Re: Same Profile for More than One Network User on Same Machine?

From: Phillip Windell (_at_.)
Date: 08/02/04 

Date: Mon, 2 Aug 2004 14:10:13 -0500

I think storing the files on a centralized location on the hard-drive
instead of in the user's profile is the best bet, as I mentioned in the
other post. Dividing different files into different subfolders will allow
varying permissions to be given to them easily. 

-- 
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
"Ken Dibble" <balderdash@spongemop.com> wrote in message
news:pf3tg0thens797t54t5iidinubv8djsjet@4ax.com...
> For reasons I stated in the other thread--that is, that in the current
> situation changes to documents and data in one user's profile won't be
> transmitted to the same documents or data in the other profiles--I'm
> giving up on this.
>
> And as you note, this wouldn't work anyway unless everybody's an
> Administrator.
>
> FWIW, I did try to change the Permitted to Use value, without success.
>
> I'll just give the people who have to use Joe's machine Joe's
> password, and have Joe change it when he comes back.
>
> Thanks for all your help.
>
> Ken
>
> On Thu, 29 Jul 2004 22:07:43 -0400, "Doug Sherman [MVP]"
> <dsherman@nospam.tampabay.rr.com> wrote:
>
> >When you are dealing with profiles for members of the local users group
> >(this includes the domain users group), copying and renaming through
Windows
> >Explorer will not give the target user all the source user's settings
unless
> >they are also a member of the built-in administrators group.  You should
be
> >able to do this successfully with the copy profile tool in My Computer
> >Properties provided you use the 'Permitted to use' button to change
> >permissions.  Did you change permissions when you used the tool to copy
> >Joe's profile?
> >
> >Dopug Sherman
> >MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
> >"Ken Dibble" <balderdash@spongemop.com> wrote in message
> >news:gt2ig0hudvkhof51hkr1ne76ipcqurvimp@4ax.com...
> >> Joe and Mary are both members of NT Server Domain Users
> >> NT Server Domain Users is a member of NT Server Users
> >>
> >> On the Win2k box, no groups have been added to the Administrators or
> >> Power Users group. Joe has a local restricted user account on this box
> >> but does not use it; he logs on to the domain exclusively. My goal is
> >> for Mary to log on the same way and get the same profile.
> >>
> >> I've tried this several different ways now, starting from scratch
> >> (having deleted any changes from previous attempts) each time:
> >>
> >> 1. Log on with my Domain Administrator account, use the Network ID
> >> Wizard to connect to the domain and add Mary as a restricted user
> >> without first creating a local user account for Mary. Reboot. Log on
> >> as Mary to get a profile, log on as Administrator, copy Joe's profile
> >> to Mary via the User Profiles tab in My Computer->Properties, log on
> >> as Mary and expect to see all Joe's stuff. No joy.
> >>
> >> 2. Log on with my Domain Administrator account, create a local
> >> restricted user account for Mary, then use the Network ID Wizard to
> >> connect to the domain and add Mary as a restricted user. Reboot. Log
> >> on as Mary to get a profile, log on as Administrator, copy Joe's
> >> profile to Mary via the User Profiles tab in My Computer->Properties,
> >> log on as Mary and expect to see all Joe's stuff. No joy.
> >>
> >> 3. Log on as Mary without first having created either a local or
> >> network user account for Mary. This creates a profile for Mary. Log on
> >> with my Domain Administrator account, copy Joe's profile to Mary via
> >> the User Profiles tab in My Computer->Properties, log on as Mary and
> >> expect to see all Joe's stuff. No joy.
> >>
> >> 4. Log on with my Domain Administrator account, don't create any new
> >> users, copy Joe's profile to %SYSTEMROOT%\Documents and
> >> Settings\Default Users via the User Profiles tab in My
> >> Computer->Properties, log on as Mary and expect to see all Joe's
> >> stuff. No joy.
> >>
> >> 5. Log on with my Domain Administrator account, don't create any new
> >> users, use Windows Explorer to manually create a copy of Joe's profile
> >> in C:\Documents and Settings and rename it "Mary". Log on as Mary and
> >> expect to see all Joe's stuff. No joy.
> >>
> >> In all cases, I can get out to the network as Mary but don't get a
> >> complete copy of Joe's desktop or access to his local resources. Not
> >> only doesn't stuff that's in Joe's StartUp folder run, the antivirus
> >> software that's installed as a global service won't even run
> >> automatically when I log in as Mary. I can start it from the Start
> >> Menu but it won't run automatically the next time I log into her
> >> account.
> >>
> >> I'm about out of time for messing with this even as an educational
> >> exercise, and I'm about to reach the conclusion that this thing just
> >> doesn't work as advertised. If you have any more thoughts, though,
> >> I'll try to make good use of them.
> >>
> >> Thanks very much again for your help.
> >>
> >> Ken
> >>
> >> On Wed, 28 Jul 2004 21:59:51 -0400, "Doug Sherman [MVP]"
> >> <dsherman@nospam.tampabay.rr.com> wrote:
> >>
> >> >Is Joe a member of a global or local group in the domain which has
been
> >> >added to the the Win2k machine's built-in Administrators or Power
Users
> >> >group?
> >> >
> >> >Doug Sherman
> >> >MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
> >> >
> >> >"Ken Dibble" <balderdash@spongemop.com> wrote in message
> >> >news:3khgg0lsi21aigji1ri6qfap1g1imur4fp@4ax.com...
> >> >> Thanks for replying.
> >> >>
> >> >> Nope, Joe is a restricted user. All of the resources that Mary needs
> >> >> to access but can't are on the local machine.
> >> >>
> >> >> Ken
> >> >>
> >> >> On Wed, 28 Jul 2004 12:00:12 -0400, "Doug Sherman [MVP]"
> >> >> <dsherman@nospam.tampabay.rr.com> wrote:
> >> >>
> >> >> >If you create Mary's domain user account by copying Joe's domain
user
> >> >> >account, she should have the same access to network resources that
he
> >> >does.
> >> >> >With respect to rights to local resources on the Win2k workstation,
it
> >> >may
> >> >> >be that Joe's domain user account is a member of the machine's
> >lbuilt-in
> >> >> >adminstrators group and Mary's isn't?
> >> >> >
> >> >> >Doug Sherman
> >> >> >MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
> >> >> >
> >> >> >"Ken Dibble" <balderdash@spongemop.com> wrote in message
> >> >> >news:3hhfg0t30juhqkrvblknq4hftajtpijstq@4ax.com...
> >> >> >> I've looked at all the current postings on profiles in this group
> >and
> >> >> >> none seems to address my particular problem:
> >> >> >>
> >> >> >> Windows NT Server  (with SP 6a) domain network and a Win 2000 SP3
> >> >> >> workstation.
> >> >> >>
> >> >> >> We don't use roaming profiles and I'm not trying to create one.
> >> >> >>
> >> >> >> I have a restricted user network domain login account called
"Joe"
> >set
> >> >> >> up on the Win 2000 box. I have set up another network domain
login
> >> >> >> account "Mary" in NT Server to log in to this box. When Mary logs
> >in,
> >> >> >> I want her to get Joe's profile.
> >> >> >>
> >> >> >> None of the stuff I've seen about this actually works as I
expect. I
> >> >> >> can login to the box as Mary and get a new profile for her. I can
> >then
> >> >> >> log in as Administrator and copy Joe's profile to Mary's profile.
> >> >> >> However, when I then login as Mary, I only get some aspects of
Joe's
> >> >> >> profile--that is, the desktop is mostly, but not completely, the
> >same;
> >> >> >> programs set to run on startup for Joe do not run for Mary, and
Mary
> >> >> >> gets various "access denied" messages when trying to access
> >resources
> >> >> >> that Joe can get to with no problem.
> >> >> >>
> >> >> >> Now, I know the simplest solution would just be to let Mary have
> >Joe's
> >> >> >> login and password. The real-world situation is that "Joe" is
going
> >> >> >> out on extended leave and "Mary" will be taking over some of
"Joe's"
> >> >> >> duties during that leave. When "Joe" returns he could just change
> >his
> >> >> >> password. And if there isn't a relatively quick and simple
alternate
> >> >> >> solution, that's what I'll end up doing.
> >> >> >>
> >> >> >> I realize there may be some complex and time-consuming hack to
> >achieve
> >> >> >> this. I also realize that I could spend a lot of time simply
logging
> >> >> >> in as Mary and recreating everything Joe has by hand. I'm looking
> >for
> >> >> >> a quick and simple solution--one that doesn't take much more time
> >than
> >> >> >> it would take me to give Joe's password to Mary. I'm just hoping
I'm
> >> >> >> missing something simple here.
> >> >> >>
> >> >> >> Thanks in advance for any help.
> >> >> >>
> >> >> >> Ken Dibble
> >> >> >> Southern Tier Independence Center
> >> >> >>
> >> >> >
> >> >>
> >> >
> >>
> >
>