One user on our domain cannot login on his original PC only;
So a user says he went out to lunch and afterwards could not log into his PC. It just hangs whereas it actually does log in in safe mode and other accounts like my admin on the domain also can log in.
I checked the start up processes ran some utilities and later a system restore: Nope
Repair startup: No dice
Tons of scans for malware, rootkits, virus, nothing....
Nothing suspicious in the startup programs when I checked in safemode. Other than a recent windows update in the morning, nothing unusual.
He logged in fine on another PC since we use roaming profiles with no issues.
I need to alter his permissions in AD tomorrow so I can actually check the system/event logs on that specific PC but I could use some help in pointing me in the right direction.
windows-7 active-directory
asked Jul 17 '13 at 1:17
DeekDeek
10816
add a comment |
So a user says he went out to lunch and afterwards could not log into his PC. It just hangs whereas it actually does log in in safe mode and other accounts like my admin on the domain also can log in.
I checked the start up processes ran some utilities and later a system restore: Nope
Repair startup: No dice
Tons of scans for malware, rootkits, virus, nothing....
Nothing suspicious in the startup programs when I checked in safemode. Other than a recent windows update in the morning, nothing unusual.
He logged in fine on another PC since we use roaming profiles with no issues.
I need to alter his permissions in AD tomorrow so I can actually check the system/event logs on that specific PC but I could use some help in pointing me in the right direction.
windows-7 active-directory
asked Jul 17 '13 at 1:17
DeekDeek
10816
I would remove the computer from the domain and then add it back.
– Logman
Jul 17 '13 at 1:38
I agree with @Logman, can he log onto the local machine?
– packets
Jul 17 '13 at 1:43
1
If he uses roaming profiles, simply delete his user account folder from the machine when you log in. When he logs in again, it will create a new folder. I think the local user registry is corrupt.
– user3463
Jul 17 '13 at 4:55
+1 to Randolph West - though it won't create a new profile, it will copy the network profile back. If roaming profiles were not used, then I'd rename the profile folder (so as to preserve his documents and other files) and THEN if he logged in it would recreate the profile.
– Multiverse IT
Jul 18 '13 at 4:35
Turns out logman is right....although my implementation of that didn't work. I had to add it to a temp domain and then back to the normal one to properly remove/add on again.
– Deek
Aug 1 '13 at 0:10
add a comment |
So a user says he went out to lunch and afterwards could not log into his PC. It just hangs whereas it actually does log in in safe mode and other accounts like my admin on the domain also can log in.
I checked the start up processes ran some utilities and later a system restore: Nope
Repair startup: No dice
Tons of scans for malware, rootkits, virus, nothing....
Nothing suspicious in the startup programs when I checked in safemode. Other than a recent windows update in the morning, nothing unusual.
He logged in fine on another PC since we use roaming profiles with no issues.
I need to alter his permissions in AD tomorrow so I can actually check the system/event logs on that specific PC but I could use some help in pointing me in the right direction.
windows-7 active-directory
asked Jul 17 '13 at 1:17
DeekDeek
10816
So a user says he went out to lunch and afterwards could not log into his PC. It just hangs whereas it actually does log in in safe mode and other accounts like my admin on the domain also can log in.
I checked the start up processes ran some utilities and later a system restore: Nope
Repair startup: No dice
Tons of scans for malware, rootkits, virus, nothing....
Nothing suspicious in the startup programs when I checked in safemode. Other than a recent windows update in the morning, nothing unusual.
He logged in fine on another PC since we use roaming profiles with no issues.
I need to alter his permissions in AD tomorrow so I can actually check the system/event logs on that specific PC but I could use some help in pointing me in the right direction.
windows-7 active-directory
windows-7 active-directory
asked Jul 17 '13 at 1:17
DeekDeek
10816
asked Jul 17 '13 at 1:17
DeekDeek
10816
asked Jul 17 '13 at 1:17
DeekDeek
10816
asked Jul 17 '13 at 1:17
DeekDeek
10816
asked Jul 17 '13 at 1:17
DeekDeek
10816
10816
I would remove the computer from the domain and then add it back.
– Logman
Jul 17 '13 at 1:38
I agree with @Logman, can he log onto the local machine?
– packets
Jul 17 '13 at 1:43
1
If he uses roaming profiles, simply delete his user account folder from the machine when you log in. When he logs in again, it will create a new folder. I think the local user registry is corrupt.
– user3463
Jul 17 '13 at 4:55
+1 to Randolph West - though it won't create a new profile, it will copy the network profile back. If roaming profiles were not used, then I'd rename the profile folder (so as to preserve his documents and other files) and THEN if he logged in it would recreate the profile.
– Multiverse IT
Jul 18 '13 at 4:35
Turns out logman is right....although my implementation of that didn't work. I had to add it to a temp domain and then back to the normal one to properly remove/add on again.
– Deek
Aug 1 '13 at 0:10
add a comment |
I would remove the computer from the domain and then add it back.
– Logman
Jul 17 '13 at 1:38
I agree with @Logman, can he log onto the local machine?
