Mystery User names...

Hi,

Windows 2003 server, sp2.

I created a new user yesterday the same way I always do.

I then login and back out as this user to create the profile the same way I
always do.

The profile is stored on a network share "Profiles$". I put the profile
path in the user's profile tab, like I always do.

When I try to log on as this user, I get an error message "Cannot get to
Path\user\Desktop, access denied" when it tried to build the desktop.

I have changed no GPO's, I enter the user the same way I always have.

Now, when I go to check the Profile folders, logged on as Admin, it gives me
the "Access denied error, but you can take ownership".

I have always had a GPO that give admin's full access to profile folders.

So I take ownership and give Admin and user full permissions.

Log back in as this user, same thing.

Run gpupdate /force, same error, restart DC and Workstation, same error.

Same error, same error, same ERRRROOOORRRRRR.

So, I go through and delete the profile, redirection folders, anything and
everything tied to this user name.

I go into AD and delete the user.

Ahhh, a fresh start.

I re-create the the user with the same user name. Same error.

I create a NEW user with a different name the same exact way, works fine
(although the admin permissions are missing on this new users profile folder
as well, the user can log in normally).

There has to be some "trace" of this user name stuck somewhere in AD, and
I'd like it gone so I can use this user name for a user.

Any ideas how to purge the mystery user name hidden deep in the confines of
AD?

Thanks,

MP

On Thu, 22 Apr 2010 13:47:01 -0700, Mrpush
<> wrote:

>Hi,
>
>Windows 2003 server, sp2.
>
>I created a new user yesterday the same way I always do.
>
>I then login and back out as this user to create the profile the same way I
>always do.
>
>The profile is stored on a network share "Profiles$". I put the profile
>path in the user's profile tab, like I always do.
>
>When I try to log on as this user, I get an error message "Cannot get to
>Path\user\Desktop, access denied" when it tried to build the desktop.
>
>I have changed no GPO's, I enter the user the same way I always have.
>
>Now, when I go to check the Profile folders, logged on as Admin, it gives me
>the "Access denied error, but you can take ownership".
>
>I have always had a GPO that give admin's full access to profile folders.
>
>So I take ownership and give Admin and user full permissions.
>
>Log back in as this user, same thing.
>
>Run gpupdate /force, same error, restart DC and Workstation, same error.
>
>Same error, same error, same ERRRROOOORRRRRR.
>
>So, I go through and delete the profile, redirection folders, anything and
>everything tied to this user name.
>
>I go into AD and delete the user.
>
>Ahhh, a fresh start.
>
>I re-create the the user with the same user name. Same error.
>
>I create a NEW user with a different name the same exact way, works fine
>(although the admin permissions are missing on this new users profile folder
>as well, the user can log in normally).
>
>There has to be some "trace" of this user name stuck somewhere in AD, and
>I'd like it gone so I can use this user name for a user.
>
>Any ideas how to purge the mystery user name hidden deep in the confines of
>AD?
>
>Thanks,
>
>MP

Did you also create an Exchange mailbox for this user?

Does it work from another workstation, or just having problems on this
one specific workstation?

How long did you wait after you deleted the account and all its traces
before trying again?

How many DCs, domains and Sites in the infratructure? Maybe it's a
replication issue or replication delay, and if you deleted it on one
DC, and when logging in, it's using a DC that hasn't received the
change, it can do this.

Also, if you recreate the user in AD, and it doesn't give you an
error, then that means it was gone to begin with. That's one reason I
asked if that recreated user account works from another workstation or
not.



Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.

I think that you issue was specific to that workstation. I don't think it
had anything to do with the user account in AD.

