Guest theGerm Posted November 12, 2007 Posted November 12, 2007 I have a user that has a roaming profile. However, she cannot access her My Documents folder or cannot open outlook because of permission problems. When she logs out she cannot copy stuff to the server. Please help
Guest Meinolf Weber Posted November 12, 2007 Posted November 12, 2007 Re: Problem with a roaming profile Hello theGerm, Please post the permissions from the server share and the security permissions from it. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm > I have a user that has a roaming profile. However, she cannot access > her My Documents folder or cannot open outlook because of permission > problems. > > When she logs out she cannot copy stuff to the server. > > Please help >
Guest Lanwench [MVP - Exchange] Posted November 13, 2007 Posted November 13, 2007 Re: Problem with a roaming profile theGerm <jrmontg@gmail.com> wrote: > I have a user that has a roaming profile. However, she cannot access > her My Documents folder or cannot open outlook because of permission > problems. > > When she logs out she cannot copy stuff to the server. > > Please help Here's my boilerplate on roaming profile configuration, which may help you isolate the problem. Not sure how Outlook fits in or what the exact symptoms are there - you probably need to provide more info about your Outlook config. General tips: 1. Set up a share on the server. For example - d:\profiles, shared as profiles$ to make it hidden from browsing. Make sure this share is *not* set to allow offline files/caching! (that's on by default - disable it) 2. Make sure the share permissions on profiles$ indicate everyone=full control. Set the NTFS security to administrators, system, and users=full control. 3. In the users' ADUC properties, specify \\server\profiles$\%username% in the profiles field 4. Have each user log into the domain once from their usual workstation (where their existing profile lives) and log out. The profile is now roaming. 5. If you want the administrators group to automatically have permissions to the profiles folders, you'll need to make the appropriate change in group policy. Look in computer configuration/administrative templates/system/user profiles - there's an option to add administrators group to the roaming profiles permissions. Notes: * Make sure users understand that they should not log into multiple computers at the same time when they have roaming profiles (unless you make the profiles mandatory by renaming ntuser.dat to ntuser.man so they can't change them). Explain that the last one out wins, when it comes to uploading the final, changed copy of the profile. * Keep your profiles TINY. Via group policy, redirect My Documents at the very least - to a subfolder of the user's home directory or user folder. Also consider redirecting Desktop & Application Data similarly..... so the user will have: \\server\home$\%username%\My Documents, \\server\home$\%username%\Desktop, \\server\home$\%username%\Application Data. Alternatively, just manually re-target My Documents to \\server\home$\%username% (this is not optimal, however!) If you aren't going to also redirect the desktop using policies, tell users that they are not to store any files on the desktop or you will beat them with a stick. Big profile=slow login/logout, and possible profile corruption. * Note that user profiles are not compatible between different OS versions, even between W2k/XP. Keep all your computers. Keep your workstations as identical as possible - meaning, OS version is the same, SP level is the same, app load is (as much as possible) the same. * Do not let people store any data locally - all data belongs on the server. * The User Profile Hive Cleanup Utility should be running on all your computers. You can download it here: http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en Roaming profile & folder redirection article - http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html
Recommended Posts