Re: User Profiles

Hi there

In addition to the NTFS file permissions on the profile directories, there
are permissions contained in the registry hive stored in ntuser.dat (which
becomes HKEY_CURRENT_USER when the user logs in).

The reason that placing the users in the "domain admins" group works is
placing a user in domain admins makes them a local administrator of the
machine they are logging in to, and so they then have permission to the
registry keys.

The following articles describe how to update the permissions.

How to Update Permissions for User Profiles
http://support.microsoft.com/kb/156697/en-us

New User Accounts May Not Be Permitted to Use User Profiles
http://support.microsoft.com/kb/197006/en-us

Although these articles describe the behaviour in Windows NT 4, they are
still relevant. The only different is that for Windows XP or later,
regedit.exe and regedt32.exe are the same tool, and the permissions command
has moved to the edit menu.

Hope this helps

Oli



"Shane Smith" <Shane Smith@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BAC952AE-9E48-4B84-89B8-33A6067456A5@xxxxxxxxxxxxxxxx
I am trying to migrate my current workgroup network to a Windows Server
2003
domain, but I want to keep the local user profiles and copy them for the
domain user profile. After I copy the local profile to the domain users
profile and set the permissions for the domain user with full access and
has
ownership of that folder, I am having a problem where the domain user
can't
load any of the settings when they log in (ex. No outlook settings,
background picture, start menu settings). UNLESS they are apart of the
Domain Admins user group, then they are able to load everything and it
works
like a charm. I would rather not have them in the domain Admins group.

Is there something in the Group Policy that I need to change?

If you have any ideas on how to fix this it would be great.

email. cheese@xxxxxxxxxxxxxxxxxx


.

Relevant Pages

  • Re: Would like to lockdown public computer
    ... not have access to any shares for share permissions or ntfs permissions. ... Learn to use Group Policy. ... protect the cmos settings as it is easy to reboot a computer from a floppy ... the mandatory profile on the local computer and then have the users account ...
    (microsoft.public.win2000.security)
  • Re: Roaming Profile stopped working
    ... Permissions are OK - I can log onto any other PC, save a file on the desktop ... anything to the profile but it can read it OK. ... in application settings or local settings since I have copied all files ... check the NTFS permissions on your own user folder ...
    (microsoft.public.windows.server.general)
  • Re: windows 2000 domain rebuilt, how to keep local user profiles?
    ... ** How do I link an existing local user profile with a new domain ... SID that belongs to this profile ... Use the following commands to correct the permissions for the old user ...
    (microsoft.public.win2000.active_directory)
  • Re: Local permissions for roaming profile to work
    ... I set up the share for the profiles and shared it as "roaming$" and followed ... size of the whol folder was given as zero. ... I will check the permissions you listed but could you tell me if the ... > client workstation for roaming profile. ...
    (microsoft.public.windows.server.sbs)
  • Re: Encoder.PrepareToEncode gives Unspecified Error
    ... Inbuilt User "Network Service" added to administrators group on the server ... Service) has limited permissions to access files. ... more line for log to know the executing user and it is "Network Servicces". ... Create instance of profile ...
    (microsoft.public.windowsmedia.encoder)