Laptops hang at "loading profile" after login w/ domain account...

[Guest JoshGfromPortland]

Issue: Laptops hang at "loading profile" after login w/ domain account when

not on the domain.

OS: Windows XP SP3

Domain Controller OS: Windows 2003 x64 SP2

Details: Laptops login fine when connected to the domain.

Recent Changes to Group Policy: none

Recent Software Installations: none

Other Recent Changes: I think DHCP and DNS was recently turned off on one of

our servers. Possibly also the server role was changed so it is no longer a

domain controller. We still have another domain controller running DHCP and

DNS. I will try to confirm these changes with the techs and get more

details. Also there have been many Windows patches lately.

Possibly Related Event log messages:

- Event ID 1054, Source Userenv, User NT AUTHORITY\SYSTEM, Windows Cannot

obtain the domain controller name for your computer network (The specified

domain either does not exist or could not be contacted). Group Policy

processing aborted.

- Event ID 1003, Source: Dhcp, User N/A, Your computer was not able to renew

its address from the network (from the DHCP Server) for the Network Card with

network address 0007E96DA6FE. The following error occurred: The semaphore

timeout period has expired. Your computer will continue to try and obtain an

address on it own from the network address (DHCP) server.

[Guest Anthony [MVP]]

Re: Laptops hang at "loading profile" after login w/ domain account...

 

Set up logging for userenv and then see what is taking the time,

http://support.microsoft.com/kb/221833

Anthony,

http://www.airdesk.com

 

 

"JoshGfromPortland" <JoshGfromPortland@discussions.microsoft.com> wrote in

message news:43D1D2E7-00AE-471B-B7FE-677CD56A9DBA@microsoft.com...

> Issue: Laptops hang at "loading profile" after login w/ domain account

> when

> not on the domain.

> OS: Windows XP SP3

> Domain Controller OS: Windows 2003 x64 SP2

> Details: Laptops login fine when connected to the domain.

> Recent Changes to Group Policy: none

> Recent Software Installations: none

> Other Recent Changes: I think DHCP and DNS was recently turned off on one

> of

> our servers. Possibly also the server role was changed so it is no longer

> a

> domain controller. We still have another domain controller running DHCP

> and

> DNS. I will try to confirm these changes with the techs and get more

> details. Also there have been many Windows patches lately.

> Possibly Related Event log messages:

> - Event ID 1054, Source Userenv, User NT AUTHORITY\SYSTEM, Windows Cannot

> obtain the domain controller name for your computer network (The

> specified

> domain either does not exist or could not be contacted). Group Policy

> processing aborted.

> - Event ID 1003, Source: Dhcp, User N/A, Your computer was not able to

> renew

> its address from the network (from the DHCP Server) for the Network Card

> with

> network address 0007E96DA6FE. The following error occurred: The semaphore

> timeout period has expired. Your computer will continue to try and obtain

> an

> address on it own from the network address (DHCP) server.

[Guest JoshGfromPortland]

Re: Laptops hang at "loading profile" after login w/ domain accoun

 

Re: Laptops hang at "loading profile" after login w/ domain accoun

 

Below is the contents of the userenv.log file from a single login (I renamed

the previous userenv.log file). The entries that may be useful are towards

the end - notice the time stamp jumped from 5:04:35 p.m. to 5:06:37 p.m to

5:16:32 p.m. Twelve minutes total for the login to process!

*****

USERENV(340.344) 17:04:33:629 CUserProfile::GetRefCountAndFlags:

RegQueryValueEx failed, key = S-1-5-21-1899891192-439553545-622671684-4446,

error = 00000002

USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Can not get

ref count and flags

USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is

not 0

USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is

not 0

USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count is

not 0

USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not

available at startup. retrying

USERENV(340.57c) 17:04:35:832 RetryDCContactAtMachineStartup: Failed to

query GpNetworkStartTimeoutPolicyValue with 2, exit.

USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not

available after retries.

USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is not

available. aborting

USERENV(36c.644) 17:06:37:156 UnloadUserProfile: received a NULL hProfile.

USERENV(340.344) 17:16:00:997 ReportError: Impersonating user.

USERENV(340.224) 17:16:32:452 ProcessGPOs: The DC for domain SERA-NT is not

available. aborting

[Guest Anthony [MVP]]

Re: Laptops hang at "loading profile" after login w/ domain accoun

 

Re: Laptops hang at "loading profile" after login w/ domain accoun

 

Not much to go on there, I'm afraid.

You mentioned a couple of errors in the Event Log. What other errors do you

have relating to logon?

Do you have a slow logon with a domain account that does not have a roaming

profile?

Do you have a slow logon if you are not connected to _any_ network?

Anthony,

http://www.airdesk.com

 

 

 

"JoshGfromPortland" <JoshGfromPortland@discussions.microsoft.com> wrote in

message news:C0959414-5B0B-46C9-A418-77598123E1A0@microsoft.com...

> Below is the contents of the userenv.log file from a single login (I

> renamed

> the previous userenv.log file). The entries that may be useful are towards

> the end - notice the time stamp jumped from 5:04:35 p.m. to 5:06:37 p.m to

> 5:16:32 p.m. Twelve minutes total for the login to process!

> *****

> USERENV(340.344) 17:04:33:629 CUserProfile::GetRefCountAndFlags:

> RegQueryValueEx failed, key =

> S-1-5-21-1899891192-439553545-622671684-4446,

> error = 00000002

> USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Can not

> get

> ref count and flags

> USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count

> is

> not 0

> USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count

> is

> not 0

> USERENV(340.344) 17:04:33:659 CUserProfile::CleanupUserProfile: Ref Count

> is

> not 0

> USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is

> not

> available at startup. retrying

> USERENV(340.57c) 17:04:35:832 RetryDCContactAtMachineStartup: Failed to

> query GpNetworkStartTimeoutPolicyValue with 2, exit.

> USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is

> not

> available after retries.

> USERENV(340.57c) 17:04:35:832 ProcessGPOs: The DC for domain SERA-NT is

> not

> available. aborting

> USERENV(36c.644) 17:06:37:156 UnloadUserProfile: received a NULL hProfile.

> USERENV(340.344) 17:16:00:997 ReportError: Impersonating user.

> USERENV(340.224) 17:16:32:452 ProcessGPOs: The DC for domain SERA-NT is

> not

> available. aborting

>

[Guest JoshGfromPortland]

Re: Laptops hang at "loading profile" after login w/ domain accoun

 

Re: Laptops hang at "loading profile" after login w/ domain accoun

 

- Yes I have a slow logon with domain accounts that do not roam as well as

local accounts.

- The issue seems to occur when there is no network connection. This is a

problem when people want to use their laptops away from the office.

- It is not a group policy problem as far as I can tell because I moved the

computer name to a container that has blocked inheritance and no group

policies. I let group policy refresh by restarting Windows. Then I shut

down, pulled the network cable and tried logging in, but had the same issue.

 

I turned the userenv.log to verbose from normal and now I have a more

extensive logfile. Unfortunately this site does not let you attach files or

post this much text. I'm posting two sections that are peculiar. The first

is peculiar because the timestamp jumps from 10:33:46 to 10:33:08 (back in

time!!). The second is peculiar because the timestamp jumps from 10:35:12 to

10:44:33.

 

*****

USERENV(33c.354) 10:33:46:171 IProfileSecurityCallBack: client authenticated.

