Old error previously discussed; fixes don't work (Profile Service service failed...)
This error does not seem fixable on my system when I attempt to apply the fixes describbed, and I think I know why. However, I don't know how to remediate it here. Here are the details (Win7 Pro x64): Summary: UAC active, Administrator inactive; Current Profile setup with all Admin privileges; Second profile (specific functions used) is working; attempts at created 3rd profile fail. Create new user account; Either log off admin account; or use "switch user"; Attempt to create standard profile; Appears to create correctly (although not yet logged in C:\User\<newProfName>); User Log Off curr account, Switch User or restart and attempt to log on using new profile; Error: Profile Service service failed logon. Unable to load profile. All attempts to use automated fix it tools, examine registry, recovery tools fail. Examination of C:\Users finds that C:\User has "Encrypted" flag set for folder. NONE of the folders within C:\Users are encrypted. Attempts to reverse the encryption fail. Errors indicate that C:\Users is Read only. Also configured for use "Ctl-Alt-Dlt" to secure log on. Problem, while I have backups of my C:\ drive, they are one month old (done monthly). I also have backups that are done on a weekly basis; however, I don't know how long this has been set like this. I would prefer not to have to recover my C: drive (just that it is possible as a LAST resort). Examination of the Registry finds the following entries at the indicated location: HKEY_LOCAL_MACHINE\SECURITY\Policy\Accounts (don't know what these are as all use Hex encoding) S-1-1-0 S-1-5-19 S-1-5-20 S-1-5-21-354127283-2954193613-722948373-1002 S-1-5-32-544 S-1-5-32-545 S-1-5-32-551 S-1-5-32-555 S-1-5-32-568 S-1-5-6 S-1-5-80-0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList S-1-5-18 = %systemroot%\system32\config\systemprofile S-1-5-19 = C:\Windows\ServiceProfiles\LocalService S-1-5-20 = C:\Windows\ServiceProfiles\NetworkService S-1-5-21-354127283-2954193613-722948373-1001 = C:\Users\<Pri Admin Account> S-1-5-21-354127283-2954193613-722948373-1016 = C:\Users\<Spec Use Account> S-1-5-21-354127283-2954193613-722948373-500 = C:\Users\Administrator Here is what it appears like to me: Because C:\Users folder appears as encrypted, when first use of the new profile is attempted, and the root image is created using the Profile Service, it is unable to do so because of the encryption. This is triggering the error "Profile Service service failed logon. Profile failed to load." Now - this is MOST LIKELY user malfunction. Why? Because I thought(?) (and of course that got me into trouble!) I would further secure my Admin profile (C:\Users\<UserAdminProf>) by encrypting that folder tree. NEVER once though did I point to C:\Users to set the encryption flag. All I can ask: Is there an SME (Subject Matter Expert) out there that can help me to get out of my own folly? Please...Please...Please....
December 12th, 2010 9:44am

Can you run the following commands in a command prompt and post the results back here? Icacls c:\users Cipher c:\users Also look in the windows event viewer normaly there is a message telling you why the creation of your profile fails. Kind Regards DFTIM me - TWiTTer: @DFTER
Free Windows Admin Tool Kit Click here and download it now
December 13th, 2010 4:46am

Thank you for your help. Below are the requested posts: C:\Windows\system32>icacls c:\users c:\users NT AUTHORITY\SYSTEM:(OI)(CI)(F) BUILTIN\Administrators:(OI)(CI)(F) BUILTIN\Users:(RX) BUILTIN\Users:(OI)(CI)(IO)(GR,GE) Everyone:(RX) Everyone:(OI)(CI)(IO)(GR,GE) Successfully processed 1 files; Failed processing 0 files C:\Windows\system32>cipher c:\users Listing c:\ New files added to this directory will not be encrypted. E Users Below is the Event Viewer Information: Log Name: Application Source: Microsoft-Windows-User Profiles Service Date: 12/11/2010 2:54:51 PM Event ID: 1500 Task Category: None Level: Error Keywords: User: S-1-5-21-354127283-2954193613-722948373-1028 Computer: PriSystem Description: Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly. DETAIL - Only part of a ReadProcessMemory or WriteProcessMemory request was completed. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" /> <EventID>1500</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2010-12-11T20:54:51.159919500Z" /> <EventRecordID>21496</EventRecordID> <Correlation ActivityID="{00000100-0000-0003-45E0-E9893799CB01}" /> <Execution ProcessID="1184" ThreadID="1836" /> <Channel>Application</Channel> <Computer>PriSystem</Computer> <Security UserID="S-1-5-21-354127283-2954193613-722948373-1028" /> </System> <EventData> <Data Name="Error">Only part of a ReadProcessMemory or WriteProcessMemory request was completed. </Data> </EventData> </Event> There were 10 events, all with same error message. The User (SID) entry changed between days. Log Name: Application Source: Microsoft-Windows-User Profiles Service Date: 12/12/2010 7:57:21 AM Event ID: 1511 Task Category: None Level: Error Keywords: User: S-1-5-21-354127283-2954193613-722948373-1028 Computer: PriSystem Description: Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" /> <EventID>1511</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2010-12-12T13:57:21.696849600Z" /> <EventRecordID>22104</EventRecordID> <Correlation ActivityID="{00000100-0000-0000-43B9-3F39039ACB01}" /> <Execution ProcessID="1180" ThreadID="4352" /> <Channel>Application</Channel> <Computer>PriSystem</Computer> <Security UserID="S-1-5-21-354127283-2954193613-722948373-1028" /> </System> <EventData> </EventData> </Event> There were 10 #1511 events as well. Please note; Memory diagnostics were executed prior to my asking for assistance. The system is a newly built system (motherboard, CPU, memory, drives, etc.) The primary drive is an SSD (64GB). Diagnostics also executed on the C: drive. No errors were identified during the tests; although I'm not certain how thorough the tests are. Thank you for your help!
December 13th, 2010 8:09am

