This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 98%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Good morning,
Problem:
A contractor we hired to spin up a new server finished and handed it off to the sysadmin team for my org. While the contractor's domain admin user account can log in successfully, all other user accounts (including domain admins) cannot log into the new server. They receive the error "The User Profile Service failed the sign-in", which prevents our domain admins from getting into to the server to do further work. OS Server2019.
Troubleshooting so far:
Restarted the User Profile service.
Testing found that this problem applies to user accounts that have never before successfully signed in to this machine. So the common fix I am finding on forum searches about deleting or changing the user profile registry entry does not apply to this situation. I tried to go through those steps and the registry entry for those user accounts did not exist.
For the purposes of testing, I signed into this server with a local admin account and attempted to run programs as a domain admin user. It failed with the error "Only part of a ReadProcessMemory or WriteProcessMemory request was completed."
I checked to make sure it was not a permissions issue as described in the troubleshooting steps for that following error, but as far as I can tell, the "Everyone" entry does have read permissions to the Default user profile folder. Perhaps there is another ACL issue that I'm not aware of.
EDIT: Please forgive the lack of relevant tags. As I am attempting to add tags, I find that nothing I can think of to enter is available to select.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 6%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
I faced similar issue after trying multiple thing I finally figured out only way of resolving this issue is by replacing "C:\Users\Default\NTUSER.DAT" from working server.
Since I was facing this issue on windows server 2016 so I replaced it with working 2016 server and issue got fixed.
If you check event log "%SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx" if you see your profile getting loaded under C:\Users\Temp then above troubleshooting will fix this problem.
Server 2019 is not currently supported here on QnA. I'd try asking for help in dedicated forums here.
https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=ws2019
https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winservergen
--please don't forget to Accept as answer if the reply is helpful--
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows Server] Datacenter Management
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.
Hello @Joseph McDowell ,
The correct registry area to work with is >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
Check, if you see two entries with similar name and one with .bak at the end. Remove the .bak from the one with .bak and change the other to something else. Go inside the renamed key and open REG_DWORD named 'state'. Change the value to 0. Open REG_DWORD named 'RefCount' and change it to 0 also.
Now restart the computer and check the issue is resolved
Please mark as "Accept the answer" if the above steps helps you. Others with similar issues can also follow the solution as per your suggestion
Regards,
Manu
Hi Manu,
I have followed the instructions as you specified, however those user profile entries in the registry do not exist. This error occurs for all users logging into the machine, including new users without a user profile entry on that station.
Hi,
Thanks for confirming that. Have you also checked the Antivirus/Anti-spam agents running on the system is controlling this? Please isolate the issue by disabling/uninstalling the agent from one of the machine
Thanks,
Manu
Hi Manu,
I have confirmed our security suite has been disabled on this machine and the services associated with it are no longer running. However, further attempts for domain users to log into this machine persist with the same error.
Hi,
I am trying to support with another option. You need to copy NTUSER.DAT file under C:\Users\Default to C:\Users\Local user. I guess you can access a non-working machine through network: \machine-name\c$\Users\Default
After copying the file, try to login with any user who is authorized to login
Thanks,
Manu
Hello,
Any update? Have you able to fix the issue
Thanks,
Manu
Hi Manu,
The local user directory in C:\Users[localuser] does not exist because this error applies to users who have never before logged into this machine and therefore do not have a local user profile created. This is why modifying their registry entry is not possible. I logged into the machine as a local administrator to double-check that and can confirm that the domain users who are having this problem do not have user profile folders in C:\Users\
Hi,
Could you please check Event Viewer from the computer you successfully logged in as local admin user for entries states that there is a user profile issue? it will have more details for troubleshooting the issue further. Also, you can check in domain controller and see the failed attempt of these users.
If you can provide those details, we can further look on it and to help you to fix the issue
Thanks,
Manu
it sounds similar to this problem, which I faced some years ago on Win7/WS2008R2 ?
https://helgeklein.com/blog/2013/09/error-message-explained-user-profile-service-failed-logon/
check the permissions, recursively, on all file+folders in the default user profile, take ownership / reset inheritance on the entire folder structure at c:\users\default\