• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

AD End User Issue

screwmesa

[H]ard|Gawd
Joined
May 19, 2005
Messages
1,024
Not sure if this is in the right section...but....


I'm having an issue where the users are being treated as first time users when they log on to the domain. They get the welcome to windows pop up, internet connection wizard, and office gives them the EULA everytime they log in. Is there a fix for this or are my users doomed to be first-timers every time?
 
Is a user profile being created locally each time the user logs on.

Go to Documents and Settings, and take a look at that folder. If new profiles are being created everytime it would have consecutive profile names. Ex. johndoe, johndoe.000, johndoe.001 and so on.
 
nope, it's set up to always use the server's copy and to delete cached profiles.
 
is the server copy a mandatory profile? if so then no changes can be made to it. and if you created these mandatory profiles from a profile that you had not gone through all those steps in then i'd guess it will come back every single time- since you can't change the profile to say yes, i've gone through the EULA before.

just a guess.
 
big daddy fatsacks said:
is the server copy a mandatory profile? if so then no changes can be made to it. and if you created these mandatory profiles from a profile that you had not gone through all those steps in then i'd guess it will come back every single time- since you can't change the profile to say yes, i've gone through the EULA before.

just a guess.


That possible. also could be its not pulling down the profile or the permissions are set wrong on the profiles. check tosee if there is "temp" when the suer logson under documents and settings.
 
That is why.
That should only delete the local copy once it's done updating the server copy, nothing to do with this problem.


The profiles are not mandatory profiles and they have the correct permissions. There is a temp folder that comes up in the local settings folder, which does no good since local settings get deleted each time a user logs off by default.

The settings I have are all done over GPO.
 
Help....anyone....now users are losing printers when they log off.

I saw a registry fix for the install office everytime you logon, but that doesn't explain the printers or the welcome to windows splash. I have the welcome to windows to not display in the GPO, but still no dice.
 
For anyone else that has the problem, used a script to add printers at logon....looked like this:

Set objWSHNetwork = CreateObject("WScript.Network") 'create network object
strConnectString = "\\server\printer"
strResult = objWSHNetwork.AddWindowsPrinterConnection(strConnectString)

changing \\server\printer of course.
 
the easiest for adding printers at logon, is called con2prt.exe

You can have it add printers, delete printers, set certain printers as default, etc... nice little proggie... free.

QJ
 
interesting....do you have to install it on each client computer?

how do i make it delete all networked printers and then install say 5 printers?
 
con2prt /f
con2prt /cd \\server1\Xerox
con2prt /c \\server2\Xerox2
con2prt /c \\server2\Xerox3
con2prt /c \\server3\Xerox4
con2prt /c \\server3\Xerox5

/f deletes all current network printers, and /c installs the printer at logon... the /cd makes that printer the default printer.

Just put the .exe in the system folder. You can have it copy it @ logon, or do it yourself.

QJ
 
if you see a temp directory in c:\documents and settyings it is not pulling down the profile from the profile server. Thats why your having these issues. Not sure what else to tell you without looking at your systems. check that the users have permisons on the shares where the profiles are stored.
 
It's not a temp directory, I get all the files from the server and all shares have the correct permissions. I'm just getting some weird things.
 
Have you checked the Event Viewer on the client machines? The profile is either not getting loaded or saved or both. The Event Viewer should show you any errors.

Brian Taylor
 
you are trying to solve problems that are cuased because the users profiles are not being saved. stop ignoring the great problem. all these profile issue will go away (ie loosing printers when they logoff) when you fix the profile issue.
 
screwmesa said:
There is a temp folder that comes up in the local settings folder, which does no good since local settings get deleted each time a user logs off by default.


This is the problem.
 
His point was you are using hacks to solve minor problems that are caused by your root problem, which is that your roaming profiles are screwed up. Most people, including myself, probably feel that your time would be better spent fixing the core problem. In the time you've spend messing around with printer mappings and the first install Office problem you should have at least been able to determine what is wrong with your roaming profiles.

In case you dont know how go to start>run type eventvwr and hit enter. Click on the Application section and look for errors with the source of folder redirection(anything with a red x is indicative of a problem, but some of these may not apply to the problems at hand). The main things we need to know to help you fix this are the Event ID, the Source, and any description it may have.

Brian Taylor
 
BrianTaylor said:
His point was you are using hacks to solve minor problems that are caused by your root problem, which is that your roaming profiles are screwed up. Most people, including myself, probably feel that your time would be better spent fixing the core problem. In the time you've spend messing around with printer mappings and the first install Office problem you should have at least been able to determine what is wrong with your roaming profiles.

In case you dont know how go to start>run type eventvwr and hit enter. Click on the Application section and look for errors with the source of folder redirection(anything with a red x is indicative of a problem, but some of these may not apply to the problems at hand). The main things we need to know to help you fix this are the Event ID, the Source, and any description it may have.

Brian Taylor


Thanks. atleast someone is seeing the real problem here. If you have "temp" under c:\documents and settings you have a profile problem. When you log out this directory will be remove no matter how you have your GPO conmfigured becuase temp = temporary. your problem are pointing to the fact that a new "temp" profile is being created on the local pc everytime the suer logs on.
 
Ok, I'm getting the following errors on an admin account:

Event ID: 1000
Source: Userenv
Description: Windows cannot process extension Folder Redirection ProcessGroupPolicy. Return value (0x15).

and

Event ID: 101
Source: Folder Redirection
Description: Failed to perform redirection of folder Application Data. The new directories for the redirected folder could not be created.

and

Event ID: 1000
Source: Userenv
Description: Windows cannot determine the user or computer name. Return value (1722).



User account got these errors:

Event ID: 1000
Source: Userenv
Description: Windows cannot connect to <domain> with (0x2733)

Event ID: 1000
Souce: Userenv
Description: Windows cannot query for the list of group policy objects


Please help an idiot :p

Forgot: This is all running on Win2k3 Server Standard and all Win2k clients.
 
do you have a firewall on the server? GPO requires ICMP packets to get through.
 
The AD server is set up as the primary DNS server on the firewall, which controls DHCP.
 
This looks like either network connectivity or a dns issue.

Can you ping the DC by hostname (not FQDN)? do an nslookup and test your name resolution. Check reverse lookup aswell. Turn ICF off on the client machine(or any other firewall).
 
How are the share permissions set up on the profile server? Does the Domain Users or Everyone group have access?

I have had this happen to a few users over the years but normally renaming their network sahred profile to OLDusername and logging back in seems to help. Is the user getting the infamous "windowsa cannot load your romaing profile and temporary profile will be used.. reason- ACESS DENIED" coming up when they first log in?
 
Users are not getting any errors when logging on to the domain and ICF is not on on ny client machines. I can ping the DC with any client machine by hostname just fine as well.

The main share has everyone with full access and individual shares within with individual users and admins with full control.
 
do an
nslookup <servername>

and an nslookup <serverIP>

and post the results.
 
screwmesa said:
Can't find server name for address: Non-existant domain server.

wha? :confused:


Do this.....

On the server do an ipconfig /all and then do it on a workstation and post the results.

Make sure the server has it dns server set to 127.0.0.1 and you use the DNS forwarder tab on the DNS config to point to your ISP's DNS.

90% of problems like this are
1.DNS
2.DNS
3.DNS

:)
 
127.0.0.1 being the ip of the server or literally 127.0.0.1?

The server is set as its ip in dns and then our isp's dns in the forward tab.
 
Back
Top