Profiles

[Chuckster]

I have roaming profiles set up for all of our users, but I am having problems whereby when a user logs on it says it cannot locate the roaming profile, therefore it will allow the user to logon with a local profile.

 

I'm guessing it has something to do with the NTFS permissions.

 

Could someone tell me what permissions they have enabled on their 'profiles' folder?

 

My set up is like this:

 

Profiles

|_____Students

|_____Y7

|_____Y8

|_____Y9

|_____Y10

|_____Y11

|_____Staff

|_____Teaching Staff

|_____Non-teaching Staff

|_____Admin

|_____System Administrators

 

The permissions I have is:

 

Administrators - Full Control

Authenticated Users - Modify

Backup Operators - Full Control

Creator Owner - Full Control

System - Full Control

 

The permissions is set at the root of the folder (Profiles) and is propagated to all child objects within that folder.

 

Any help will be much appreciated.

[tomscaper]

For each set of users - for example y7 students, you would need a group they are all in and allow that group to be able to traverse to that folder and create folders within, we have set special permissions for :

traverse folder/execute file

list folder/ read data

read attributes

create folder/ append data

 

PM if you need help doing this.

Edited August 21, 2008 by tomscaper

[Chuckster]

Apologies in advance, I don't know how to indent, even though I did give it a shot!

[powdarrmonkey]

@Tom: He already has that in place with the Authenticated Users group having modify.

 

Check that each user has full control and ownership of their actual profile directory.

[tomscaper]

Ah yes i didnt notice that one.... doh.

[Chuckster]

@Tom: He already has that in place with the Authenticated Users group having modify.

 

Check that each user has full control and ownership of their actual profile directory.

 

 

I've set up a 'special permission' by giving authenticated users 'take ownership' at the root of the profiles folder. Is this correct?

[Chuckster]

By giving the 'take ownership', whichever user first logs on, e.g. student user, s/he has full control of the subfolder in which the profile is created. In this case a Y7 student logs in and has full control of the Y7 Folder.

 

When another Y7 user logs in they aren't able to get their roaming profile let alone create one.

 

Where am I going wrong?

[john]

I have mine as follows:

 

Administrators - Full Control (inherited from overall Profiles folder which holds the lot)

Creator Owner - Special -Full Control BUT of Subfolders and Files only (inherited from overall Profiles folder)

The Security Group for the year EG Staff (Full Control) - direct apply to there folder

System - Full Control (inherited from overall Profiles folder)

Users - Read & Execute, List folder contents, read, Read Permissions, Create Folders / Write Data & Create Files / Append Data

 

This seems to work fine, new users at logoff get a folder created with the right persmissions. I have in GP set it to add Administrators to roaming profile security options thingy selected (forgot its correct title but its that option) and that all seems to work fine with no erros and has been so for over 2 years now.

[tomscaper]

any luck with this?