clarkey1891,

Only this specific machine came across this issue, right?

There is a possibility that the present domain user account has been corrupted. We can refer to the following link to fix the corrupted user account to have

a check.
Fix a corrupted user profile
http://windows.microsoft.com/en-hk/windows/fix-corrupted-user-profile#1TC=windows-7

If the issue persists, we can take the following steps to capture the logon profile log to have a troubleshoot:

Start the log:
Open an administrator command line and run
"logman -start profiletrace -p {eb7428f5-ab1f-4322-a4cc-1f1a9b2c5e98} 255 3 -ets"
Restart the machine to trigger the log.
Stop the log:
"logman -stop profiletrace -ets
Log location:
profiletrace.etl will be located in the directory that logman -start was run (C:\Windows\System32\profiletrace.etl )

Please upload the profiletrace.etl to OneDrive, I will try to analyze it for you.

Best regards

Free Windows Admin Tool Kit Click here and download it now
June 18th, 2015 4:42am

Thanks MeipoXu

so far we have opened and connected 6 out of the 34 notebooks to the domain. All have displayed the same fault and have done the following

Password change was the difference so on the one notebook we removed both profiles then changed Staff-B to require password change on next logon and leave Staff-A with the earlier set password and found Staff-B worked and Staff-A failed

which is strange.

as for your suggestions:

Profile fix didn't work

and I might not be running the script correctly

when i try to finish it I get 

Error:

Data Collector Set was not found.


June 18th, 2015 8:24pm

Thanks MeipoXu

so far we have opened and connected 6 out of the 34 notebooks to the domain. All have displayed the same fault and have done the following

Password change was the difference so on the one notebook we removed both profiles then changed Staff-B to require password change on next logon and leave Staff-A with the earlier set password and found Staff-B worked and Staff-A failed

which is strange.

as for your suggestions:

Profile fix didn't work

and I might not be running the script correctly

when i try to finish it I get 

Error:

Data Collector Set was not found.


  • Marked as answer by Clarkey1891 6 hours 6 minutes ago
  • Unmarked as answer by Clarkey1891 6 hours 6 minutes ago
Free Windows Admin Tool Kit Click here and download it now
June 19th, 2015 12:24am

Thanks MeipoXu

so far we have opened and connected 6 out of the 34 notebooks to the domain. All have displayed the same fault and have done the following

Password change was the difference so on the one notebook we removed both profiles then changed Staff-B to require password change on next logon and leave Staff-A with the earlier set password and found Staff-B worked and Staff-A failed

which is strange.

as for your suggestions:

Profile fix didn't work

and I might not be running the script correctly

when i try to finish it I get 

Error:

Data Collector Set was not found.


  • Marked as answer by Clarkey1891 Tuesday, June 23, 2015 1:14 AM
  • Unmarked as answer by Clarkey1891 Tuesday, June 23, 2015 1:14 AM
June 19th, 2015 12:24am

So we worked out the issue we were having was caused by:

when you update server to 2012R2 it adds a default profile in the netlogon folder and that was being used over the local default profile so once we remove all permissions to that folder that notebooks logged on fine and had no problems

  • Marked as answer by Clarkey1891 6 hours 6 minutes ago
Free Windows Admin Tool Kit Click here and download it now
June 22nd, 2015 9:15pm

So we worked out the issue we were having was caused by:

when you update server to 2012R2 it adds a default profile in the netlogon folder and that was being used over the local default profile so once we remove all permissions to that folder that notebooks logged on fine and had no problems

  • Marked as answer by Clarkey1891 Tuesday, June 23, 2015 1:14 AM
June 23rd, 2015 1:14am

Hi Clarkey,

I am glad the issue has been resolved and thanks for updating.

It will be very useful as a reference for the people who will come across the similar issue in the future.

Best regards

Free Windows Admin Tool Kit Click here and download it now
June 23rd, 2015 10:12pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics