Computing.Net > Forums > Windows Server 2003 > Weird Roaming Profile Permissions

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

Weird Roaming Profile Permissions

Reply to Message Icon

Name: Peter (by peterjm)
Date: May 25, 2007 at 09:22:06 Pacific
OS: W2k3 Server SP2
CPU/Ram: 3.2 GHZ 2.5 GB Ram
Comment:

Im having a weird problem with my Roaming Profile's. The folder/share is set with what I beleive to be proper permissions and works fine as long as the account is NOT in the Domain Admins group. As soon as I add the user to this group, new folders can be created in the root profiles folder, but nothing is ever uploaded inside of the folder when the user logs off. There are no deny permissions set for the Domain Admins group.

Ive had this working previously with what I beleive to be the exact same setup, which is what puzzles me.

Its setup like this:
T:\Profiles (shared as Profiles$)
The share has full rights assigned to a group I made for profiles, there are no other rights to the share.

NTFS Permissions:
Creator Owner: Full Control, Subfolders and Files Only

Administrators: Ive tried experimenting with this access set and not set as full.

Profiles Group: List Folder/Read Data, Create Folders/Append Data - This Folder Only (Which is the only thing it seems to be doing when the user is part of the Domain Admins group)

System: Full Control, This Folder, Subfolders and Files

I notice that when I have a member as a Domain Admin group, the owner of the folder shows up as Administrators instead of their name. I thought this might be a problem with MS kb/222043 (The "Add the Administrators security group to roaming user profiles" GP) so I tried enabling this and also tried changing the owner after the folder had been created. Same results. Im pretty stumped, any ideas?

Thanks!



Sponsored Link
Ads by Google

Response Number 1
Name: rename
Date: May 25, 2007 at 13:13:28 Pacific
Reply:

How about if you create a fresh user and make him a member of Domain Admin, and log in for the first time. Maybe the existing users are already have the folders created for their own and that makes a conflict.



0

Response Number 2
Name: Peter (by peterjm)
Date: May 25, 2007 at 15:28:44 Pacific
Reply:

I have another test user. Each time I make a change and perform a test, I restart the client WS, login locally and delete the cached profile. I also Delete the Profile directory on the server and start from scratch. When member of the Domain Admins group, new folders can be created in the root profiles folder, but nothing is ever uploaded inside of the folder when the user logs off. If I then remove the test user from the Domain Admins group and perform another test, it works. Its got to be something with the Domain Admins group... A few things I didnt mention are the Client ws im testing this from is Win XP SP2, and the server has barely had any configuration done to it (fresh install Enterprise 2k3 and patched to SP2) If I create the profile before adding the user to the Domain Admins group, Restart the client ws and delete the local copy, Add the test user to the Domain Admins group and then try logging into the client ws with the account, it pulls down the profile, its just it wont save any changes to it (almost as though its treating the client ws as a server ws.)

Thanks to any ideas anyone... much appreciated!


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


SBS 2003 Licencing MAC 2GB limt on Win2003 f...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Server 2003 Forum Home


Sponsored links

Ads by Google


Results for: Weird Roaming Profile Permissions

Roaming Profiles on 2003 not updati www.computing.net/answers/windows-2003/roaming-profiles-on-2003-not-updati/5125.html

Roaming Profiles - help please www.computing.net/answers/windows-2003/roaming-profiles-help-please/6111.html

Roaming profiles www.computing.net/answers/windows-2003/roaming-profiles/1903.html