Re: Roaming Profile / Outlook Issues

"Chris Boczko"

| When we migrated from our old domain to a new domain, we removed domain
| admin privileges from all of the users. We didn't delete the
| profiles, We copied and the change the  permissions changed to reflect
| the new SID's and change in domain, So we have the new user accounts,

 Beware that there is ACL inside the registry itself.
That is even _inside_ ntuser.dat for instance.

| on the new domain, created by ldif export from the old domain, meaning
| no copying of account details, and different SIDs, all file permmssion
| had to be reset mannually
|
| On old accounts (pre-migratioon) Microsoft outlook will not start,
| without local (not domain) admin privileges. On a new account

 I guess this is because of permission on the file system.
(old account is no more "domain user")

| (post-migration) it works fine without admin rights, and if I delete
| the profile on a old account and recreate it, it loads outlook fine.

That proves that the Outlook installation is fine and the file system 
permission are fine too.

| But I don't really want to have to delete and recreate everyone's
| roaming profile, if I can find away around it, just to give you an idea
| we are talking 700+

 Beware : the roaming profile include the HKCU for that user (the 
ntusers.dat file).
It holds ACLs for the old domain.

  _INSIDE_ the file.

Perhaps you can try to add permission for the new account with regedt32.
 (I wonder how tolerant Windows is if you include too much priviledge inside 
the user registry... It should include System, Administrators and the user 
itself.)

| Outlook gives the error when starting, "Cannot start Microsoft
| Outlook"...Very helpful, it gives the same error when starting in
| safe mode (outlook.exe /safemode).
|
| >From the above I have figured it to be in the profile. I have tried a
| few things to get it working without deleting the profile, but with no
| avail, After enabling tons of file system auditing on the server, I
| cannot see anything, no failed audits are coming up. I have tried to
| run sysinternals filemon, but it seems to need admin rights, and the
| software works with admin rights, so that wont tell me anything....

 You should try to use "Regmon" as well - or instead.

I offer you this trick : Hold the "Shift+Ctrl" and right click on the 
Regmon.exe.
You will be offered in the menu the "Run as ..." option.
There, you will supply credentials for a administrator account.

 That way, you will be able to run "Regmon" while in a "normal" user session 
!

| I have reinstalled, office, reformated the machine
|
| The permissions on the office folders are as follows

(Irrelevant I guess, as Outlook works correctly with a new profile.)

| I hope this all makes sense, and any help would be greatly apreachated

 Please tell us about your progress !

--Richard. 


.

Relevant Pages

  • Re: 1 of 4 users has a locked desktop Addl Info
    ... "Chris" to an Admin account. ... Then I logged out of Chris, switched to my profile as Admin, changed his ...
    (microsoft.public.windowsxp.general)
  • Re: 1 of 4 users has a locked desktop Addl Info
    ... do it while logged in as "Chris" or do I do it from my Admin account/profile? ... Then I logged out of Chris, switched to my profile as Admin, changed his ... account back to Limited, ...
    (microsoft.public.windowsxp.general)
  • Re: group policies 2003 sbs
    ... privlages to change (Domain admin). ... As I understand it this will create a new computer account on ... create new domain user profile. ... and went to profiles tab. ...
    (microsoft.public.windows.server.sbs)
  • Re: How do I get rid of startup screen of User names? SP2 seems to ha
    ... under a GUEST or someone else, rather then the ADMIN user name (which ... put shortcuts into the "All Users" profile, ... tab, under "Advanced user management" click the Advanced button, click ... Check the "Member of" tab to see that your account has Admin ...
    (microsoft.public.windowsxp.general)
  • Re: Windows XP Admin
    ... Sorry to hear of your loss, Peter and can understand your pain. ... As the System Admin account is simply that. ... How to Copy or Remove a User Profile ...
    (microsoft.public.windowsxp.general)
Loading