Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
Windows did not load your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Windows did not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrator's group must be the owner of the folder. Contact your network administrator.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is a roaming profile?
What is a local profile?
What information does a network administrator need from you?
What is the role of Userenv?
This problem can be caused by bugs either in Microsoft software or third-party software (printer drivers, virus scanner service, etc.). In order to resolve this problem you need to identify what software is causing the profile to fail to unload. "Citrix Support Document ID: CTX105618" provides several causes for this problem accompanied with a suggested resolution.
I had the problem after installing Win2k SP4 on my machines. After searching through Microsoft’s KB, I found ME327462. It appears that in Windows XP SP1 and Windows 2000 SP4 a new check is introduced, for checking existing roaming user profiles folders. When disabling this check al the problems where solved.
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (1) - More links...|
Send comments or solutions
- Notify me when updated