New Users: The User Profile Service failed the sign-in

Joseph McDowell 21 Reputation points
2020-06-08T15:46:56.31+00:00

Good morning,

Problem:

A contractor we hired to spin up a new server finished and handed it off to the sysadmin team for my org. While the contractor's domain admin user account can log in successfully, all other user accounts (including domain admins) cannot log into the new server. They receive the error "The User Profile Service failed the sign-in", which prevents our domain admins from getting into to the server to do further work. OS Server2019.

Troubleshooting so far:

Restarted the User Profile service.

Testing found that this problem applies to user accounts that have never before successfully signed in to this machine. So the common fix I am finding on forum searches about deleting or changing the user profile registry entry does not apply to this situation. I tried to go through those steps and the registry entry for those user accounts did not exist.

For the purposes of testing, I signed into this server with a local admin account and attempted to run programs as a domain admin user. It failed with the error "Only part of a ReadProcessMemory or WriteProcessMemory request was completed."

I checked to make sure it was not a permissions issue as described in the troubleshooting steps for that following error, but as far as I can tell, the "Everyone" entry does have read permissions to the Default user profile folder. Perhaps there is another ACL issue that I'm not aware of.

EDIT: Please forgive the lack of relevant tags. As I am attempting to add tags, I find that nothing I can think of to enter is available to select.

Windows 10 Setup
Windows 10 Setup
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Setup: The procedures involved in preparing a software program or application to operate within a computer or mobile device.
1,919 questions
{count} votes

Accepted answer
  1. Anonymous
    2020-06-09T14:07:20.353+00:00

    Server 2019 is not currently supported here on QnA. I'd try asking for help in dedicated forums here.

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=ws2019

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winservergen

    --please don't forget to Accept as answer if the reply is helpful--


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. Manu Philip 17,351 Reputation points MVP
    2020-06-08T16:20:50.47+00:00

    Hello @Joseph McDowell ,

    The correct registry area to work with is >HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
    Check, if you see two entries with similar name and one with .bak at the end. Remove the .bak from the one with .bak and change the other to something else. Go inside the renamed key and open REG_DWORD named 'state'. Change the value to 0. Open REG_DWORD named 'RefCount' and change it to 0 also.
    Now restart the computer and check the issue is resolved

    Please mark as "Accept the answer" if the above steps helps you. Others with similar issues can also follow the solution as per your suggestion

    Regards,

    Manu

    1 person found this answer helpful.

  2. DonPick 1,261 Reputation points
    2020-06-10T10:59:35.367+00:00

    it sounds similar to this problem, which I faced some years ago on Win7/WS2008R2 ?

    https://helgeklein.com/blog/2013/09/error-message-explained-user-profile-service-failed-logon/

    check the permissions, recursively, on all file+folders in the default user profile, take ownership / reset inheritance on the entire folder structure at c:\users\default\

    1 person found this answer helpful.
    0 comments No comments