Hi all, we are currently setting up a Windows based pool for our university. We are using Samba 3.0.6 as PDC (we have to log on using existing unix accounts) and store the domain's profiles on a Win2K3 server. Everything works out nicely so far with one exception: I can't seem to be able to create a user that has permission to view or modify all profile directories (say, a domain administrator). I do have users in the Domain Admins group which do have full access to install soft- and hardware and to modify system settings. However, attempts to view, edit or delete profile directories always end up with a "Access Dendied" message, even when being logged in locally. It also doesn't matter wether I am local dministrator or not. Even leaving the domain and trying from a local Administrator account didn't have any effect. Also my attempts to change the ownership rights from the administrator accounts didn't provide any solution so far: only access denied messages. This is no acceptable condition. Does anyone have a idea about how to get around this problem? Kind regards, Alexander Stockinger

There is a policy (GPO) that you can set that controls the permissions. When the user profile is created (at first log on), the permissions are set. If you turn this policy on, it allows administrators access to the profiles. If not they are under ownership of the specific user and to delete or view them, the administrator has to "take ownership" before they can use them.