"We can't sign into your account" - Redstone

[Ephelyon]

Anyone else getting this when using non-mandatory roaming profiles on Redstone?

 

 

It's actually loading the profile fine, as confirmed by the Event Logs, and it's saving any changes back fine too. If I rename ntuser.dat to ntuser.man, the problem disappears (so the students will be fine). The "default user" profile on the NetLogon share consists of solely the ntuser.dat file as copied (properly) from the default local user profile in Redstone. If I just click Dismiss, everything is fine regardless... can't have it coming up all the time for the staff though!

 

So weird - has anyone else seen it?

Edited August 3, 2016 by Ephelyon

[el_krako]

Its appearing for us too, very frustrating as there appears to be no specific reference to an error in Event Logs.

 

We've just tried building a new image straight from the 1607 ISO to see if that resolves the problem. The image we were testing on was updated from 1511. It is still capturing the image back to SCCM at the moment. Will let you know if it resolves anything.

[Ephelyon]

@el_krako, did it work out yesterday?

[Arthur]

We've just tried building a new image straight from the 1607 ISO to see if that resolves the problem. The image we were testing on was updated from 1511. It is still capturing the image back to SCCM at the moment.

Perhaps that's the cause since you need SCCM 1606 to support the Anniversary Update.

 

http://www.edugeek.net/showthread.php?p=1486947

[Ephelyon]

In our case it's just bog-standard WDS though...

[el_krako]

Same error this morning on a new build of 1607.

 

Disabling the computer policy in Group Policy removed the message so we are now looking at it being a GP setting that it now does not like.

[el_krako]

Changing the following setting in Group Policy has removed the error message for us. Now to figure out whether it is because this setting is now deprecated or it is a bug.

 

Computer Configuration > Administrative Templates > System/User Profiles > Delete cached copies of roaming profiles

 

This was previously set to "Enabled", but we have changed it to "Not Configured"

[Ephelyon]

Confirmed - that "fixes" it here too. Many thanks!!! :)

 

Having said that though, we do want profiles to be cleared on logoff here as it prevents local corruption etc. This, to my mind, confirms that it's definitely a bug. Does anyone know how you report bugs to Microsoft as a business user? Can you use the Contact Support app, or is that only for home users?

[arron]

Thanks, that fixed it here as well.

 

I've set the setting "Delete user profiles older than a specified number of days" to "1" so if a local profile does corrupt, the user can just use a different computer for one day until the original one deletes the profile.

[Ephelyon]

I always assumed that covered local profiles as well as roaming profiles, which is why we've not used it here. Is that not the case, then?

[arron]

I do believe it does all types of profiles.

 

For us that isnt an issue as we have computers which are always used for roaming profiles and others that are always used for local, with no crossover.

 

So we can get away with it... others may not be able to.

[KK20]

The fix posted above didn't work for me and we had the same problem. The workaround for me involves removing the users from a global security group! Each of our yeargroups have a global security group (i.e. year7 year8 year9 etc) in addition to a distribution email group (pupils) and the usual default user group. If I remove the user from the security group then the error goes away. It is reproducible. Im off home now but will check tomorrow if I can change the group to a different sort and see if it is an issue with our legacy group types!

 

there are no GPOs associated with being in the security group - it was purely there for administrative purposes when moving students at the end of each year.

[free780]

Related ?

http://happysccm.com/calc-wont-open-roaming-profile

[Ephelyon]

Confirmed not fixed for us in tonight's new build 14393.51... :/

[Ephelyon]

Please comment and upvote here:

 

feedback-hub:?contextid=394&feedbackid=8a989fdf-82f4-4579-b7d1-30de9a283677&form=1&src=2

[KK20]

Partial user error for me in the end - the security group was a member of "domain guests". However, add any user to domain guests and you get the error (I assume because domain guests are forced to have a temporary profile so that will throw the error)

[Simcfc73]

The fix posted above didn't work for me and we had the same problem. The workaround for me involves removing the users from a global security group! Each of our yeargroups have a global security group (i.e. year7 year8 year9 etc) in addition to a distribution email group (pupils) and the usual default user group. If I remove the user from the security group then the error goes away. It is reproducible. Im off home now but will check tomorrow if I can change the group to a different sort and see if it is an issue with our legacy group types!

 

there are no GPOs associated with being in the security group - it was purely there for administrative purposes when moving students at the end of each year.

 

Did you get any further with this?

 

I see the same thing, the staff are fine but the pupils get the message now.. when I removed their security group the error goes away.

 

EDIT : Actually scrub that.. the message was appearing when I hadnt chnaged the profile path that they used in windows 7. As soon as I removed it and allowed it to make a new one I didnt get the pop up.

Edited August 16, 2016 by Simcfc73

[M_A_D_C_A_T]

For me settings the GPO delete cached copies of roaming profiles to not configured and set the Delete user profiles older than a specified number of days on system restart to 1 day seems to have fixed it.

 

I tried removing the users from security groups, but that didn't make any difference for me!

[dooley_do]

If you want to delete profiles after logoff in 1607 consider using Shared PC mode via MDM or Provisioning package:

 

https://technet.microsoft.com/en-us/itpro/windows/manage/set-up-shared-or-guest-pc

 

I've started using this and so far so good. I am not sure if the mechanisms for deleting the profile have changed compared to using the GPO setting...

[Ephelyon]

In the wake of changing the GPO settings, we're now using the following as a startup script:

 

[url="https://helgeklein.com/free-tools/delprof2-user-profile-deletion-tool/"]delprof2[/url] /i /r /u

[Ephelyon]

Confirmed NOT FIXED here in build 14393.82... :/

[Simcfc73]

I thought I had fixed it but I found out the pupils group was a member of the domain guests group just like KK20.

 

I dont see the error once I removed it.

[juliee]

Bingo! Setting the GP to delete cached copies of roaming profiles fixed this problem. Now to fix the start menu that now doesn't work, and set up Shared PC.

But school starts next week, and I'm wondering if this OS is really ready for prime time, or if I would save myself some headaches by switching to Win7 until next year?

[Simcfc73]

Bingo! Setting the GP to delete cached copies of roaming profiles fixed this problem. Now to fix the start menu that now doesn't work, and set up Shared PC.

But school starts next week, and I'm wondering if this OS is really ready for prime time, or if I would save myself some headaches by switching to Win7 until next year?

 

Ours start on Tuesday and I've done about 150 PCs.... I am tempted to go back

[Ephelyon]

@EduTech, without comprising your professional position, are you able to feed these concerns back to the development teams at Microsoft?