Temporary Profiles

[CHiLL]

Hello,

We noticed yesterday that for some unknown reason the majority of our pupils are having problems logging in with their mandatory profiles on the Windows 7 machines (we are mainly Windows 7 with very few XP machines around). A lot of them are logging in with temporary profiles. I can log on with one of our test pupil accounts on different PCs and the problem may or may not happen. It isn't exactly consistent.

 

Event Log Details:

Windows cannot locate the server copy of your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you log off. This error may be caused by network problems or insufficient security rights. 

DETAIL - Access is denied.

 

The path for the profile is: \\curricdom\netlogon\curricdom\mandatory

I have noticed that this is not a .V2 folder, and there is no mandatory.V2 folder in sight.

I have looked through out backups over the past couple of months and it appears there has never been a mandatory.V2 folder. Quite how users have been working on Windows 7 machines, I have no idea, but that doesn't seem to be the cause as this wasn't happening earlier this week.

 

The only wide change that has been made has been for a desktop background replacement via Group Policy and pushing the image to the required location on the C:\ drive of the machines.

 

Things tried:

1. Rebooting the machine several times

2. Delprof2.exe to remove all profiles from the machine - This works in the short term but doesn't seem to work in the long term.

3. Checked permissions on \\curricdom\netlogon\curricdom\mandatory3 folder (where the profile lives) - We noticed that Domain Admins and a specific Year 8 student had full control over this folder and sub files/folders for reasons unknown. I have removed the student from the permissions and added Domain Users with Read and Execute permissions on this folder and sub files/folders - Made no difference.

4. I have loaded the NTUSER.MAN hive into regedit - Domain Users have full permissions over this hive

 

Obviously this isn't an ideal situation, so any help would be greatly appreciated!

[Oaktech]

Stupid question... How is the hard drive space on the machines?

[CHiLL]

Stupid question... How is the hard drive space on the machines?

More than enough in this case. (in excess of 100GB)

Edited June 18, 2015 by CHiLL

[Oaktech]

More than enough in this case.

 

Then I'm out of ideas... Sorry!

[CHiLL]

I think I may have discovered the problem. We noticed issues with the thumbs.db file not being released when a folder is renamed. A little research suggested enabling this policy in GP:

Location: User Configuration > Policies > Administrative Templates > Windows Components > Windows Explorer
Policy: Turn off the caching of thumbnails in hidden thumbs.db files > Enabled

I have now disabled that policy and the machines are logging on correctly.

 

I'm not entirely sure how that policy denied access to the profile, but there we go!