I was looking at several Windows 7 machines in an environment that whenever a new domain user who had never logged onto a machine before got the following error message:
The User Profile Service service failed the logon.
User profile cannot be loaded.
Now in this case there was an existing Microsoft KB article for this located here http://support.microsoft.com/kb/947215
However in this case the cause was a different issue. I had logged successfully onto the machine as a local Administrator and confirmed no profiles already existed on the machine. When I tried to use a “Run As” the following error message occurred:
299: Only part of a ReadProcessMemory or WriteProcessMemory request was completed.
(note: On Windows 7 with UAC enabled make sure the RunAs command is used from an already elevated command prompt)
This matched an Application Event log error:
Now as I know majority of these type of profile related causes are caused by file access issues my first test was a ProcMon (http://live.sysinternals.com/ProcMon.exe
filter set to filter any events with a result of ACCESS DENIED. With ProcMon running I then repeated the Run As command. Interestingly I saw a file located in the default user profile D:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup0.aqm
(Note: The Temporary Internet Files is a hidden folder, so by default is not visible in Winodws Explorer)
I then deleted this file, the deletion of which required elevation to Administrator access. Immediately after deleting the file RunAs succeeded. Logging off I could now log back on without getting any errors.
Where did the SQM file come from?
That is an interesting question and I’m not sure exactly how it entered the default profile in the first place. However my guess is this was caused by an IE9 installation with Send Feedback to Microsoft enabled, as this this appears to be data collection from Microsoft’s Customer Experience Improvement program.
chentiangemalc 
Excellent! This was extremely helpful.
Hello – I had the same issue. Thanks a bunch for sharing this !
Thanks!!!
Hi, thanks a lot for this. Had the exact same problem with a brand new Dell Optiplex 390 (Well, 20 of them actually) with Windows 7 Professional pre-installed. As it was new on the domain ALL users were new, so no one could log on. Easiest way to deal with it was to delete the offending file using Group Policy. What an over site!
Fasntastic! Had exactly the same issue and most of the knowledge base articles are related to local accounts and not domain accounts. Also, I could not see anything in the Profiles section of the registry apart from the usual three local accounts and the Domain Administrator one.
Keywords: Domain Account; The User Profile Service service failed the logon
Thank you, that solved my problem. In my case the problem file was completely different though.
Same here, different file but got me thinking about using Procmon, Thank you!
Thanks so so much, just solved my problem!!!
Thank you for this! This was the EXACT solution for me. All other suggestion I found kept point to KB947215 and it wasn’t the key.
Thanks again.
LEGEND!!! 1/2 a day working through crappy MS ‘solutions’ and half-@ssed forum posts only to find the answer here. I bow to your wisdom, Great One!
FANTASTIC!!! Thanks for sharing your solution. More than anything thank you for sharing your debug path; extremely useful. As we say in Brazil: “you not only told us the miracle, you also showed us the Saint who did it”. ;-)
Thank you! an hour of banging my head into a wall and Googling away with nothing but reblogged useless crap finally led me to this article which completely cured the problem in seconds!
You are a freakin’ genius and my new favorite IT helper!
Phenomenal! I can’t tell you how many articles I read through re: this problem that never came close to solving the real issue. Thanks a bunch!
Thanks for this fix, it worked a treat after all of the Microsoft KBs failed to resolve the issue. Thanks again
I had the same problem but the source of the problem was something else. In the registry the default profile location was set to some other profile not to Default User. So no matter what changes I do on the default profile it will not fix it for me. Moreover the profile it was pointing it to was deleted- including the default profile. I copied the working default profile from other computer and name it to whatever but not Default User (need more explanation for that) and point registry entry to that profile. And it worked
Thank you very much, this was extremely helpful in resolving a similar issue.
Instead of deleting it (who knows what that actually does), you can also give all users read access to that file and that will “fix” the issue as well. Still would be nice to know what’s causing this issue and what Microsoft’s recommendations are. In my environment this issue was encountered when adding an IEAK install of IE10 in our SCCM task sequence.
I noticed that after adding an IEAK install of IE10 into my ConfigMgr 2012 task sequence as well.
Great Article! This was exactly the problem I was running into.
Excelent! God job. This solved my problem too. I run a small/medium sized network with roaming profiles. We discovered this issue when new users were trying to logon on freshly imaged PC’s. Gotta edit the image now :)
Thanks for this … in our case the fix was a combination of things:
(1) renaming any .SQM files in the Default user profile (there were 2 of them) to .SQM.OLD; then
(2) right-clicking on the Default user profile, Properties, Security … forcing those permissions to be inherited for all sub-folders and files
Cheers,
Steve.
