New user gets event 1509 after deploying IE9/10/11 through SCCM




Let’s suppose you are trying to distribute IE9/10/11 via SCCM, you will probably receive a “The User Profile Service service failed the logon” error message as described in KB947215 if you try to logon Windows with a normal user account for the first time. Meanwhile, you will see event ID 1509. Please refer to the below pictures.






Actually, this problem may happen in all situations if you run the IE installation package under SYSTEM account as what SCCM does, instead of running the installation package with an interactive user.


How does it happen?


As described in the details of event 1509, the user cannot logon because copying file iesqmdata_setup0.sqm fails from C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM to %USERPROFILE%\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM. If you check the permission of this file, you will know only SYSTEM or Administrators have permission on this file, the normal user account doesn’t have permission to copy it.




As we know, C:\Users\Default is the template user profile folder, everything under this folder and its subfolders will be copied to the new user profile folder when you try to logon a new user. If the copying fails, definitely the user cannot logon successfully.


Now, how is this iesqmdata_setup0.sqm file created?


When you try to install IE9/10/11 via IEAK, it will try to create the %USERPROFILE%\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup#.sqm file and upload to SQM server( If the uploading succeeds, it will be deleted automatically; Otherwise, the file will be kept in the C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM folder.


The *.sqm file is created because of CEIP(aka Microsoft Customer Experience Improvement Program). Please note there are several Experience Improvement Programs in Windows (one for Windows, one for Windows Live, one for Office and one for Windows Media Player and perhaps more. Internet Explorer uses your Windows CEIP setting, which is enabled by default.


How to resolve it?

We’ve understood how this problem happens, here comes the solutions of this problem. To resolve the problem, there are 3 options.


Option 1

Delete or grant everyone read permission on this file after installation. You may create a VBS file with the following lines to delete the file.


strFile = "c:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup0.sqm"

Set objFSO = CreateObject("Scripting.FileSystemObject")


If you are using SCCM to deploy IE, you may refer to the “Scenario 2 : Internet explorer 9 Post install hotfix” section of the below article to resolve the issue.


Option 2

Set “HKLM\Registry\Machine\Software\Microsoft\SQMClient\Windows\CEIPEnable” to 0 to disable Windows CEIP before installing IE. For more options to disable CEIP, please refer to


Option 3

Make the computer internet access to SQM server:




ZhiXing Lv from GBSD DSI Team

Comments (8)
  1. Takacsi says:

    Thank you! In my case the Visual Studio 2013 did something similar.

  2. Dave says:

    Thanks for the article this SAVED me!  I used option 1 to fix the computers that were broken and then I used the following group policy instead of a registry edit to implement option #2 prior to deployment for all remaining computers:

    Computer Configuration > Policies > Administrative Templates > System > Internet Communication Management > Internet Communication Settings > Turn off Windows Customer Experience Improvement Program = Enabled

  3. Jack says:

    I am a computer tech for a Texas state agency. We recently pushed IE 11 through LANDesk; Not SCCM.

    Many of out users that login to a workstation that they do not already have a profile on, is getting the message "The User Profile Service failed the logon. User profile cannot be loaded."

    The iesqmdata_setup0.sqm file does not exist on the workstation.

    What else can be causing the the problem?

  4. George says:

    If you log into the machine with an already existing profile make sure you have show hidden files on and hide protected operating system files off, otherwise you won't be able to see the iesqmdata_setup0.sqm file in the default profile.

  5. Jason says:

    If we remotely deploy the software using the administrator credentials instead of using system will this make it work properly?

  6. Philip says:

    Thank you!  We were just prepping to roll out IE11 across 3000 devices, when one of our test devices started displaying this behavior.

  7. Denis says:

    I use option #2, simple to change.

    Thank you so much !

  8. Jeremy says:

    Thank you for this post!

    In my case, it permits me to solve the "Profile Service" service problem after the deployment of IE10 (made bu IEAK) throughout GPO.

Comments are closed.

Skip to main content