|
Terminal Services problems
|
View this Thread in Original format
| DJ Mikey Mike |
I posted this on a tech support forum I use, but since I know there are quite a few knowledgable computer peeps on here as well I thought I may as well try my luck. Mini essay alert!
Recently my terminal services users keep logging into their accounts on the terminal server to find the following message:
Clicking 'OK' to this then brings up another message box:
After clicking 'OK' to this the user is then taken into a new 'temporary' account. This account is very basic (empty desktop, minimal settings, etc.) I've got about 30 users who use the Terminal Server and the above problem can happen to everyone in one go or just a select few users at a time. There doesn't seem to be any kind of pattern to who it's happening to or how many it happens to in one go.
A reboot normally clears this up for a few days before it happens again, but in some cases even a reboot doesn't help, in which case I am forced to delete the persons folder from the documents and settings folder, sign in as them again to create a new profile, and finally copy their work files in from the backup.
The event viewer shows the event IDs 1500 and 1508 after the user experiences the problem:
One thing I have tried which hasn't worked is increasing the PagedPoolSize, as recommended by this article: http://support.microsoft.com/kb/935649
One other piece of information worth noting is that the folders 'TEMP', 'TEMP.DOMAIN', 'TEMP.DOMAIN.000' etc. appear where the profile folders are stored.
Also, when this has happened to a user, the status of their original profile changes from 'Local' to 'Backup,' and their temporary profile also gets shown in the User Profiles section.
I'm close to tearing my hair out over this so any suggestions or explainations on why this is happning wouldwould be most welcome. :) |
|
|
| inconspicuous |
| plowright. lol. |
|
|
| DJ Mikey Mike |
| lol, mate. We've got some dynamite names in my organisation. Pat Mee, Peter Hart (user name 'phart'), Steven Tonks. I'm sure there are more as well I just can't remember them right now :haha: |
|
|
| gehzumteufel |
| Is it safe to assume that this is win2k3? |
|
|
| undertone |
Have you or someone in your organization deployed roaming profiles? Or changed some of the users in AD to do with their profiles?
More then likely a GPO has been applied to an OU that has some settings turned on. Use GPMC to narrow it down.
What are the userenv errors saying?
-r5a. |
|
|
| Dervish |
| Try the latest version of UPHClean. |
|
|
| StanVoid |
| delete system32, make your windows faster. |
|
|
| DJ Mikey Mike |
| quote: | Originally posted by undertone
Have you or someone in your organization deployed roaming profiles? Or changed some of the users in AD to do with their profiles?
More then likely a GPO has been applied to an OU that has some settings turned on. Use GPMC to narrow it down.
What are the userenv errors saying?
-r5a. |
Actually yes, I can't believe I didn't mention this in the first place. What a cretin I am. We've recently replaced our Primary server. I exported the Active Directory and imported it onto the new server, which was quite problematic (standard.) But, all accounts on the Terminal Server have been deleted and recreated since then - Do you suspect there are communication problems between the 2, despite the accounts being new?
Also, how would one go about deploying roaming profiles in the first place? You'll have to forgive my inexperience with this - This is the first time since I've been in this business that I've ever had even a minor problem with a terminal server.
I'm at home now so will get you the userenv errors tomorrow.
gehzumteufel -> It is indeed Win 2003.
Dervish -> Cheers, I'll look into that tomorrow as well. |
|
|
| gehzumteufel |
| Dervish suggested what I was going to. :) |
|
|
| undertone |
| quote: | Originally posted by DJ Mikey Mike
Actually yes, I can't believe I didn't mention this in the first place. What a cretin I am. We've recently replaced our Primary server. I exported the Active Directory and imported it onto the new server, which was quite problematic (standard.) But, all accounts on the Terminal Server have been deleted and recreated since then - Do you suspect there are communication problems between the 2, despite the accounts being new?
Also, how would one go about deploying roaming profiles in the first place? You'll have to forgive my inexperience with this - This is the first time since I've been in this business that I've ever had even a minor problem with a terminal server.
|
I'll need to think about this some further to be of any help but I can answer one of your questions.
Roaming profiles is set up in the Active Directory users / computers tool, in the users properties (profile tab)
What might be of help is (quote technet)
# In the Run dialog box, type regedit, and then click OK.
# Locate the following subkey: HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon.
# Create a new entry named UserEnvDebugLevel of data type REG_DWORD, and set its value to 0x30002.
# The log file is stored in this location: %windir%\Debug\Usermode\Userenv.log.
and you can look through that to help spot failings or errors.
What might be happening is the user for some reason in the AD has a profile option set, its trying load it but fails and the local copy is corrupt.
How did you merge things over? I'm assuming with adpromo and transferring the global catalog server over and such (not that I think would cause a problem but im just trying to understand your environment more)
My first thought is this though;
1) Make sure the users profile setting is cleared (see above)
2) Delete the roaming profile on the server (back it up if you need to do)
if you are full Terminal Services (aka the computers are just XP with nothing on it using remote desktop to connect to the server) then don't worry about this last step
3) log on to computer as Admin, delete the user profile through control panel and make sure its gone in my doc. reboot the machine.
go back into ad, add the users roaming profile path and have then login. this SHOULD setup a fresh local copy on the machine/server.
-r5a |
|
|
| fbgdavidson |
| quote: | Originally posted by DJ Mikey Mike
Peter Hart (user name 'phart') |
My father worked at a company where their internal emails were 'first name + surname initial'. He had a guy on his team, Chris Thompson, [email protected] |
|
|
|
|