USERENV(33c.354) 10:33:46:171 ReleaseClientContext: Releasing context

USERENV(33c.354) 10:33:46:171 ReleaseClientContext_s: Releasing context

USERENV(33c.354) 10:33:46:171 MIDL_user_free enter

USERENV(368.13b0) 10:33:46:171 ReleaseInterface: Releasing rpc binding handle

USERENV(368.13b0) 10:33:46:171 UnloadUserProfile: returning 1

USERENV(de0.a90) 10:33:46:702 LibMain: Process Name:

C:\WINDOWS\system32\wuauclt.exe

USERENV(340.344) 10:33:08:686 InitializePolicyProcessing: Initialised

Machine Mutex/Events

USERENV(340.344) 10:33:08:706 InitializePolicyProcessing: Initialised User

Mutex/Events

USERENV(340.344) 10:33:08:706 LibMain: Process Name:

\??\C:\WINDOWS\system32\winlogon.exe

*****

USERENV(340.344) 10:33:18:079 AbleToBypassCSC: tried

NPAddConnection3ForCSCAgent. Error 1231

USERENV(b24.b28) 10:34:00:410 LibMain: Process Name:

C:\WINDOWS\system32\wuauclt.exe

USERENV(b54.b58) 10:34:01:251 LibMain: Process Name:

C:\WINDOWS\system32\wbem\wmiprvse.exe

USERENV(36c.428) 10:35:12:874 UnloadUserProfile: Entering, hProfile = <0x0>

USERENV(36c.428) 10:44:33:471 UnloadUserProfile: received a NULL hProfile.

USERENV(36c.428) 10:44:33:931 UnloadUserProfile: returning 0

USERENV(498.e30) 10:44:34:522 GetProfileType: Profile already loaded.

USERENV(498.e30) 10:44:34:682 LoadProfileInfo: Failed to query central

profile with error 2

USERENV(36c.428) 10:44:34:682 LoadUserProfile: Yes, we can impersonate the

user. Running as self

[Guest JoshGfromPortland]

Re: Laptops hang at "loading profile" after login w/ domain accoun

 

Re: Laptops hang at "loading profile" after login w/ domain accoun

 

It looks like I have narrowed the problem down to a system service.

Eliminating half of the services at a time I should be able to find the

problematic service after 7 tests (assuming it is only one particular

service). I can export the services to a CSV file and probably use that list

to put everything back when I am done. I wish I had a hunch on which service

it was. We can make sure the service is set the same way as working

computers, we can check that the account the service uses is the same, and

if needed replace the executable for the service with one from a working

computer.

[Guest JoshGfromPortland]

RE: Laptops hang at "loading profile" after login w/ domain account...

 

It turns out the web client service was responsible for the long login issue.

I have disabled the web client service company-wide and the problem is

resolved. I'm not sure, however, what suddenly caused the web client service

to be such a trouble-maker.

[Guest Anthony [MVP]]

Re: Laptops hang at "loading profile" after login w/ domain account...

 

How did you isolate that as the cause?

Anthony,

http://www.airdesk.com

 

 

"JoshGfromPortland" <JoshGfromPortland@discussions.microsoft.com> wrote in

message news:BBE22B63-E401-40A2-987B-09101CE97C0C@microsoft.com...

> It turns out the web client service was responsible for the long login

> issue.

> I have disabled the web client service company-wide and the problem is

> resolved. I'm not sure, however, what suddenly caused the web client

> service

> to be such a trouble-maker.

[Guest JoshGfromPortland]

Re: Laptops hang at "loading profile" after login w/ domain accoun

 

Re: Laptops hang at "loading profile" after login w/ domain accoun

 

I first found out it was a service problem by unchecking "load system

services" in Msconfig.

 

"Anthony [MVP]" wrote:

> How did you isolate that as the cause?

> Anthony,

> http://www.airdesk.com

>

>

> "JoshGfromPortland" <JoshGfromPortland@discussions.microsoft.com> wrote in

> message news:BBE22B63-E401-40A2-987B-09101CE97C0C@microsoft.com...

> > It turns out the web client service was responsible for the long login

> > issue.

> > I have disabled the web client service company-wide and the problem is

> > resolved. I'm not sure, however, what suddenly caused the web client

> > service

> > to be such a trouble-maker.

>

>