Andrei Ungureanu
www.winadmins.net

"Ace Fekay [MVP - Directory Services, MCT]" <>
wrote in message news:...
> On Thu, 22 Apr 2010 13:47:01 -0700, Mrpush
> <> wrote:
>
>>Hi,
>>
>>Windows 2003 server, sp2.
>>
>>I created a new user yesterday the same way I always do.
>>
>>I then login and back out as this user to create the profile the same way
>>I
>>always do.
>>
>>The profile is stored on a network share "Profiles$". I put the profile
>>path in the user's profile tab, like I always do.
>>
>>When I try to log on as this user, I get an error message "Cannot get to
>>Path\user\Desktop, access denied" when it tried to build the desktop.
>>
>>I have changed no GPO's, I enter the user the same way I always have.
>>
>>Now, when I go to check the Profile folders, logged on as Admin, it gives
>>me
>>the "Access denied error, but you can take ownership".
>>
>>I have always had a GPO that give admin's full access to profile folders.
>>
>>So I take ownership and give Admin and user full permissions.
>>
>>Log back in as this user, same thing.
>>
>>Run gpupdate /force, same error, restart DC and Workstation, same error.
>>
>>Same error, same error, same ERRRROOOORRRRRR.
>>
>>So, I go through and delete the profile, redirection folders, anything and
>>everything tied to this user name.
>>
>>I go into AD and delete the user.
>>
>>Ahhh, a fresh start.
>>
>>I re-create the the user with the same user name. Same error.
>>
>>I create a NEW user with a different name the same exact way, works fine
>>(although the admin permissions are missing on this new users profile
>>folder
>>as well, the user can log in normally).
>>
>>There has to be some "trace" of this user name stuck somewhere in AD, and
>>I'd like it gone so I can use this user name for a user.
>>
>>Any ideas how to purge the mystery user name hidden deep in the confines
>>of
>>AD?
>>
>>Thanks,
>>
>>MP
>
> Did you also create an Exchange mailbox for this user?
>
> Does it work from another workstation, or just having problems on this
> one specific workstation?
>
> How long did you wait after you deleted the account and all its traces
> before trying again?
>
> How many DCs, domains and Sites in the infratructure? Maybe it's a
> replication issue or replication delay, and if you deleted it on one
> DC, and when logging in, it's using a DC that hasn't received the
> change, it can do this.
>
> Also, if you recreate the user in AD, and it doesn't give you an
> error, then that means it was gone to begin with. That's one reason I
> asked if that recreated user account works from another workstation or
> not.
>
>
>
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit
> among responding engineers, and to help others benefit from your
> resolution.
>
> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
> MCSA 2003/2000, MCSA Messaging 2003
> Microsoft Certified Trainer
> Microsoft MVP - Directory Services
>
> If you feel this is an urgent issue and require immediate assistance,
> please contact Microsoft PSS directly. Please check
> http://support.microsoft.com for regional support phone numbers.

Guys,

Not exchange accounts here.

I did try logging on as this user from another workstation with the same
result.

The first time I did not wait long, however after trying several times, I
went to lunch (about an hour) and had same issue. Then, I removed all traces
of this user again at the end of the day, and came back in the morning and
tried again. Still got errors.

I have only a single domain, with 2 DC's. However, I did recently move the
second DC to another location. But it seem to be replicating fine, I did not
see any odd rep errors in logs so I assume all is ok there.

I will check on the other DC to see if the user still exists, that would
telll me if there is a replication lag or not.

Thanks for the ideas, I'll try that out.


I did recreate the user within 15 minutes and did not receive any "user
already exists" messages.

Thanks,

MP




"Ace Fekay [MVP - Directory Services, MCT" wrote:

> On Thu, 22 Apr 2010 13:47:01 -0700, Mrpush
> <> wrote:
>
> >Hi,
> >
> >Windows 2003 server, sp2.
> >
> >I created a new user yesterday the same way I always do.
> >
> >I then login and back out as this user to create the profile the same way I
> >always do.
> >
> >The profile is stored on a network share "Profiles$". I put the profile
> >path in the user's profile tab, like I always do.
> >
> >When I try to log on as this user, I get an error message "Cannot get to
> >Path\user\Desktop, access denied" when it tried to build the desktop.
> >
> >I have changed no GPO's, I enter the user the same way I always have.
> >
> >Now, when I go to check the Profile folders, logged on as Admin, it gives me
> >the "Access denied error, but you can take ownership".
> >
> >I have always had a GPO that give admin's full access to profile folders.
> >
> >So I take ownership and give Admin and user full permissions.
> >
> >Log back in as this user, same thing.
> >
> >Run gpupdate /force, same error, restart DC and Workstation, same error.
> >
> >Same error, same error, same ERRRROOOORRRRRR.
> >
> >So, I go through and delete the profile, redirection folders, anything and
> >everything tied to this user name.
> >
> >I go into AD and delete the user.
> >
> >Ahhh, a fresh start.
> >
> >I re-create the the user with the same user name. Same error.
> >
> >I create a NEW user with a different name the same exact way, works fine
> >(although the admin permissions are missing on this new users profile folder
> >as well, the user can log in normally).
> >
> >There has to be some "trace" of this user name stuck somewhere in AD, and
> >I'd like it gone so I can use this user name for a user.
> >
> >Any ideas how to purge the mystery user name hidden deep in the confines of
> >AD?
> >
> >Thanks,
> >
> >MP
>
> Did you also create an Exchange mailbox for this user?
>
> Does it work from another workstation, or just having problems on this
> one specific workstation?
>
> How long did you wait after you deleted the account and all its traces
> before trying again?
>
> How many DCs, domains and Sites in the infratructure? Maybe it's a
> replication issue or replication delay, and if you deleted it on one
> DC, and when logging in, it's using a DC that hasn't received the
> change, it can do this.
>
> Also, if you recreate the user in AD, and it doesn't give you an
> error, then that means it was gone to begin with. That's one reason I
> asked if that recreated user account works from another workstation or
> not.
>
>
>
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.
>
> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
> Microsoft Certified Trainer
> Microsoft MVP - Directory Services
>
> If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.
> .
>

Start by investigating the errors from the event viewer on the workstations.
If you say that the profiles are stored on a network share, take a look in
there also, double check the permissions on the folders
Deleting and recreating user accounts will only give you more issues.

Andrei Ungureanu
www.winadmins.net

"Mrpush" <> wrote in message
news:CDB8361A-F43B-4094-A737-...
> Guys,
>
> Not exchange accounts here.
>
> I did try logging on as this user from another workstation with the same
> result.
>
> The first time I did not wait long, however after trying several times, I
> went to lunch (about an hour) and had same issue. Then, I removed all
> traces
> of this user again at the end of the day, and came back in the morning and
> tried again. Still got errors.
>
> I have only a single domain, with 2 DC's. However, I did recently move
> the
> second DC to another location. But it seem to be replicating fine, I did
> not
> see any odd rep errors in logs so I assume all is ok there.
>
> I will check on the other DC to see if the user still exists, that would
> telll me if there is a replication lag or not.
>
> Thanks for the ideas, I'll try that out.
>
>
> I did recreate the user within 15 minutes and did not receive any "user
> already exists" messages.
>
> Thanks,
>
> MP
>
>
>
>
> "Ace Fekay [MVP - Directory Services, MCT" wrote:
>
>> On Thu, 22 Apr 2010 13:47:01 -0700, Mrpush
>> <> wrote:
>>
>> >Hi,
>> >
>> >Windows 2003 server, sp2.
>> >
>> >I created a new user yesterday the same way I always do.
>> >
>> >I then login and back out as this user to create the profile the same
>> >way I
>> >always do.
>> >
>> >The profile is stored on a network share "Profiles$". I put the profile
>> >path in the user's profile tab, like I always do.
>> >
>> >When I try to log on as this user, I get an error message "Cannot get to
>> >Path\user\Desktop, access denied" when it tried to build the desktop.
>> >
>> >I have changed no GPO's, I enter the user the same way I always have.
>> >
>> >Now, when I go to check the Profile folders, logged on as Admin, it
>> >gives me
>> >the "Access denied error, but you can take ownership".
>> >
>> >I have always had a GPO that give admin's full access to profile
>> >folders.
>> >
>> >So I take ownership and give Admin and user full permissions.
>> >
>> >Log back in as this user, same thing.
>> >
>> >Run gpupdate /force, same error, restart DC and Workstation, same error.
>> >
>> >Same error, same error, same ERRRROOOORRRRRR.
>> >
>> >So, I go through and delete the profile, redirection folders, anything
>> >and
>> >everything tied to this user name.
>> >
>> >I go into AD and delete the user.
>> >
>> >Ahhh, a fresh start.
>> >
>> >I re-create the the user with the same user name. Same error.
>> >
>> >I create a NEW user with a different name the same exact way, works fine
>> >(although the admin permissions are missing on this new users profile
>> >folder
>> >as well, the user can log in normally).
>> >
>> >There has to be some "trace" of this user name stuck somewhere in AD,
>> >and
>> >I'd like it gone so I can use this user name for a user.
>> >
>> >Any ideas how to purge the mystery user name hidden deep in the confines
>> >of
>> >AD?
>> >
>> >Thanks,
>> >
>> >MP
>>
>> Did you also create an Exchange mailbox for this user?
>>
>> Does it work from another workstation, or just having problems on this
>> one specific workstation?
>>
>> How long did you wait after you deleted the account and all its traces
>> before trying again?
>>
>> How many DCs, domains and Sites in the infratructure? Maybe it's a
>> replication issue or replication delay, and if you deleted it on one
>> DC, and when logging in, it's using a DC that hasn't received the
>> change, it can do this.
>>
>> Also, if you recreate the user in AD, and it doesn't give you an
>> error, then that means it was gone to begin with. That's one reason I
>> asked if that recreated user account works from another workstation or
>> not.
>>
>>
>>
>> Ace
>>
>> This posting is provided "AS-IS" with no warranties or guarantees and
>> confers no rights.
>>
>> Please reply back to the newsgroup or forum for collaboration benefit
>> among responding engineers, and to help others benefit from your
>> resolution.
>>
>> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
>> MCSA 2003/2000, MCSA Messaging 2003
>> Microsoft Certified Trainer
>> Microsoft MVP - Directory Services
>>
>> If you feel this is an urgent issue and require immediate assistance,
>> please contact Microsoft PSS directly. Please check
>> http://support.microsoft.com for regional support phone numbers.
>> .
>>

