We are having an intermittent problem with the user profile service on Windows 7 machines. The message "The User Profile Service failed the logon. User profile cannot be loaded." is appearing on seemingly random machines (around 10% of all machines daily, and not the same ones). The problem started a few days ago, after 4 months of successful Windows 7 use. The only note worthy change to the network was turning on scavenging on some of our DNS zones (the action was subsequently rolled back).
When investigating the event log of the machine the only notable error in the logs was a Distributed Com Error (EventID 10016) with the following text:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
and APPID
{B292921D-AF50-400C-9B75-0C57A7F29BA1}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
This appears to be referring to the NAP service, but I haven't been able to identify any correlation between the two.
We have found that repeated re-boots will eventually allow the machines to login. We have also found some of the machines do not have matching forward and reverse lookup DNS entries, and when these are edited to match and the machine reboot it will start working, but neither is a permanent fix, as some of the machines we have done this to are repeating the problem later.
Oh, before the question comes up, we are working with Roaming profiles with folder redirection.
Can anyone suggest anything? Our staff and students are losing patience, and we are running out of ideas.