Click here to get back home

Strange Stuff

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Strange Stuff Philip 06-19-2008
Posted by Philip on June 19, 2008, 5:51 pm
Please log in for more thread options
Strange Stuff

I am a domain admin. The domain has more or less 300 PCs and users. And this
is the first time I am seeing this error in several years i work in IT.

I never use any roaming profiles. The laptops are entirely new ones. The OS
is XP pro with SP3 with all the last patches. The domain controllers are 2000
server also with all updates.

At some stage in the authentication process, after entered the login name
and password:

“Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the profile will
not be copied to the server when you logoff. Possible causes of this error
include network problems or insufficient security rights. If this problem
persists, contact your network administrator.

DETAIL - Access is denied.”

After i hit the ok button and a few sec later…

“Windows cannot find the local profile and is logging you on with a
temporary profile. Changes you make to this profile will be lost when you log
off.”

After this, and I can successfully log in and it’s created a temporary
profile, witch doesn’t do much because the next time i log in… Its created
another temp profile, and so on..


Now the strange part :

All the users have their first name and the last name, as logon name. Ex.

        Luis.afonso
        Paul.tomas
        Jorge.Luciano

The problem is with user “luis.afonso” (fictional name).

However, if I try with “luis afonso” or “luis1.afonso” or
“afonso.luis” I
have no errors at all. The user logs in without any problem. Only this
combination of letters is giving me troubles. I tried in several PCs and
created several similar accounts. Always the same result.

I even try use IPSEC between the DCs and one laptop.. and with this
particularly user it doesn’t work., although is works fine with others users..

Iam really puzzled with this one. The account is for a commercial director
witch will arrive on next Monday.

Because for me, this looks more something like twilightzone area. :)

Tanks for any help.


Posted by Anthony [MVP] on June 20, 2008, 4:05 am
Please log in for more thread options
Philip,
Do you have any replication errors on your DC's?
Anthony,
http://www.airdesk.co.uk


> Strange Stuff
>
> I am a domain admin. The domain has more or less 300 PCs and users. And
> this
> is the first time I am seeing this error in several years i work in IT.
>
> I never use any roaming profiles. The laptops are entirely new ones. The
> OS
> is XP pro with SP3 with all the last patches. The domain controllers are
> 2000
> server also with all updates.
>
> At some stage in the authentication process, after entered the login name
> and password:
>
> "Windows cannot locate the server copy of your roaming profile and is
> attempting to log you on with your local profile. Changes to the profile
> will
> not be copied to the server when you logoff. Possible causes of this error
> include network problems or insufficient security rights. If this problem
> persists, contact your network administrator.
>
> DETAIL - Access is denied."
>
> After i hit the ok button and a few sec later.
>
> "Windows cannot find the local profile and is logging you on with a
> temporary profile. Changes you make to this profile will be lost when you
> log
> off."
>
> After this, and I can successfully log in and it's created a temporary
> profile, witch doesn't do much because the next time i log in. Its created
> another temp profile, and so on..
>
>
> Now the strange part :
>
> All the users have their first name and the last name, as logon name. Ex.
>
> Luis.afonso
> Paul.tomas
> Jorge.Luciano
>
> The problem is with user "luis.afonso" (fictional name).
>
> However, if I try with "luis afonso" or "luis1.afonso" or "afonso.luis" I
> have no errors at all. The user logs in without any problem. Only this
> combination of letters is giving me troubles. I tried in several PCs and
> created several similar accounts. Always the same result.
>
> I even try use IPSEC between the DCs and one laptop.. and with this
> particularly user it doesn't work., although is works fine with others
> users..
>
> Iam really puzzled with this one. The account is for a commercial director
> witch will arrive on next Monday.
>
> Because for me, this looks more something like twilightzone area. :)
>
> Tanks for any help.
>



Posted by Philip on June 20, 2008, 3:19 pm
Please log in for more thread options
Hi Anthony, no replication problems. Only 3 or 4 minutes for replicate the
actions, witch its normal IMO.

A small correction:
I did not configure the IPsec well.. so ignore my observation about it.

Meanwhile the problem seems to be solved. :)

I deleted the account and created another one with exactly the same name.Now
i can log in.

