Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Windows roaming profile loading problems

Posted on 2013-01-10
2
Medium Priority
?
663 Views
Last Modified: 2013-02-25
All our users are using roaming profiles. we have users who are logging into windows 7 and windows XP.

The windows 7 and XP profiles used to be stored on a windows 2003 R2 server but now they are on windows 2008 R2  

This is the folder structure on the server

D:\ Workers (folder)
       - Person A (folder shared) / profile.V2
       - Person B (folder shared) / profile.V2
       - Person C (folder shared) /  Profile

When the profiles were stored on windows 2003 R2, the  'OWNERS' of the folders (including the profile folder) were always 'administrators' and we never had any issues with roaming profiles

Since moving all the profiles to windows 2008 R2 we've been having a number of roaming profile issues with 'owner' as 'administrator'. When the user logs in they get a 'you have been logged on with a temporary profile'.

The only fix we found was by making the user the owner of both folders.

EX. Person A becomes the 'owner' of 'Person A (folder shared)' and their 'profile or profile.V2 ' folder. Once this is done the roaming profile error disappears.

The problem with this solution is that we can not see what's inside of their profile folders anymore. Even if administrators are given full access to it in both sharing + NTFS rights.

Is there something we're missing? We can't imagine that we have make every user the owners of their own folders.
0
Comment
Question by:iamuser
2 Comments
 
LVL 18

Accepted Solution

by:
Don S. earned 2000 total points
ID: 38765245
There is a requirement in windows 7 that the roaming profile Owner be the User.  there is a setting in GPO that has Windows add the administrator to the profile permissions when it creates it automatically.  set that and set the top level folder permissions as follows and you will achieve what you want.

Roaming profile parent folder:

Creator Owner = Full Control, Subfolders and Files Only
Domain Users = List Folder/Read Data, Create Folders/Append Data - This Folder Only
System =  Full Control, This Folder, Subfolders and Files

And don’t forget to change the GPO for the local computer (not the server) to add the Administrators security group to the roaming user profile share.  It’s in Computer/Administrative Templates/System/User Profiles/Add the Administrators security group to roaming user profiles  - Enable it.
0
 

Author Closing Comment

by:iamuser
ID: 38926657
Perfect that was what I was looking for
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question