Windows - education / school -- mandatory user can't run Foldit

Case number:845829-993267
Topic:Crash/Hang
Opened by:DMahalko
Status:Open
Type:Bug
Opened on:Wednesday, August 1, 2012 - 14:05
Last modified:Thursday, August 2, 2012 - 17:48

Environment:

Windows 2008 R2 Active Directory domain, school district network, with roaming profiles and other managed user accounts.

Foldit Problem:

FoldIt will not run on a Windows "mandatory user profile". This is a user profile that will be removed at logoff and is temporary in nature.

Microsoft documentation:

Creating a roaming or mandatory profile:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/lsm_profile_roaming.mspx?mfr=true

================

Foldit log:

args passed:
'C:\Users\student\Documents\foldit\Foldit.exe'
'-dynamic'
Can't open options file options.txt. (..\..\..\rosetta_source\src\interactive\application\Application.cc:77)
core.init: Mini-Rosetta version 49440M from https://svn.rosettacommons.org/source/branches/mini-interactive-main/rosetta_source
core.init: command: C:\Users\student\Documents\foldit\Foldit.exe -database cmp-database-f8e2849dd8fb7589266fa139195d64af/rosetta_database -resources cmp-resources-1b38a6973c80aef2c033b845c0465b0d/resources -interactive_game novice -boinc_url https://fold.it/
core.init: FATAL: CryptAcquireContext unable to acquire cryptographic provider!
core.init: 80090024

==================

Error code 80090024 research:

http://www.derkeiler.com/Newsgroups/microsoft.public.platformsdk.security/2003-12/0349.html

The CryptAcquireContext API always fails when logged on as the Guest
account and the GetLastError shows 0x80090024 which means
NTE_TEMPORARY_PROFILE (The profile for the user is a temporary profile).
You can reference Q265357 about this and I have included an excerpt
from the article:
This error also occurs if the user is a member of the Guests or Domain
Guests group, but this is by design. Certificates and the associated
private keys are
stored in a secured location in the user's profile. If the user is a member
of the Guests or Domain Guests groups, then the system marks the profile as
temporary which means it will be deleted when the user logs off. Windows
2000 will not allow you to save a private key to a temporary profile
because it will not persist from logon session to logon session.

Here is the link for Q265357:
http://support.microsoft.com/default.aspx?kbid=265357

============================

I have no idea if this is fixable.

Does the user absolutely need a private encryption key to use FoldIt?

(Wed, 08/01/2012 - 14:05  |  2 comments)


tamirh's picture
User offline. Last seen 6 years 26 weeks ago. Offline
Joined: 05/11/2012

looking into this

tamirh's picture
User offline. Last seen 6 years 26 weeks ago. Offline
Joined: 05/11/2012
Status: Open » Open

Tested the fix on a guest account, looks like everything is working. This should go out in the next devprev.

Sitemap

Developed by: UW Center for Game Science, UW Institute for Protein Design, Northeastern University, Vanderbilt University Meiler Lab, UC Davis
Supported by: DARPA, NSF, NIH, HHMI, Amazon, Microsoft, Adobe, RosettaCommons