Domain user profile authentication and AD issues
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Domain user profile authentication and AD issues

 
Post new topic   Reply to topic    Windows Server Forum Index -> Small Business Server 2003
Author Message
Steppy
Guest





Posted: Tue Jan 18, 2005 3:45 am    Post subject: Domain user profile authentication and AD issues Reply with quote

One user profile in our SBS 2003 environment is acting very strangely. The
user has the following problems:

1. Profile will load at logon, but will not unload and update the server on
logout (roaming profile).

2. Domain Printers can not be accessed or listed (in add new printer wizard).

3. Exchange account unaccessable.

4. Account is locked out intermittently.

5. The above problems have been confirmed on a second client machine.

Here are the event log messages related to this problem.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1504
Date: 1/17/2005
Time: 1:10:03 PM
User: SOSI\janet.voris
Computer: CSERV01
Description:
Windows cannot update your roaming profile. Possible causes of this error
include network problems or insufficient security rights. If this problem
persists, contact your network administrator.

DETAIL - The system detected a possible attempt to compromise security.
Please ensure that you can contact the server that authenticated you.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 1/17/2005
Time: 1:08:49 PM
User: SOSI\janet.voris
Computer: CSERV01
Description:
Windows cannot query for the list of Group Policy objects. A message that
describes the reason for this was previously logged by the policy engine.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1006
Date: 1/17/2005
Time: 1:08:49 PM
User: SOSI\janet.voris
Computer: CSERV01
Description:
Windows cannot bind to sosi.loc domain. (Invalid Credentials). Group Policy
processing aborted.

Here is the ipconfig info for the client:

Windows IP Configuration

Host Name . . . . . . . . . . . . : cserv01
Primary Dns Suffix . . . . . . . : sosi.loc
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : sosi.loc

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : sosi.loc
Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast
Ethernet NIC
Physical Address. . . . . . . . . : 00-0D-61-2A-6E-E5
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.30
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.253
DHCP Server . . . . . . . . . . . : 192.168.1.253
DNS Servers . . . . . . . . . . . : 192.168.1.253
Primary WINS Server . . . . . . . : 192.168.1.253
Lease Obtained. . . . . . . . . . : Sunday, January 16, 2005 2:41:16
PM
Lease Expires . . . . . . . . . . : Monday, January 24, 2005 2:41:16
PM

Any ideas on what could be causing these errors for only this account?

Thanks in advance,

Todd
Back to top
Mariette Knap [SBS MVP]
Guest





Posted: Tue Jan 18, 2005 6:00 am    Post subject: Re: Domain user profile authentication and AD issues Reply with quote

In news:1F7945DE-80A8-4D6A-B8A3-277892168951@microsoft.com,
Steppy <Steppy@nospam.postalias> wrote:

Quote:
One user profile in our SBS 2003 environment is acting very
strangely. The user has the following problems:

1. Profile will load at logon, but will not unload and update the
server on logout (roaming profile).

2. Domain Printers can not be accessed or listed (in add new printer
wizard).

3. Exchange account unaccessable.

4. Account is locked out intermittently.

5. The above problems have been confirmed on a second client machine.

Take a look here:

Group policies are not applied the way you expect; "Event ID 1058" and
"Event ID 1030" errors in the application log:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314494

Are these clients Windows XP? Did you install Windows XP service pack 2?

--
Mariėtte Knap - MVP
http://www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=154
Back to top
Rebecca Chen [MSFT]
Guest





Posted: Tue Jan 18, 2005 7:06 pm    Post subject: Re: Domain user profile authentication and AD issues Reply with quote

Hi Todd,

Besides to check the KB Q314494 as Mariette has suggested, probably
KB826379 is the cause, Please check the following KB:


Userenv Errors 1504 and 1509 in the Windows XP Application Event Log After
You Apply a Redirector Hotfix
http://support.microsoft.com/default.aspx?scid=kb;en-us;826379


In addition, what is the result if you create a new roaming profile and
grant the user full control permission to shared folder on the server? Does
this issue stiall occur?

Any updat,e let us get in touch!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Small Business Server 2003 All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB