Logon stuck at "Please wait for the user profile service"

[Jobos]

Why it is what should be a simple thing turns out into a headache of mammoth proportions?

 

Server 2008r2 DC.

 

 

Due to a subnet change I need to change the address of the server. Should be a simple thing right? I thought so. I make the address change and setup a new DHCP scope but none of the clients can connect so from the server I ping the server but I get back an IPv6 address so I’m guessing this if why the clients can’t connect. I flush DNS, clear the DNS cache, restart the server but still no IPv4 address so I disable IPv6 on the NIC and restart. I go to login and now I’m getting “Please wait for the user profile service”. I give it 5 minutes and crash out and try booting into safe mode so I can enable IPv6 again but it won't accept the password. I restart the server normally and try to log in and get the “Please wait for the user profile service” which it has been stuck on for 40 minutes now.

[free780]

Did you update the dns A record for the server?

[Jobos]

I checked and it was listed correctly

[psydii]

Well step one is install this:

An enterprise hotfix rollup is available for Windows 7 SP1 and Windows Server 2008 R2 SP1

 

Not that it will help in this case... but it will probably solve lots of little problems you might not have realised you were having.

 

Back to the problem at hand:

 

Are all your servers have the correct IPv4 settings i.e. are all there addresses, subnet masks, and default gateways correct?

run ipconfig /registerdns on all your servers.

Are your servers able to ping the default gateway?

Are your servers able to ping each other (by IP, then FQDN)?

Cab they ping any of the clients (by IP then FQDN)?

 

Client side:

Are your clients able to ping the default gateway.

Are your clients in the same VLAN as the servers (by IP then FQDN)?

What happens if you manually configure the IP settings for a client to be correct, and then repeat the tests above?

Edited August 7, 2013 by psydii

[psydii]

If you have VLANs, then perhaps you need to change the UDP helper / DHCP relay config in your router to point to the new IP of your DHCP server?

[Jobos]

There is only one DC and I can't logon to it to make any changes. Before the restart I could ping the gateway and the internet worked ok.

[Jobos]

If you have VLANs, then perhaps you need to change the UDP helper / DHCP relay config in your router to point to the new IP of your DHCP server?

 

No VLANS.

[Jobos]

It's now been 65 minutes and I'm starting to bite my nails!

[psydii]

Been a while since I broke a DC... but I wonder if the problem is the DNS server entries in the IP Settings?

 

You might be able to use the "http://blogs.technet.com/b/meacoex/archive/2011/08/15/reset-your-windows-sever-2008-r2-domain-controller-administrator-password.aspx" trick to get a command prompt and check and, if necessary change your IP Settings with "netsh"

[Jobos]

Been a while since I broke a DC... but I wonder if the problem is the DNS server entries in the IP Settings?

 

You might be able to use the "http://blogs.technet.com/b/meacoex/archive/2011/08/15/reset-your-windows-sever-2008-r2-domain-controller-administrator-password.aspx" trick to get a command prompt and check and, if necessary change your IP Settings with "netsh"

 

I didn't change the DNS settings on the NIC!

 

Hold on yes I 'm sure I did. I'm starting the server using the last known good config now so fingers crossed!

Edited August 7, 2013 by Jobos

[psydii]

Use the break in trick and set the interface DNS settings.

 

netsh int ipv4 dump >c:\intIPv3Dump.bkp (backs up the current config)

 

netsh int ipv4 set dnsservers name="Local Area Connection" static 127.0.0.1 primary (self explanatory I hope.)

[Jobos]

Servers come back up and the NIC settings are correct so it must be because I disabled IPv6?

[psydii]

Glad to hear it!

 

If you are not using VLANs then Windows 2008 R2 and Windows 7 default to ipv6 for communication... they also try if you are using vlans, but your switch config can get in the way, which is why many people completely disable ipv6 for Vista and above. Also: Arguments against disabling IPv6 - Romania Networking Team Blog - Site Home - TechNet Blogs

 

Are both your ipv4 and ipv6 registered in your DNS?

[Jobos]

I think I'm almost there. Clients can connect to the server now and I can ping the server from my pc and get the correct IPv4 address but pinging the server from the server still gives the IPv6 address unless I use the ping -4 servername which then I get the IPv4 address.

 

DNS still has the old reverse lookup zone listed and not the new zone.

[TechSupp]

Now that's coincidental, is there an update that may have cased this as we just had the very same thing happen, waited about an hour before I could get in then it all looked OK...but...I then logged off and was then stuck at the the loading group policy objects! No way but wait for my friendly more knowledgeable engineer to dig me out of it. He eventually got back in (Active Director Restore Mode) after a hard reset and it was something to do with the DNS it seemed, looked to have forgotten its settings, thought it was a one off till I saw your message. Try logging off and see what happens.

[Jobos]

Don't know if I dare to log off now after reading your post but as it happens I did install the windows updates before making the NIC change. I rebooted and all was well till I removed IPv6 but I've done this other times with no ill affect.

[FishCustard]

Did anything interesting show up in the Event Log during the period when the server hung?

[Jobos]

Did anything interesting show up in the Event Log during the period when the server hung?

 

I'm not really sure what to look for but I see there are a lot of 5744 and 1004 errors at that time.

[FishCustard]

The 5744 is the interesting one there, that means the DC couldn't register SRV records (1004 is related to Terminal Services licensing, and irrelevant).

 

Not sure what it means diagnostically, not knowing anything about your environment, but have a look at this anyway:

SRV Records Cannot Be Registered on a DNS Server