"Please wait for the user profile service"

The windows servers (vm) has gone so slow and were stuck at "Please wait for the user profile service" for few minutes whenever a user logs in. After logging in the response time for any execution is very slow. Then I tried to find out the root cause for this issue.

Few scenarios were possible that could have caused the issue at that time.
i) Introduction of NAP recently for the Wireless Project
ii) A hardisk failure of the Sun Storage 7310 hosting the virtual machines (still working on ..)

When I check the event viewers of those affected servers, I could see a lot of Errors in it (especially event id 10016). Because of the introduction of NAP for the wireless authentication, this error has been thrown in those servers whose "Network Access Protection Agent" services has not been started. I changed them to Automatic startup type and started the services in all the servers. I recollect seeing those error events still which was only solved once I started the "Network Access Protection Agent" services on the NPS (Network Policy and Access Server).

But this didn't solve the issue in hand. Then, I came across Event ID 13 on the domain controller (Certificate enrollment for Local system failed to enroll for a DomainController certificate). To solve this I had to add the Domain Controllers into the Certificate Service DCOM Access (CERTSVC_DCOM_ACCESS in Windows 2003) in the ADUC under "Builtin".




Check whether the Domain Controllers have "Request Certificates" enabled under the Certification Authority. It must be enabled.




 Once it's done restart the domain controller and check whether the Event ID 13 is gone and whether the DC is able to enroll itself for the certificate.

For me, things came back to normal once the certification issue was resolved.

Comments

Post a Comment

Popular posts from this blog

Wireless DPSK setup with Ruckus Zone Director

Image
Configure the AAA Server (Using local database howto is out of this scope) Log in to the zone director and configure the AAA Server from Configure > AAA Servers as shown in the figure below. Name: Give a name for the AAA Server for identification {jcua for this example} Type: Active Directory Global Catalog: {leave it un-check} IP Address: IP address of the domain controller Port: 389 {ldap port} Windows Domain Name: domain name {test.com for this example}   Configure the Hotspot Service Configure a Hotspot to authenticate the users before allowing the traffic from Configure > Hotspot Services as shown in the figure below. Name: Give a name for the hotspot service {JCU-Wireless-Provisioning for this example} Login Page: https://wireless.test.com/activate {or https://zonedirectorIP/activate} Start Page: I leave to redirect to the URL that the user intends to visit Authentication Server: The AAA server that we created {i.e., jcua} Accounting Server: none {out...
Read more

Access denied for user 'bacula'@'localhost' (using password: YES)

Image
While installing a test backup server (Bacula), I got the error "Access denied for user 'bacula'@'localhost' (using password: YES)" while connecting to the MySQL database. Root access was fine. Grant permission as well as the user password was correct and thus it took me quite some time to understand that though the user password was correct, it wasn't encrypted like the root when checked from Webmin.  Thus from mysql command, instead of - mysql> UPDATE mysql.user SET Password = 'baculauserpassword' WHERE user = 'bacula'; mysql> FLUSH PRIVILEGES; I change it too  mysql> UPDATE mysql.user SET Password = PASSWORD('baculauserpassword') WHERE user = 'bacula'; mysql> FLUSH PRIVILEGES; After getting the password encrypted, I can finally connect to the MySQL server and run the Bacula.
Read more

Operation could not be completed (error 0x00000709)

Image
We just had an upgrade of the printer infrastructure. New printers are installed, Canon Uniflow software are being upgraded as well as the existing drivers are being upgraded. Things went fine except for few users having issues like: Cannot set default printer Cannot print directly from Outlook client Thanks to the link  http://www.howtogeek.com/forum/topic/can-not-set-any-printer-as-default-printer  the issues were resolved following the steps there. The fix, which worked for me yesterday, is simple: Go to HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\ -If the Windows key doesn't exist, create a new key; Then check for the following entry (or create it if it is not there) Name: Device Type: Reg_SZ (String Value) Value: winspool,Ne00 Should you be unable to save it, just make sure the user has Full (or special) access to the Windows key (by right-clicking on the key) After that I ran the "gpupdate /force" as the drivers were pushed using gr...
Read more