Roaming profiles do not save when rebooting
3 years ago
Originally Published: 2000-07-07
Article Number
000052946
Applies To
RSA ACE/Agent for Windows
Microsoft Windows NT 4.0
Network Access Protection (NAP)
Sub-Auth Protection (same as Network Access Protection)
Issue
Roaming profiles do not save when rebooting
When performing a shutdown or reboot, a user with a roaming profile on an NT domain protected by NAP (Sub-Auth) may be unable to save changes made to the roaming profile.
Cause
On the Windows NT logout routine, the network connections  allow ACE/Agent to open a secure connection to exchange certificates, thus allowing the roaming profile to save.

When performing a shutdown or restart, Windows NT does not allow such connections to be opened. After the shutdown procedure issues a stop to network services, no additional network connections can take place.  If the roaming profile save does not occur before this, it will not be saved.  

This by no means occurs on ALL domains. If  the profile save request is issued BEFORE the network services are brought down, the save will occur normally.

This occurs in all versions of ACE/Agent using NAP.
Resolution
Use the NT logout routine instead of a shutdown or a reboot.