Re: Windows 2003 File Access Problems

Tech-Archive recommends: Speed Up your PC by fixing your registry

Hi Anthony,

all the rights are set up as per the document what we have is a server
\share\folder\user area
when we run the user installation script (we are a colllege so have
4000+ usesr join) we then run a bat file that changes the rights on
the users area folder to that user and local admin f/c with
inheritance. What we are finding is that sometimes when the user 1st
logs in (or just after a profile reset) all folders such as
applications my doc etc are created with the users rights (server\share
\folder\user area\user documents) but the profile folder (server\share
\folder\user area\profile) does not have any rights applied leading to
us having to manually take local ownership of the folder, add in the
correct rights, then return ownership to the user.
There never seems to be any error messages in the event log, i ran
over the weekend a scandisk and this removed all the security rights
to about 100+ users and reset them to administrator and system (folder
only f/c), again the only error message in the scan log was it fixed
30 security descriptors.
There does not seem to be any rhyme nor reason to which student gets
the problem it may just be 1 in a class of 30 or 90% of them. :(
We only use group policy to point where the folder redirection goes ie

Application Datahide
Setting: Basic (Redirect everyone's folder to the same location)hide
Path: \\server\share\user folder\%USERNAME%\Application Data
Optionshide
Grant user exclusive rights to Application Data Disabled
Move the contents of Application Data to the new location Enabled
Policy Removal Behavior Leave contents

Any help clearing this up is appreciated

Phil

On Oct 29, 4:20 pm, "Anthony" <anthony.s...@xxxxxxxxxxxxxx> wrote:
Hi Phil,
Is your profiles folder set up like this:http://technet2.microsoft.com/windowsserver/en/library/20b15453-f7c9-...
Can you describe exactly what happens when it randomly stops working? What
error messages do you get and what is in the Event Log?
Do you have any Group Policies for roaming profiles?
Anthony,http://www.airdesk.co.uk

"Phil" <lo...@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message

news:1193670060.074264.289590@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx



The Profile may be private but for a majority of users nobody gets
rights to the file when it is created not even the creator, whereas
normally the system has been set up so that the local admin and the
owner is added in with full access rights. Why this stops working
randomaly is the main problem.

Cheers :)

On Oct 29, 1:55 pm, "Anthony" <anthony.s...@xxxxxxxxxxxxxx> wrote:
Phil,
That's by design. The profile is intended to be private.
You can set a Group Policy to add Administrators to the list of
permissions,
but it only applies to new profiles.
Anthony,http://www.airdesk.co.uk

"Phil" <lo...@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message

news:1193661485.283580.9210@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Hi Folks,
I am hoping that somebody can help me, we are using roaming profiles
with access rights at the top level of the folder to the user and
administrators, we are finding thou when the users creates the profile
folder for some atrange reason teh rights are not inherited. They are
inherited with the other folders that are created just not with the
profile folder and as you can imagine this is an issue especially as
we have over 4000 users :) any help will be appreciated.

thanks- Hide quoted text -

- Show quoted text -- Hide quoted text -

- Show quoted text -


.

Relevant Pages

  • Re: Windows 2003 File Access Problems
    ... The profile folder is created when the user logs on, ... I would expect no administrator to have access. ... all the rights are set up as per the document what we have is a server ...
    (microsoft.public.windows.server.general)
  • RE: Moving Local Users Profiles from NT domain to a new Win2K3 domain
    ... "newusername" folder after you copy the original profile to new profile. ... You can open the Properties of the folder to check the permissions. ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.windows.server.migration)
  • Re: SBS 2003 folder redirection, offline files, ..and more
    ... you log into a shared PC with admin rights and go to Windows Explorer Folder ... documents are redirected to the server. ... without redirection, they wouldn't have been. ...
    (microsoft.public.windows.server.sbs)
  • RE: Permission Question
    ... The moved file inherits the permission from the parent folder. ... This posting is provided "AS IS" with no warranties,and confers no rights. ... Carlos folder - Full rights to Carlos plus inherit ... Template CK - inherit rights from CPF plus CK has full rights ...
    (microsoft.public.win2000.general)
  • Terminal Services Profiles problems
    ... I'm setting up a few people with rights to access our server via Remote ... have created a folder on the D: ... In each users profile, I add the path to this location in the Terminal ...
    (microsoft.public.windows.server.security)