I was just trying to get some specifics. If it doesn't work on any
workstations, then it could be something with the AD account, or the
share & NTFS permissions where the profile is stored.

Ace

On Fri, 23 Apr 2010 10:21:46 +0300, "Andrei Ungureanu"
<> wrote:

>I think that you issue was specific to that workstation. I don't think it
>had anything to do with the user account in AD.
>
>Andrei Ungureanu
>www.winadmins.net
>
>"Ace Fekay [MVP - Directory Services, MCT]" <>
>wrote in message news:...
>> On Thu, 22 Apr 2010 13:47:01 -0700, Mrpush
>> <> wrote:
>>
>>>Hi,
>>>
>>>Windows 2003 server, sp2.
>>>
>>>I created a new user yesterday the same way I always do.
>>>
>>>I then login and back out as this user to create the profile the same way
>>>I
>>>always do.
>>>
>>>The profile is stored on a network share "Profiles$". I put the profile
>>>path in the user's profile tab, like I always do.
>>>
>>>When I try to log on as this user, I get an error message "Cannot get to
>>>Path\user\Desktop, access denied" when it tried to build the desktop.
>>>
>>>I have changed no GPO's, I enter the user the same way I always have.
>>>
>>>Now, when I go to check the Profile folders, logged on as Admin, it gives
>>>me
>>>the "Access denied error, but you can take ownership".
>>>
>>>I have always had a GPO that give admin's full access to profile folders.
>>>
>>>So I take ownership and give Admin and user full permissions.
>>>
>>>Log back in as this user, same thing.
>>>
>>>Run gpupdate /force, same error, restart DC and Workstation, same error.
>>>
>>>Same error, same error, same ERRRROOOORRRRRR.
>>>
>>>So, I go through and delete the profile, redirection folders, anything and
>>>everything tied to this user name.
>>>
>>>I go into AD and delete the user.
>>>
>>>Ahhh, a fresh start.
>>>
>>>I re-create the the user with the same user name. Same error.
>>>
>>>I create a NEW user with a different name the same exact way, works fine
>>>(although the admin permissions are missing on this new users profile
>>>folder
>>>as well, the user can log in normally).
>>>
>>>There has to be some "trace" of this user name stuck somewhere in AD, and
>>>I'd like it gone so I can use this user name for a user.
>>>
>>>Any ideas how to purge the mystery user name hidden deep in the confines
>>>of
>>>AD?
>>>
>>>Thanks,
>>>
>>>MP
>>
>> Did you also create an Exchange mailbox for this user?
>>
>> Does it work from another workstation, or just having problems on this
>> one specific workstation?
>>
>> How long did you wait after you deleted the account and all its traces
>> before trying again?
>>
>> How many DCs, domains and Sites in the infratructure? Maybe it's a
>> replication issue or replication delay, and if you deleted it on one
>> DC, and when logging in, it's using a DC that hasn't received the
>> change, it can do this.
>>
>> Also, if you recreate the user in AD, and it doesn't give you an
>> error, then that means it was gone to begin with. That's one reason I
>> asked if that recreated user account works from another workstation or
>> not.
>>
>>
>>
>> Ace
>>
>> This posting is provided "AS-IS" with no warranties or guarantees and
>> confers no rights.
>>
>> Please reply back to the newsgroup or forum for collaboration benefit
>> among responding engineers, and to help others benefit from your
>> resolution.
>>
>> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
>> MCSA 2003/2000, MCSA Messaging 2003
>> Microsoft Certified Trainer
>> Microsoft MVP - Directory Services
>>
>> If you feel this is an urgent issue and require immediate assistance,
>> please contact Microsoft PSS directly. Please check
>> http://support.microsoft.com for regional support phone numbers.

Guys,

Well, it seems the odd user behavior has now cleared up.

I'm not sure, but although this user appeared to replicate normally on both
of my DC's, it appers the removing the user, and all profile etc associated
to the user, a restart of both DC's in my domain, and some time going bye and
the problem is no longer there.

I created the user again and the account is ok this time.

I did logon the first time as this user from different workstations, so that
could have been involved as well.

??? - it's a mystery.

Thanks for all the help and suggestions,

MP




"Andrei Ungureanu" wrote:

> Start by investigating the errors from the event viewer on the workstations.
> If you say that the profiles are stored on a network share, take a look in
> there also, double check the permissions on the folders
> Deleting and recreating user accounts will only give you more issues.
>
> Andrei Ungureanu
> www.winadmins.net
>
> "Mrpush" <> wrote in message
> news:CDB8361A-F43B-4094-A737-...
> > Guys,
> >
> > Not exchange accounts here.
> >
> > I did try logging on as this user from another workstation with the same
> > result.
> >
> > The first time I did not wait long, however after trying several times, I
> > went to lunch (about an hour) and had same issue. Then, I removed all
> > traces
> > of this user again at the end of the day, and came back in the morning and
> > tried again. Still got errors.
> >
> > I have only a single domain, with 2 DC's. However, I did recently move
> > the
> > second DC to another location. But it seem to be replicating fine, I did
> > not
> > see any odd rep errors in logs so I assume all is ok there.
> >
> > I will check on the other DC to see if the user still exists, that would
> > telll me if there is a replication lag or not.
> >
> > Thanks for the ideas, I'll try that out.
> >
> >
> > I did recreate the user within 15 minutes and did not receive any "user
> > already exists" messages.
> >
> > Thanks,
> >
> > MP
> >
> >
> >
> >
> > "Ace Fekay [MVP - Directory Services, MCT" wrote:
> >
> >> On Thu, 22 Apr 2010 13:47:01 -0700, Mrpush
> >> <> wrote:
> >>
> >> >Hi,
> >> >
> >> >Windows 2003 server, sp2.
> >> >
> >> >I created a new user yesterday the same way I always do.
> >> >
> >> >I then login and back out as this user to create the profile the same
> >> >way I
> >> >always do.
> >> >
> >> >The profile is stored on a network share "Profiles$". I put the profile
> >> >path in the user's profile tab, like I always do.
> >> >
> >> >When I try to log on as this user, I get an error message "Cannot get to
> >> >Path\user\Desktop, access denied" when it tried to build the desktop.
> >> >
> >> >I have changed no GPO's, I enter the user the same way I always have.
> >> >
> >> >Now, when I go to check the Profile folders, logged on as Admin, it
> >> >gives me
> >> >the "Access denied error, but you can take ownership".
> >> >
> >> >I have always had a GPO that give admin's full access to profile
> >> >folders.
> >> >
> >> >So I take ownership and give Admin and user full permissions.
> >> >
> >> >Log back in as this user, same thing.
> >> >
> >> >Run gpupdate /force, same error, restart DC and Workstation, same error.
> >> >
> >> >Same error, same error, same ERRRROOOORRRRRR.
> >> >
> >> >So, I go through and delete the profile, redirection folders, anything
> >> >and
> >> >everything tied to this user name.
> >> >
> >> >I go into AD and delete the user.
> >> >
> >> >Ahhh, a fresh start.
> >> >
> >> >I re-create the the user with the same user name. Same error.
> >> >
> >> >I create a NEW user with a different name the same exact way, works fine
> >> >(although the admin permissions are missing on this new users profile
> >> >folder
> >> >as well, the user can log in normally).
> >> >
> >> >There has to be some "trace" of this user name stuck somewhere in AD,
> >> >and
> >> >I'd like it gone so I can use this user name for a user.
> >> >
> >> >Any ideas how to purge the mystery user name hidden deep in the confines
> >> >of
> >> >AD?
> >> >
> >> >Thanks,
> >> >
> >> >MP
> >>
> >> Did you also create an Exchange mailbox for this user?
> >>
> >> Does it work from another workstation, or just having problems on this
> >> one specific workstation?
> >>
> >> How long did you wait after you deleted the account and all its traces
> >> before trying again?
> >>
> >> How many DCs, domains and Sites in the infratructure? Maybe it's a
> >> replication issue or replication delay, and if you deleted it on one
> >> DC, and when logging in, it's using a DC that hasn't received the
> >> change, it can do this.
> >>
> >> Also, if you recreate the user in AD, and it doesn't give you an
> >> error, then that means it was gone to begin with. That's one reason I
> >> asked if that recreated user account works from another workstation or
> >> not.
> >>
> >>
> >>
> >> Ace
> >>
> >> This posting is provided "AS-IS" with no warranties or guarantees and
> >> confers no rights.
> >>
> >> Please reply back to the newsgroup or forum for collaboration benefit
> >> among responding engineers, and to help others benefit from your
> >> resolution.
> >>
> >> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
> >> MCSA 2003/2000, MCSA Messaging 2003
> >> Microsoft Certified Trainer
> >> Microsoft MVP - Directory Services
> >>
> >> If you feel this is an urgent issue and require immediate assistance,
> >> please contact Microsoft PSS directly. Please check
> >> http://support.microsoft.com for regional support phone numbers.
> >> .
> >>
> .
>