Oh well.. probably some weird virus :)


"Anthony [MVP]" wrote:

> Philip,
> Do you have any replication errors on your DC's?
> Anthony,
> http://www.airdesk.co.uk
>
>
> > Strange Stuff
> >
> > I am a domain admin. The domain has more or less 300 PCs and users. And
> > this
> > is the first time I am seeing this error in several years i work in IT.
> >
> > I never use any roaming profiles. The laptops are entirely new ones. The
> > OS
> > is XP pro with SP3 with all the last patches. The domain controllers are
> > 2000
> > server also with all updates.
> >
> > At some stage in the authentication process, after entered the login name
> > and password:
> >
> > "Windows cannot locate the server copy of your roaming profile and is
> > attempting to log you on with your local profile. Changes to the profile
> > will
> > not be copied to the server when you logoff. Possible causes of this error
> > include network problems or insufficient security rights. If this problem
> > persists, contact your network administrator.
> >
> > DETAIL - Access is denied."
> >
> > After i hit the ok button and a few sec later.
> >
> > "Windows cannot find the local profile and is logging you on with a
> > temporary profile. Changes you make to this profile will be lost when you
> > log
> > off."
> >
> > After this, and I can successfully log in and it's created a temporary
> > profile, witch doesn't do much because the next time i log in. Its created
> > another temp profile, and so on..
> >
> >
> > Now the strange part :
> >
> > All the users have their first name and the last name, as logon name. Ex.
> >
> > Luis.afonso
> > Paul.tomas
> > Jorge.Luciano
> >
> > The problem is with user "luis.afonso" (fictional name).
> >
> > However, if I try with "luis afonso" or "luis1.afonso" or "afonso.luis" I
> > have no errors at all. The user logs in without any problem. Only this
> > combination of letters is giving me troubles. I tried in several PCs and
> > created several similar accounts. Always the same result.
> >
> > I even try use IPSEC between the DCs and one laptop.. and with this
> > particularly user it doesn't work., although is works fine with others
> > users..
> >
> > Iam really puzzled with this one. The account is for a commercial director
> > witch will arrive on next Monday.
> >
> > Because for me, this looks more something like twilightzone area. :)
> >
> > Tanks for any help.
> >
>
>
>

Posted by Anthony [MVP] on June 20, 2008, 7:10 pm
Please log in for more thread options
When you get "strange stuff" it is usually because one of your assumptions
is wrong.
Anthony,
http://www.airdesk.co.uk


> Hi Anthony, no replication problems. Only 3 or 4 minutes for replicate the
> actions, witch its normal IMO.
>
> A small correction:
> I did not configure the IPsec well.. so ignore my observation about it.
>
> Meanwhile the problem seems to be solved. :)
>
> I deleted the account and created another one with exactly the same
> name.Now
> i can log in.
>
> Oh well.. probably some weird virus :)
>
>
> "Anthony [MVP]" wrote:
>
>> Philip,
>> Do you have any replication errors on your DC's?
>> Anthony,
>> http://www.airdesk.co.uk
>>
>>
>> > Strange Stuff
>> >
>> > I am a domain admin. The domain has more or less 300 PCs and users. And
>> > this
>> > is the first time I am seeing this error in several years i work in IT.
>> >
>> > I never use any roaming profiles. The laptops are entirely new ones.
>> > The
>> > OS
>> > is XP pro with SP3 with all the last patches. The domain controllers
>> > are
>> > 2000
>> > server also with all updates.
>> >
>> > At some stage in the authentication process, after entered the login
>> > name
>> > and password:
>> >
>> > "Windows cannot locate the server copy of your roaming profile and is
>> > attempting to log you on with your local profile. Changes to the
>> > profile
>> > will
>> > not be copied to the server when you logoff. Possible causes of this
>> > error
>> > include network problems or insufficient security rights. If this
>> > problem
>> > persists, contact your network administrator.
>> >
>> > DETAIL - Access is denied."
>> >
>> > After i hit the ok button and a few sec later.
>> >
>> > "Windows cannot find the local profile and is logging you on with a
>> > temporary profile. Changes you make to this profile will be lost when
>> > you
>> > log
>> > off."
>> >
>> > After this, and I can successfully log in and it's created a temporary
>> > profile, witch doesn't do much because the next time i log in. Its
>> > created
>> > another temp profile, and so on..
>> >
>> >
>> > Now the strange part :
>> >
>> > All the users have their first name and the last name, as logon name.
>> > Ex.
>> >
>> > Luis.afonso
>> > Paul.tomas
>> > Jorge.Luciano
>> >
>> > The problem is with user "luis.afonso" (fictional name).
>> >
>> > However, if I try with "luis afonso" or "luis1.afonso" or "afonso.luis"
>> > I
>> > have no errors at all. The user logs in without any problem. Only this
>> > combination of letters is giving me troubles. I tried in several PCs
>> > and
>> > created several similar accounts. Always the same result.
>> >
>> > I even try use IPSEC between the DCs and one laptop.. and with this
>> > particularly user it doesn't work., although is works fine with others
>> > users..
>> >
>> > Iam really puzzled with this one. The account is for a commercial
>> > director
>> > witch will arrive on next Monday.
>> >
>> > Because for me, this looks more something like twilightzone area. :)
>> >
>> > Tanks for any help.
>> >
>>
>>
>>



Posted by Philip on June 20, 2008, 8:06 pm
Please log in for more thread options
Yes its true. Usually is.
Though.. not in this case. As i didn’t understand what happened here... Did
you?
So.. with no explanation, its still "strange stuff" for me.


