Re: Same Profile for More than One Network User on Same Machine?

From: Ken Dibble (balderdash_at_spongemop.com)
Date: 08/02/04 

Date: Mon, 02 Aug 2004 14:58:00 -0400

For reasons I stated in the other thread--that is, that in the current
situation changes to documents and data in one user's profile won't be
transmitted to the same documents or data in the other profiles--I'm
giving up on this.

And as you note, this wouldn't work anyway unless everybody's an
Administrator.

FWIW, I did try to change the Permitted to Use value, without success.

I'll just give the people who have to use Joe's machine Joe's
password, and have Joe change it when he comes back.

Thanks for all your help.

Ken

On Thu, 29 Jul 2004 22:07:43 -0400, "Doug Sherman [MVP]"
<dsherman@nospam.tampabay.rr.com> wrote:

>When you are dealing with profiles for members of the local users group
>(this includes the domain users group), copying and renaming through Windows
>Explorer will not give the target user all the source user's settings unless
>they are also a member of the built-in administrators group. You should be
>able to do this successfully with the copy profile tool in My Computer
>Properties provided you use the 'Permitted to use' button to change
>permissions. Did you change permissions when you used the tool to copy
>Joe's profile?
>
>Dopug Sherman
>MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>"Ken Dibble" <balderdash@spongemop.com> wrote in message
>news:gt2ig0hudvkhof51hkr1ne76ipcqurvimp@4ax.com...
>> Joe and Mary are both members of NT Server Domain Users
>> NT Server Domain Users is a member of NT Server Users
>>
>> On the Win2k box, no groups have been added to the Administrators or
>> Power Users group. Joe has a local restricted user account on this box
>> but does not use it; he logs on to the domain exclusively. My goal is
>> for Mary to log on the same way and get the same profile.
>>
>> I've tried this several different ways now, starting from scratch
>> (having deleted any changes from previous attempts) each time:
>>
>> 1. Log on with my Domain Administrator account, use the Network ID
>> Wizard to connect to the domain and add Mary as a restricted user
>> without first creating a local user account for Mary. Reboot. Log on
>> as Mary to get a profile, log on as Administrator, copy Joe's profile
>> to Mary via the User Profiles tab in My Computer->Properties, log on
>> as Mary and expect to see all Joe's stuff. No joy.
>>
>> 2. Log on with my Domain Administrator account, create a local
>> restricted user account for Mary, then use the Network ID Wizard to
>> connect to the domain and add Mary as a restricted user. Reboot. Log
>> on as Mary to get a profile, log on as Administrator, copy Joe's
>> profile to Mary via the User Profiles tab in My Computer->Properties,
>> log on as Mary and expect to see all Joe's stuff. No joy.
>>
>> 3. Log on as Mary without first having created either a local or
>> network user account for Mary. This creates a profile for Mary. Log on
>> with my Domain Administrator account, copy Joe's profile to Mary via
>> the User Profiles tab in My Computer->Properties, log on as Mary and
>> expect to see all Joe's stuff. No joy.
>>
>> 4. Log on with my Domain Administrator account, don't create any new
>> users, copy Joe's profile to %SYSTEMROOT%\Documents and
>> Settings\Default Users via the User Profiles tab in My
>> Computer->Properties, log on as Mary and expect to see all Joe's
>> stuff. No joy.
>>
>> 5. Log on with my Domain Administrator account, don't create any new
>> users, use Windows Explorer to manually create a copy of Joe's profile
>> in C:\Documents and Settings and rename it "Mary". Log on as Mary and
>> expect to see all Joe's stuff. No joy.
>>
>> In all cases, I can get out to the network as Mary but don't get a
>> complete copy of Joe's desktop or access to his local resources. Not
>> only doesn't stuff that's in Joe's StartUp folder run, the antivirus
>> software that's installed as a global service won't even run
