Profile Lost When Computer Unlocked
Page 1 of 2 12 LastLast
Results 1 to 10 of 14

Thread: Profile Lost When Computer Unlocked

  1. #1

    Profile Lost When Computer Unlocked

    I've run into a bit of an odd situation --

    First time I worked with this user, her problem was that she would log into her computer, but her profile would be gone -- Desktop settings, My Documents, Outlook profile, etc. would all be gone. Turned out she was being logged into the default profile because her profile was failing to load for some reason. I ran an AV and spyware scan, cleaned out some stuff, rebooted the computer, and she was able to log in fine, and her profile, settings, and documents were all back as they had been. Problem solved, right?

    Well, things ran smoothly for a few days, but then she calls back. She leaves her computer locked every night instead of logging off. She comes in one morning, unlocks her computer, and suddenly she's in safe mode. So I had her reboot the machine, and all was well again. However, I found it quite odd that she was magically in safe mode all of a sudden.

    Today, a week later, she just called back. She unlocked her computer again this morning (remember, she always locks it instead of logging off), and her Outlook profile was gone, along with some of her desktop icons. Rebooted machine, all is well again.

    So question is -- What the heck could be causing all these weird anomolies? I'm going to VNC into her computer later today to do some more malware scans, but I'm wondering -- could something else be causing all this wacky stuff?

  2. #2
    AOs Resident Troll
    Join Date
    Nov 2003
    Posts
    3,152
    are you using roaming profiles???

    What version of windows???

    also...tell her to log off at night...this could be the culprit....corrupting the profile

    users like to leave things running and open..for days at a time...then wonder why the machine\apps start acting up


    MLF
    How people treat you is their karma- how you react is yours-Wayne Dyer

  3. #3
    Super Moderator
    Know-it-All Master Beaver

    Join Date
    Jan 2003
    Posts
    3,914
    Hey Hey,

    Have you checked logs... or do you have logs at that level? Check the event log... Logons and logoffs, error messages... What appears from the time (roughly) that she locks her computer until she returns the next day.

    Is someone trying to screw with her mind... and doing this to screw her up... You don't just magically lock your computer in regular mode and unlock it into safe mode the next day, it doesn't work like that...

    Peace,
    HT
    IT Blog: .:Computer Defense:.
    PnCHd (Pronounced Pinched): Acronym - Point 'n Click Hacked. As in: "That website was pinched" or "The skiddie pinched my computer because I forgot to patch".

  4. #4
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    Why does she leave it switched on.......?

    Any "vaguely intelligent" reason?

    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  5. #5
    You don't just magically lock your computer in regular mode and unlock it into safe mode the next day, it doesn't work like that...
    Indeed, that's what I thought, doesn't seem even remotely possible. I'm wondering if perhaps she just mistook what she saw, given you have to hit ctrl-alt-delete to unlock or login...She could've thought it was still locked, but actually it had rebooted over night for x reason and she was actually logging in. However, it still begs the question as to why it rebooted automatically into safe mode.

    are you using roaming profiles???

    What version of windows???
    Honestly, I've never even messed with roaming profiles before, I didn't think of that. And it's XP Pro.

  6. #6
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    AK~ you just know that I am going to say this.............

    It could be a hardware issue.........like it overheats a bit, or there are voltage fluctuations in the night?
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  7. #7
    AOs Resident Troll
    Join Date
    Nov 2003
    Posts
    3,152
    roamimg profile...if they get too big (users storing every file and folder on the desktop...dont laugh.............it does happen )

    can corrupt...or because she is leaving herself logged...on and some process\maintenance runs over night that buggers it up.

    MLF
    How people treat you is their karma- how you react is yours-Wayne Dyer

  8. #8
    AO Guinness Monster MURACU's Avatar
    Join Date
    Jan 2004
    Location
    paris
    Posts
    1,003
    I would check out the following firstly as MF said check if she is using roaming profiles. If it is a roaming profile it may be corrupt. I have found that when that is the case it is better to recreate a totaly new profile.
    Then verifiy if she has restrictions on the times when she is allowed to be logged to the computer. It may be that she is only allowed to be logged between 9am and 6pm for example. After this time windows tries to close the session but cant as the it is locked. The result can be a corrupt profile.
    Also make sure she is the only one useing her account. I had a situation once where every morning a user complained that his account was changed. After investigateing we found he had gave his account to two other people. Of course they changed the desktop every time they logged.
    In any case dont for the usual details OS domain or stand alone ...........

