TS: w2k8 r2 sp1 - farm but no session broker - restart of TS every day
mandatory profiles, roaming profile
folder redirections + lot of GPP/GPO sutomizations
Hello,
I know this problem has been discussed a lot on this forum, but I haven't found a solution yet.
I encouter the logon issue from time to time, with the event id 1542. As soon as I get the logon error a simple, the next logon is ok.
Last time I used proc mon to identify the root cause of the problem and I found an access denied for Registry Open event which seems to be related to the load of the user root hive (HKU\S-....). In the situation of this failed logon instead of retrying a logon I justed wanted to understand the access denied pointed out with the help of procmon....so I tried to logon with another admin account in order the look at the local profile cache and I discovered that an attempt to load the ntuser.dat with regedit returned the same access denied....so my ntuser.dat is cause of the logon on failure with an access denied.
...but what is the root cause ? what is the cause of the bad ntuser.dat ? and also why do I have an ntuser.dat after all ? I'm using mandatory profiles so I should have ntuser.man only....instead I have both files in the cache (not in the roaming network folder just in the cache)*1 and a lot of other files ending with regtrans-ms.... like the never merge.... I suspect that when the merge occurs the ntuser.dat becomes corrupted...
*1 we have the same use of mandatory profile on our w7 workstations and we share the mandatory profile with the TS farm, moreover with share redirected folders too... maybe this could be the root cause
Can anyone help me on this case ?
Regards
Angelo