+ Post New Thread
Results 1 to 5 of 5
Network and Classroom Management Thread, Profile & User folders permisions in Technical; Hi all, ok, I have a question. I run a windows 2003 server with Ranger. I have a seperate profiles ...
  1. #1

    Join Date
    Jun 2007
    Location
    Barnehurst
    Posts
    157
    Thank Post
    3
    Thanked 2 Times in 2 Posts
    Rep Power
    15

    Profile & User folders permisions

    Hi all, ok, I have a question.

    I run a windows 2003 server with Ranger.

    I have a seperate profiles folder to the home user folders.

    so the make up will be:

    'Profiles' folder. shared with all student profiles in it.

    'Users' folder which consist of year group folders ie. 'year08', then their user area folders ie. '08BloggsJ'

    What I need help on is setting the correct permissions, as Im sure ours are all messed up.

    In the permissions on the root profiles folder for example are the following:

    Domain Administrators: Full Control
    Domain Administrator: Full Control
    Everyone: Read & Execute
    Creater Owner: Full Control
    System: Full Control
    Domain Users: Read & Execute
    Domain Users: Special

    What are yours? How should they be.

    At the mo Im getting users logging off their machines & the Windows msg that the machine cant write profile back to the server.

  2. #2

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,069
    Thank Post
    210
    Thanked 430 Times in 310 Posts
    Rep Power
    144
    Normally the root of the profiles share I have Domain Users: read/write. The reason for that is the users profile is automatically generated when the user logs on for the first time, so the user needs write permissions to the root of the profile share to create the directory and save the profile back to the server correctly.

    Profiles are still safe as windows sets each users folder so only the user (and administrator if you have the right GPO setting) can access them, so if a user did stray across the share the only profile they could access would be their own.

    Mike.

  3. Thanks to maniac from:

    speckytecky (9th September 2008)

  4. #3


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    If you have writable/ non mandatory profiles, why don'y you put them inside the users home directory?

  5. #4

    Join Date
    Jun 2007
    Location
    Barnehurst
    Posts
    157
    Thank Post
    3
    Thanked 2 Times in 2 Posts
    Rep Power
    15
    Space mate. Profiles on a different drive.

  6. #5

    teejay's Avatar
    Join Date
    Apr 2008
    Posts
    3,187
    Thank Post
    285
    Thanked 775 Times in 585 Posts
    Rep Power
    336
    The special on Domain Users should be set to Create Folder/ Append data set on the root folder only. This enables the folder to be created for their profile and then Creator Owner permissions gives them full access to their folder.
    The usual problem is if the owner of the folder or files gets changed, eg an admin user does fiddling and ends up taking ownership. n that case reset the owner on the folder and files to the owner of the profile.

SHARE:
+ Post New Thread

Similar Threads

  1. Default user profile question..Help
    By ranj in forum Windows
    Replies: 2
    Last Post: 19th May 2008, 01:20 PM
  2. Replies: 11
    Last Post: 1st November 2007, 08:02 PM
  3. Replies: 0
    Last Post: 20th August 2007, 02:20 PM
  4. Profile Corrupt: User Cannot Logon
    By DaveP in forum Wireless Networks
    Replies: 4
    Last Post: 12th December 2006, 09:59 PM
  5. User profile deletion, XP Pro
    By Sirbendy in forum Windows
    Replies: 7
    Last Post: 16th January 2006, 05:00 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •