We have a Citrix farm that is based on Win2k SP4 with Rollup 1 in windows 2003 domain. We use romaing terminal services profiles that are stored on a dfs share. When a user logins in for the first time to have their profile created we get the "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator." This happens before the desktop appears and will hold there until the user clicks ok. This only happens when their profile is first created.
We restrict access to the C: drive and redirect their My Documents folder to a network user share via GPO.
Any thoughts on how to make this go away?