Re: cant modify a users profile path

See? Even I skipped steps. :p

-Cliff


"Lanwench [MVP - Exchange]" <lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:#UH#V1rGJHA.3928@xxxxxxxxxxxxxxxxxxxxxxx
Cliff Galiher <cgaliher@xxxxxxxxx> wrote:
Right-click->properties

In the properties is the security tab. Just one minor step got
skipped.
-Cliff

Actually, you can't see that tab unless you open ADUC and click "view advanced options."


"Johnfli" <john@xxxxxxx> wrote in message
news:e8iNoKqGJHA.1432@xxxxxxxxxxxxxxxxxxxxxxx
I do not see a "Security Option" when I r-click on teh user, or any
user. The options I have are: "Copy, add to group, disable account,
reset password, move, exchange tasks, open home page, send mail,
cut, delete, renam, properties, help."


"Miles Li [MSFT]" <v-mileli@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:QAcH$MXGJHA.1652@xxxxxxxxxxxxxxxxxxxxxxxxx
Hello John,

Thank you for posting here.

According to your description, I understand that:

You have two specific user account in the SBS domain that you cannot
change
the profile path, address, telephone and other attributes.

If I have misunderstood the problem, please don't hesitate to let me
know.

Suggestions:
================
First, please try to verify the permission on those two specific
user account. When the administrator isn't granted proper
permission on reading
the attribute on the user account, the textbox will grayed out. You
can check the effective permission on the user account with the
following steps:

1. In the ADUC, right-click the problematic user
account--->Security tab. 2. Click Advanced button--->Effective Permissions tab--->select
button . 3. Search that administrator account to list its effective
permissions. 4. Check whether the administrator account have the full control
permission. (by default the administrator has the full control
permission)

If the administrator doesn't have the full control permission on
the user account (such as not granted permission to read the
profilePath attribute),
you should make sure there is not any DENY access control entry
(ACE) in the access control list (ACL) on the user account. If
there hasn't a DENY ACE, please manually add a ACE to grant
administrator account Full control
permission. Then check how it works in the ADUC.

If the issue persists, you may export the effective permissions on
the problematic user account and send to me at
v-mileli@xxxxxxxxxxxxxx To export the permission:

1. Install the Windows Server 2003 Support tools on the SBS server.
2. In the command prompt, run:

Dsacls cn=account_name,cn=users,dc=sbs,dc=local >>permissions.txt

3. Collect the permissions.txt and send to me.
Hope this helps. Also, if you have any questions or concerns,
please do not
hesitate to let me know.



Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your
newsreader so that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.



.

Quantcast