Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Im having a weird problem with my Roaming Profile's. The folder/share is set with what I beleive to be proper permissions and works fine as long as the account is NOT in the Domain Admins group. As soon as I add the user to this group, new folders can be created in the root profiles folder, but nothing is ever uploaded inside of the folder when the user logs off. There are no deny permissions set for the Domain Admins group.
Ive had this working previously with what I beleive to be the exact same setup, which is what puzzles me.
Its setup like this:
T:\Profiles (shared as Profiles$)
The share has full rights assigned to a group I made for profiles, there are no other rights to the share.NTFS Permissions:
Creator Owner: Full Control, Subfolders and Files Only
Administrators: Ive tried experimenting with this access set and not set as full.
Profiles Group: List Folder/Read Data, Create Folders/Append Data - This Folder Only (Which is the only thing it seems to be doing when the user is part of the Domain Admins group)System: Full Control, This Folder, Subfolders and Files
I notice that when I have a member as a Domain Admin group, the owner of the folder shows up as Administrators instead of their name. I thought this might be a problem with MS kb/222043 (The "Add the Administrators security group to roaming user profiles" GP) so I tried enabling this and also tried changing the owner after the folder had been created. Same results. Im pretty stumped, any ideas?
Thanks!

How about if you create a fresh user and make him a member of Domain Admin, and log in for the first time. Maybe the existing users are already have the folders created for their own and that makes a conflict.

I have another test user. Each time I make a change and perform a test, I restart the client WS, login locally and delete the cached profile. I also Delete the Profile directory on the server and start from scratch. When member of the Domain Admins group, new folders can be created in the root profiles folder, but nothing is ever uploaded inside of the folder when the user logs off. If I then remove the test user from the Domain Admins group and perform another test, it works. Its got to be something with the Domain Admins group... A few things I didnt mention are the Client ws im testing this from is Win XP SP2, and the server has barely had any configuration done to it (fresh install Enterprise 2k3 and patched to SP2) If I create the profile before adding the user to the Domain Admins group, Restart the client ws and delete the local copy, Add the test user to the Domain Admins group and then try logging into the client ws with the account, it pulls down the profile, its just it wont save any changes to it (almost as though its treating the client ws as a server ws.)
Thanks to any ideas anyone... much appreciated!

![]() |
SBS 2003 Licencing
|
MAC 2GB limt on Win2003 f...
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |