Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Roaming profiles don't copy to file server

Posted on 2004-09-01
17
145 Views
Last Modified: 2010-04-13
I have a files server where the roaming profiles are stored but lately, the new users that I have been setting up, arent working right.  I set up a terminal services profile path like this \\fileserver\profileshare\%username% or I have also done \\fileserver\profileshare\usersname
Either way I do it, the profile is not copied to the file server.  It only stores a profile on the mahine that they logge into, when I go to my computer -> user profiles it show the user's profile as romaing and not local.  Please help.
0
Comment
Question by:The_Master_Chief
  • 7
  • 6
  • 4
17 Comments
 
LVL 2

Accepted Solution

by:
wtp_issc earned 250 total points
ID: 11957517
Are the share permissions or NTFS permissions correct?
0
 
LVL 2

Author Comment

by:The_Master_Chief
ID: 11957738
I believe so.  It worked before and I didn't change them, but that doesn't mean that some other Sys Admin didn't change them.  I just checked them and they appear to be correct.  What permissions MUST be there?
0
 
LVL 2

Expert Comment

by:wtp_issc
ID: 11957801
Share permissions should allow Change and the folder it's sharing should have all but full rights.

When you set the profile path in the user's profile and hit apply a folder should be automatically created here \\fileserver\profileshare.

Do the clients get any error when logging on?
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 2

Author Comment

by:The_Master_Chief
ID: 11957848
No error at all, it logs on and off as if just using a local profile.
0
 
LVL 2

Author Comment

by:The_Master_Chief
ID: 11957864
I double checked share permissions and they are ok.
0
 
LVL 2

Expert Comment

by:wtp_issc
ID: 11957898
I just noticed something.  It looks like you don't need a terminal profile path, just use the profile tab in the user's properties.  The terminal path is something you utilize for Citrix or Remote sessions.
0
 
LVL 2

Author Comment

by:The_Master_Chief
ID: 11958458
I have always done it using the terminal profile path, as all of my users log onto a terminal server.  The local machines log on automatically as a dummy domain account.
0
 
LVL 18

Expert Comment

by:exx1976
ID: 11960484
If you are using Terminal Services, then yes, you have the profile set in the correct place in ADUC.  As for the profiles, the directories need to be OWNED by the user who's profile it is.

Assuming, of course, that each profile directory is named the same as the corresponding user account, it would be very easy to script the use of SUBINACL (from the support tools) to set all the ownership on the directories...
0
 
LVL 2

Author Comment

by:The_Master_Chief
ID: 11966499
I will try that tool.  Yes the profile folders are named after the profile username
0
 
LVL 2

Author Comment

by:The_Master_Chief
ID: 11966553
Forgive my lack of knowedge, but could you give me an example of what command I should use to restore the ownership to their folders?
0
 
LVL 2

Expert Comment

by:wtp_issc
ID: 11966605
I don't think they need to be owners of the folder...they just need the ability to take ownership--Full Access.
0
 
LVL 2

Author Comment

by:The_Master_Chief
ID: 11966615
ok, I seemed to have fixed the problem.  What did the trick was allowing administrators full control of the folder.  the owner of the folder was also administrators.  Before, the administrators permissions were blank.
0
 
LVL 18

Expert Comment

by:exx1976
ID: 11966629
Yes, they do need to be the owner.  Either that, or the Domain Admins need to be the owner (since the profiles reside on a DC).  Trust me, I handle over 1200 users on TS.  If the profile directories reside on a member server, then the local admin needs to be the owner, or, the user.  It's easier to just make the user the owner in all instances (especially since on a cluster there IS no local admin, since it's a virtual machine...)

Now, back to the question..


SUBINACL /noverbose /file \\<SERVER>\<SHARE>\<DIRECTORY> /setowner=%username%

That will change the owner to be whoever you specify.

HTH,
exx
0
 
LVL 2

Expert Comment

by:wtp_issc
ID: 11966657
Right...what I was getting to was that the user does not have to be the owner as you said before...the local admin of the machine can and should be the owner.  I run Citrix servers here to and have run into issues where an admin had taken ownership of a users profile.
0
 
LVL 18

Expert Comment

by:exx1976
ID: 11966703
As I said, with an Active/passive cluster, you can't have the local admin be the owner, since then when you fail cluster nodes the profiles will cease to function...

Accoring to MS, the CORRECT way is to have the user be the owner.

YMMV.
0
 
LVL 2

Expert Comment

by:wtp_issc
ID: 11966762
I'm not debating with you, I started off by saying right and then explained why I responded the way I did to your previous response.  I'm just saying with my experience with the user being the owner...it's a bitch and a half to view the contents as an admin.  If you give the local admin group rights then it's a lot easier to view folders within the profile and edit permissions and this guy never mentioned having a cluster.

0
 
LVL 18

Expert Comment

by:exx1976
ID: 11966828
agreed, it's a bitch, but..  That's why the line right before SUBINACL in all my profile creation scripts looks like this:


XCACLS \\<SERVER>\<SHARE>\<DIRECTORY> /T /G SYSTEM:F "<DOMAIN>\DOMAIN ADMINS":F %USERNAME% :C /Y


Note that my users only get change permissions..  Full access is not necessary..  The last thing I need is for users to be re-defining the permissions on their profile directories and making an even larger mess than they normally do....

0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The advancement in technology has been a great source of betterment and empowerment for the human race, Nevertheless, this is not to say that technology doesn’t have any problems. We are bombarded with constant distractions, whether as an overload o…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question