Re: Roaming Profile permissions

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thanks for the info Todd. It looks like the link you sent me uses the same
exact permissions as the document I was using so I may still be in trouble.

I understand the OS will create the user "sub-folders", but won't they just
inherit the NTFS permissions from the root folder (ie. d:\profiles). If that
is correct, then do you normally just use the default NTFS permissions?

Thanks again for your time on this.

"Todd J Heron" wrote:

> User Data and Settings Management white paper:
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/management/user01.mspx#EKAA
>
> 1. Create a shared directory on the server. Make the physical folder
> something like D:\Profiles and share it as Profiles$. The $ symbol
> appended to the name hides it from the Network Places browse list.
> 2. Configure Share permissions on the share for Full Control to all users
> that will be storing their profiles.
> 3. You will not have to create the users profile directories, the OS will do
> this the first time they log in. The OS will also set the appropriate
> permissions.
> 4. Set the Profile path to \\servername\Profiles$\%username% on the profile
> tab of the user. Don't forget the $ if you included it in the share name.
> 5. The user logs in and creates the path and permissions, the user logs out
> and the local profile gets copied to the network profile path.
>
> --
> Todd J Heron, MCSE
> Windows Server 2003/2000/NT; CCA
> ----------------------------------------------------------------------------
> This posting is provided "as is" with no warranties and confers no rights
>
>
.

Relevant Pages

  • Re: windows 2000 domain rebuilt, how to keep local user profiles?
    ... ** How do I link an existing local user profile with a new domain ... SID that belongs to this profile ... Use the following commands to correct the permissions for the old user ...
    (microsoft.public.win2000.active_directory)
  • Re: Local permissions for roaming profile to work
    ... I set up the share for the profiles and shared it as "roaming$" and followed ... size of the whol folder was given as zero. ... I will check the permissions you listed but could you tell me if the ... > client workstation for roaming profile. ...
    (microsoft.public.windows.server.sbs)
  • Re: Encoder.PrepareToEncode gives Unspecified Error
    ... Inbuilt User "Network Service" added to administrators group on the server ... Service) has limited permissions to access files. ... more line for log to know the executing user and it is "Network Servicces". ... Create instance of profile ...
    (microsoft.public.windowsmedia.encoder)
  • RE: Please help, used folder redirection, now roaming profiles won
    ... I denied users to there own profile. ... all the permission entries apart from the user and administrator" What about ... permissions overwrite allowed permissions so by adding the deny ... Profiles folder permissions: shared - everyone full control, ...
    (microsoft.public.windows.server.sbs)
  • Re: More before-the-fact advice for 2K and XP?
    ... long-term with a profile without execute granted, ... we can consider changing these in a login script. ... if you can script the permissions change in a login ... >> You're interested in using NTFS file ACLs and GP ACL templates to ...
    (microsoft.public.security)