    Edit : HTregz actually you can find your self in safe mood coming out a lock. I've seen it happen a couple of time on windows 2K machines. Do you do automatic updates at night. Like roll out patches maybe that try to reboot the computer. Sometimes when you have a machine locked and you do an automatic reboot like that it seems to screws up the profile and shuts down most of the proccess and drivers so windows thinks it is in safe mode. Of course never got microsoft to admit it was happening. Ps lots of post between the time i started typing and posting so some of what i said is already mentioned.
    \"America is the only country that went from barbarism to decadence without civilization in between.\"
    \"The reason we are so pleased to find other people\'s secrets is that it distracts public attention from our own.\"
    Oscar Wilde(1854-1900)

  9. #9
    The ******* Shadow dalek's Avatar
    Join Date
    Sep 2005
    Posts
    1,564
    Hi

    You could run a memtest86 to see if there are memory issues...


    Software issue or error

    Errors generated by software programs can cause a computer to reboot unexpectedly or without warning. If you are running Windows XP see the below section "For Windows XP users" before continuing.

    If you are not running Windows XP or following the below steps still cause your computer to reboot without warning. Boot your computer into safe mode, and let the computer run in safe mode. If the computer is still rebooting in safe mode the issue is likely not software related but something else, skip to the next section. If the computer is not rebooting in safe mode it is likely you have software related issue. We would recommend you run through the basic troubleshooting section for your operating system.

    For Windows XP users

    Windows XP is designed to automatically reboot each time an error occurs. Although this may be nice for errors that do not occur often, users who have a re-occurring error may wish to identify the error to troubleshoot it. Below are the steps on how this feature can be disabled and enabled in Windows XP.

    1. From the desktop right click on My Computer.
    2. Click the Properties option.
    3. In the System Properties window click the Advanced tab.
    4. In Advanced click the Settings button under Startup and Recovery.
    5. In the Startup and Recovery window uncheck the Automatically restart check box.
    6. Click Ok.

    Now if the computer generates and error it should not automatically restart and enable you to display any errors your computer may be experiencing.

    Hardware issue or error

    Any failing hardware component in your computer could cause your computer to unexpectedly generate an error and/or reboot without warning. If you have recently attempted to add a new hardware device, remove that device to make sure it is not causing your issues.

    Make sure you are not encountering any hardware conflicts by viewing device manager for errors. Additional information about device manager can be found on our device manager page.

    New drivers can also cause this issue, if you have recently performed any hardware driver updates you may wish to try an earlier version of the drivers. Additional information and help with computer drivers can be found on our driversí page.

    If you have updated drivers and removed any hardware that could be causing this issue and continue to experience random reboots, it's possible that the memory is bad in the computer. Additional information about testing computers memory can be found on document CH000708.

    Finally, hardware devices that are not installed properly in the computer can also cause random reboots. Make sure all the cables and expansion cards are connected properly to the computer. The best way to determine this is to disconnect and reconnect all cables and expansion cards.

    Source
    PC Registered user # 2,336,789,457...

    "When the water reaches the upper level, follow the rats."
    Claude Swanson

  10. #10
    Ok, what I've found so far:

    (1) Profile is not roaming.
    (2) "Automatically restart" checkbox is already unchecked, so it shouldn't be automatically rebooting due to software errors.
    (3) And I found this rather interesting log in Event Viewer:

    USER32
    1073
    The attempt to unknown SWHITE failed
    SWHITE, of course, is the user in question. This was logged this morning, around the same time she experienced the lost profile problems.

    [edit]
    And then this:

    Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.
    Right after this event, there are logs for Event Viewer and various other processes restarting, so there must have been an automatic reboot (though there's no log for an actual successful Windows Update -- looks like it just rebooted anyway). And guess when? Yesterday evening, right after when she would have left her computer.

    Then there's Event ID LSASRV, 40961:

    The Security System could not establish a secured connection with the server ldap/server.domain.com/domain.com@domain.com. No authentication protocol was available.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •