The User Profile Service Failed the Logon. User Profile Cannot Be Loaded

We have Windows 2008R2 with Exchange 2010. A user logged in and they receive a message The User Profile Service Failed the Logon. User Profile Cannot Be Loaded.

I can currently remote in as I have had a profile on there for a while now, but it is stopping anyone creating a new profile.

I have checked the registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList but there does not seem anything out of the norm, not .bak file etc.

I have also restarted the Server and applied updates.

Solution 1:

I have found a solution to my problem - the default user profile (C:\Users\Default) seemed to lack necessary ACEs. After resetting ACLs and re-enabling inheritance, creation of new profiles worked as expected. See this link for details.

Text of the above link:

I think the problem caused by some security permission changes to the default user account in the path C:\Users.

The solution, unhide Default user by doing (Computer -> Tools -> Folder options -> ) ,

The right click over the Default user -> Properties -> Security -> Advanced then tick the "replace all child object permission entries with inheritable permission from this object" fixes the issue. Basically you are replacing all child object permissions for Default user.

Now you should be able to login.

Solution 2:

Somehow folder C:\Users\Default was deleted from the server, so copying Default folder from another server solved my problem.