Re: Roaming Profile directory security ?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Jonte_at_bson.se
Date: 10/18/04 

Date: Mon, 18 Oct 2004 12:04:27 +0200

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:#m6x1$rsEHA.3772@TK2MSFTNGP10.phx.gbl...
> Jonte@bson.se wrote:
> > "Lanwench [MVP - Exchange]"
> > <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in
> > message news:u4O7bRfsEHA.1468@TK2MSFTNGP12.phx.gbl...
> >> Jonte@bson.se wrote:
> >>> We want to move severel home directories and on the home directories
> >>> we also have the users Roaming Profile directory. From the beginning
> >>> the administrator was not able to view the content of the roaming
> >>> profile directory and there fore not able to move them either. After
> >>> taking ownership of the roaming profile directory as an
> >>> administrator the user are not able to read the central profile
> >>> (roaming profile). The user has change rights on the directory.
> >>
> >> They need full control. If you're going to change permissions/take
> >> ownership as Administrators (note - *not* Administrator), you also
> >> need to add in the user with full control & make sure to push the
> >> permissions down through all subfolders.
> >>
> > Full control for the user on the Roaming Profile folder and subfolders
> > doesn't help us. They still can't read/find the central profile when
> > they log on
>
> Who is the owner of the profile folder on the server?
At the moment the user ( I have changed to see if it makes any differnce)
but for the the most the domain group Administrators
> What's the path specified in their profile tab in ADUC? For example,
> \\server\profiles$\%username%? (I like to make it a hidden share, hence I
> use $)
\\tor\chha\RoamingProfile where tor is the server, chha the user login and
RoamingProfile is the roaming profile directory
> What are the share permissions on the PF root share?
On the share \\tor\chha there is every one full control (like most of the
users shares)
>
> >
> > \\Jonas B
> >
> >
> >
> >>> Then I find the article about a policy "Do not check for user
> >>> ownership of Roaming Profile Folders" and tried that one but what I
> >>> can see without success.
> >>> What do I have to to to make it available for the users again ?
> >>> We are running W2k3 Active Directory in interim mode and the clients
> >>> are XP sp1. The file server for the home directories are NT4 Server
> >>> sp6a eng. and we are planning to move them to a Network appliance
> >>> NAS.
> >>>
> >>> I sure could use some help here
> >>>
> >>> Sincerely
> >>>
> >>> \\Jonas B
>
>

Relevant Pages

  • RE: active directory migration
    ... the problem may be related to roaming profile ... Roaming Profile Share and NTFS Permissions: ... Administrators: Full Control ... Modify,Read & Execute, List Folder Contents, Read, ...
    (microsoft.public.windows.server.sbs)
  • Re: a terminal server roaming profile getting an error on 1 out of 3 servers
    ... I did install UPHClean immediately after seeing your link to it, ... > MCSE, CCEA, Microsoft MVP - Terminal Server ... >> I then created a new roaming profile folder and tossed in the ...
    (microsoft.public.windows.terminal_services)
  • REQ Help: Roaming Profile does not stay
    ... When I logon a computer with a new employee's username it used to balk ... didn't recognize the ownership of the roaming profile as the user. ... copied to the server when you logoff. ... "DO NOT CHECK FOR USER OWNERSHIP OF ROAMING PROFILE FOLDER" ...
    (microsoft.public.win2000.general)
  • Re: a terminal server roaming profile getting an error on 1 out of 3 servers
    ... MCSE, CCEA, Microsoft MVP - Terminal Server ... > I then created a new roaming profile folder and tossed in the ... >> Vera Noest ...
    (microsoft.public.windows.terminal_services)
  • Re: Error roaming profile
    ... >>it takes about a minute to logoff. ... >>directory on the server and on it's hard drive. ... >user full control over everything in the roaming profile, ...
    (microsoft.public.win2000.security)