Windows roaming profile loading problems

Posted on 2013-01-10
Medium Priority
Last Modified: 2013-02-25
All our users are using roaming profiles. we have users who are logging into windows 7 and windows XP.

The windows 7 and XP profiles used to be stored on a windows 2003 R2 server but now they are on windows 2008 R2  

This is the folder structure on the server

D:\ Workers (folder)
       - Person A (folder shared) / profile.V2
       - Person B (folder shared) / profile.V2
       - Person C (folder shared) /  Profile

When the profiles were stored on windows 2003 R2, the  'OWNERS' of the folders (including the profile folder) were always 'administrators' and we never had any issues with roaming profiles

Since moving all the profiles to windows 2008 R2 we've been having a number of roaming profile issues with 'owner' as 'administrator'. When the user logs in they get a 'you have been logged on with a temporary profile'.

The only fix we found was by making the user the owner of both folders.

EX. Person A becomes the 'owner' of 'Person A (folder shared)' and their 'profile or profile.V2 ' folder. Once this is done the roaming profile error disappears.

The problem with this solution is that we can not see what's inside of their profile folders anymore. Even if administrators are given full access to it in both sharing + NTFS rights.

Is there something we're missing? We can't imagine that we have make every user the owners of their own folders.
Question by:iamuser
LVL 18

Accepted Solution

Don S. earned 2000 total points
ID: 38765245
There is a requirement in windows 7 that the roaming profile Owner be the User.  there is a setting in GPO that has Windows add the administrator to the profile permissions when it creates it automatically.  set that and set the top level folder permissions as follows and you will achieve what you want.

Roaming profile parent folder:

Creator Owner = Full Control, Subfolders and Files Only
Domain Users = List Folder/Read Data, Create Folders/Append Data - This Folder Only
System =  Full Control, This Folder, Subfolders and Files

And don’t forget to change the GPO for the local computer (not the server) to add the Administrators security group to the roaming user profile share.  It’s in Computer/Administrative Templates/System/User Profiles/Add the Administrators security group to roaming user profiles  - Enable it.

Author Closing Comment

ID: 38926657
Perfect that was what I was looking for

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
I’m willing to make a bet that your organization stores sensitive data in your Windows File Servers; files and folders that you really don’t want making it into the wrong hands.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question