RE: active directory migration

Hello,

Thanks for posting in our newsgroup.

I am sorry for the delay response.

From your description, I know that migrated from SBS 2000 to 2003, users
cannot access the roaming profile. If I am off base, please don't hesitate
to let me know.

Based on my research, the problem may be related to roaming profile
permission. I'd like to give you the following suggestions:

Please check the following:

Roaming Profile Share and NTFS Permissions:
------------------------------------------------------------------------
a. The Share permissions (Sharing Tab): Share Named: <PROFILE>$
Administrators: Full Control
System: Full Control
Authenticated Users: Full Control
Everyone: Full Control
b. Offline file caching of the <Profile> share needs to be turned off. On
the Sharing Tab, click on the "Offline Settings", then select "Files or
programs from
the share will not be available offline".Click OK
c. NTFS Folder Permissions (Security Tab): Turn off inheritance on the
Folder named <PROFILE>, and copy the permissions. (Uncheck "Allow
inheritable permissions
to propagate to this object")
Administrators: Full Control
System: Full Control
Creator Owner: Full Control
Authenticated Users: Modify,Read & Execute, List Folder Contents, Read,
Write
d. On the NTFS Folder Permissions Click the Advanced Button. Then highlight
Authenticated Users, Select View/Edit
e. Click Advanced, on the Permissions Entry for <PROFILE>, the "Apply onto"
change to: "This folder only"
f. Click OK
g. Click OK again.

Then, please test the roaming profile feature again and let me know the
outcome.

More information:

How to dynamically create security-enhanced redirected folders by using
folder redirection in Windows 2000 and in Windows Server 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;274443

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<From: ryan@xxxxxxxxxxxxxxxxx
<Newsgroups: microsoft.public.windows.server.sbs
<Subject: active directory migration
<Date: Sun, 10 Jun 2007 13:57:55 -0700
<Organization: http://groups.google.com
<Lines: 9
<Message-ID: <1181509075.790482.88630@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
<NNTP-Posting-Host: 204.15.27.124
<Mime-Version: 1.0
<Content-Type: text/plain; charset="iso-8859-1"
<X-Trace: posting.google.com 1181509075 23103 127.0.0.1 (10 Jun 2007
20:57:55 GMT)
<X-Complaints-To: groups-abuse@xxxxxxxxxx
<NNTP-Posting-Date: Sun, 10 Jun 2007 20:57:55 +0000 (UTC)
<User-Agent: G2/1.0
<X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US;
rv:1.8.1.4) Gecko/20070515 Firefox/2.0.0.4,gzip(gfe),gzip(gfe)
<Complaints-To: groups-abuse@xxxxxxxxxx
<Injection-Info: q75g2000hsh.googlegroups.com; posting-host=204.15.27.124;
< posting-account=XUGNeA0AAAB2ZK-wafte-kwKzrom1f3n
<Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!news-out.
cwix.com!newsfeed.cwix.com!newscon02.news.prodigy.net!prodigy.net!border1.nn
tp.dca.giganews.com!nntp.giganews.com!postnews.google.com!q75g2000hsh.google
groups.com!not-for-mail
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:42981
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<I have used admt to migrate from sbs 2000 to 2k3. Everything is
<running correctly except, when users login to the new domain they get
<an error that they can't access their roaming profile. When I map
<their files/folders to a drive on a workstation and try to access a
<user's files that got moved over from the old server I get an error
<that I don't have permission to access their files. I have checked
<permissions on each users directory and they have full control. Is
<there a step in admt that I missed?
<
<

.