roaming profile on XP workstation

[PAV]

I'm currently running Windows 2000 server with XP workstations. Today I
installed XP SP1, now the user of that work station cant log on, they get
the following error:

Windows did not load your roaming profile and is attempting to log you on
with your local profile. Windows did not load your profile because a server
copy of the profile folder already exists that does not have the correct
security. Either the current user of Administrator's group must be the owner
of the folder. Contact you network administrator.

The user is also unable to log on to other workstations. I and other users
can log on ok.

According to the person who used to look after IT, there are one or two
other users with the same problem.

Any ideas or suggestions on how to get this working again?

TIA

 

[Steven L Umbach]

I would make sure that the administrators group is the owner of the folder and that
it propagates to the other folders. The user should have the same permissions as the
other users have to their folders. I suppose there could be corruption in the profile
folder chain. It the administrator already is the owner, change it to another owner
and then after it is done propagating change it back to administrators or try a
command line utility such as fileacl to change ownership and permissions. --- Steve

fileacl c:\userfolder /s administrators:f /sub /force -- give administrators full
control
fileacl c:\userfolder /o administrators /sub /force -- make administrators owner
fileacl c:\userfolder /s user:rxwd /sub /force -- give user modify permissions

http://membres.lycos.fr/jfb/gb/gbtools/fileacl.htm
http://www.microsoft.com/downloads/...ea-34f0-4e6d-9a72-004d35de4e64&DisplayLang=en

 

[PAV]

When you talk about folders, you are talking about the profile folders on
the server arnt you? Sorry, i new to all this.

I have also read something about SP1 having a setting i can disable, i will
try this too.

 

[Steven L Umbach]

Yes. From your description, I assume you are using profile folders on a
server that is referred to in the users account in Active Directory Users
and Computers. --- Steve

 

[Gavin]

Hello.

I have tried two things today.

1. i changed the option in admin templates to ' Do not check for user
ownership of roaming profile folders'

2. I made it so everyone could vie the users profile, this made no
difference.

What i have noticed though: When i go right click on a users profile
folder, and click properties
, there is a security tap on the top. On all the profiles which are working
correctly, if i click this, i get an error, telling me i have to take
control etc.. but on the profiles that im having problems with, i can click
on the security tab and don't get an error.

I would be grateful for any help.

Gavin.

 

[PAV]

Sorry about posting from two accounts, work and home...



im still in search for the answer... im wondering, is there anyway to reset
the profile. Looking on the server, i cant delete the profiles as i dont
have permission (another problem ill have to sort - any ideas? I'm logged on
as Admin), anyhow if i go in to the properties of the user in active
directory, change the users profile location from server\profiles\username
to server\profiles\username2, will this then create a new profile when the
user logs on for the first time?



Gavin.

 

[Steven L Umbach]

The link below may help. Make sure that the user for the problem profile has full or
modify permissions to their folder and that the administrators group is owner as
shown in the security/advanced/ownership page. If that does not help, copy the users
current profile to a different location in case you need data from it, and then
delete it. Create a new folder making sure that the administrators group is the owner
and have the user try to logon again. The Group Policy setting you enabled may help
if the user is within the scope of influence of the policy [such at the domain
level], but maybe it did not propagate yet.--- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;327462

 

[Gavin]

Good morning.

I've bee messing around with a test user account this morning...I cant get
it to error, so i believe it must be a corrupt profile effecting the others.

I created a new folder and gave admin and the user permission and set this
folder as the profile, this has worked ) The user now has a nice new
profile.

For some reason (the way the server was set up... cant seem to get infor
from anyone who was here when it was done) I cant delete the old user
profiles, i get a message telling me it may be in use. This is only a small
problem, more of an annoyance i suppose. Any suggestions?

Anyhow, thanks for your help Steven.

Gavin

The link below may help. Make sure that the user for the problem profile has full or
modify permissions to their folder and that the administrators group is owner as
shown in the security/advanced/ownership page. If that does not help, copy the users
current profile to a different location in case you need data from it, and then
delete it. Create a new folder making sure that the administrators group is the owner
and have the user try to logon again. The Group Policy setting you enabled may help
if the user is within the scope of influence of the policy [such at the domain
level], but maybe it did not propagate yet.--- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;327462

Sorry about posting from two accounts, work and home...



im still in search for the answer... im wondering, is there anyway to reset
the profile. Looking on the server, i cant delete the profiles as i dont
have permission (another problem ill have to sort - any ideas? I'm logged on
as Admin), anyhow if i go in to the properties of the user in active
directory, change the users profile location from server\profiles\username
to server\profiles\username2, will this then create a new profile when the
user logs on for the first time?



Gavin.



it
to

http://www.microsoft.com/downloads/...ea-34f0-4e6d-9a72-004d35de4e64&DisplayLang=en

because
a one
or

 

[Guest]

Hi, I can't give you any XP-SP1 related info but we have a similar problem from time to time with a Win2K server and Win2K client environment.

Try changing the ownership of the folder containing the server version of the profile to "Domain Admins" but ensure that the security (& sharing permissions) allows the user (& you for admin purposes) Full Control of the folder. If this alone doesn't sort it, you could try deleting the contents of the server folder, so when the local version is written back to the server on log-out, there's no detrius in the folder.

Usually works for us.

Cheers,

Brian.

 

[Gavin]

When you say change ownership, how do you do that? I cant access the
security preperties of the folder, i cant delete it either.

Thanks
Gavin

Hi, I can't give you any XP-SP1 related info but we have a similar problem

from time to time with a Win2K server and Win2K client environment.

Try changing the ownership of the folder containing the server version of

the profile to "Domain Admins" but ensure that the security (& sharing
permissions) allows the user (& you for admin purposes) Full Control of the
folder. If this alone doesn't sort it, you could try deleting the contents
of the server folder, so when the local version is written back to the
server on log-out, there's no detrius in the folder.

 

[Gavin]

Just had a look, got it now. Ill try that take ownership method you talked
about, ive got two users with the problem, so when they are in next ill let
you know.

Thanks for you help - new to all this so sorry for all the questions!

 

[Steven Umbach]

You may need to take ownership first by selecting properties/security/advanced
ownership and change ownership to administrators being sure to select the box to
apply to all child objects. Then you should be able to go into
properties/security and give administrators full control. Then you should be
able to delete the profile unless corruption is involved and then sometimes
using something like fileacl can force necessary changes that may not propagate
through Windows Explorer gui. --- Steve

Good morning.

I've bee messing around with a test user account this morning...I cant get
it to error, so i believe it must be a corrupt profile effecting the others.

I created a new folder and gave admin and the user permission and set this
folder as the profile, this has worked ) The user now has a nice new
profile.

For some reason (the way the server was set up... cant seem to get infor
from anyone who was here when it was done) I cant delete the old user
profiles, i get a message telling me it may be in use. This is only a small
problem, more of an annoyance i suppose. Any suggestions?

Anyhow, thanks for your help Steven.

Gavin

The link below may help. Make sure that the user for the problem profile has full or
modify permissions to their folder and that the administrators group is owner as
shown in the security/advanced/ownership page. If that does not help, copy the users
current profile to a different location in case you need data from it, and then
delete it. Create a new folder making sure that the administrators group is the owner
and have the user try to logon again. The Group Policy setting you enabled may help
if the user is within the scope of influence of the policy [such at the domain
level], but maybe it did not propagate yet.--- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;327462

Sorry about posting from two accounts, work and home...



im still in search for the answer... im wondering, is there anyway to reset
the profile. Looking on the server, i cant delete the profiles as i dont
have permission (another problem ill have to sort - any ideas? I'm logged on
as Admin), anyhow if i go in to the properties of the user in active
directory, change the users profile location from server\profiles\username
to server\profiles\username2, will this then create a new profile when the
user logs on for the first time?



Gavin.



Hello.

I have tried two things today.

1. i changed the option in admin templates to ' Do not check for user
ownership of roaming profile folders'

2. I made it so everyone could vie the users profile, this made no
difference.

What i have noticed though: When i go right click on a users profile
folder, and click properties
, there is a security tap on the top. On all the profiles which are
working
correctly, if i click this, i get an error, telling me i have to take
control etc.. but on the profiles that im having problems with, i can
click
on the security tab and don't get an error.

I would be grateful for any help.

Gavin.

Yes. From your description, I assume you are using profile folders on a
server that is referred to in the users account in Active Directory
Users
and Computers. --- Steve


When you talk about folders, you are talking about the profile folders
on
the server arnt you? Sorry, i new to all this.

I have also read something about SP1 having a setting i can disable, i
will
try this too.


I would make sure that the administrators group is the owner of the
folder
and that
it propagates to the other folders. The user should have the same
permissions as the
other users have to their folders. I suppose there could be
corruption
in
the profile
folder chain. It the administrator already is the owner, change it
to
another owner
and then after it is done propagating change it back to
administrators
or
try a
command line utility such as fileacl to change ownership and
ermissions. --- Steve

fileacl c:\userfolder /s administrators:f /sub /force -- give
administrators full
control
fileacl c:\userfolder /o administrators /sub /force -- make
administrators owner
fileacl c:\userfolder /s user:rxwd /sub /force -- give user modify
permissions

http://membres.lycos.fr/jfb/gb/gbtools/fileacl.htm

http://www.microsoft.com/downloads/...ea-34f0-4e6d-9a72-004d35de4e64&DisplayLang=en