?
Solved

Acces denied on profile yet fully accessible

Posted on 2011-02-14
4
Medium Priority
?
927 Views
Last Modified: 2012-05-11
Folks

I'm having a problem with an user who gets a roaming profile error at login time with error "access denied".

however one logged in he can connect to the profile path without problem.

Not quite sure to understand what's up here.

This is a W2k3 server with XPSP2 client

Any suggestion welcome

regards
0
Comment
Question by:Alexandre Takacs
  • 2
4 Comments
 
LVL 21

Accepted Solution

by:
snusgubben earned 1500 total points
ID: 34894710
If this only goes with one user, I guess you will solve this quickly by creating him a new roaming profile.
Then copy over needed files from the old to the new profile.
0
 
LVL 10

Expert Comment

by:CSIPComputing
ID: 34894766
Does the user have full control over his roaming profile?

With the user lovged off, on the server make sure the share on the profiles folder allows everyone full control, and then reset permissions on the profile to be administrators and the particular user with full control, and replicate these permissions down the profile folders.
0
 
LVL 1

Author Closing Comment

by:Alexandre Takacs
ID: 34895182
Yeah that did the trick... but I generally like to understand rather than workarounds... ;)
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 34895226
but I generally like to understand rather than workarounds...

I totally agree with you! Since this was affecting only a single user you have to see how to spend your time and if the users was ok with downtime. In some scenarios you can sit days troubleshooting, while "starting all over" takes 1/4 of the time.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question