Re: Same Profile for More than One Network User on Same Machine?
From: Ken Dibble (balderdash_at_spongemop.com)
Date: 07/29/04
- Next message: Paul King: "Re: Unable to View Local Network Connection Properties"
- Previous message: Ray: "Unable to View Local Network Connection Properties"
- In reply to: Doug Sherman [MVP]: "Re: Same Profile for More than One Network User on Same Machine?"
- Next in thread: Doug Sherman [MVP]: "Re: Same Profile for More than One Network User on Same Machine?"
- Reply: Doug Sherman [MVP]: "Re: Same Profile for More than One Network User on Same Machine?"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 29 Jul 2004 11:05:52 -0400
Joe and Mary are both members of NT Server Domain Users
NT Server Domain Users is a member of NT Server Users
On the Win2k box, no groups have been added to the Administrators or
Power Users group. Joe has a local restricted user account on this box
but does not use it; he logs on to the domain exclusively. My goal is
for Mary to log on the same way and get the same profile.
I've tried this several different ways now, starting from scratch
(having deleted any changes from previous attempts) each time:
1. Log on with my Domain Administrator account, use the Network ID
Wizard to connect to the domain and add Mary as a restricted user
without first creating a local user account for Mary. Reboot. Log on
as Mary to get a profile, log on as Administrator, copy Joe's profile
to Mary via the User Profiles tab in My Computer->Properties, log on
as Mary and expect to see all Joe's stuff. No joy.
2. Log on with my Domain Administrator account, create a local
restricted user account for Mary, then use the Network ID Wizard to
connect to the domain and add Mary as a restricted user. Reboot. Log
on as Mary to get a profile, log on as Administrator, copy Joe's
profile to Mary via the User Profiles tab in My Computer->Properties,
log on as Mary and expect to see all Joe's stuff. No joy.
3. Log on as Mary without first having created either a local or
network user account for Mary. This creates a profile for Mary. Log on
with my Domain Administrator account, copy Joe's profile to Mary via
the User Profiles tab in My Computer->Properties, log on as Mary and
expect to see all Joe's stuff. No joy.
4. Log on with my Domain Administrator account, don't create any new
users, copy Joe's profile to %SYSTEMROOT%\Documents and
Settings\Default Users via the User Profiles tab in My
Computer->Properties, log on as Mary and expect to see all Joe's
stuff. No joy.
5. Log on with my Domain Administrator account, don't create any new
users, use Windows Explorer to manually create a copy of Joe's profile
in C:\Documents and Settings and rename it "Mary". Log on as Mary and
expect to see all Joe's stuff. No joy.
In all cases, I can get out to the network as Mary but don't get a
complete copy of Joe's desktop or access to his local resources. Not
only doesn't stuff that's in Joe's StartUp folder run, the antivirus
software that's installed as a global service won't even run
automatically when I log in as Mary. I can start it from the Start
Menu but it won't run automatically the next time I log into her
account.
I'm about out of time for messing with this even as an educational
exercise, and I'm about to reach the conclusion that this thing just
doesn't work as advertised. If you have any more thoughts, though,
I'll try to make good use of them.
Thanks very much again for your help.
Ken
On Wed, 28 Jul 2004 21:59:51 -0400, "Doug Sherman [MVP]"
<dsherman@nospam.tampabay.rr.com> wrote:
>Is Joe a member of a global or local group in the domain which has been
>added to the the Win2k machine's built-in Administrators or Power Users
>group?
>
>Doug Sherman
>MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>
>"Ken Dibble" <balderdash@spongemop.com> wrote in message
>news:3khgg0lsi21aigji1ri6qfap1g1imur4fp@4ax.com...
>> Thanks for replying.
>>
>> Nope, Joe is a restricted user. All of the resources that Mary needs
>> to access but can't are on the local machine.
>>
>> Ken
>>
>> On Wed, 28 Jul 2004 12:00:12 -0400, "Doug Sherman [MVP]"
>> <dsherman@nospam.tampabay.rr.com> wrote:
>>
>> >If you create Mary's domain user account by copying Joe's domain user
>> >account, she should have the same access to network resources that he
>does.
>> >With respect to rights to local resources on the Win2k workstation, it
>may
>> >be that Joe's domain user account is a member of the machine's lbuilt-in
>> >adminstrators group and Mary's isn't?
>> >
>> >Doug Sherman
>> >MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>> >
>> >"Ken Dibble" <balderdash@spongemop.com> wrote in message
>> >news:3hhfg0t30juhqkrvblknq4hftajtpijstq@4ax.com...
>> >> I've looked at all the current postings on profiles in this group and
>> >> none seems to address my particular problem:
>> >>
>> >> Windows NT Server (with SP 6a) domain network and a Win 2000 SP3
>> >> workstation.
>> >>
>> >> We don't use roaming profiles and I'm not trying to create one.
>> >>
>> >> I have a restricted user network domain login account called "Joe" set
>> >> up on the Win 2000 box. I have set up another network domain login
>> >> account "Mary" in NT Server to log in to this box. When Mary logs in,
>> >> I want her to get Joe's profile.
>> >>
>> >> None of the stuff I've seen about this actually works as I expect. I
>> >> can login to the box as Mary and get a new profile for her. I can then
>> >> log in as Administrator and copy Joe's profile to Mary's profile.
>> >> However, when I then login as Mary, I only get some aspects of Joe's
>> >> profile--that is, the desktop is mostly, but not completely, the same;
>> >> programs set to run on startup for Joe do not run for Mary, and Mary
>> >> gets various "access denied" messages when trying to access resources
>> >> that Joe can get to with no problem.
>> >>
>> >> Now, I know the simplest solution would just be to let Mary have Joe's
>> >> login and password. The real-world situation is that "Joe" is going
>> >> out on extended leave and "Mary" will be taking over some of "Joe's"
>> >> duties during that leave. When "Joe" returns he could just change his
>> >> password. And if there isn't a relatively quick and simple alternate
>> >> solution, that's what I'll end up doing.
>> >>
>> >> I realize there may be some complex and time-consuming hack to achieve
>> >> this. I also realize that I could spend a lot of time simply logging
>> >> in as Mary and recreating everything Joe has by hand. I'm looking for
>> >> a quick and simple solution--one that doesn't take much more time than
>> >> it would take me to give Joe's password to Mary. I'm just hoping I'm
>> >> missing something simple here.
>> >>
>> >> Thanks in advance for any help.
>> >>
>> >> Ken Dibble
>> >> Southern Tier Independence Center
>> >>
>> >
>>
>
- Next message: Paul King: "Re: Unable to View Local Network Connection Properties"
- Previous message: Ray: "Unable to View Local Network Connection Properties"
- In reply to: Doug Sherman [MVP]: "Re: Same Profile for More than One Network User on Same Machine?"
- Next in thread: Doug Sherman [MVP]: "Re: Same Profile for More than One Network User on Same Machine?"
- Reply: Doug Sherman [MVP]: "Re: Same Profile for More than One Network User on Same Machine?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
