I have just been looking at a problem with IIS (OWA outlook web access and sharepoint http://companyweb were not responding) and remote access to the RDS server had stopped. The application event log was full of event ID 1500 and 1501 for the user spwebapp.

The Windows SBS 2011 is running Exchange/OWA and IIS and has the remote gateway configured to redirect to the RDS server.

I restarted the remote gateway service which fixed the remote access problem.

The next problem was OWA and Company web not responding. I restarted IIS by running the IISreset from an admin command prompt but this didn’t change anything.

As you can see the event were happening frequently (about 20 a second). I have no idea when this started as the log was full and overwriting older events.

Event ID 1500

Event ID 1500 read :

“Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

DETAIL – The system cannot find the file specified.”

Event ID 1501

Event ID 1501 read :

“Windows cannot create a temporary profile directory. This problem may be caused by insufficient security rights.

DETAIL – The system cannot find the file specified”

I found this post at microsoft which suggests adding the built in administrators group to the “Log on as a batch job”  security group but the group was already there.

I then noticed I had 1000 temporary profile folders created inthe C:\Users folders from TEMP.DOMAIN to TEMP.DOMAIN.999. There was also no Users folder for spwebapp but spfarm and spsearch both had user folders.

I ran regedit and navigated to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

*PLEASE BACKUP YOUR REGISTRY BEFORE MAKING ANY CHANGES. I AM NOT RESPONSIBLE FOR ANY PROBLEMS THIS MAY CAUSE*

In here I found the profile pointing to the TEMP.DOMAIN.999 folder and changed it to C:\Users\spwebapp. I also changed the “State” key to 0.

I then created the spwebapp folder manually in C:\Users and gave the spwebapp users account full permissions to the folder.

This has stopped the Event ID 1500 & Event ID 1501 appearing and Companyweb and OWA are now responding as expected.

Have you had this issue? Did this help? Let me know in the comments below,

Thanks

Ian