ownership of romaing profiles causes them to fail

[Gary Roach]

I'm running an AD domain called NTDOMAIN using server 2003 with XP SP1
workstations with roaming profiles. If the ownership of the files and
folders in the profiles is "DOMAIN\Administrators", they work fine. If I
change the ownership of a user's profile folder and all files and subfolders
to the user's account, I get:

Windows cannot copy file \\roach\profiles\XP\gary\NTUSER.DAT to location
C:\Documents and Settings\gary.NTDOMAIN\NTUSER.DAT. Possible causes of this
error include network problems or insufficient security rights. If this
problem persists, contact your network administrator.

DETAIL - The specified network name is no longer available.

I tried enabling the "do not check for ownership of roaming profile folders"
setting in the group policy administrative templates but this made no
difference. Why is this happening? I think people's files should be owned by
them instead of "administrators". Thanks for any help.

 

[Lanwench [MVP - Exchange]]

I'm running an AD domain called NTDOMAIN using server 2003 with XP SP1
workstations with roaming profiles. If the ownership of the files and
folders in the profiles is "DOMAIN\Administrators", they work fine.
If I change the ownership of a user's profile folder and all files
and subfolders to the user's account, I get:

Windows cannot copy file \\roach\profiles\XP\gary\NTUSER.DAT to
location C:\Documents and Settings\gary.NTDOMAIN\NTUSER.DAT. Possible
causes of this error include network problems or insufficient
security rights. If this problem persists, contact your network
administrator.

DETAIL - The specified network name is no longer available.

I tried enabling the "do not check for ownership of roaming profile
folders" setting in the group policy administrative templates but
this made no difference. Why is this happening? I think people's
files should be owned by them instead of "administrators". Thanks for
any help.

It *is* owned by them when the roaming profile folder is created. It's only
changed if you change it.

If you change it (you need to change ownership if you want to change
anything), use Administrators (group). Reset NTFS permissions on all
subfolders so that Administrators, System, and the user account all have
full control - copy permisions before removing inheritance/applying changes.

I like doing this as I like having access as administrator to the profile
folders. Change this only when the user isn't logged in.

 

[Gary Roach]

Thanks - i see the problem now - i was checking the owner of the root folder
of the profile (\\roach\profiles\XP\gary). I had changed this to "gary"
along with all of its contents. in fact the owner of this folder has to be
"administrators" for the profile to work, but the contents can be owned by
the user.

"Lanwench [MVP - Exchange]"