At a school here with 500+ users, servers are Win2K, workstations XP
Pro.
Currently, user profiles reside on server \\nbs2. We recently replaced
server \\nbs1, which holds the Operations Masters and is acting as
primary emulator. Now to decrease load on \\nbs2, we have moved some
profile folders to the new \\nbs1 and changed the pointer for each user
individually to \\nbs1\student_profiles\%username%.
We also turned on the GP for Desktop Redirection to
\\nbs1\student_desktops\%username%. It seemed to work for most users,
but several are getting "access denied" errors when they try to log in.
When we moved the profile folders, we used xcopy to preserve
permissions. This also worked for almost everyone, but certain
profiles weren't copied properly, which would manifest in "access
denied" when Administrator tried to browse the folder. By taking admin
ownership and resetting perms on the troublesome profiles to give the
student Full Control, this problem was resolved.
However, for the desktop redirection, Administrator is unable to browse
*any* of the folders in \\nbs1\student_desktops. I suspect this is
because System created the folders. It is now impossible to tell which
users will get an "access denied" error until they actually try to log
in.
To make matters worse, I have turned OFF the GP for desktop
redirection, over 12 hours ago (long enough to replicate among the 4
DCs) and the user's profile is still trying to access
\\nbs1\student_desktops\%username% when logging on. Tried logging in
as same user twice and got the same error.
Permissions on \\nbs1\student_desktops are as follows:
Admins full control (this folder, subs and files)
CREATOR OWNER full control (subs and files only)
Domain Users full control (this folder only)
Students special (traverse/list/create folders, read/write all attribs,
this folder only)
System full control (this folder, subs and files)
Permissions on \\nbs1\student_profiles are as follows:
Admins full control (this folder, subs and files)
CREATOR OWNER full control (subs and files only)
Domain Users special (traverse/list/create folders, read all attribs,
this folder only)
please help!! TIA,
Ryan Link
Personal Technology Solutions
www.ptsolutions.com
212-206-9620
Similar Threads
