Re: roaming profile on XP workstation

From: Steven Umbach (n9rou_at_n0spam-comcast.net)
Date: 07/08/04


Date: Thu, 08 Jul 2004 04:46:29 GMT

You may need to take ownership first by selecting properties/security/advanced
ownership and change ownership to administrators being sure to select the box to
apply to all child objects. Then you should be able to go into
properties/security and give administrators full control. Then you should be
able to delete the profile unless corruption is involved and then sometimes
using something like fileacl can force necessary changes that may not propagate
through Windows Explorer gui. --- Steve

"Gavin" <gavin.phillips@nospam.com> wrote in message
news:u2Nm6%23$YEHA.2908@TK2MSFTNGP10.phx.gbl...
> Good morning.
>
> I've bee messing around with a test user account this morning...I cant get
> it to error, so i believe it must be a corrupt profile effecting the others.
>
> I created a new folder and gave admin and the user permission and set this
> folder as the profile, this has worked :o) The user now has a nice new
> profile.
>
> For some reason (the way the server was set up... cant seem to get infor
> from anyone who was here when it was done) I cant delete the old user
> profiles, i get a message telling me it may be in use. This is only a small
> problem, more of an annoyance i suppose. Any suggestions?
>
> Anyhow, thanks for your help Steven.
>
> Gavin
>
>
>
>
>
> "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> news:5KBGc.32793$a24.28233@attbi_s03...
> > The link below may help. Make sure that the user for the problem profile
> has full or
> > modify permissions to their folder and that the administrators group is
> owner as
> > shown in the security/advanced/ownership page. If that does not help, copy
> the users
> > current profile to a different location in case you need data from it, and
> then
> > delete it. Create a new folder making sure that the administrators group
> is the owner
> > and have the user try to logon again. The Group Policy setting you
> enabled may help
> > if the user is within the scope of influence of the policy [such at the
> domain
> > level], but maybe it did not propagate yet.--- Steve
> >
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;327462
> >
> > "PAV" <sc@nospam.com> wrote in message
> news:ccedr5$fae$1@news7.svr.pol.co.uk...
> > > Sorry about posting from two accounts, work and home...
> > >
> > >
> > >
> > > im still in search for the answer... im wondering, is there anyway to
> reset
> > > the profile. Looking on the server, i cant delete the profiles as i
> dont
> > > have permission (another problem ill have to sort - any ideas? I'm
> logged on
> > > as Admin), anyhow if i go in to the properties of the user in active
> > > directory, change the users profile location from
> server\profiles\username
> > > to server\profiles\username2, will this then create a new profile when
> the
> > > user logs on for the first time?
> > >
> > >
> > >
> > > Gavin.
> > >
> > >
> > >
> > > "Gavin" <gavin.phillips@nospam.com> wrote in message
> > > news:OB7JeJ0YEHA.3564@TK2MSFTNGP11.phx.gbl...
> > > > Hello.
> > > >
> > > > I have tried two things today.
> > > >
> > > > 1. i changed the option in admin templates to ' Do not check for user
> > > > ownership of roaming profile folders'
> > > >
> > > > 2. I made it so everyone could vie the users profile, this made no
> > > > difference.
> > > >
> > > > What i have noticed though: When i go right click on a users profile
> > > > folder, and click properties
> > > > , there is a security tap on the top. On all the profiles which are
> > > working
> > > > correctly, if i click this, i get an error, telling me i have to take
> > > > control etc.. but on the profiles that im having problems with, i can
> > > click
> > > > on the security tab and don't get an error.
> > > >
> > > > I would be grateful for any help.
> > > >
> > > > Gavin.
> > > >
> > > > "Steven L Umbach" <n9rou@nscomcast.net> wrote in message
> > > > news:fPmGc.30391$XM6.8330@attbi_s53...
> > > > > Yes. From your description, I assume you are using profile folders
> on a
> > > > > server that is referred to in the users account in Active Directory
> > > Users
> > > > > and Computers. --- Steve
> > > > >
> > > > >
> > > > > "PAV" <sc@nospam.com> wrote in message
> > > > > news:cccj7k$hk4$1@newsg4.svr.pol.co.uk...
> > > > > > When you talk about folders, you are talking about the profile
