Domain user logs in and is immediately logged out
-
@DustinB3403 said in Domain user logs in and is immediately logged out:
@coliver said in Domain user logs in and is immediately logged out:
@Dashrender said in Domain user logs in and is immediately logged out:
@coliver said in Domain user logs in and is immediately logged out:
Backup and then blow the user profile away. No use trying to recover it.
Sadly, in the OP he said that wasn't really an option.
Right... but that's the problem. It sounds like a corrupt user profile, you really can't login to it in its current state.
You can change the state via the registry.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileListThere should be two registry keys with the same name, except one has a .bak after it. Change the one without to .backup and remove .bak. Restart the machine. That should get you back into the profile... but no guarantees it won't just corrupt again as soon as you try to login.
No, no .bak registry for the account.
The employee's registry file is there though.
Hmm, that's interesting. Have a look at scheduled tasks on that machine. Is there anything running at user login?
-
@DustinB3403 said in Domain user logs in and is immediately logged out:
@coliver said in Domain user logs in and is immediately logged out:
@DustinB3403 said in Domain user logs in and is immediately logged out:
@coliver said in Domain user logs in and is immediately logged out:
Backup and then blow the user profile away. No use trying to recover it.
Yeah not an option. We're looking for emails that may still be held in the local user profile, the user account was disabled on AD (which then marks the email account for deletion on office365) after 30 days.
So if there is any chance that I can get into this account and see what the mailbox still has cached would be critical.
Of course the mailbox matter is a different issue entirely that I need to address.
Can you just browse the local folders? There should be an outlook cache file in the users directory.
Tried looking for it, and I don't see any of the files I need.
Looking for a local cache of outlook, so a PST or OST file.
Then, unfortunately, it seems like local caching was turned off. If the cache was on you would see both PST and OST files.
-
@coliver said in Domain user logs in and is immediately logged out:
@DustinB3403 said in Domain user logs in and is immediately logged out:
@coliver said in Domain user logs in and is immediately logged out:
@DustinB3403 said in Domain user logs in and is immediately logged out:
@coliver said in Domain user logs in and is immediately logged out:
Backup and then blow the user profile away. No use trying to recover it.
Yeah not an option. We're looking for emails that may still be held in the local user profile, the user account was disabled on AD (which then marks the email account for deletion on office365) after 30 days.
So if there is any chance that I can get into this account and see what the mailbox still has cached would be critical.
Of course the mailbox matter is a different issue entirely that I need to address.
Can you just browse the local folders? There should be an outlook cache file in the users directory.
Tried looking for it, and I don't see any of the files I need.
Looking for a local cache of outlook, so a PST or OST file.
Then, unfortunately, it seems like local caching was turned off. If the cache was on you would see both PST and OST files.
Right, if the files aren't there, then they just aren't there.
-
@coliver said in Domain user logs in and is immediately logged out:
@DustinB3403 said in Domain user logs in and is immediately logged out:
@coliver said in Domain user logs in and is immediately logged out:
@DustinB3403 said in Domain user logs in and is immediately logged out:
@coliver said in Domain user logs in and is immediately logged out:
Backup and then blow the user profile away. No use trying to recover it.
Yeah not an option. We're looking for emails that may still be held in the local user profile, the user account was disabled on AD (which then marks the email account for deletion on office365) after 30 days.
So if there is any chance that I can get into this account and see what the mailbox still has cached would be critical.
Of course the mailbox matter is a different issue entirely that I need to address.
Can you just browse the local folders? There should be an outlook cache file in the users directory.
Tried looking for it, and I don't see any of the files I need.
Looking for a local cache of outlook, so a PST or OST file.
Then, unfortunately, it seems like local caching was turned off. If the cache was on you would see both PST and OST files.
Yeah that is what it looks like...
-
EDIT: Sorry just read through the thread, can't be any help
-
@DustinB3403
Been there -
Yeah and a litigation hold or migrating the mailbox to a shared mailbox would've been all that is needed.
I want to say the 4 words you should never say.....
-
@DustinB3403 said in Domain user logs in and is immediately logged out:
Yeah and a litigation hold or migrating the mailbox to a shared mailbox would've been all that is needed.
I want to say the 4 words you should never say.....
I'm sorry you lost it? No that's 5 words.
I can't help you? That's 4.
-
@DustinB3403 said in Domain user logs in and is immediately logged out:
Yeah and a litigation hold or migrating the mailbox to a shared mailbox would've been all that is needed.
I want to say the 4 words you should never say.....
is it "i cant do that"?
-
Nope words you never say to your boss, but you let your face express em..
_ ____ ___ so.
-
Well, just phrase it right.
" I have been looking into this and after I TOLD the community about it, they told me "YOU are out of options." SO....
-
yea... the NTUSER.dat file is corrupted, if I remove or rename is, I get signed into a temporary profile.
Obviously this doesn't work... Looking for other options..
-
@DustinB3403 said in Domain user logs in and is immediately logged out:
yea... the NTUSER.dat file is corrupted, if I remove or rename is, I get signed into a temporary profile.
Obviously this doesn't work... Looking for other options..
other options - well this would be super ugly, but could create a new user account and log into it.. then reboot and log in as a local admin, then copy over everythign from the old profile to the new on except the corrupt ntuser.dat file - don't forget to set the permission correctly...
then log back in as the new user and see - if you're super lucky... if the outlook profile would appear. I doubt it, because I think that's stored in the registry. -
@Dashrender Yeah... that is what I'm seeing as well, and the chances of it working are extremely rare.
-
@DustinB3403 Cross those fingers
-
@Dashrender said in Domain user logs in and is immediately logged out:
@coliver said in Domain user logs in and is immediately logged out:
Backup and then blow the user profile away. No use trying to recover it.
Sadly, in the OP he said that wasn't really an option.
Then we found the issue
-
You can try logging as that user in Safe Mode.
