Microsoft KB Archive/938117

= You cannot intermittently download roaming profiles on a Windows XP-based wireless computer =

Article ID: 938117

Article Last Modified on 6/27/2007

-

APPLIES TO


 * Microsoft Windows XP Professional
 * Microsoft Windows XP Home Edition

-



SYMPTOMS
You are using a Microsoft Windows XP-based wireless computer. The computer uses one of the following authentication methods:
 * Extensible Authentication Protocol-Transport Layer Security (EAP-TLS)
 * Protected Extensible Authentication Protocol-Transport Layer Security (PEAP-TLS) for 802.1X authentication

Additionally, the user reauthentication option is enabled in the remote access policy.

After you restart the computer, you cannot intermittently download the roaming profiles. However, when you log off and then log on the computer, you can successfully download the roaming profiles.



CAUSE
This problem occurs because EAP-TLS and PEAP-TLS use a client certificate to validate the network connection. The roaming profiles that contain the certificate are stored on a domain controller. When you try to download the roaming profiles after you restart the computer, Windows XP also tries to reauthenticate the user. User reauthentication times out before you can download the roaming profiles.



WORKAROUND
To work around this issue, use one of the following methods:
 * Use computer-only authentication.
 * Reduce the size of the roaming profile. Then, you can finish downloading the roaming profiles before user reauthentication times out.

Keywords: kbexpertiseinter kbtshoot kbprb KB938117

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.