Roaming profiles

[Guest]

Hi, I've created a user and copied a user profile from a local machine onto
the server and pointed that users profile to that directory. It loads the
profile fine but when I log off it won't save the changes to the profile back
to the server, I get the message "cannot update roaming profile....this user
may not have sufficient rights", the user is a member of the administrators
and domain admins groups, and has been explicitly added to the shares
permissions list so I would think it would have enough rights to write the
profile changes back to the server. Any suggestions?

 

[Lanwench [MVP - Exchange]]

Hi, I've created a user and copied a user profile from a local
machine onto the server and pointed that users profile to that
directory. It loads the profile fine but when I log off it won't save
the changes to the profile back to the server, I get the message
"cannot update roaming profile....this user may not have sufficient
rights", the user is a member of the administrators and domain admins
groups, and has been explicitly added to the shares permissions list
so I would think it would have enough rights to write the profile
changes back to the server. Any suggestions?

You should just have allowed the server copy of the profile to be created
when the user logged in after you set the profile path - don't manually
copy. Set your profile share up properly - I like to make it a hidden share
(profiles$) and use \\server\profiles$\%username% in the profile path. Make
sure the share permissions specify everyone=full control, and the NTFS
permissions grant users full control (permissions will be updated when the
profile is created).

As far as the current setup - take ownership on the server copy of the
user's profile folder as Administrators (the group, not the user
Administrator) and then reset the NTFS permissions on all subfolders so that
administrators, system, and the user have full control. You will probably
want to untick 'automatically inherit' (paraphrasing) and choose Copy
instead of Remove.

 

[Guest]

Thanks babe

You should just have allowed the server copy of the profile to be created
when the user logged in after you set the profile path - don't manually
copy. Set your profile share up properly - I like to make it a hidden share
(profiles$) and use \\server\profiles$\%username% in the profile path. Make
sure the share permissions specify everyone=full control, and the NTFS
permissions grant users full control (permissions will be updated when the
profile is created).

As far as the current setup - take ownership on the server copy of the
user's profile folder as Administrators (the group, not the user
Administrator) and then reset the NTFS permissions on all subfolders so that
administrators, system, and the user have full control. You will probably
want to untick 'automatically inherit' (paraphrasing) and choose Copy
instead of Remove.

 

[Lanwench [MVP - Exchange]]

Thanks babe