Indeed your C:\users folder is encrypted with EFS. Did you try to encrypt the C:\users folder with the account that encrypted it? If everything fails you can try a complete pc backup form your C:\ Drive. Then boot in Windows PE (Installation CD will do) In windows PE rename the c:\users folder to C:\users.old Create a completly new C:\users folder Move all data (inclusive hidden folders) from c:\users.old to C:\users Reboot your machine. If you problem is not solved restore your complete pc backup. Keep me up 2 date. Kind Regards DFTIM me - TWiTTer: @DFTER
Free Windows Admin Tool Kit Click here and download it now
December 13th, 2010 10:02am

Thank you for the information. In response: No, C:\Users was not targeted for encryption. What did happen was an attempt to encrypt my specific profile folder (not the Administrator or other system supplied folders). I was very careful about this. What had given me the idea, is my corporate laptop where my C:\Documents and Settings\<profileId> is encrypted. As to the rest; I thought I may have to do a recovery as suggested. However, is this approach more feasable. Please let me know: I have a backup of my C: which occurs on a weekly and a monthly basis. My thoughts are to execute the recovery process for just the C:\Users folder from my monthly backup (predates the issue). My concern is: Using the monthly backup; will it change/alter my credentials (password, etc.) for the system? Again, thank you for your time. It is really appreciated.
December 13th, 2010 11:42am

I was busy with work and other committments on my time. I'm back now. I just understood the "PE" notation. Figured it to be the "Preinstall Environment". I shall boot from the original install disks, and do as suggested. I'll let you know. I really appreciate your help. I hope it doesn't come to a complete recovery from backup; as that may cause other issues. Oh well, I'll let you know the results. Thank you again!
Free Windows Admin Tool Kit Click here and download it now
December 18th, 2010 5:14pm

Okay, here's what happened: Booted to original install media. Opened command prompt. Attempted to rename C:\Users to C:\Users.old Attempt failed. Unable to find directory. Attempted to use DIR - no files/folders shown on disk. I'm at a loss now. I would like to try the options presented, however, for reasons unknown I can't even see the content of C:. It may be due to the disk security settings, which are: Authenticated Users SYSTEM Administrators Users Any suggestions?
December 18th, 2010 5:33pm

Okay - I kept fiddling around with it in the hopes that I would not have to restore my drive - and what do you know! I fixed it. It was also deceptively simple. Activated Administrator Account. Booted into Safe Mode with Command prompt. Reset to root directory (C:\) using command CD\. Run the command CIPHER C:\Users /D Restarted system normally. No encrypted C:\Users. Now the original issue of the error: User Profile Service service load failed. Unable to load profile. Is NO MORE! I'm so happy...I'm so happy...I'm so happy...I'm so happy...I'm so happy...I'm so happy... I do want to thank all of you for helping out on this issue. I apparently was over complicating matters. Also, I didn't know of the CIPHER command. Thank you.
Free Windows Admin Tool Kit Click here and download it now
December 19th, 2010 9:56am

Thank you. Me too. (I was formerly MastiffShack). My big thing right now is securing my data. While BitLocker appeared to be a viable solution (and still does); I'm also evaluating other products. Based on my research though, I'm finding that AES encryption has been and is capable of being broken in a realitively short period. I'm looking at other solutions right now; perhaps polymorphic cipher. Works much the same; although not as tightly integrated with the OS. Still needs a "front-end" to launch. It comes closer than most I've seen though; as the drives are mounted within one or two spaces. Specifically defined RAM drives. Once mounted; the RAM Drive .sys/.dll manages the I/O for encryption; and all software treats it as just another mapped drive. I would prefer to work with only two profiles (Admin/Std) instead of three (Admin/Std/Work). If I can encrypt "Work"; independently from my day-to-day (reservering daily stuff to Win 7 encryption); then I only have to have access to the secured area on a as-needed basis without the need for a different profile. Anyway; that's my high-level approach to data security. Thoughts? Suggestions?
April 6th, 2011 4:29pm

Okay - I kept fiddling around with it in the hopes that I would not have to restore my drive - and what do you know! I fixed it. It was also deceptively simple. Activated Administrator Account. Booted into Safe Mode with Command prompt. Reset to root directory (C:\) using command CD\. Run the command CIPHER C:\Users /D Restarted system normally. No encrypted C:\Users. Now the original issue of the error: User Profile Service service load failed. Unable to load profile. Is NO MORE! I'm so happy...I'm so happy...I'm so happy...I'm so happy...I'm so happy...I'm so happy... I do want to thank all of you for helping out on this issue. I apparently was over complicating matters. Also, I didn't know of the CIPHER command. Thank you. I just want to say that this thread helped me solve a similar problem. Thanks. I searched for efs encryption commands to quickly get a few tidbits and landed here. I occasionally get the profile problem. I have learned to live with restoring from a good image and staying up on it. :) I am always experimenting with the best ways to secure a system so I make a large number of errors! Nice to know that there are others who foul up occasionally! Mark Rhoades
Free Windows Admin Tool Kit Click here and download it now
April 6th, 2011 5:22pm

I will give a few more details when I have a bit more time (gotta leave). I heard from a tech friend that there are drives that you can get that come with security and encyptikon built in. They also are servers so they network themselves and you access with user name and password. I am going to check it out and I will post on it if it seems like a good thing.Mark Rhoades
April 16th, 2011 6:21pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics