Profile creation problem during login

[Robert]

Hi,

I am currently building a 2000 terminal server with
Metaframe XPa, I am having troubles with the terminal
server creating profiles on a NT4 file server.

The terminal server profiles are stored on an NT4 file
server, these profiles are then copied to the 2000 server
when the user logs in, and then copied back when the user
logs out.

The issue is that when i create a new user, and 2000
creates all the profile directories on the NT4 server, I
cannot access them from the NT4 server using any
administrator accounts, I get access denied.

Is there any way that 2000 can create directories on an
NT4 server without messing up the security on the folders?

Thanks,

Robert

 

[Guest]

This is a problem with Win2k and roaming profiles. What I have dne to combay this issue is run xcacls via a batch file on a scheduled task on the W2k server. In my case, the first pass I have the administrators take ownership and then the second pass the appropriate permissions are added. I use helpdesk personnel to disable accounts via an interface I built, so adding that group with Full Control is essential for me to accomplish the tasks. Without their group having access and getting the access denied I'm sure you are used to keeps me from being able to archive those folders when users leave unless I manually would take ownership and set the permissions.

I did this function by scripting it. If you have any questions, I'll try to fill you in as needed. Take a look at the xcacls and adduser utility syntax first. It might be self explanatory.

AND TEST IT ON A TEST FOLDER FIRST BEFORE YOU TRY TO RUN THE XCACLS ON IT!!

Joe