> folders
> > > > on
> > > > > > the server arnt you? Sorry, i new to all this.
> > > > > >
> > > > > > I have also read something about SP1 having a setting i can
> disable, i
> > > > > will
> > > > > > try this too.
> > > > > >
> > > > > >
> > > > > > "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in
> message
> > > > > > news:_djGc.13302$JR4.4331@attbi_s54...
> > > > > > > I would make sure that the administrators group is the owner of
> the
> > > > > folder
> > > > > > and that
> > > > > > > it propagates to the other folders. The user should have the
> same
> > > > > > permissions as the
> > > > > > > other users have to their folders. I suppose there could be
> > > corruption
> > > > > in
> > > > > > the profile
> > > > > > > folder chain. It the administrator already is the owner, change
> it
> > > to
> > > > > > another owner
> > > > > > > and then after it is done propagating change it back to
> > > administrators
> > > > > or
> > > > > > try a
> > > > > > > command line utility such as fileacl to change ownership and
> > > > > > ermissions. --- Steve
> > > > > > >
> > > > > > > fileacl c:\userfolder /s administrators:f /sub /force -- give
> > > > > > administrators full
> > > > > > > control
> > > > > > > fileacl c:\userfolder /o administrators /sub /force -- make
> > > > > > administrators owner
> > > > > > > fileacl c:\userfolder /s user:rxwd /sub /force -- give user
> modify
> > > > > > permissions
> > > > > > >
> > > > > > > http://membres.lycos.fr/jfb/gb/gbtools/fileacl.htm
> > > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
>
http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&DisplayLang=en
> > > > > > >
> > > > > > > "PAV" <sc@nospam.com> wrote in message
> > > > > > news:ccbt0u$a0g$1@news5.svr.pol.co.uk...
> > > > > > > > I'm currently running Windows 2000 server with XP
> workstations.
> > > > Today
> > > > > I
> > > > > > > > installed XP SP1, now the user of that work station cant log
> on,
> > > > they
> > > > > > get
> > > > > > > > the following error:
> > > > > > > >
> > > > > > > > Windows did not load your roaming profile and is attempting to
> log
> > > > you
> > > > > > on
> > > > > > > > with your local profile. Windows did not load your profile
> because
> > > a
> > > > > > server
> > > > > > > > copy of the profile folder already exists that does not have
> the
> > > > > correct
> > > > > > > > security. Either the current user of Administrator's group
> must be
> > > > the
> > > > > > owner
> > > > > > > > of the folder. Contact you network administrator.
> > > > > > > >
> > > > > > > > The user is also unable to log on to other workstations. I
> and
> > > > other
> > > > > > users
> > > > > > > > can log on ok.
> > > > > > > >
> > > > > > > > According to the person who used to look after IT, there are
> one
> > > or
> > > > > two
> > > > > > > > other users with the same problem.
> > > > > > > >
> > > > > > > > Any ideas or suggestions on how to get this working again?
> > > > > > > >
> > > > > > > > TIA
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: Why Are Domain users in the admin Group.
    ... The local "Administrators" group on the client ... Local Administrators: Full Control ... The Default User folder inherits these permissions and also has the Hidden ... See if resetting these helps restore profile access to limited users. ...
    (microsoft.public.win2000.active_directory)
  • Re: access denied
    ... How to take ownership of a file or folder in Windows XP ... > No matter how much I change the new RAY profile I've ...
    (microsoft.public.security)
  • Re: Terminal Services Profiles problems
    ... hidden administrative share that only administrators can access. ... > a folder on the D: ... > profile, I add the path to this location in the Terminal Services Profile ... I've messed up the security on these folders. ...
    (microsoft.public.windows.server.security)
  • Re: Home Folder Owner
    ... No...The Administrators is listed as Owner. ... ownership of the folder. ... But ownership by WSNTest should happen when the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Profile change
    ... Therefore you need to "take ownership" of that user's folder ... only when following the instructions for this specific problem. ... Do I need to take ownership of both profile folders? ...
    (microsoft.public.windowsxp.help_and_support)