Windows Vista and Profiles not Loading (Network Path Not Found)

[Jeffrey Walton]

Hi All,

This is a test lab using Server 2003 and a sampling of all NT
Operating Systems. The domain is home.pvt. Note that Windows 2000 and
Windows XP pre SP2, and Windows XP post SP2 are not having
difficulties. Vista Business is reporting the following in the
Application Log.

Profile Path: \\EUCLID\jeffrey.walton$ (Hidden Share)
Home Directory: \\EUCLID\jeffrey.walton (not hidden, distinct from
above)

At this point, I have tweaked the Profile Path and Home Directory as
follows:

\\Euclid.home.pvt\jeffrey.walton
\\192.168.1.10\jeffrey.walton

DNS resolves, the shell has no problem (Start -> Run ->> "\
\Euclid.home.pvt\jeffrey.walton"), ping works, etc. DHCP enabled
(adding domain suffixes and search order). WINS is OFF.

This is the first real issue I have experienced with this network
(that is causing me grief). Any ideas would be greatly appreciated.

Thanks,
Jeff
Jeffrey Walton

Source: Microsoft-Windows-User Profiles Service
Date: 6/1/2007 6:07:12 PM
Event ID: 1521
Task Category: None
Level: Error
Keywords: Classic
User: HOME\jeffrey
Computer: Diophantus.home.pvt
Description:
Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the
profile will not be copied to the server when you log off. This error
may be caused by network problems or insufficient security rights.

DETAIL - The network path was not found.

[Jeffrey Walton]

Hi All,

I think I found the document I need: Managing Roaming User Data
Deployment Guide (http://download.microsoft.com/download/3/b/a/
3ba6d659-6e39-4cd7-b3a2-9c96482f5353/Managing%20Roaming%20User%20Data
%20Deployment%20Guide.doc).

Jeff

On Jun 1, 6:24 pm, Jeffrey Walton <noloa...@gmail.com> wrote:
> Hi All,
>
> This is a test lab using Server 2003 and a sampling of all NT
> Operating Systems. The domain is home.pvt. Note thatWindows2000 andWindowsXP pre SP2, andWindowsXP post SP2 arenothaving
> difficulties.VistaBusiness is reporting the following in the
> Application Log.
>
> ProfilePath: \\EUCLID\jeffrey.walton$ (Hidden Share)
> Home Directory: \\EUCLID\jeffrey.walton (nothidden, distinct from
> above)
>
> At this point, I have tweaked the ProfilePathand Home Directory as
> follows:
>
> \\Euclid.home.pvt\jeffrey.walton
> \\192.168.1.10\jeffrey.walton
>
> DNS resolves, the shell has no problem (Start -> Run ->> "\
> \Euclid.home.pvt\jeffrey.walton"), ping works, etc. DHCP enabled
> (adding domain suffixes and search order). WINS is OFF.
>
> This is the first real issue I have experienced with thisnetwork
> (that is causing me grief). Any ideas would be greatly appreciated.
>
> Thanks,
> Jeff
> Jeffrey Walton
>
> Source: Microsoft-Windows-UserProfilesService
> Date: 6/1/2007 6:07:12 PM
> Event ID: 1521
> Task Category: None
> Level: Error
> Keywords: Classic
> User: HOME\jeffrey
> Computer: Diophantus.home.pvt
> Description:Windowscannot locate the server copy of your roaming profile and is
> attempting to log you on with your local profile. Changes to the
> profile willnotbe copied to the server when you log off. This error
> may be caused bynetworkproblems or insufficient security rights.
>
> DETAIL - Thenetworkpathwasnotfound.

[Jeffrey Walton]

Hi All,

No joy - I apparently have bigger problems in this lab. SecCli is
complaining every 5 minutes that "Security policies were propagated
with warning. 0x534 : No mapping between account names and security
IDs was done.". I looked at the account in question a long time ago -
it is Domain Administrators versus (Domain Admins). One is fully
specified.

I suspect this may be causing the problem. I've rearchitected per
'Managing Roaming User Data
Deployment Guide' with little joy: The Default User Profile is used
(thank God I don't get the default Vista theme now), but data is not
saved on Logoff. Nothing is written to the Profile\%USERNAME% Share.

Jeff

Full Message:

Security policies were propagated with warning. 0x534 : No mapping
between account names and security IDs was done.

Advanced help for this problem is available on http://support.microsoft.com.
Query for "troubleshooting 1202 events".

Error 0x534 occurs when a user account in one or more Group Policy
objects (GPOs) could not be resolved to a SID. This error is possibly
caused by a mistyped or deleted user account referenced in either the
User Rights or Restricted Groups branch of a GPO. To resolve this
event, contact an administrator in the domain to perform the following
actions:

1. Identify accounts that could not be resolved to a SID:

>From the command prompt, type: FIND /I "Cannot find" %SYSTEMROOT%
\Security\Logs\winlogon.log

The string following "Cannot find" in the FIND output identifies the
problem account names.

Example: Cannot find JohnDough.

In this case, the SID for username "JohnDough" could not be
determined. This most likely occurs because the account was deleted,
renamed, or is spelled differently (e.g. "JohnDoe").

2. Use RSoP to identify the specific User Rights, Restricted Groups,
and Source GPOs that contain the problem accounts:

a. Start -> Run -> RSoP.msc
b. Review the results for Computer Configuration\Windows Settings
\Security Settings\Local Policies\User Rights Assignment and Computer
Configuration\Windows Settings\Security Settings\Local Policies
\Restricted Groups for any errors flagged with a red X.
c. For any User Right or Restricted Group marked with a red X, the
corresponding GPO that contains the problem policy setting is listed
under the column entitled "Source GPO". Note the specific User Rights,
Restricted Groups and containing Source GPOs that are generating
errors.

3. Remove unresolved accounts from Group Policy

a. Start -> Run -> MMC.EXE
b. From the File menu select "Add/Remove Snap-in..."
c. From the "Add/Remove Snap-in" dialog box select "Add..."
d. In the "Add Standalone Snap-in" dialog box select "Group Policy"
and click "Add"
e. In the "Select Group Policy Object" dialog box click the "Browse"
button.
f. On the "Browse for a Group Policy Object" dialog box choose the
"All" tab
g. For each source GPO identified in step 2, correct the specific User
Rights or Restricted Groups that were flagged with a red X in step 2.
These User Rights or Restricted Groups can be corrected by removing or
correcting any references to the problem accounts that were identified
in step 1.


On Jun 1, 6:24 pm, Jeffrey Walton <noloa...@gmail.com> wrote:
> Hi All,
>
> This is a test lab using Server 2003 and a sampling of all NT
> Operating Systems. The domain is home.pvt. Note that Windows 2000 and
> Windows XP pre SP2, and Windows XP post SP2 are not having
> difficulties. Vista Business is reporting the following in the
> Application Log.
>
> Profile Path: \\EUCLID\jeffrey.walton$ (Hidden Share)
> Home Directory: \\EUCLID\jeffrey.walton (not hidden, distinct from
> above)
>
> At this point, I have tweaked the Profile Path and Home Directory as
> follows:
>
> \\Euclid.home.pvt\jeffrey.walton
> \\192.168.1.10\jeffrey.walton
>
> DNS resolves, the shell has no problem (Start -> Run ->> "\
> \Euclid.home.pvt\jeffrey.walton"), ping works, etc. DHCP enabled
> (adding domain suffixes and search order). WINS is OFF.
>
> This is the first real issue I have experienced with this network
> (that is causing me grief). Any ideas would be greatly appreciated.
>
> Thanks,
> Jeff
> Jeffrey Walton
>
> Source: Microsoft-Windows-User Profiles Service
> Date: 6/1/2007 6:07:12 PM
> Event ID: 1521
> Task Category: None
> Level: Error
> Keywords: Classic
> User: HOME\jeffrey
> Computer: Diophantus.home.pvt
> Description:
> Windows cannot locate the server copy of your roaming profile and is
> attempting to log you on with your local profile. Changes to the
> profile will not be copied to the server when you log off. This error
> may be caused by network problems or insufficient security rights.
>
> DETAIL - The network path was not found.