Thank you so much! This has been driving me nuts for a day now at work.
I had the same Problem, but ACCESS DENIED pointed to a shortcut on the Default User Desktop!
Thank You …
I had the exact same error and this worked for me as well. In my case, an install of Visual Studio 2013 was the culprit. Thanks.
Thanks for this. I had the same problem with a file at: C:\Users\Default\AppData\Local\Microsoft\VSCommon\12.0\SQM – presumably caused by Visual Studio installation/update
I got the same issue Charlie, I applied inheritance as the workaround from (http://connect.microsoft.com/VisualStudio/feedback/details/838232/update-kb2932965-creates-sqm-files-in-the-default-user-profile-that-prevent-new-local-user-accounts-to-login-to-windows) and it solved the issue..
Thx chentiangemalc you rocks!
For some users, especially in a domain environment, it doesn’t even allow you to logon using a new account. Meaning, there is no profile loaded/created on that workstation for the user to which the computer generates the user profile error. A work around i’ve found is to delete the file below and it will fix the issue.
C:\Users\Default\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData720896_00.sqm
You may have to show hidden files/folders to see it. Alternatively, do a search for all SQM files and delete them. It looks like SQM files deal with MSN Messenger. This will help you a great deal, and you’ll be able to logon with other users now.
Thanks very much!!!! your article helped me on an issue I had long time ago… worked perfectly to fix my problem…!
We solved it for our entire domain by adjusting our GPO with the additional setting of “authenticated Users” in the default user profile.
The path for this setting in your GPO is: Computer configuration/policies/windows settings/security settings/file system/
In %SystemDrive%\Users\Default add NT Authority\Authenticated Users with Full Control permission
After it was pushed down, all users that previously had this issue were able to log on
Amazing fix, just shared this solution with the rest of the Tech Help staff here. Thanks!
Legend! Thanks for this :)
Mate.
It was by far the BEST answer I ever saw.
It made the trick immediately.
I was spending time on this issue for 3 hours in a raw, you can’t imagine hot I’m grateful for this post.
THANKS MATE !!
Saved the day!
Excellent! You’re my personal god! I couldn’t find the right answer until now. I ended formatting a PC twice because of this. The second time I found your answer. Thank you so much!
I had over 20 computers that started having this issue. None of the articles I read worked except this one, Thank you so much for the post.
I had the same problem except it was a temp file in the Google Chrome extension folder for the Default user causing the problem. Thanks!
Thank you so much. This is most helpful and saved me more hours of searching for this annoying issue!
You’re a genius for troubleshooting to this level, and I’d like to thank you so much for sharing! You saved me a day of reformatting a machine.
Articles like this are what make the internet great. Thank you!
Thanks! Life saver!
Thank you, I just switched my company to deploying using MDT and we use group policy to install some applications, IE10 is one of them and it looks like the user experience improvement was not disabled for the install. This didn’t effect most users but it did effect a generic account that we use which does not have many file access permissions. I am glad that my first step was 15 minutes of searching rather than 30 minutes of troubleshooting. Thank you.
Legend Status Achieved! Was facing a large re-imaging task because of this little quirk.
Good post, solved my issue. Thanks!
Great. The method solved my issue too. Respect to Chen.
I followed the steps in the in the first post and that fixed my problems we had a couple of machines on our network that would not let new users log in. the issue with ours was the C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files folder was hidden and set as a system folder I could not even get to the security permissions on the folder until I ran the attrib command to allow access to it. after that new users were able to log in. thanks for the post:)
amazing Stuff..Got the same error when running as different user for my APS account for IE and SSMS and it worked perfectly. Thanks a ton genius.
Outstanding!
Thank you Sir. What would we do without you at Fuj…
Thanks for the solution!
In my case the SQM file was actually located in:
c:\Users\Default\AppData\Local\Microsoft\VSCommon\12.0\SQM\
Thanks. Down with SQM files !!
An IE file for me too. Thank you!!
TheDude on https://social.technet.microsoft.com/Forums/windows/en-US/7fb93109-218c-43d7-b29a-ceaffc598b58/user-profile-service-service-failed-the-logon-user-profile-cannot-be-loaded?forum=w7itprogeneral
I suggest you check the Advanced Security Settings for the C:\Users\Default folder. Ensure you check the box “Replace all child object permission with inheritable permissions from this object”.”
The problem with this approach is while it may fix the issues, you may set up some other permissions incorrectly. In a correctly configured system, the permissions will by different in some subfolders under C:\Users\Default. You can confirm this by running icacls C:\Users\Default /t and comparing results.
That fixedmy issur was working on it for 2 hours ty
Yup! Worked a treat :) awesome.
Keywords: User Service Failed Login Domain New User
Thanks mate, You are awesome!
This fixed it for me. Thank You.
You are awesome! this fix worked perfectly, great to find this post after sifting through the same “its a corrupted user profile” posts
I had this issue with VS files with the SQM extension. Once removed, the problem went away. Thanks for the post.
this is wonderful. worked for me i found this that same file stopped me from loggin in with a new user. After deleting it i can now login. Dont rename it to OLD it still causes issues.
Excellent article!! A life saver (at least to avoid wasting time :-)
I had a different issue than those *.sqm files but searching for ACCESS DENIED in procmon while doing a runas did the trick. Thanks!!
problem solved !!! thanks a bunch
I’ve been seeing this issue for a while and a reinstall of the OS always worked…but finding this solution which has worked for me will save loads of time, excellent :)
Fantastic, thank you so much!!!!
Thanks for this. Saved me no end of grief :)
You, sir, are a complete star. Saved me hours of work. Thank you!
I have the same error and the access denied were on
c:\Users\Default\AppData\Roaming\Microsoft\Plantillas\LiveContent\Managed\Word Document Building Blocks\3082
Someone knows what is this folder?
Thanks,
Worked a charm, many thanks! Followed your steps and learned a little more on how to troubleshoot these issues too!
Thanks! My problem file happened to be located here:
C:\Users\Default\AppData\Local\Microsoft\VSCommon\12.0\SQM
Brilliant! I’ve been banging my head against this problem for the past 36 hours – even after deleting all the existing user profiles on the local machine, it wouldn’t allow any domain user to log in. Many, many thanks – saved me from a Windows re-install !
This is awesome … It’s really helpful for me.
Perfect. Thanks a lot for this helpful post.
I had a problem running the Sql Server Management Studio under different user accounts.
Deleted the .sqm file from the folder “C:\Users\Default\AppData\Local\Microsoft\VSCommon\12.0\SQM\” and SSMS fired up like a charm.
Thanks for sharing this!
Superb, thank you, fixed my issue too, never seen this before!
Thanks very much . It’s really helpful for me
Dude- you rock! Thanks for saving me the hassle of a reload!!!!
Thank you for supplying this. My ‘access denied’ file was a Voltage Encryption Manager .xml policy file.. Really odd
Excellent!! It works for me..
I’m seriously in need of help…i don’t have ownership of system folders…and I’m finding it more difficult to acquire it in safe mode
Pls help me…my machine is,locked with all my study notes and I have an exam in 5days
Thank you!
Try this
Browse to C:\Users\Default\AppData\Local\Microsoft on the machine that has the issue.
Right click on Windows folder and go to Properties
From Security tab click on Advanced to open Advanced Security Settings
From Advanced Security Settings, go to Permissions tab and click on Change Permissions button
Select Users, ensure that group has full control access and then check the box that says ‘Replace all child object permissions with inheritable permissions from this object’ and click on OK.
Thanks for great help it worked
Had the same issue, and application event viewer identified the same file, but Temporary Internet Files wasn’t there. After getting very frustrated I deleted the folder that supposedly ‘contained’ it (Users\Default\AppData\Local\Microsoft\Windows) and it sorted the issue.
So helpful! Very well documented as well.
I had the exact same file as your original problem (diagnosed via Process Monitor).
I downloaded Process Monitor from Microsoft rather than from link you specified which made me feel a little safer: https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx.
Thanks so much!
The link I provided is also Microsoft owned domain, as Microsoft bought SysInternals
Man, you saved my day. Thank you for sharing.
Five years on and this is still valid, wow, thanks.
For me it was a file under C:\Users\Default\AppData\Roaming\Microsoft\Blend\14.0\FeedCache
but the Event Viewer told me exactly where to look.
well in my “Temporary Internet Files” ther are no files. Could anyone please help me ?
In my “Temporary Internet Files” ther are no files ,can anybody help me?
Thank you so much for your detailed description which helped me a lot!
Thank you!
Extremely useful post – thanks for sharing!
I was banging my head on the desk for hours over this one. Just deleting that one little file fixed everything. Thanks so much!
I was trying to install some application package on my computer though window xp.. But it was appearing this type of message also… Pls any help for it
Just wanted to leave my thanks too. Just updated to SCCM 1511, created a Task Sequence to install Windows 7 and included IE 11 Application created with IE Customization Wizard and was getting this message. Deleting the file fixed it. I’ll have to try creating a new msi with the wizard and see if I can modify the Customer Experience Improvement program to prevent this.