– packets
Jul 17 '13 at 1:43
1
If he uses roaming profiles, simply delete his user account folder from the machine when you log in. When he logs in again, it will create a new folder. I think the local user registry is corrupt.
– user3463
Jul 17 '13 at 4:55
+1 to Randolph West - though it won't create a new profile, it will copy the network profile back. If roaming profiles were not used, then I'd rename the profile folder (so as to preserve his documents and other files) and THEN if he logged in it would recreate the profile.
– Multiverse IT
Jul 18 '13 at 4:35
Turns out logman is right....although my implementation of that didn't work. I had to add it to a temp domain and then back to the normal one to properly remove/add on again.
– Deek
Aug 1 '13 at 0:10
I would remove the computer from the domain and then add it back.
– Logman
Jul 17 '13 at 1:38
I would remove the computer from the domain and then add it back.
– Logman
Jul 17 '13 at 1:38
I agree with @Logman, can he log onto the local machine?
– packets
Jul 17 '13 at 1:43
I agree with @Logman, can he log onto the local machine?
– packets
Jul 17 '13 at 1:43
1
1
If he uses roaming profiles, simply delete his user account folder from the machine when you log in. When he logs in again, it will create a new folder. I think the local user registry is corrupt.
– user3463
Jul 17 '13 at 4:55
If he uses roaming profiles, simply delete his user account folder from the machine when you log in. When he logs in again, it will create a new folder. I think the local user registry is corrupt.
– user3463
Jul 17 '13 at 4:55
+1 to Randolph West - though it won't create a new profile, it will copy the network profile back. If roaming profiles were not used, then I'd rename the profile folder (so as to preserve his documents and other files) and THEN if he logged in it would recreate the profile.
– Multiverse IT
Jul 18 '13 at 4:35
+1 to Randolph West - though it won't create a new profile, it will copy the network profile back. If roaming profiles were not used, then I'd rename the profile folder (so as to preserve his documents and other files) and THEN if he logged in it would recreate the profile.
– Multiverse IT
Jul 18 '13 at 4:35
Turns out logman is right....although my implementation of that didn't work. I had to add it to a temp domain and then back to the normal one to properly remove/add on again.
– Deek
Aug 1 '13 at 0:10
Turns out logman is right....although my implementation of that didn't work. I had to add it to a temp domain and then back to the normal one to properly remove/add on again.
– Deek
Aug 1 '13 at 0:10
add a comment |
1 Answer
1
active
oldest
votes
As noted above:
- add the profile to a temp domain
- delete the profile on the normal domain
- copy the profile back to the normal domain
References
- Performing a Nonauthoritative Restore of AD DS
answered May 22 '15 at 2:34
Paul SweattePaul Sweatte
548215
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f620660%2fone-user-on-our-domain-cannot-login-on-his-original-pc-only%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
As noted above:
- add the profile to a temp domain
- delete the profile on the normal domain
- copy the profile back to the normal domain
References
- Performing a Nonauthoritative Restore of AD DS
answered May 22 '15 at 2:34
Paul SweattePaul Sweatte
548215
add a comment |
As noted above:
- add the profile to a temp domain
- delete the profile on the normal domain
- copy the profile back to the normal domain
References
- Performing a Nonauthoritative Restore of AD DS
answered May 22 '15 at 2:34
Paul SweattePaul Sweatte
548215
add a comment |
As noted above:
- add the profile to a temp domain
- delete the profile on the normal domain
- copy the profile back to the normal domain
References
- Performing a Nonauthoritative Restore of AD DS
answered May 22 '15 at 2:34
Paul SweattePaul Sweatte
548215
As noted above:
- add the profile to a temp domain
- delete the profile on the normal domain
- copy the profile back to the normal domain
References
- Performing a Nonauthoritative Restore of AD DS
answered May 22 '15 at 2:34
Paul SweattePaul Sweatte
548215
answered May 22 '15 at 2:34
Paul SweattePaul Sweatte
548215
answered May 22 '15 at 2:34
Paul SweattePaul Sweatte
548215
answered May 22 '15 at 2:34
Paul SweattePaul Sweatte
548215
548215
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f620660%2fone-user-on-our-domain-cannot-login-on-his-original-pc-only%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I would remove the computer from the domain and then add it back.
– Logman
Jul 17 '13 at 1:38
I agree with @Logman, can he log onto the local machine?
– packets
Jul 17 '13 at 1:43
1
If he uses roaming profiles, simply delete his user account folder from the machine when you log in. When he logs in again, it will create a new folder. I think the local user registry is corrupt.
– user3463
Jul 17 '13 at 4:55
+1 to Randolph West - though it won't create a new profile, it will copy the network profile back. If roaming profiles were not used, then I'd rename the profile folder (so as to preserve his documents and other files) and THEN if he logged in it would recreate the profile.
– Multiverse IT
Jul 18 '13 at 4:35
Turns out logman is right....although my implementation of that didn't work. I had to add it to a temp domain and then back to the normal one to properly remove/add on again.
– Deek
Aug 1 '13 at 0:10