Error Message Explained: User Profile Service Failed the Logon

This article is part of Helge’s Profile Toolkit, a set of posts explaining the knowledge and tools required to tame Windows user profiles.

Many errors related to user profiles result in the user getting a temporary profile instead of the regular local or roaming profile. I have written about possible causes for that here. In addition to that there is an entirely different category of errors which occur when even a temporary profile cannot be created. This article describes likely causes.

User Profile Service Failed the Logon

When Windows cannot even create a temporary profile you get to see the following error message:

User profile service failed the logon - user profile cannot be loaded

The User Profile Service failed the logon. User profile cannot be loaded.

This typically happens when the default profile, stored in C:\Users\Default, has incorrect permissions or is corrupt in some way.

Default Profile Permissions

If all is well, the directory C:\Users\Default inherits permissions from its parent folder, C:\Users. This results in SYSTEM and Admninistrators having full control, while Users and Everyone have read permissions. In SetACL Studio this looks as follows:

Default profile permissions in SetACL Studio

The permissions for SYSTEM and Administrators are not relevant, but if for some reason the user logging on does not have read permissions on C:\Users\Default the error message User Profile Service Failed the Logon will be displayed and logging on is not possible.

When this happens the user profile service logs an event with ID 1509 and source User Profile General in the application event log:

Windows cannot copy file \\?\C:\Users\Default\ to location \\?\C:\Users\username\. This error may be caused by network problems or insufficient security rights. 
 
DETAIL - Access is denied.

Default Profile Corrupt

Logon is not possible, either, if the default profile’s NTUSER.DAT file is nonexistent or corrupt.

If NTUSER.DAT does not exist the user profile service logs an event with ID 1500 and source User Profile Service in the application event log:

Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly. 
 
DETAIL - The system cannot find the file specified.

If, on the other hand, NTUSER.DAT is corrupt the user profile service logs an event with ID 1508 and source User Profile Service in the application event log:

Windows was unable to load the registry. This problem is often caused by insufficient memory or insufficient security rights. 
 
DETAIL - The system has attempted to load or restore a file into the registry, but the specified file is not in a registry file format.
for C:\Users\username\ntuser.dat
Fixing a Corrupt Default Profile

The easiest way to fix a corrupt default profile is to delete the content of C:\Users\Default and copy it from a working system. Make sure, though, that the machine you copy from has the same operating system version and language.

, , , ,

17 Responses to Error Message Explained: User Profile Service Failed the Logon

  1. Peter October 9, 2013 at 13:03 #

    Thank you so so much. This has solved my problem. my default user must have been corrupt. I have tried the regedit but I could not find the profile that could not logon in the list. so this is the only way that my problem was solved. I got a working good default user from another computer. obvious one with settings I would want in my profile since it picks settings from default user on first logon.

  2. SKawarz October 17, 2013 at 16:42 #

    Thank you so much for this solution. my situation is same with Peter. how can i imagine the default user files have been corrupted. this absolutely make my day. thank you very much.

  3. Syrett October 25, 2013 at 10:31 #

    Very useful.Appreciate your solution.

  4. Tillman November 7, 2013 at 15:29 #

    This worked! I work in a domain environment and I deleted the windows 7 profile from Registry, but was unable to rename the users profile. I had to decimate the profile to get it renamed so we could create a new profile to fix her errors.

    To my horror at 5:00 pm. the user called me and said she can’t get onto her computer so I spend an hour and a half trying to fix it before I gave up for the day. The next day I found your post and boom it works.

    Thanks
    Tillman

  5. Randy November 16, 2013 at 00:34 #

    Domain environment here also. I wonder why this would happen to several computers in the domain? All of a sudden we have several computers with this issue in the past month. Windows update cause this?

  6. Paul November 18, 2013 at 16:28 #

    Hi. I have this message shown above ie ‘The User Profile Service failed the logon’.
    I have no other computer to copy the file from.
    Do you have any other way I can resolve this please……………???????
    Thanks
    Paul

    PS had a load of MS updates last week but nothing out of the ordinary otherwise.

  7. Debbie November 19, 2013 at 20:45 #

    Thanks for the solution – nothing else I tried worked and yet this is so easy. I agree with Randy – I’ve never seen this before and suddenly it shows up on several computers?

  8. Jagan - IT November 25, 2013 at 20:17 #

    Thanks lot for u….It’s working great..now u saved my time.
    Thanks,

    Jagan . A Support Engg – IT
    SourceHOV, Chennai, INDIA
    Mobile: +91 9500580466

    https://plus.google.com/+JagatheesA/posts
    ,

  9. John Gaeng November 26, 2013 at 03:23 #

    It worked for me! Thank you so much for taking the time to share the fix.

  10. Francisco Queiroga December 2, 2013 at 21:12 #

    Thank you! You save me.

  11. David Johnson December 30, 2013 at 20:12 #

    Thanks for that! This fixed my issue if you look anywhere else everyone talks about messing with the registry. Not applicable in my situation due to my issue was coming from a domain thing. Anyways the permissions were set wrong and that fixed it right up good on ya

    Cheers

  12. Ian January 12, 2014 at 07:35 #

    This pointed me in the right direction. A recent (Jan 2014) Windows update appears to create a couple of new files in the Default profile structure. These don’t have the same Perms as the other files (missing ‘Everyone’ | Read). I added the perm and can now logon. Thanks!

    The files were:
    iesqmdata_setup0.sqm
    iesqmdata_setup1.sqm

    Thanks again.

  13. Patty January 16, 2014 at 21:57 #

    You are awesome! It worked.

  14. Chris January 31, 2014 at 23:09 #

    OMG I searched all over the internet. Microsost support gave me some B.S. This is the only thing that worked. After two reinstall of windows I think Ian must be right. It is the damn update!

  15. Sheila February 13, 2014 at 21:51 #

    I don’t even have a clue with what you just said here. Glad it’s working for people who are intimate with their computer, but it’s a machine to me. I trust folks to build it to work, and I use it and try to take care of it. I can log in to other non-administrator profiles, but not mine, the administrator. Crazy. And poor me only has one computer.

  16. Tracy February 19, 2014 at 09:06 #

    Excellent post – I’d been searching for hours with no solutions working & this helped solve our problem with the Default user profile being the cause. Thank you very much for sharing!

  17. apc February 19, 2014 at 19:35 #

    replacing the corrupt default profile fixed it for me. thank you for sharing!

Leave a Reply