+ Post New Thread
Results 1 to 9 of 9
Windows Thread, Profiles in Technical; I have roaming profiles set up for all of our users, but I am having problems whereby when a user ...
  1. #1

    Join Date
    Jun 2008
    Posts
    719
    Thank Post
    118
    Thanked 64 Times in 52 Posts
    Rep Power
    31

    Profiles

    I have roaming profiles set up for all of our users, but I am having problems whereby when a user logs on it says it cannot locate the roaming profile, therefore it will allow the user to logon with a local profile.

    I'm guessing it has something to do with the NTFS permissions.

    Could someone tell me what permissions they have enabled on their 'profiles' folder?

    My set up is like this:

    Profiles
    |_____Students
    |_____Y7
    |_____Y8
    |_____Y9
    |_____Y10
    |_____Y11
    |_____Staff
    |_____Teaching Staff
    |_____Non-teaching Staff
    |_____Admin
    |_____System Administrators

    The permissions I have is:

    Administrators - Full Control
    Authenticated Users - Modify
    Backup Operators - Full Control
    Creator Owner - Full Control
    System - Full Control

    The permissions is set at the root of the folder (Profiles) and is propagated to all child objects within that folder.

    Any help will be much appreciated.

  2. #2
    tomscaper's Avatar
    Join Date
    Jul 2006
    Posts
    814
    Thank Post
    118
    Thanked 29 Times in 15 Posts
    Rep Power
    22
    For each set of users - for example y7 students, you would need a group they are all in and allow that group to be able to traverse to that folder and create folders within, we have set special permissions for :
    traverse folder/execute file
    list folder/ read data
    read attributes
    create folder/ append data

    PM if you need help doing this.
    Last edited by tomscaper; 21st August 2008 at 12:51 PM.

  3. Thanks to tomscaper from:

    Chuckster (21st August 2008)

  4. #3

    Join Date
    Jun 2008
    Posts
    719
    Thank Post
    118
    Thanked 64 Times in 52 Posts
    Rep Power
    31
    Apologies in advance, I don't know how to indent, even though I did give it a shot!

  5. #4

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,859
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    182
    @Tom: He already has that in place with the Authenticated Users group having modify.

    Check that each user has full control and ownership of their actual profile directory.

  6. #5
    tomscaper's Avatar
    Join Date
    Jul 2006
    Posts
    814
    Thank Post
    118
    Thanked 29 Times in 15 Posts
    Rep Power
    22
    Ah yes i didnt notice that one.... doh.

  7. #6

    Join Date
    Jun 2008
    Posts
    719
    Thank Post
    118
    Thanked 64 Times in 52 Posts
    Rep Power
    31
    Quote Originally Posted by powdarrmonkey View Post
    @Tom: He already has that in place with the Authenticated Users group having modify.

    Check that each user has full control and ownership of their actual profile directory.

    I've set up a 'special permission' by giving authenticated users 'take ownership' at the root of the profiles folder. Is this correct?

  8. #7

    Join Date
    Jun 2008
    Posts
    719
    Thank Post
    118
    Thanked 64 Times in 52 Posts
    Rep Power
    31
    By giving the 'take ownership', whichever user first logs on, e.g. student user, s/he has full control of the subfolder in which the profile is created. In this case a Y7 student logs in and has full control of the Y7 Folder.

    When another Y7 user logs in they aren't able to get their roaming profile let alone create one.

    Where am I going wrong?

  9. #8

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,362
    Thank Post
    1,499
    Thanked 1,053 Times in 922 Posts
    Rep Power
    303
    I have mine as follows:

    Administrators - Full Control (inherited from overall Profiles folder which holds the lot)
    Creator Owner - Special -Full Control BUT of Subfolders and Files only (inherited from overall Profiles folder)
    The Security Group for the year EG Staff (Full Control) - direct apply to there folder
    System - Full Control (inherited from overall Profiles folder)
    Users - Read & Execute, List folder contents, read, Read Permissions, Create Folders / Write Data & Create Files / Append Data

    This seems to work fine, new users at logoff get a folder created with the right persmissions. I have in GP set it to add Administrators to roaming profile security options thingy selected (forgot its correct title but its that option) and that all seems to work fine with no erros and has been so for over 2 years now.

  10. #9
    tomscaper's Avatar
    Join Date
    Jul 2006
    Posts
    814
    Thank Post
    118
    Thanked 29 Times in 15 Posts
    Rep Power
    22
    any luck with this?

SHARE:
+ Post New Thread

Similar Threads

  1. Profiles
    By Obinice in forum Windows
    Replies: 10
    Last Post: 27th March 2008, 09:17 PM
  2. Roaming Profiles
    By Neville in forum Windows
    Replies: 9
    Last Post: 21st March 2008, 12:34 AM
  3. Profiles!!!!!!!
    By ben_hampshire in forum Wireless Networks
    Replies: 3
    Last Post: 8th May 2007, 02:27 PM
  4. XP {Profiles
    By faza in forum Wireless Networks
    Replies: 31
    Last Post: 23rd December 2006, 01:22 AM
  5. profiles
    By colin in forum Learning Network Manager
    Replies: 1
    Last Post: 6th April 2006, 02:23 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •