Re: User Profiles

I loaded the NTUSER.DAT file into the registry and changed the permissions of
the new hive to allow the domain user. but the user still doesn't get the
background or a few other things like he still doesn't have permission to
read the key. I followed the instruction on the links you provided. still no
dice.

any other suggestions?

Thank You.
Shane Smith

"Oli Restorick [MVP]" wrote:

Hi there

In addition to the NTFS file permissions on the profile directories, there
are permissions contained in the registry hive stored in ntuser.dat (which
becomes HKEY_CURRENT_USER when the user logs in).

The reason that placing the users in the "domain admins" group works is
placing a user in domain admins makes them a local administrator of the
machine they are logging in to, and so they then have permission to the
registry keys.

The following articles describe how to update the permissions.

How to Update Permissions for User Profiles
http://support.microsoft.com/kb/156697/en-us

New User Accounts May Not Be Permitted to Use User Profiles
http://support.microsoft.com/kb/197006/en-us

Although these articles describe the behaviour in Windows NT 4, they are
still relevant. The only different is that for Windows XP or later,
regedit.exe and regedt32.exe are the same tool, and the permissions command
has moved to the edit menu.

Hope this helps

Oli



"Shane Smith" <Shane Smith@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BAC952AE-9E48-4B84-89B8-33A6067456A5@xxxxxxxxxxxxxxxx
I am trying to migrate my current workgroup network to a Windows Server
2003
domain, but I want to keep the local user profiles and copy them for the
domain user profile. After I copy the local profile to the domain users
profile and set the permissions for the domain user with full access and
has
ownership of that folder, I am having a problem where the domain user
can't
load any of the settings when they log in (ex. No outlook settings,
background picture, start menu settings). UNLESS they are apart of the
Domain Admins user group, then they are able to load everything and it
works
like a charm. I would rather not have them in the domain Admins group.

Is there something in the Group Policy that I need to change?

If you have any ideas on how to fix this it would be great.

email. cheese@xxxxxxxxxxxxxxxxxx



.

Relevant Pages

  • Re: SHAREPOINT AND RWW ISSUES
    ... In WSS 2.0, when you create a Domain User account, the server adds it to SharePoint with 'Web Designer' rights. ... If you want to see or change these permissions for this group, go to 'Site Settings' / 'Go to Site Administration' / 'Manage Site Groups', click on 'Web Designer and then select 'Edit Site Group Permissions' ...
    (microsoft.public.windows.server.sbs)
  • Re: Adding PC to Domain. What really happens
    ... your domain user may have rights that your workgroup user ... * PLEASE post all messages and replies in the newsgroups ... > Registry, files, permissions, local GPO's. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Default domain permissions
    ... BTW - the user account in question is a member of domain users ONLY. ... >> Checking everyone group and domain user group permissions on ... >> I have searched high and low for what the default domain user ... > Visit Topic URL to contact author (reg. ...
    (microsoft.public.win2000.security)
  • Re: slow iis 6.0 performance
    ... Where could I get a list of permissions that I need to set? ... done this is setup the domain user account on the DC. ... permissions required on the local web server? ... this user must have some priviliges such as for schannel. ...
    (microsoft.public.inetserver.iis)
  • RE: help! report users permission on a SQL 2000 server
    ... If a domain user belongs to a domain user group, ... it possible to find if this user get permissions to execute a stored ... > Microsoft highly recommends that users with Internet access update their ...
    (microsoft.public.sqlserver.security)