Mandatory profile issue

[mrbios]

Seem to be having an issue here, i've got the students profile working, they can log on and off happily

But the teachers mandatory profile they can only log on once, once they log off and try again you get the error "User profile service failed the logon, user profile could not be loaded" i can go in as adminstrator to remove the profile manually then it logs them in once again, it seems all the settings are coming accross ok

any ideas what im missing?

EDIT: i didn't explain that very well, too many interruptions, the profiles are exactly the same, i copied the one i made for students to use for the teachers, but one works one doesnt

Same permissions on both (though in completely different locations) straight copy of both folders, i dont get it!

[timzim]

Are teachers all sharing the same profile? Are GPO settings the same for both Students and Teachers? Need more info.

[mrbios]

about 80% of teachers load this same profile, i've gone through group policy and while students and teachers are similar teachers just have less restrictions

[sted]

are your gpos set to remove roaming profiles on logout?

[mrbios]

Ah solved it, ownership on the folder wasn't set to domain\administrators, damn permissions, such fussy things!

[mrbios]

Ok another problem, i can't set DOMAIN\Administrators as the owner, i can set DOMAIN\Domain Admins, or administrator, but not the administrators builtin group, any ideas?

Now it's logging them on all the time, except it's creating a TEMP profile and not picking up all the GPs

[timzim]

Which folder are we talking about? On the server or the workstation?

[mrbios]

On the server,

Studentprofile is on a replicated DFS share which is held on DCs, this works perfectly, has domain\administrators as the owner and kids are logging in and out fine
Teacherprofile is on a non-replicated DFS share which is held on the fileserver, this won't allow me to set domain\adminsitrators as the owner, tells me it doesn't exist, i've tried setting it from different places as well

[timzim]

If it's the server copy of the profile it'll need System:F, Domain Admins:F, Domain Users:RX

[timzim]

Can you not shove the teacher profile on the same DFS share as the pupil profile?

[mrbios]

Can you not shove the teacher profile on the same DFS share as the pupil profile?

Well that's one way to do it but for now im going to keep that as a last resort if i can't fix it any other way though

[mrbios]

If i set the ownership back to FS1\Administrators (FS1 being the file server it's on) the profile loads properly but goes back to only working once then failing the logon every other time

If i set the owner to Domain Admins then the profile loads properly so long as domain users have FULL access rights

If i set the owner to Domain Admins with the access rights set to read and execute for domain users the profile fails to load properly

[mrbios]

Moved the profile to the same folder as the student one and it works, so i know it's definately down to that one permission setting, just need to know how to set DOMAIN\Administrators as the owner of a folder on something other than a DC and i'll be all sorted!!!!

[timzim]

If the server is a member server and you're logged on as a member of Domain Admins you should be able to do this. You might not be able to if you're only logged on as local admins.

[mrbios]

I've tried setting it logged in as domain admin, local admin, doing it remotely from a DC and remotely from my PC, as far as the servers concerned domain\administrators isn't a choice it's allowing me to make >_<