Solved

Senior admins cannot create a roaming profile that a user can access. Error states folder doesn't have correct security

Posted on 2014-10-03
3
101 Views
Last Modified: 2015-05-20
The process to create a new account involves manually creating the profile folder and assigning modify rights (ntfs) for the end user. I know this isn't the best way but I don't have the ability to change that just yet. There are only three accounts that get inherited rights on the profile folder. One is a technician(modify), the other is senior admin (Full) and then the system account (full). I'm thinking that the administrators of the server that the fileshare resides on needs to have full permissions also. Nevertheless, when a senior admin creates the folder, the end user's profile doesn't copy. The error states the folder already exists and has the incorrect security. If the domain admin creates the folder, there is no issue. Looking at ownership of the folder in both situations indicates the senior admin created folder shows ownership for that senior admin's name. If the doamin admin creates it, the ownership shows the administrators of the file share server is the owner. What's the best way to fix this understanding that a senior won't have domain admin permissions?
0
Comment
Question by:NtHawk101
3 Comments
 
LVL 78

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 250 total points
ID: 40360802
The process to create a new account involves manually creating the profile folder and assigning modify rights (ntfs) for the end user.  You don't need to manually create the folder and or contents.  Folder Redirection will automatically create it for you as long as you have set the folder redirection  group policy

The user should have ownership rights
0
 
LVL 24

Accepted Solution

by:
lionelmm earned 250 total points
ID: 40361162
BY default a roaming profile is created either by the location stipulated in the "profile" section of the users in "Domain users and Computers" (Admin tools) or where you stipulate in the your group policy. So when either of these two try to create the required files and folders it sees it is already there and thus the message you get. I suggest you let these processes create the files/folders and then you can write a script to go in afterwards and add any other users that need permissions to these files and folders--you can run an automated script after the user has first logged on.
0
 

Author Comment

by:NtHawk101
ID: 40788175
Either solution is acceptable but I couldn't get the main Network admin to listen to reason so I quit banging my head against the wall and went elsewhere
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now