Administrator account cannot log on

Hi,

I cannot log on to my machine with the administrator account. Here is the
error from the event log:

Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 2/13/2007 5:53:21 PM
Event ID: 1505
Task Category: None
Level: Error
Keywords: Classic
User: IWAN\Administrator
Computer: iwan
Description:
Windows cannot load the user's profile but has logged you on with the
default profile for the system.

DETAIL - Access is denied.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service"
Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" />
<EventID Qualifiers="49152">1505</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-02-13T22:53:21.000Z" />
<EventRecordID>35583</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>iwan</Computer>
<Security UserID="*omitted*" />
</System>
<EventData Name="EVENT_ADMIN_OVERRIDE">
<Data Name="Error">Access is denied. </Data>
</EventData>
</Event>

Any thoughts?

Thanks,
I. Kinal

Hello,

Thank you for posting in the Microsoft newsgroup!

From your post, my understanding on this issue is: you get event 1505 when
you log on as the administrator in Vista. If I'm off base, please feel free
to let me know.

It seems like the administrator does not have enough privilege on his
profile folder. Please try the following steps to fix this issue:

1. Click Start menu and click Computer
2. Double click local disk C (or any other driver you installed Vista)
3. Double click Users folder
4. Right click on "Administrator" folder and click properties
5. Click Security tab
6. Confirm the account Administrator (IWAN\Administrator) is in the list
and have full control of the folder
7. If administrator is not in the list, click edit and click Add in the
popped out window
8. Type "IWAN\administrator" and click OK
9. Click Full Control and click Apply
10. Re-login the administrator account and check whether the problem is
fixed

Please let me know if you have any other concerns, or need anything else.

Sean Cai, MCSE2000
Microsoft Online Support

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===

Hi,

Thank you for your response. I checked, and the administrator account does
have full control permission on that folder.

Thanks,
I. Kinal

"Sean Cai [MSFT]" wrote:

> Hello,
>
> Thank you for posting in the Microsoft newsgroup!
>
> From your post, my understanding on this issue is: you get event 1505 when
> you log on as the administrator in Vista. If I'm off base, please feel free
> to let me know.
>
> It seems like the administrator does not have enough privilege on his
> profile folder. Please try the following steps to fix this issue:
>
> 1. Click Start menu and click Computer
> 2. Double click local disk C (or any other driver you installed Vista)
> 3. Double click Users folder
> 4. Right click on "Administrator" folder and click properties
> 5. Click Security tab
> 6. Confirm the account Administrator (IWAN\Administrator) is in the list
> and have full control of the folder
> 7. If administrator is not in the list, click edit and click Add in the
> popped out window
> 8. Type "IWAN\administrator" and click OK
> 9. Click Full Control and click Apply
> 10. Re-login the administrator account and check whether the problem is
> fixed
>
> Please let me know if you have any other concerns, or need anything else.
>
> Sean Cai, MCSE2000
> Microsoft Online Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
>
>
>

Hi,

Please help me collect an MPS Report, I'll check event logs in it and do
some further diagnoses.
To generate an MPS Report
------------------------------------
1. Download MPS Report tool from below URL:
http://download.microsoft.com/downlo...5-a579-30b0bd9
15706/MPSRPT_SETUPPerf.EXE
2. Execute the tool on the computer, and if you are prompted "Include the
MSINFO32 report?", please type Y.
3. Please send the result file (CAB file) to me at v-secai@microsoft.com.

For detailed information about the MPS Report Tools, please refer to the
following link:
Microsoft Product Support's Reporting Tools
<http://www.microsoft.com/downloads/d...3C7C-7CA5-408F
-88B7-F9C79B7306C0&displaylang=en

In addition to the MPS Report, collect the privilege settings on the users
folder:
1. Click Start and type "cmd" in the "Start Search"
2. Run command "cd.." to switch to the users folder
3. Run command "cacls * >ACL.TXT"
4. Send the ACL.txt file to me as well

Please let me know if you have any other concerns, or need anything else.

Sean Cai, MCSE2000
Microsoft Online Support

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===

Hi,

I tried to run the MPS Report tool, but it did not work. It began to
install, and I saw the MPS white screen with blue font show several lines of
"1 file(s) copied", then there was another line of text that I just briefly
saw, before the window disappeared, and then Vista gave me the "This program
did not install correctly" box . Is there maybe a new version of this tool
for Vista?

I will send you the other information you requested to your e-mail in just a
minute.

