RE: Local permissions for roaming profile to work



Hello Theo,

Thank you for posting to the SBS Newsgroup.

I understand that you want to know what permissions should be set on the
client workstation for roaming profile. If I have misunderstood your
concern, please let me know.

Actually, we do not need to set any permission for it. Please see:

For example, if the user name is aaa.

1. Open My Computer, go to %system root%\Documents and Settings. Right
click the aaa folder, select Properties, and go to Security tab. By
default, the permissions are:

Administrators: Full Control
aaa: Full Control
SYSTEM: Full Control

[Note]: No Any Deny box being checked.


Click Advanced, Permissions tab, highlight each of the Permission entries
and click Edit to make sure:

a. They have Full Control permission.

b. Apply Onto: This Folder, subfolders and files

c. No Any Deny box being checked.

2. Right click My Computer, select Manager, and expand to Computer
Management (Local) \Local Users and Groups\Groups. On the right pane,
double click Users to check whether there is anything being changed.

3. From your post, I wonder whether the roaming file work well on your side
now. If you have any concern or questions on it, please feel free to let me
know.

For your additional information:

How to configure a user account to use a roaming user profile in Windows
Server 2003, Windows 2000 Server, or Windows NT 4.0
http://support.microsoft.com/?id=316353

Thanks for your time! If anything is unclear, please feel free to let me
know. I am looking forward to your reply!


Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>From: "Theo" <theo@xxxxxxxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Local permissions for roaming profile to work
>Date: Thu, 25 Aug 2005 17:03:10 +0100
>Lines: 7
>Message-ID: <dekq3v$2lh$1$8302bc10@xxxxxxxxxxxxxxxx>
>NNTP-Posting-Host: mitw2.demon.co.uk
>X-Trace: news.demon.co.uk 1124985791 2737 80.177.98.243 (25 Aug 2005
16:03:11 GMT)
>X-Complaints-To: abuse@xxxxxxxxx
>NNTP-Posting-Date: Thu, 25 Aug 2005 16:03:11 +0000 (UTC)
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>X-Priority: 3
>X-RFC2646: Format=Flowed; Original
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-MSMail-Priority: Normal
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!newsfe
ed01.sul.t-online.de!t-online.de!news.germany.com!ecngs!feeder.ecngs.de!195.
40.0.165.MISMATCH!easynet-monga!easynet.net!xara.net!gxn.net!194.159.246.34.
MISMATCH!peer-uk.news.demon.net!kibo.news.demon.net!news.demon.co.uk!demon!n
ot-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147786
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Hi
>What permissions does the user need on the local machine for roaming
>profiles to work? Must the user be a local admininistrator or will power
>user suffice?
>Theo
>
>
>

.



Relevant Pages

  • RE: Roaming Profiles
    ... when you set the roaming profile of the user ... Roaming Profile Permissions Not Inherited on Server ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Constant w3wp.exe and webengine.dll errors
    ... Grant NETWORK SERVICE the necessary permissions to access the ... the permissions on the registry key may be reset. ... To grant NETWORK SERVICE the necessary permissions to access the ASP.NET ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Access denied message even with the Administrator user
    ... > 1> Check the permissions settings in ADSI Edit. ... > the full content of the output to the Newsgroup: ... you may want to contact Microsoft CSS directly. ... >>Edhy Rijo ...
    (microsoft.public.windows.server.sbs)
  • RE: Since SP1 install auto backup failing
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... >> permissions are changed in Windows Server 2003 SP1. ... >> registry and then restarting the DCOM process that you want to examine. ...
    (microsoft.public.windows.server.sbs)
  • RE: 401.3 Unauthorized: Unauthorized due to ACL on resource
    ... applied the SBS Server SP1? ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... |> permissions from parent to propagate to this object check box. ...
    (microsoft.public.windows.server.sbs)