Incredible work. Thanks for laying out your thought process too, it was incredibly insightful – 5 years later! If anyone is interested, I narrowed this issue file creation (at least in my case) to a Internet Explorer Administration Kit (IEAK) package – that was set to all defaults. It is a bit of a bummer too because you can grab an MSI file from IEAK and deploy it via GPO.
Very helpful. I did not get the error when I used “Run As” so “ProcMon” tool was not able to identify the “Access Denied”. The article and all the comments mentioned “SQM” so here is what I did and worked for me:
Logon with Administrator account
Show hidden files and folders
Go inside each/all users AppData and search for “sqm” and delete all
Log off/on again with the failed account
done!
Thank you :) So helpful!
Perfect! Thank You.
Thanks man, you saved the day.
I never heard of this problem until recently and suddenly it pops up all the time.
Excellent Fix. I’d never seen this before, but you nailed it. Thanks!
Thanks for posting, this solved my problem!
Thanks. I can’t believe this post since 2011 and still working!! great job!
+1 for “You saved the day!” Thanks for the heads up. The offending file was also in the default profile except mine was buried deep in appdata\local\google\blah blah blah….
Excellent thanks for this!! In my case it was Chrome which was causing this, so uninstalled it and logged in successfully.
Hats Off Sir G, Its a monstrous help
Thank you very much! After fighting this for hours, using the ProcMon.exe like you suggested showed me to the problematic “permission denied” files. The files in our case causing the issue were in the following (this is also a Windows 7 Pro machine Joined to a Windows Server 2008r2 Domain controller.)
c:\users\default\appdata\local\google\chrome.
Deleting the entire Chrome directory fixed it for us.
Thanks again!
Shane
I confirm to all fix solve probem , thanks for sharinining
this blog describe our situation after IE 11 deploy .New user profile (domain user) problem
https://blogs.msdn.microsoft.com/asiatech/2014/01/29/new-user-gets-event-1509-after-deploying-ie91011-through-sccm/
You are fantastic :D
I tried renaming the file, it did not work, after deleting the file from the folder this works like a charm. Thank you So much.
Thanks so much!!
Excellent! Thank you very much.
Thank you!!!
thank you so much. it was very helpful!!!!
Thank you so much sir! This saved me so much trouble. You should submit your solution to Microsoft or something. Keep up the great work!
Very nice write up. Followed this step by step and it solved my issue (SQM file corrupted it seems). 6+ years on, this is the post that keeps on giving :)
Thank you! Its super helpful
Had exact same error. This solution worked for me:
go into the Advanced Security Settings for the C:\Users\Default folder and checking the box to “Replace all child object permission with inheritable permissions from this object”
http://discussions.virtualdr.com/showthread.php?264979-RESOLVED-User-profile-service-service-failed-the-logon-User-profile-cannot-be-loaded-W7PRO
More than 6 years since this article came out and it is still saving stumped asses like mine, thank you good sir for this article!
Perfect! Exactly as it happened in your example. The sqm file was a different now, but it was still at fault here.
Thanks!
What a lifesaver! I’ve been troubleshooting this one computer off and on for the last couple of weeks. I finally came across your post – it worked!! Thank you!!
This worked beautifully for me!!!
Dude…
Worked perfectly thanks a lot
Dang I wish i was that good at troubleshooting.
Thanks for posting this!!!
Hello – this work perfectly on W7 machine – the problems is with Visual Studio on a W7 machine, delete the .sqm files located on user-default-appData-Local-Microsoft-Windows-VSCommon-12.0-SQM.
Delete the 2 files and reboot the machine, you will be able to login with a new user on a domain.
Procmon got me pointed in the right direction. I filtered by “ACCESS DENIED” and discovered that
C:\Users\Default\AppData\Local\AMD\DxCache\673a73c0da5e463025a3dd436c8c44559db45a0a4646e569.bin was preventing logon. I modified the permissions and was able to logon. Thanks for posting your solution.
This still works perfectly on company’s Win 7 Pro machines! Thanks a lot!
I cannot set filter as you did.
Sorry, I was able to set filter using the RESULT clause.
This just made my day. it was actually a .bin file for me, i deleted it, ran the RUNAS again and worked like a champ! Logged off and logged in as the new domain user. Many MANY thanks!
works perfect thanks
Thanks !!!!
Thank your for this article! We had the same issue and this helped to troubleshoot and resolve.
Amazing article and still applies in 2024! Had the same issues with a new domain admin user logging into a server 2012 R2 with Exchange 2013 installed. Did not have to use process monitor but I did find 3 exchange-related .sqm files buried in the Default user profile folder that was causing those error messages.