>> automatically when I log in as Mary. I can start it from the Start
>> Menu but it won't run automatically the next time I log into her
>> account.
>>
>> I'm about out of time for messing with this even as an educational
>> exercise, and I'm about to reach the conclusion that this thing just
>> doesn't work as advertised. If you have any more thoughts, though,
>> I'll try to make good use of them.
>>
>> Thanks very much again for your help.
>>
>> Ken
>>
>> On Wed, 28 Jul 2004 21:59:51 -0400, "Doug Sherman [MVP]"
>> <dsherman@nospam.tampabay.rr.com> wrote:
>>
>> >Is Joe a member of a global or local group in the domain which has been
>> >added to the the Win2k machine's built-in Administrators or Power Users
>> >group?
>> >
>> >Doug Sherman
>> >MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>> >
>> >"Ken Dibble" <balderdash@spongemop.com> wrote in message
>> >news:3khgg0lsi21aigji1ri6qfap1g1imur4fp@4ax.com...
>> >> Thanks for replying.
>> >>
>> >> Nope, Joe is a restricted user. All of the resources that Mary needs
>> >> to access but can't are on the local machine.
>> >>
>> >> Ken
>> >>
>> >> On Wed, 28 Jul 2004 12:00:12 -0400, "Doug Sherman [MVP]"
>> >> <dsherman@nospam.tampabay.rr.com> wrote:
>> >>
>> >> >If you create Mary's domain user account by copying Joe's domain user
>> >> >account, she should have the same access to network resources that he
>> >does.
>> >> >With respect to rights to local resources on the Win2k workstation, it
>> >may
>> >> >be that Joe's domain user account is a member of the machine's
>lbuilt-in
>> >> >adminstrators group and Mary's isn't?
>> >> >
>> >> >Doug Sherman
>> >> >MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>> >> >
>> >> >"Ken Dibble" <balderdash@spongemop.com> wrote in message
>> >> >news:3hhfg0t30juhqkrvblknq4hftajtpijstq@4ax.com...
>> >> >> I've looked at all the current postings on profiles in this group
>and
>> >> >> none seems to address my particular problem:
>> >> >>
>> >> >> Windows NT Server (with SP 6a) domain network and a Win 2000 SP3
>> >> >> workstation.
>> >> >>
>> >> >> We don't use roaming profiles and I'm not trying to create one.
>> >> >>
>> >> >> I have a restricted user network domain login account called "Joe"
>set
>> >> >> up on the Win 2000 box. I have set up another network domain login
>> >> >> account "Mary" in NT Server to log in to this box. When Mary logs
>in,
>> >> >> I want her to get Joe's profile.
>> >> >>
>> >> >> None of the stuff I've seen about this actually works as I expect. I
>> >> >> can login to the box as Mary and get a new profile for her. I can
>then
>> >> >> log in as Administrator and copy Joe's profile to Mary's profile.
>> >> >> However, when I then login as Mary, I only get some aspects of Joe's
>> >> >> profile--that is, the desktop is mostly, but not completely, the
>same;
>> >> >> programs set to run on startup for Joe do not run for Mary, and Mary
>> >> >> gets various "access denied" messages when trying to access
>resources
>> >> >> that Joe can get to with no problem.
>> >> >>
>> >> >> Now, I know the simplest solution would just be to let Mary have
>Joe's
>> >> >> login and password. The real-world situation is that "Joe" is going
>> >> >> out on extended leave and "Mary" will be taking over some of "Joe's"
>> >> >> duties during that leave. When "Joe" returns he could just change
>his
>> >> >> password. And if there isn't a relatively quick and simple alternate
>> >> >> solution, that's what I'll end up doing.
>> >> >>
>> >> >> I realize there may be some complex and time-consuming hack to
>achieve
>> >> >> this. I also realize that I could spend a lot of time simply logging
>> >> >> in as Mary and recreating everything Joe has by hand. I'm looking
>for
>> >> >> a quick and simple solution--one that doesn't take much more time
>than
>> >> >> it would take me to give Joe's password to Mary. I'm just hoping I'm
>> >> >> missing something simple here.
>> >> >>
>> >> >> Thanks in advance for any help.
>> >> >>
>> >> >> Ken Dibble
>> >> >> Southern Tier Independence Center
>> >> >>
>> >> >
>> >>
>> >
>>
>