Hi,
I have a Windows 2008 R2 server running Remote Desktop services and configured with Mandatory Profiles. Its all working well except when our users attempt to logon to the server for the first time each day. They get an error:
"The Group Policy Client service failed the logon.
Access is denied."
If they immediately try to log in again, they are granted access, the mandatory profile loads, no problems.
But two 512 KB files appear and remain in their home directory that look like this:
NTUSER.MAN{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
NTUSER.MAN{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
So their profiles increase in size at a rate of at least 1 MB / day.
Their failed logon attempts create the following event ids in the Application log:
6004 - The winlogon notification subscriber <GPClient> failed a critical notification event.
1542 - Windows cannot load classes registry file.
DETAIL - The system cannot find the file specified.
6001 - The winlogon notification subscriber <Sens> failed a notification event.
In the Security event log I can see 6 Success events for logon, followed by a brief pause (for the user to click ok) and then 6 success events for logoff.
In the System event log, Winlogon reports:
7001 - User Logon Notification for Customer Experience Improvement Program
7001 - User Logoff Notification for Customer Experience Improvement Program
CEIP is disabled, btw.
If I delete the users profile through Advanced System Settings. They can log in again just fine, but the next day, they'll fail their first login and their profile will grow.
Any suggestions on how to trouble shoot?
Cheers
~ne