	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

10/27/2009 at 03:17AM PDT, ID: 24846621 | Points: 500

	[x] Attachment Details

XP Users randomly get access denied to Roaming Profiles

Asked by mrroonie in OS / 2 Network Security, Microsoft Operating Systems, Windows XP Operating System

Tags: roaming profiles, access denied, server 2003, xp

hello all

this problem has me absolutely stumped, hope you guys have some idea of what's going on because i've run out of ideas and have exhausted googles and EE's solutions to no avail.

Setup as follows: Parent PDC: Win2k8 x64 standard, child DC: win 2k3 x86 std. ALL clients XP sp3, fully up-to-date.

I have about 10 users logging into a child domain on my network. All users (on child and parent domain) have a roaming profile.

Nearly every morning the child DC picks one user at random on this child domain to pop the message 'windows cannot copy the file blah blah blah. Reason: Access denied' then straight away another popup 'Windows cannot locate your roaming profile and is logging you on with a temporary one.... reason: access denied'. This happens pretty much every morning to a different user, sometimes to 2 users, sometimes it doesn't happen and everyone logs in fine.

The file windows cannot copy is ALWAYS an MS Word shortcut eg. worddoc.doc.url in docs&settings>local settings that is not there when browsing through the profile folder.

The users profiles folder is a hidden share (user$) and is set so the user has full control in both the sharing and security tab, and offline file caching is OFF. In ADUC the users profile folder is set to \\profileserver\user$\profile. i can get round it by getting them to logout and in ADUC change their profile folder in ADUC to \\profileserver\user$\profile2 and they can login fine. this is getting a bit tedious doing it practically every morning

this is exactly how the parent domain's roaming profiles are set up and none of those users have this issue.

I have amended the GPO to make sure the PCs wait for the network before logging in and have also tried rebuilding the profiles from scratch, but that doesn't matter as it happens to new users on the domain. there is nothing in the event log on the server, not even a failure audit in the security log.

All child DC clients have a static IP and the child DC as primary dns and the parent DC as secondary dns.

the thing is - this started happening overnight a couple of weeks ago for no apparent reason so i'm thinking it could be a faulty server update.

has anyone seen this before? any ideas?

View the Solution FREE for 30 Days

20091111-EE-VQP-91 - Hierarchy / EE_QW_3_20080625

1. astralcom...2,800
2. gtworek2,500
3. Darr2472,400
4. thinkpads...2,268
5. uetian17072,225
6. flubbster2,000
6. Akhater2,000
6. Callandor2,000
6. ThePhrea...2,000
6. demazter2,000
6. nroediger2,000
6. chris_bot...2,000
6. Raj-GT2,000
6. steveoskh2,000
6. dbbg2,000
6. _jesper_2,000
6. nabeelmoidu2,000
6. Perry_IDITC2,000
6. kenboonejr2,000
6. Jornak2,000
6. MikeHolcomb2,000
22. johnb67671,500
22. Michael-...1,500
22. xmachine1,500
22. Andy_Qu...1,500
22. itkamaraj1,500
22. Abilis1,500
22. surfer241,500

1. dannykon10,840
2. Otta10,160
3. saar5,840
4. RobWill4,372
5. tim_holman3,740
6. johnb67673,500
6. tdthai3,500
8. Darr2473,150
9. uetian17072,889
10. astralcom...2,800
11. sbufton2,550
12. tliotta2,500
12. gtworek2,500
14. thinkpads...2,268
15. kcjones2,200
16. flubbster2,000
16. Akhater2,000
16. Callandor2,000
16. ThePhrea...2,000
16. cstumpf2,000
16. choicesol...2,000
16. simsjrg2,000
16. demazter2,000
16. ebjers2,000
16. rabbitz2,000
16. nroediger2,000
16. chris_bot...2,000
16. PsychoFelix2,000
16. Raj-GT2,000
16. blabla9872,000
16. life_j2,000
16. steveoskh2,000
16. dbbg2,000
16. woofiedog2,000
16. jasonr00252,000
16. _jesper_2,000
16. dano21122,000
16. elit20072,000
16. nabeelmoidu2,000
16. rsanghoi2,000
16. Perry_IDITC2,000
16. kenboonejr2,000
16. Jornak2,000
16. MikeHolcomb2,000