Re: mydocuments missing after logff logon sbs2003 win xp

Hello Laurin,

Thank you for your update.

I'm glad we resolved the My Documents missing issue.

For the roaming profile folder permission issue, I suggest we try the
following steps:

1. Create a shared folder with the permission as following:

Roaming Profile Share and NTFS Permissions:
------------------------------------------------------------------------
a. The Share permissions (Sharing Tab): Share Named: <PROFILE>$
Administrators: Full Control
System: Full Control
Authenticated Users: Full Control

b. Offline file caching of the <Profile> share needs to be turned off. On
the
Sharing Tab, click on the "Offline Settings", then select "Files or
programs from
the share will not be available offline".
Click OK

c. NTFS Folder Permissions (Security Tab): Turn off inheritance on the
Folder
named <PROFILE>, and copy the permissions. (Uncheck "Allow inheritable
permissions
to propagate to this object")
Administrators: Full Control
System: Full Control
Creator Owner: Full Control
Authenticated Users: Modify,Read & Execute, List Folder Contents, Read,
Write

d. On the NTFS Folder Permissions Click the Advanced Button. Then highlight
Authenticated Users, Select View/Edit

e. On the Permissions Entry for <PROFILE>, the "Apply onto" change to:
"This
folder only"

f. Click OK

g. Click OK again.
----------------------------------------------------------------------------
-----

2. Create each subfolder for every user account.

3. On the administrator subfolder properties window, on the security tab,
ensure only "Domain Admins", "SBS Folder Operators" and "SYSTEM" in the
list, and all have Full Control permission.

4. On the other users' subfolders properties window, on the security tab,
ensure only "Domain Admins", "SBS Folder Operators" and "SYSTEM" in the
list, and all have Full Control permission. Meanwhile, the user account of
this folder also in the list, and have Full Control permission.

Then, the domain users unable to access administrator's roaming profile
folder, and the domain users can only access it own roaming profile folder.

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Newsgroups: microsoft.public.windows.server.sbs
| From: v-terliu@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
| Organization: Microsoft
| Date: Tue, 25 Sep 2007 07:36:29 GMT
| Subject: Re: mydocuments missing after logff logon sbs2003 win xp
| X-Tomcat-NG: microsoft.public.windows.server.sbs
| MIME-Version: 1.0
| Content-Type: text/plain
| Content-Transfer-Encoding: 7bit
|
| No my Document problems have appeared as of late, So I am pretty sure we
| are all set. I am going to need to play with the permissions, because
| domain users, are still able to open administrator files, if they know
how
| to traverse the network via UNC.
|
| Anyways thanks again for the help.
|
| Laurin
|

.

Loading