Resolved Locally Stored User Profile Missing

Hi friends

In 2 pcs running on winxp.prof.sp3, recently when changing user by log off (not switching), OS respond that user profile is missing or corrupt and starts creating a temp profile. Once this phenomena starts, the problem remains when logoff/login to other users; only the current user profile works. On a reboot, problem disappear, all users profile is accessible and intact.

On checking at the Documents / Setting, all profiles are in fact intact and is ok.

What is happening? I don't believe it has anything to do with Malware, virus or spyware.

 

Your user profile/s have become corrupted. The cure is to delete the profiles and create new ones, this article will show you how to save and reinstall the profiles.


How to copy data from a corrupted user profile to a new profile in Windows XP

 

Thanks Mark

I quite sure that there is no corruption in the users' folders because after reboot the problem stop. At the time when problem exist, all other users' profile manifest the same problem except the current login.

The link only mention about how to copy back the profile. What i would like to know is to pin point where exactly is the corruption, eg is it in the registry or just the folder itself.

Cheers!

 

This article will show you how to find and examine the event logs that windows stores. Make the error happen and then follow the guide to find the error log, this may give us a clue.


http://support.microsoft.com/kb/308427


I am still concerned that this error has occured due to a virus, you say it is the same on another computer, are they connected to a network?

It will do no harm and will illiminate an infection as the cause if you download and run this AV from microsoft. It is excellent software and completely free.

http://www.microsoft.com/security_essentials/support.aspx?mkt=en-us

Do you have an XP disc?

 

Mark, thanks for the good pointers.

For yr info, the PC was newly installed with xpwin.prof.sp3 together with spybot, spyguard, host control, avg antivirus, zonealarm and scan with malwarebytes. So I would imagine it is not some rascal causing it.

Moreover it only happens when a user log off after some hours of idling and a new registered user try to lock in his own profile.

Error event: the 1st 2 errors are listed below - Need help to interpret to tackle it.

1)
Windows was unable to load the registry. This is often caused by insufficient memory or insufficient security rights.

DETAIL - The process cannot access the file because it is being used by another process. for C:\Documents and Settings\admin\ntuser.dat

2)
Windows cannot load the locally stored profile. Possible causes of this error include insufficient security rights or a corrupt local profile. If this problem persists, contact your network administrator.

DETAIL - The process cannot access the file because it is being used by another process.

 

I had suggested this in post No2 and the guide shows how to save the profile so that you wont need to set it all up again.

Your findings in the error log confirm that the ntuser.dat file is corrupted and is the cause of the problem. Follow the link I gave in post No2 and it should all come good.

 

Thanks Mark & Arie

I will tinker with the deleting ntuser.dat file & go through the process of copying profile.

BUT before i do that i would you to like to think about this:

If the PC.xpwin.prof.sp3's harddisk in power option properties is turned off for more than few hours this will occur. Within an hour, switching to other user has no missing profile problem.

Appreciate yr thoughts on this.

 

If the PC.xpwin.prof.sp3's hard disk in power option properties is turned off for more than few hours this will occur. Within an hour, switching to other user has no missing profile problem.

Thats interesting, have you tried just switching it off for a minute or two, that will probably have the same effect.

It might be worthwhile running a check on the hard drive, this might even repair the error.

1. Press Start > type cmd in the search box and enter. At that c: prompt, type chkdsk /r and press enter.

2.Check disk will start to run but then it will say:

Chkdsk cannot run because the volume is in use by another process. Would you like to schedule this volume to be checked the next time the system restarts? (Y/N)

Type Y for yes, and press enter. Then reboot the computer into normal mode. Chkdsk will start when Windows begins loading again. Let all 5 phases run and don't use or turn off the computer. (The chkdsk process may take an hour or more to finish.)


3.Chkdsk finds any corrupted files that are causing the problem and fixes them. Read the results of each phase as it finishes. During the final phase, it will notify you if it finds any corrupted files.


4.When the Check Disk is done, it will finish loading Windows.

 

Mark understand how to chkdsk /f etc. Will do, but not likely as the SSCI harddisk was just being reformat with winxp reinstalled.

I could do a repair of the window it may work.

Turning it off and restarting, no such problem, it is just the same as let it be for less than few hours.

 

OK, run the chkdsk /r and see if it cures the error it should fix the corrupt file

 

Mark Thanks

Do take further note of the situation:

1 There are 3 PCs having this problem, all xpwin.Prof.sp3.NTFS They are not in the same LAN, one is a new harddisk, just reformated with errors and one with win reinstalled.
2 The problem occurs only if User1 is login in the PC for some hours, then if another User2 tries to log in that PC, either by way of switching or logging off; this phenomena occur.
3 The problem PC, if it is shut down and restarted, User2 can login with its registered profile without this error event.

Based on the above & after chkdsk /f without errors, my conclusion is as follows

The only property common among this 3 PC is they are all using SP3 while other machines which never poser this problem for years are on SP2. So what is yr take?

 

Did you go through the process to delete the ntuser.dat following the guide I gave, you've not mentioned it.

I doubt very much that SP3 would be the problem or it would have been happening to a lot more people.

My final thought for now is all that spyware/anti virus software you have, are you running more than one anti virus at the same time, make sure only one is running.

 

Finally after Mark's final prompting, i have decided to follow the advice of deleting the the ntuser.dat file from the on & off corrupted profile. I do this through an admin user; in the hope that a new one will be created as Arie had stated.

BUT i not allow to delete, even though admin, a member of administrators has the full control over it.

 

http://support.microsoft.com/kb/308421

Follow the instructions in this link to show you how to take ownership of the file.

 

Hi contributors

From all that is said, I think this thread is better marked as resolved.

For general feedback, I found that deleting the ntuser.dat will cause another profile of the same User to be created with some .suffix added. Thus it is the same as deleting the whole subfolder representing the problem user profile.

In regard to my earlier response, namely ntuser.dat cannot be deleted, failure to delete only occur one of the 3 PCs. i will do more checking on this and report back for those who have contributed to this thread. Thanks Mark for the link to the taking ownership. There may be another side to this event.

Cheers.

 

As final follow up

Once the ntuser.dat is removed & a replacement profile gets created, even when the PC is inactive for hours, no missing profile reoccur. Hence is thread is rightly set to resolved.