Link to home
Start Free TrialLog in
Avatar of snyderkv
snyderkv

asked on

Cannot save to Roaming Profile?

After setting up a Roaming profile for a user, anything they create during that session is not saved after logging off and on again.

All the desktop items are available from before the Roaming was created and that follows the user around. but when they save something to the desktop, it gets deleted after logging off and on again.

I created the share on the C$ and gave Domain User Full Controll and the user Ownership and full security rights. I then gave her Full Control to the C$ itself as well and propagated everything and pushed the owner permissions down as well.

Then I went to gpedit.msc and changed the 2 settings as described in the docs. It was ignore owner permissions and add administrator or whatever.

Anybody have any ideas why nothing gets saved after logging off?

Thanks
ASKER CERTIFIED SOLUTION
Avatar of qz8dsw
qz8dsw
Flag of New Zealand image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of snyderkv
snyderkv

ASKER

Nope Security Logs don't say much. I get "security event id 528 551 576 577 578 under cuccess.

The Userenv.log says this:

CUserProfile:cleanupUserProfile: Ref count is not 0
AND
GetExclusionlist: Failed to get File size of <E:\ntuser.ini

That could be totally irrelivent.

The problem is with every machine on this network running XP. Not just my machine. I gave full access to everything, reset security policies, removed GPO policies for both user and computers, turned on all services exc. The stupid thing won't change from Read Only to ROAMING. "in the type field" under the computer properties, advanced, user profiles.

Anything?
Any other ideas?
SOLUTION
Avatar of matrixnz
matrixnz

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I used the attrib command

Attrib -H -S -R c:\* /s /d

Reset all read only folders and files.

Anything else?
Umm is that in response to my post or qz8dsw?

Cheers
Nope

After renaming all profiles and changing the name of the userprofile property in ADUC, loging off and on afgain I get "cannot load roaming profile (READ ONLY) attempting to use local profile blah blah.

What I had to do before was do a (copy to) in the computer properties advanced tab. Then I am able to get in but not save anything. It's obvious that the user account cannot write to the roaming folder hence why it will not create it's own profile without "Copying to"

I have spent hours on this crap. I only have 7 left before I need to make it work.

Any other ideas?
Hi snyderkv

This is a problem on the server not the desktop, the error you're receiving is because it's looking at the Profile path from within ADUC and finding no Roaming Profile, when it does this the first time, it creates the profile on the server, this isn't happening, check your server share permissions.

Cheers
I have one question snyderkv.
WHAT is pointing to E:\?

The ntuser.ini is one of the first files under "documents ans settings\username"
So what is E:\ meant to be pointing to on the machine.
Does it have an E drive after mapped drives on login?

Terry
No that is a completely different error. The E:\ is nothing. I can roam with the profile just fine I have no problem with that. I just cannot write to the profile. nothing gets saved after logon AND since I cannot write, it will not create one automatically which is no biggie because I simply did a copy to instead and was able to roam once the NTuser.dat was in the share. Just can't save to the desktop. This is the problem I can't solve. I saw one policy that prevented this in GPO. I will block inheritence one more time and reboot twice. I disabled that setting on teh local machine as well.

Ok as far as the ADUC Profile path it is correct. I already said the romaing profile works. Just can't save.
Nope after blocking gpo this has ntohing to do with anything.

Anything else? Anything in the registry or something I can change to preevnt my profile from becoming read only?
Have you made any changes to the Default User Profile?  Or have you created a custom Default User Profile on the domain?  If the roaming profile is working, but you're unable to save into the profile it sounds as though the Default User Profile, either the Local or Domain which ever one you use, doesn't have the correct permissions.  When creating a default user profile the everyone group needs to have full permissions to it.

Normally I would create a User, logon as that user make changes etc... and than logout login as Administrator than go into to System Advanced Properties - Profiles and then copy that user profile change permissions to Everyone and copy over the Default User Profile.

more info here http://support.microsoft.com/kb/319974
and for sever here http://support.microsoft.com/kb/325364

Cheers
EUREKA!!!!!

IT WORKS. Don't know what I did. I was playing with the local policies. Ill get back.
Looks like it was GPolicy setting named " Prevent roaming profile changes from propagating to the server"

It took a little bit for replication or whatever but I noticed once it took, my Read Only changed to ROAMING and it started working. Now I have to convince my sysads to lift that policy.

THANKS!!!