Solved

Roaming Profiles

Posted on 2008-09-29
8
252 Views
Last Modified: 2010-03-17
Hi
 
I'm studying course 70-290  and I have a question, for creating roaming profiles I did what the course said, which is creating hidden
shared folder and changing the profile field in the user properties to \\servername\profiles$\%username% and it worked fine, the problem
that I got is when trying to make that profile mandatory, as administrator on the server I couldnt have access to the users folder to change
the .dat extension and if I take ownership then the user who I made his profile roaming cant have access to his folder so how this problem
can be solved ?
 
Thank you
0
Comment
Question by:Pure_Heart
  • 4
  • 4
8 Comments
 
LVL 16

Expert Comment

by:JoWickerman
ID: 22595387
Hi Pure_Heart,

Take ownership, make the changes and transfer ownership back to the intended user. It's starnge that if you transfer ownership that the user can't access their own folder.

Did you give them Full Controll access on NTFS?

Cheers.
0
 

Author Comment

by:Pure_Heart
ID: 22595433
yes i did what you asked me but it failed also, i added the user to ntfs permissions with full control it didnt work also, i remember the first time i made it it worked fine, when i took the ownership it stoped working whatever i make

thanks
0
 
LVL 16

Expert Comment

by:JoWickerman
ID: 22595502
Do they have Full Control on the hidden share as well?

Make the user the owner of the folder, login as the user and see if you can change the NTUSER.DAT file?
0
 

Author Comment

by:Pure_Heart
ID: 22595589
hi

the profiles folder was on the C drive, i removed it and made new one on D drive, the administrator
already had access seems the group policy worked but maybe it didnt work when the profiles share was on c
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:Pure_Heart
ID: 22595613
but now when i change the ntuser.dat to ntuser.man and i make the user log off and login i notice that the extension goes back as ntuser.dat  very strange :)
0
 
LVL 16

Expert Comment

by:JoWickerman
ID: 22603052
The profiles are stored on a server, right? Keep the ntuser.dat file like it is. Login as the user, then logout. Login as administrator, change the ntuser.dat to ntuser.man, logout and then login as the user again.

Apparently the user must login once before you can change the file... Doesn't really make sense...

Let me know!
0
 

Author Comment

by:Pure_Heart
ID: 22603952
Hi

so u mean i should login as the user on the server ? or on the client pc ?  becuase its confusing, and if you ment on the client pc so where should i log as administrator ? on server or pc ? if on pc then should i cycle on all clients to do that :) !!!!!
0
 
LVL 16

Accepted Solution

by:
JoWickerman earned 50 total points
ID: 22604026
LOL!!! Sorry for creating the confusion!!!

Login on the client PC as the user. Log out again. Logon to the server as administrator, change the ntuser.dat file to ntuser.man. Logon to the client PC as the user again and then it should work... I think!

Let me know if THIS helped!

Cheers!
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Multiple Domains 8 41
Question on security Audit 2 91
Intermittent issues with RDP on domain servers 4 46
ADFS Redirection 4 29
[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now