How to break the entrance of new users (Windows Vista +)
I came across a rather strange behavior of the system and decided to share my experience. So, we have a newly created user and try to log in. And, quite unexpectedly, we get the following error (the example uses input via runas with loading the profile): 
I will notice that with approximately a similar error the attempt of a usual input will be completed. On Windows 8, the message is: "The User Profile Service service failed to log in." Attention, the question: what went wrong ?!
So, a brief search for the problem led to an interesting result. When the user first logs in, the system creates his profile. The bulk of the data to fill it lives in C: \ Users \ Default. And it was here that a funny feature came to light: obviously, when creating a profile, any ini-file is considered an integral part of the configuration. As an experiment, you can put it directly in the Default ini-file without access rights for users. As a result, the User Profile Service process, which for some reason acts on behalf of the user who has entered, failing to read this file, ends with the errors described above.
I hope this observation will be useful to someone in life, but for me personally, it was an unexpected confirmation that “there is a rupture to an old woman”.
PS I tried to find any mention of a similar problem, but did not succeed. I would be glad if someone points to the description of such an error, especially if it is on the forums of Microsoft itself.
I will notice that with approximately a similar error the attempt of a usual input will be completed. On Windows 8, the message is: "The User Profile Service service failed to log in." Attention, the question: what went wrong ?!
So, a brief search for the problem led to an interesting result. When the user first logs in, the system creates his profile. The bulk of the data to fill it lives in C: \ Users \ Default. And it was here that a funny feature came to light: obviously, when creating a profile, any ini-file is considered an integral part of the configuration. As an experiment, you can put it directly in the Default ini-file without access rights for users. As a result, the User Profile Service process, which for some reason acts on behalf of the user who has entered, failing to read this file, ends with the errors described above.
I hope this observation will be useful to someone in life, but for me personally, it was an unexpected confirmation that “there is a rupture to an old woman”.
PS I tried to find any mention of a similar problem, but did not succeed. I would be glad if someone points to the description of such an error, especially if it is on the forums of Microsoft itself.
')
Source: https://habr.com/ru/post/196034/
All Articles