Event ID 1060 — Terminal Services User Configuration

Applies To: Windows Server 2008

The properties of a user account can be configured to provide a Terminal Services-specific profile and home folder. This profile and home folder will only be used when a user establishes a remote session with a terminal server. A separate profile for Terminal Services sessions should be assigned to a user because many of the common options that are stored in profiles, such as screen savers and animated menu affects, are not desirable when using Terminal Services.

Event Details

Diagnose

This error might be caused by one of the following conditions:

• The Terminal Services home folder name for a user is incorrect.
• The computer on which the home folder is located is not accessible.
• The user does not have sufficient permissions to the home folder.

The Terminal Services home folder name for a user is incorrect

To determine the Terminal Services home folder name for a user in an Active Directory domain, use Active Directory Users and Computers.

Note:  If the terminal server is not a member of an Active Directory domain, use Local Users and Groups (lusrmgr.msc) to change the Terminal Services profile path on a user account. If you use Local Users and Groups, you must have membership in the local Administrators group on the terminal server, or you must have been delegated the appropriate authority.

To perform this procedure, you must have membership in the Account Operators group in the domain, or you must have been delegated the appropriate authority.

To check the Terminal Services home folder configuration for a user account:

1. Open Active Directory Users and Computers. To open Active Directory Users and Computers, log on to a computer where Active Directory Users and Computers has been installed, click Start, click Run, type dsa.msc, and then click OK.
2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
3. Locate the user account whose profile settings you want to change, right-click the user account, and then click Properties.
4. Click the Terminal Services Profile tab.
5. In Terminal Services Home Folder, if the folder location that is specified is not correct, see the section titled "Specify the correct Terminal Services home folder location."

The computer on which the home folder is located is not accessible

If the Terminal Services home folder is correctly specified, check that the computer on which the home folder is located is accessible from the network.

To determine if there is a network connectivity problem between the terminal server and the home folder server, use the ping command.

Note:  The following procedures include steps for using the ping command to perform troubleshooting. Therefore, before performing these steps, check whether the firewall or Internet Protocol security (IPsec) settings on your network allow Internet Control Message Protocol (ICMP) traffic. ICMP is the TCP/IP protocol that is used by the ping command.

To perform these procedures, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

To determine if there is a network connectivity problem between the terminal server and the home folder server:

1. On the terminal server, click Start, click Run, type cmd, and then click OK.

2. At the command prompt, type ping server_FQDN, where server_FQDN is the fully qualified domain name (FQDN) of the home folder server (for example, server1.contoso.com), and then press ENTER.

   If the ping was successful, you will receive a reply similar to the following:

   Reply from IP_address: bytes=32 time=3ms TTL=59

   Reply from IP_address: bytes=32 time=20ms TTL=59

   Reply from IP_address: bytes=32 time=3ms TTL=59

   Reply from IP_address: bytes=32 time=6ms TTL=59

3. At the command prompt, type ping IP_address, where IP_address is the IP address of the home folder server, and then press ENTER.

If you cannot successfully ping the home folder server by IP address or by FQDN, see the section titled "Identify and fix network connectivity issues."

The user does not have sufficient permissions to the home folder

If the Terminal Services home folder is correctly specified and the computer on which the home folder is located is accessible, check that the user has sufficient permissions to the home folder.

To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

To check the permissions on the home folder:

1. On the computer on which the home folder is located, use Windows Explorer to find the folder location.

2. Right-click the folder, and then click Properties.

3. On the Security tab, click Advanced.

4. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

5. If the Permission column for the user account does not display Full control and the Apply To column does not display This folder, subfolders and files, see the section titled "Assign sufficient permissions to the home folder."

Note: Incorrect share permissions might also be causing this problem. In the user account Properties dialog box, on the Sharing tab, click Advanced Sharing to view the share permissons for the folder. For more information about share and file permissions, in the Advanced Security Settings dialog box, click Managing permission entries.

Resolve

To resolve this issue, use the resolution that corresponds to the cause you identified in the Diagnose section. After performing the resolution, see the Verify section to confirm that the feature is operating properly

Specify the correct Terminal Services home folder location

To resolve this issue, specify the correct Terminal Services home folder location.

Specify the correct Terminal Services home folder location by using Active Directory Users and Computers

Note:  If the terminal server is not a member of an Active Directory domain, use Local Users and Groups (lusrmgr.msc) to change the Terminal Services profile path on a user account. To use Local Users and Groups, you must have membership in the local Administrators group on the terminal server, or you must have been delegated the appropriate authority.

To perform this procedure, you must have membership in the Account Operators group in the domain, or you must have been delegated the appropriate authority.

To specify the correct Terminal Services home folder location:

1. Open Active Directory Users and Computers. To open Active Directory Users and Computers, log on to a computer where Active Directory Users and Computers has been installed, click Start, click Run, type dsa.msc, and then click OK.
2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
3. Locate the user account whose profile settings you want to change, right-click the user account, and then click Properties.
4. Click the Terminal Services Profile tab.
5. In the Terminal Services Home Folder box, change the folder location, click Apply, and then click OK.

Note:  You can also specify the Terminal Services home folder location by using Group Policy.

• To specify the Terminal Services home folder for a user by using Group Policy, enable the Set TS User Home Directory Group Policy setting. This Group Policy setting is located in Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Terminal Server\Profiles. Note that the Group Policy setting will take precedence over the setting configured on the user's account.
• To configure the Group Policy setting in Active Directory Domain Services (AD DS), use the Group Policy Management Console (GPMC). To configure the Group Policy setting locally on a terminal server, use the Local Group Policy Editor. For more information about configuring Group Policy settings, see either the Local Group Policy Editor Help (https://go.microsoft.com/fwlink/?LinkId=101633) or the GPMC Help (https://go.microsoft.com/fwlink/?LinkId=101634) in the Windows Server 2008 Technical Library.

Identify and fix network connectivity issues

To resolve this issue, identify and fix any network connectivity problems between the terminal server and the computer on which the home folder is located.

Note:  The following procedures include steps for using the ping command to perform troubleshooting. Therefore, before performing these steps, check whether the firewall or Internet Protocol security (IPsec) settings on your network allow Internet Control Message Protocol (ICMP) traffic. ICMP is the TCP/IP protocol that is used by the ping command.

To perform these procedures, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

If you can successfully ping the home folder server by IP address, but not by FQDN, this indicates a possible issue with DNS host name resolution.

If you cannot successfully ping the home folder server by IP address, this indicates a possible issue with network connectivity, firewall configuration, or IPsec configuration.

The following are some additional troubleshooting steps that you can perform to help identify the root cause of the problem:

• Ping other computers on the network to help determine the extent of the network connectivity issue.
• If you can ping other servers but not the home folder server, try to ping the home folder server from another computer. If you cannot ping the home folder server from any computer, first ensure that the home folder server is running. If the home folder server is running, check the network settings on the home folder server.
• Check the TCP/IP settings on the local computer by doing the following:
  1. Click Start, click Run, type cmd, and then click OK.
  2. At the command prompt, type ipconfig /all, and then press ENTER. Make sure that the information listed is correct.
  3. Type ping localhost to verify that TCP/IP is installed and correctly configured on the local computer. If the ping is unsuccessful, this may indicate a corrupt TCP/IP stack or a problem with your network adapter.
  4. Type ping IP_address, where IP_address is the IP address assigned to the computer. If you can ping the localhost address but not the local address, there may be an issue with the routing table or with the network adapter driver.
  5. Type ping DNS_server, where DNS_server is the IP address assigned to the DNS server. If there is more than one DNS server on your network, you should ping each one. If you cannot ping the DNS servers, this indicates a potential problem with the DNS servers, or with the network between the computer and the DNS servers.
  6. If the home folder server is on a different subnet, try to ping the default gateway. If you cannot ping the default gateway, this might indicate a problem with the network adapter, the router or gateway device, cabling, or other connectivity hardware.
• In Device Manager, check the status of the network adapter. To open Device Manager, click Start, click Run, type devmgmt.msc, and then click OK.
• Check network connectivity indicator lights on the computer and at the hub or router. Check network cabling.
• Check firewall settings by using the Windows Firewall with Advanced Security snap-in.
• Check IPsec settings by using the IP Security Policy Management snap-in.

Assign sufficient permissions to the home folder

To resolve this issue, assign the appropriate permissions to the home folder.

To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority.

To assign permissions to the home folder:

1. On the computer on which the home folder is located, use Windows Explorer to find the folder location.

2. Right-click the folder, and then click Properties.

3. On the Security tab, click Advanced.

4. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

5. Click either Add or Edit to change the permissions. The user account must have Full control permissions, and those permissions must apply to This folder, subfolders and files.

   Note:  The share permissions might also need to be changed. To change the share permissons for the folder, in the user account Properties dialog box, on the Sharing tab, click Advanced Sharing. For more information about share and file permissions, in the Advanced Security Settings dialog box, click Managing permission entries.

Verify

To verify that the configuration for a user's Terminal Services session is working properly, establish a remote session with the terminal server and check that the user’s desktop and other settings (for example, menus or home folder) are configured as expected.

Related Management Information

Terminal Services User Configuration

Terminal Services