• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 242
  • Last Modified:

W2k3 Small Business Server permission problems on d$

I have 2 drives on my Windows 2003 Small Business Server box... C & D.  I have implemented roaming profiles and I'm using D$ as the profile store.  I have changed the permissions on D to allow the everyone group to have all permissions except full control.  I then specifically assigned each user permission to their folders.  The users are members of just the domain users group.  When they login, they don't have access to the D$.  If I add them to the domain admins group they can connect fine.  What am I missing here?
0
MFredin
Asked:
MFredin
  • 3
  • 2
1 Solution
 
oBdACommented:
Don't use administrative shares for user access; the administrative shares are by default not accessible to users.
Either create a subfolder "Profiles" or whatever, share it (don't forget to give Full permissions for Everyone in the *Share* permissions) and use this for the user profiles (with the benefit that it keeps your D: root uncluttered), or create an additional share (Profiles$ or whatever) of the D: root (don't forget to give Full permissions for Everyone in the *Share* permissions).
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
I wonder why you have implemented roaming profiles in an SBS-based network.  They are not recommended with SBS.

This is because instead of roaming profiles, SBS pre-configures user home folders in the \\<SBSSERVER>\Users share and it handles all necessary permissions as well.  Then, if you run the Configure My Documents Folder Redirection wizard their My Documents folder will be redirected to their user share so no matter what workstation they log onto, opening My Documents will be THEIR My Documents.  Their specific User Home Folder is created when you add a user with SBS's Add User Wizard found in the User's Snap-in of the Server Management Console.

Outlook is configured automatically on workstations which are properly joined to an SBS domain using http://<SBSSERVER>/connectcomputer.  If you did not join workstations using this method then you should fix that by following the steps outlined in http://sbsurl.com/rejoin

If after all of that, you STILL want to use roaming profiles, then you should follow the documentation regarding roaming profiles on SBS in the section with that title on this page:  http://sbsurl.com/postinstall

Jeff
TechSoEasy
0
 
MFredinAuthor Commented:
TechSoEasy,

Thanks for the great tip. I have a couple problems with this tho... first off, how can I move my User's Shared folders to my D drive and make this work?  Second, I would like to store the user's favorites, desktop files, etc on the server as well so when they login anywhere those files show up (roaming profiles).  Does your solution cover this as well?
0
Microsoft Certification Exam 74-409

VeeamĀ® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
See http://sbsurl.com/movedata for the instructions on how to move the Users shared folders.

If you want to also redirect the desktop, you can modify the folder redirection GPO to include the Desktop as well.

Favorites are another matter... I've gotten my users to start using Windows Live Favorites so that they will have them no matter where they log in.  But you can also move the Favorites via GPO.  http://blogs.microsoft.co.il/blogs/guyt/archive/2006/11/18/Redirecting-IE-Favorites-via-GPO.aspx

Jeff
TechSoEasy
0
 
MFredinAuthor Commented:
This should work great. Thanks Jeff.

What about stored usernames and passwords?  Where is that stuff stored? Is there any way to redirect it?
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Usernames and Passwords are stored in Active Directory... but that's probably not your problem... more than likely you moved the Users Shared Folders without properly copying the permissions settings in the first place.  The movedata document I linked above provides the information on how to set those correctly.

Jeff
TechSoEasy
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now