Thanks,
I. Kinal

"Sean Cai [MSFT]" wrote:

> Hi,
>
> Please help me collect an MPS Report, I'll check event logs in it and do
> some further diagnoses.
> To generate an MPS Report
> ------------------------------------
> 1. Download MPS Report tool from below URL:
> http://download.microsoft.com/downlo...5-a579-30b0bd9
> 15706/MPSRPT_SETUPPerf.EXE
> 2. Execute the tool on the computer, and if you are prompted "Include the
> MSINFO32 report?", please type Y.
> 3. Please send the result file (CAB file) to me at v-secai@microsoft.com.
>
> For detailed information about the MPS Report Tools, please refer to the
> following link:
> Microsoft Product Support's Reporting Tools
> <http://www.microsoft.com/downloads/d...3C7C-7CA5-408F
> -88B7-F9C79B7306C0&displaylang=en
>
> In addition to the MPS Report, collect the privilege settings on the users
> folder:
> 1. Click Start and type "cmd" in the "Start Search"
> 2. Run command "cd.." to switch to the users folder
> 3. Run command "cacls * >ACL.TXT"
> 4. Send the ACL.txt file to me as well
>
> Please let me know if you have any other concerns, or need anything else.
>
> Sean Cai, MCSE2000
> Microsoft Online Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
>
>
>

Hi,

I didn't get your mail in the past few days. Can you try again?

Since I won't be in the office in the next a few days, my response maybe
slow. Sorry for the inconvenience and thank you for your understanding.

Have a good day!

Sean Cai, MCSE2000
Microsoft Online Support

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===

OK, I just tried to run the cacls command on the users folder, and it gave me
an "Access is Denied".


"I. Kinal" wrote:

> Hi,
>
> I cannot log on to my machine with the administrator account. Here is the
> error from the event log:
>
> Log Name: Application
> Source: Microsoft-Windows-User Profiles Service
> Date: 2/13/2007 5:53:21 PM
> Event ID: 1505
> Task Category: None
> Level: Error
> Keywords: Classic
> User: IWAN\Administrator
> Computer: iwan
> Description:
> Windows cannot load the user's profile but has logged you on with the
> default profile for the system.
>
> DETAIL - Access is denied.
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="Microsoft-Windows-User Profiles Service"
> Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" />
> <EventID Qualifiers="49152">1505</EventID>
> <Version>0</Version>
> <Level>2</Level>
> <Task>0</Task>
> <Opcode>0</Opcode>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2007-02-13T22:53:21.000Z" />
> <EventRecordID>35583</EventRecordID>
> <Correlation />
> <Execution ProcessID="0" ThreadID="0" />
> <Channel>Application</Channel>
> <Computer>iwan</Computer>
> <Security UserID="*omitted*" />
> </System>
> <EventData Name="EVENT_ADMIN_OVERRIDE">
> <Data Name="Error">Access is denied. </Data>
> </EventData>
> </Event>
>
> Any thoughts?
>
> Thanks,
> I. Kinal

Hello,

I'm sorry for the slow response since I wasn't in office in the last few
days. Sorry for the inconvenience.

The administrator should have full control privilege on the Users folder.
Please check the security settings on the Users folder and do the following
steps:
1. Click Start and type "cmd" in the "Start Search"
2. Run command "whoami"
3. Paste the output to the newsgroup

Sean Cai, MCSE2000
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===

Hi,

It occurred to me that I did not try to run the cacls command in the context
of the administrator account. When I did so, it worked. I have emailed you
the results.

Thanks,
I. Kinal


"Sean Cai [MSFT]" wrote:

> Hello,
>
> I'm sorry for the slow response since I wasn't in office in the last few
> days. Sorry for the inconvenience.
>
> The administrator should have full control privilege on the Users folder.
> Please check the security settings on the Users folder and do the following
> steps:
> 1. Click Start and type "cmd" in the "Start Search"
> 2. Run command "whoami"
> 3. Paste the output to the newsgroup
>
> Sean Cai, MCSE2000
> Microsoft Online Partner Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
>
>
>

Hello,

The ACLs on Administrator's directory seems to be fine.

Please run the cacls command under the \users\administrator folder for more
information. You can post the output to the newsgroup this time.

Also, help me check the permission in the registry:

Run regedit to start Registry Editor.
Right click on HKEY_CURRENT_USER and click Permissions
Verify the administrator has full control and read permission on this
registry key

Please let me know if you have any other concerns, or need anything else.

Sean Cai, MCSE2000
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===