1. Corrupted user profile registry entry (most common culprit)
Every time you see error 0X00000A3B, nine times out of ten it's a messed-up SID in the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList. This happens a lot when you sysprep a machine that had a domain user logged in, or after a failed profile migration. The corrupted entry makes Windows think the profile record is unreadable.
Fix: Delete the broken profile entry and recreate
- Boot into Safe Mode with Networking (press F8 at startup, or hold Shift while clicking Restart).
- Open Regedit and navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList - Look for a subkey with a long SID that ends in
.bakor has a weirdStatevalue of0or2. The corrupted ones often show aStateof0but still have aProfileImagePathpointing to the user's folder. - Delete that subkey completely. Yes, the whole thing. Back it up first if you're nervous — right-click, Export.
- Reboot normally. When you log in, Windows will create a fresh profile. You'll lose the old desktop/start menu settings, but the data in C:\Users\OldUsername is still there — copy it over manually.
Real-world trigger: You sysprepped a Windows 10 22H2 image that had a domain user profile cached. After deployment, the domain user logs in for the first time and gets this error. The registry still holds the old SID from the reference machine.
2. Corrupted NTUSER.DAT or profile folder
Sometimes it's not the registry — the actual profile files went bad. This happens when the disk has bad sectors, an abrupt shutdown during profile save, or a roaming profile didn't sync properly. The error still shows the same code, but the registry looks clean.
Fix: Rename or rebuild the profile folder
- Log in as a local admin (built-in Administrator account works best).
- Go to
C:\Users. Find the user's folder — it's usually the one with the username from the error. - Rename it to something like
OldUsername.bak. Don't delete it — you'll want to grab data later. - Open Regedit again, go to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList. - Find the SID for that user (match it by the
ProfileImagePathvalue). SetStateto0andRefCountto0. - Reboot and have the user log in. Windows creates a clean profile folder from scratch.
If that doesn't work, delete the SID key entirely (like in fix #1) and let Windows regenerate everything. You'll need to copy data from the .bak folder afterward.
3. Roaming profile path mismatch (domain environments)
On domain-joined machines, if the user's roaming profile path in AD points to a network share that no longer exists — or the share is inaccessible — Windows throws this error. The local profile record looks fine, but the sync fails.
Fix: Clear the roaming profile path temporarily
- Log in as a domain admin on a separate machine or use AD Users and Computers.
- Find the user object, open Properties, go to the Profile tab.
- Clear the Profile path field — just delete it, don't leave a blank space.
- Have the user log in locally. The error should go away. You can set the roaming path back after you verify the network share is alive and permissions are correct.
- If you can't do that remotely, boot the affected machine into Safe Mode, log in as local admin, and use
regeditto delete theProfilePathvalue under the user's SID inProfileList. Warning: This only removes it locally — AD still has the path. You'll need to fix AD later.
Quick-reference summary table
| Cause | Fix | Difficulty |
|---|---|---|
| Corrupted registry SID entry | Delete the SID key in ProfileList, reboot, let Windows recreate the profile | Intermediate |
| Corrupted NTUSER.DAT or profile folder | Rename the user folder, reset registry State/RefCount to 0, reboot | Intermediate |
| Roaming profile path mismatch | Clear the AD profile path or local ProfilePath value, verify network share | Advanced |
Skip trying to run sfc /scannow or DISM — those rarely fix profile corruption. The culprit is almost always the registry or the profile folder itself. Do the registry delete first, you'll save hours.