Jump to content

Recommended Posts

Posted

I'm running a Server 2003 network in a school setting where I'd like things

to be pretty locked-down. I use both mandatory profiles and group policy to

lock down user accounts. Lately I've had consistent errors when all users

load the mandatory profile. The error message states that the profile is

unavailable and that the error is that the system couldn't find the file

specified. I've checked and rechecked the permissions on the share where the

profile is located and they check-out. One thing I have noticed is that when

I change the file name from ntuser.dat to ntuser.man the file type label

doesn't change from "dat" to "man". It just stays on ".man" and when I get

out of the folder and then back into the folder the name has changed back to

".dat". Any help would be very welcome.

  • Replies 1
  • Created
  • Last Reply
Guest Herb Martin
Posted

Re: Mantatory Profile Woes

 

 

"KWME" <KWME@discussions.microsoft.com> wrote in message

news:CA8B955E-BC1C-413A-84FB-4BCB47EBB0CF@microsoft.com...

> I'm running a Server 2003 network in a school setting where I'd like

> things

> to be pretty locked-down. I use both mandatory profiles and group policy

> to

> lock down user accounts. Lately I've had consistent errors when all users

> load the mandatory profile. The error message states that the profile is

> unavailable and that the error is that the system couldn't find the file

> specified. I've checked and rechecked the permissions on the share where

> the

> profile is located and they check-out.

 

SHARE permissions AND NTFS permission on the files, especially the

NTUser.MAN

file.

> One thing I have noticed is that when

> I change the file name from ntuser.dat to ntuser.man the file type label

> doesn't change from "dat" to "man". It just stays on ".man" and when I

> get

> out of the folder and then back into the folder the name has changed back

> to

> ".dat". Any help would be very welcome.

 

Huh? If you don't have enough permission to rename the file then you

need to get access to the file and get this done.

 

For one thing I would STOP using the (stupid) Explorer and use the COMMAND

PROMPT so you can see the file (almost) directly and not having some dumb

"gui" program 'interpreting' what you see.

 

NTFS and Share permission are COMPLETELY separate. They must BOTH

be SUFFICIENT for the users to access the files. (At least READ for

Mandatory

Profiles, files and shares.)


×
×
  • Create New...