Hmm, you may still never find out the reason, but I'm glad to hear it
cleared up!

Ace



On Wed, 28 Apr 2010 14:03:01 -0700, Mrpush
<> wrote:

>Guys,
>
>Well, it seems the odd user behavior has now cleared up.
>
>I'm not sure, but although this user appeared to replicate normally on both
>of my DC's, it appers the removing the user, and all profile etc associated
>to the user, a restart of both DC's in my domain, and some time going bye and
>the problem is no longer there.
>
>I created the user again and the account is ok this time.
>
>I did logon the first time as this user from different workstations, so that
>could have been involved as well.
>
>??? - it's a mystery.
>
>Thanks for all the help and suggestions,
>
>MP
>
>
>
>
>"Andrei Ungureanu" wrote:
>
>> Start by investigating the errors from the event viewer on the workstations.
>> If you say that the profiles are stored on a network share, take a look in
>> there also, double check the permissions on the folders
>> Deleting and recreating user accounts will only give you more issues.
>>
>> Andrei Ungureanu
>> www.winadmins.net
>>
>> "Mrpush" <> wrote in message
>> news:CDB8361A-F43B-4094-A737-...
>> > Guys,
>> >
>> > Not exchange accounts here.
>> >
>> > I did try logging on as this user from another workstation with the same
>> > result.
>> >
>> > The first time I did not wait long, however after trying several times, I
>> > went to lunch (about an hour) and had same issue. Then, I removed all
>> > traces
>> > of this user again at the end of the day, and came back in the morning and
>> > tried again. Still got errors.
>> >
>> > I have only a single domain, with 2 DC's. However, I did recently move
>> > the
>> > second DC to another location. But it seem to be replicating fine, I did
>> > not
>> > see any odd rep errors in logs so I assume all is ok there.
>> >
>> > I will check on the other DC to see if the user still exists, that would
>> > telll me if there is a replication lag or not.
>> >
>> > Thanks for the ideas, I'll try that out.
>> >
>> >
>> > I did recreate the user within 15 minutes and did not receive any "user
>> > already exists" messages.
>> >
>> > Thanks,
>> >
>> > MP
>> >
>> >
>> >
>> >
>> > "Ace Fekay [MVP - Directory Services, MCT" wrote:
>> >
>> >> On Thu, 22 Apr 2010 13:47:01 -0700, Mrpush
>> >> <> wrote:
>> >>
>> >> >Hi,
>> >> >
>> >> >Windows 2003 server, sp2.
>> >> >
>> >> >I created a new user yesterday the same way I always do.
>> >> >
>> >> >I then login and back out as this user to create the profile the same
>> >> >way I
>> >> >always do.
>> >> >
>> >> >The profile is stored on a network share "Profiles$". I put the profile
>> >> >path in the user's profile tab, like I always do.
>> >> >
>> >> >When I try to log on as this user, I get an error message "Cannot get to
>> >> >Path\user\Desktop, access denied" when it tried to build the desktop.
>> >> >
>> >> >I have changed no GPO's, I enter the user the same way I always have.
>> >> >
>> >> >Now, when I go to check the Profile folders, logged on as Admin, it
>> >> >gives me
>> >> >the "Access denied error, but you can take ownership".
>> >> >
>> >> >I have always had a GPO that give admin's full access to profile
>> >> >folders.
>> >> >
>> >> >So I take ownership and give Admin and user full permissions.
>> >> >
>> >> >Log back in as this user, same thing.
>> >> >
>> >> >Run gpupdate /force, same error, restart DC and Workstation, same error.
>> >> >
>> >> >Same error, same error, same ERRRROOOORRRRRR.
>> >> >
>> >> >So, I go through and delete the profile, redirection folders, anything
>> >> >and
>> >> >everything tied to this user name.
>> >> >
>> >> >I go into AD and delete the user.
>> >> >
>> >> >Ahhh, a fresh start.
>> >> >
>> >> >I re-create the the user with the same user name. Same error.
>> >> >
>> >> >I create a NEW user with a different name the same exact way, works fine
>> >> >(although the admin permissions are missing on this new users profile
>> >> >folder
>> >> >as well, the user can log in normally).
>> >> >
>> >> >There has to be some "trace" of this user name stuck somewhere in AD,
>> >> >and
>> >> >I'd like it gone so I can use this user name for a user.
>> >> >
>> >> >Any ideas how to purge the mystery user name hidden deep in the confines
>> >> >of
>> >> >AD?
>> >> >
>> >> >Thanks,
>> >> >
>> >> >MP
>> >>
>> >> Did you also create an Exchange mailbox for this user?
>> >>
>> >> Does it work from another workstation, or just having problems on this
>> >> one specific workstation?
>> >>
>> >> How long did you wait after you deleted the account and all its traces
>> >> before trying again?
>> >>
>> >> How many DCs, domains and Sites in the infratructure? Maybe it's a
>> >> replication issue or replication delay, and if you deleted it on one
>> >> DC, and when logging in, it's using a DC that hasn't received the
>> >> change, it can do this.
>> >>
>> >> Also, if you recreate the user in AD, and it doesn't give you an
>> >> error, then that means it was gone to begin with. That's one reason I
>> >> asked if that recreated user account works from another workstation or
>> >> not.
>> >>
>> >>
>> >>
>> >> Ace
>> >>
>> >> This posting is provided "AS-IS" with no warranties or guarantees and
>> >> confers no rights.
>> >>
>> >> Please reply back to the newsgroup or forum for collaboration benefit
>> >> among responding engineers, and to help others benefit from your
>> >> resolution.
>> >>
>> >> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
>> >> MCSA 2003/2000, MCSA Messaging 2003
>> >> Microsoft Certified Trainer
>> >> Microsoft MVP - Directory Services
>> >>
>> >> If you feel this is an urgent issue and require immediate assistance,
>> >> please contact Microsoft PSS directly. Please check
>> >> http://support.microsoft.com for regional support phone numbers.
>> >> .
>> >>
>> .
>>