"Anthony [MVP]" wrote:

> When you get "strange stuff" it is usually because one of your assumptions
> is wrong.
> Anthony,
> http://www.airdesk.co.uk
>
>
> > Hi Anthony, no replication problems. Only 3 or 4 minutes for replicate the
> > actions, witch its normal IMO.
> >
> > A small correction:
> > I did not configure the IPsec well.. so ignore my observation about it.
> >
> > Meanwhile the problem seems to be solved. :)
> >
> > I deleted the account and created another one with exactly the same
> > name.Now
> > i can log in.
> >
> > Oh well.. probably some weird virus :)
> >
> >
> > "Anthony [MVP]" wrote:
> >
> >> Philip,
> >> Do you have any replication errors on your DC's?
> >> Anthony,
> >> http://www.airdesk.co.uk
> >>
> >>
> >> > Strange Stuff
> >> >
> >> > I am a domain admin. The domain has more or less 300 PCs and users. And
> >> > this
> >> > is the first time I am seeing this error in several years i work in IT.
> >> >
> >> > I never use any roaming profiles. The laptops are entirely new ones.
> >> > The
> >> > OS
> >> > is XP pro with SP3 with all the last patches. The domain controllers
> >> > are
> >> > 2000
> >> > server also with all updates.
> >> >
> >> > At some stage in the authentication process, after entered the login
> >> > name
> >> > and password:
> >> >
> >> > "Windows cannot locate the server copy of your roaming profile and is
> >> > attempting to log you on with your local profile. Changes to the
> >> > profile
> >> > will
> >> > not be copied to the server when you logoff. Possible causes of this
> >> > error
> >> > include network problems or insufficient security rights. If this
> >> > problem
> >> > persists, contact your network administrator.
> >> >
> >> > DETAIL - Access is denied."
> >> >
> >> > After i hit the ok button and a few sec later.
> >> >
> >> > "Windows cannot find the local profile and is logging you on with a
> >> > temporary profile. Changes you make to this profile will be lost when
> >> > you
> >> > log
> >> > off."
> >> >
> >> > After this, and I can successfully log in and it's created a temporary
> >> > profile, witch doesn't do much because the next time i log in. Its
> >> > created
> >> > another temp profile, and so on..
> >> >
> >> >
> >> > Now the strange part :
> >> >
> >> > All the users have their first name and the last name, as logon name.
> >> > Ex.
> >> >
> >> > Luis.afonso
> >> > Paul.tomas
> >> > Jorge.Luciano
> >> >
> >> > The problem is with user "luis.afonso" (fictional name).
> >> >
> >> > However, if I try with "luis afonso" or "luis1.afonso" or "afonso.luis"
> >> > I
> >> > have no errors at all. The user logs in without any problem. Only this
> >> > combination of letters is giving me troubles. I tried in several PCs
> >> > and
> >> > created several similar accounts. Always the same result.
> >> >
> >> > I even try use IPSEC between the DCs and one laptop.. and with this
> >> > particularly user it doesn't work., although is works fine with others
> >> > users..
> >> >
> >> > Iam really puzzled with this one. The account is for a commercial
> >> > director
> >> > witch will arrive on next Monday.
> >> >
> >> > Because for me, this looks more something like twilightzone area. :)
> >> >
> >> > Tanks for any help.
> >> >
> >>
> >>
> >>
>
>
>

Similar ThreadsPosted
Strange issue with ACL September 26, 2005, 7:21 pm
very very strange problem.. please help! February 24, 2007, 10:40 am
strange file on c: root October 18, 2005, 11:04 am
Strange appearances in Logs December 21, 2005, 8:10 am
NTFS Deny not Working STRANGE September 30, 2005, 4:40 am
Security Log Event has Strange Timestamp April 5, 2006, 2:20 pm
Rather strange issuance of Kerberos tickets July 9, 2006, 6:31 pm
Strange folder security problem October 4, 2006, 3:45 pm
Strange issue with password authentication January 18, 2007, 10:58 am
Strange; setting up CA for DC IPsec- how did the DCs autoenroll? January 12, 2008, 9:56 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap