Profile Problems on Termserv

[brea]

I have a group of 5 terminal servers that I am using for citrix. We are having profile problems where the users profile is not unloading from the HKEY_USERS section of the registry. The _classes portion is staying in the registry.

When the user logs back into that server they get an error stating that their profile cannot be loaded. DETAIL: Access is denied.

I can go in through regedt32 and unload the hive to remove it but this causes a problem in that, if correct, it does not save any changes to the profile causing the user to have to redo anything that was previously done to the profile.

In looking at the userenv log I have many, many entries stating the following.

USERENV(371c.3694) 17:00:22:305 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-1642294201-1782661194-2141916652-1911, error 2
USERENV(1564.874) 17:02:03:006 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-1642294201-1782661194-2141916652-2421, error 2
USERENV(3718.3314) 17:03:47:161 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-1642294201-1782661194-2141916652-8677, error 2
USERENV(2808.1fe8) 17:05:49:127 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-1642294201-1782661194-2141916652-8290, error 2
USERENV(2878.cc0) 17:05:49:752 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-1642294201-1782661194-2141916652-9280, error 2
USERENV(2830.2ba4) 17:05:50:705 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-1642294201-1782661194-2141916652-8447, error 2
USERENV(2a9c.2be8) 17:06:55:954 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-1642294201-1782661194-2141916652-4134, error 2
USERENV(2ac4.2000) 17:07:39:266 DeleteProfile: Failed to delete the appmgmt dir C:\WINNT\system32\appmgmt\S-1-5-21-1642294201-1782661194-2141916652-8488, error 2

Anyone have any ideas?

 

[brea]

No ideas?

 

[skotman]

Not really sure where to go but since no one has posted yet.
Try checking your permissions. Since your getting an access denied I suspect it's not allowing it to be delete.

Just a theory

Scott Heath

http://www.scottspad.com

AIM: orange7288

 

[lrmerc]

What permissions are set on the registry key?

 

[skotman]

This may point you in a generally right direction I hope.

http://www.eventid.net/display.asp?eventno=1415

More shots at google

Scott Heath

http://www.scottspad.com

AIM: orange7288

 

[brea]

The permissions are not an issue. I can go in under regedt32 and unload the profile. Through some other posts I have found out the following.

They're not unloading because some process is not closing properly thus not allowing the SID to be unloaded from HKEY_USERS. Then when the user gets connected to that server later they get an error stating that access is denied to the profile, this being due to the profile still being loaded or only half unloaded.

 

[skotman]

Do you have any idea what process not being unloaded?

Scott Heath

http://www.scottspad.com

AIM: orange7288

 

[brea]

sorry. Should have put that in there. There are 3 main ones. csrss.exe, winologon.exe, and apoolsrv.exe. A guy in the citrix forum says that there are 2 hotfix articles that talk about this and are related to the blaster patch.

It states that they were unable to unload in the event logs. It doesn't affect every user which is the wierd portion of this.

 

[micronmega]

Yay Microsoft Features!

http://support.microsoft.com/default.aspx?scid=kb;en-us;828153

You'll need to call them to get that and the 827825 patch. We were having massive roamng profile problems after the rpc patch, those two fixed them right up.

 

[detroit]

I have the same problem, but only get it on 1 of the 3 citrix servers that I have.

Will keep you posted if I find an answer.

Detroit