Roaming profile problem in win2000

[danieltan]

After i created the roaming profile in win2000 server AD domain users
and computers , when my user logged on, it has the following error. I
have shared the folder and make it full rights for everyone. I even
added the user to administrator groups. Pls help. Thanks

"Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the
profile will not be copied to the server when you logoff. Possible
causes of this error include network problems or insufficient security
rights."

Regards
Daniel

 

[Kennygair]

Hmm...fairly common error. All you should have to do is create a share
on the server and call it for example "UserShare". Go to the relevant
user accs in AD and look at the entry in Profile/Profile path. In here
you should put something like \\Servername\UserShare\%username%. If you
use the %username% then the account will automatically pick up the name
of the user account and set this to the folder it creates for that
particular user and apply the relevant access rights...they will be
able to access it but no-one else will. You could also expand this a
little further by utilising UserShare$ on the original share thereby
ensuring that users can't see the share accross the network. Remember
though that you'll have to use this in the profile path in AD or it
won't be found.
EG I have mine set up as \\Server\Users$\%username% where the
%username% is automatically changed to the user account name on
creation.
Hope this is clear :-(

 

[danieltan]

Kenny, do i need set the domain user account and password in the User
account on the client machine ?

Rgds
Daniel

 

[danieltan]

Kenny, so after the user logon to the server, does it create a folder
based on the user name under the shared profiles folder ? If yes how
come it does not create one under my logon name ?

Rgds
Daniel

 

[danieltan]

Kenny , i miss out some error message. Below is the error detail.
Thanks

DETAIL - The system detected a possible attempt to compromise security.
Please ensure that you can contact the server that authenticated you.
Rgds
Daniel

 

[Lanwench [MVP - Exchange]]

Kenny, do i need set the domain user account and password in the User
account on the client machine ?

What do you mean?
There shouldn't be a local account - you can't use a roaming profile with
anything but a domain account. Users shouldn't log into their local machines
at all.

 

[Lanwench [MVP - Exchange]]

Kenny, so after the user logon to the server, does it create a folder
based on the user name under the shared profiles folder ?
Yes.

If yes how
come it does not create one under my logon name ?

Perhaps your permissions aren't set properly. Make sure the parent folder
(i.e., profiles, shared as profiles$) has share permissions such as
everyone=full control. Set the NTFS permissions as administrators, system,
and users=full control. The permissions for each user profile folder will be
changed when the folder is created, which happens when the user logs in for
the first time & logs out.

 

[Lanwench [MVP - Exchange]]

Kenny , i miss out some error message. Below is the error detail.
Thanks

DETAIL - The system detected a possible attempt to compromise
security. Please ensure that you can contact the server that
authenticated you. Rgds
Daniel

What did you do that generated this error message?

 

[danieltan]

Hi, i did nothing. Just want to login to my AD domain and found out it
in the event viewer. I havew set full rights to the profile folder.
Does the profiles folder has to be set as "profiles$" ?

Rgds
Daniel

 

[danieltan]

Just a test. Stupid question.

 

[danieltan]

Lanwench, any idea what causes this error ?

Rgds
Daniel

 

[Lanwench [MVP - Exchange]]

Lanwench, any idea what causes this error ?

Rgds
Daniel

I've never seen that error message. I use roaming profiles all the time.
Perhaps there's something else you haven't mentioned....

www.eventid.net may help too. Also google.

 

[danieltan]

Lanwench, i do not know what other setting should i use. If logon
locally to the server then it is ok, but if remotely then got problem.
Currently i'm using AD in win2000 with dynamic update with xp pro
client. Dynamic update is working properly. What could be the problem ?
Perhaps you could tell me your setup settings. Thanks

Rgds
Daniel

 

[danieltan]

Lanwench, i do not know what other setting should i use. If logon
locally to the server then it is ok, but if remotely then got problem.
Currently i'm using AD in win2000 with dynamic update with xp pro
client. Dynamic update is working properly. What could be the problem ?
Perhaps you could tell me your setup settings. Thanks

Rgds
Daniel

 

[danieltan]

Lanwench, i do not know what other setting should i use. If logon
locally to the server then it is ok, but if remotely then got problem.
Currently i'm using AD in win2000 with dynamic update with xp pro
client. Dynamic update is working properly. What could be the problem ?
Perhaps you could tell me your setup settings. Thanks

Rgds
Daniel

 

[Lanwench [MVP - Exchange]]

Lanwench, i do not know what other setting should i use. If logon
locally to the server then it is ok, but if remotely then got
problem. Currently i'm using AD in win2000 with dynamic update with
xp pro client. Dynamic update is working properly. What could be the
problem ? Perhaps you could tell me your setup settings. Thanks

Rgds
Daniel

Did you search eventid.net or google for the error you saw? I'm not familiar
with it. My server/profile setups are pretty generic/vanilla, really.

 

[danieltan]

Yes i have searched but not really related but thanks anyway.

Rgds
Daniel