Why do non-admins lose changes when logging off

J

Jason

I have 5 new laptops with Windows XP on them in a Windows
2000 Active directory network that will not save changes
made by users. If I put the users in question in all the
administrative groups, the changes they make while logged
in will stay when they log off. I have looked in "gpedit"
and changed a few things that I thought would work, but to
no avail. I'm apparently not changing the right
settings. Is this even a XP issue or is it something in
my permissions of AD? Any insight will be greatly
appreciated.

Jason
 
B

Barney Mowder

Jason said:
I have 5 new laptops with Windows XP on them in a Windows
2000 Active directory network that will not save changes
made by users. If I put the users in question in all the
administrative groups, the changes they make while logged
in will stay when they log off. I have looked in "gpedit"
and changed a few things that I thought would work, but to
no avail. I'm apparently not changing the right
settings. Is this even a XP issue or is it something in
my permissions of AD? Any insight will be greatly
appreciated.

Jason


Jason-

I have been pursuing this problem in the thread "Local profiles for
network users without granting admin rights" for some time now. If
someone posts a reply which tells which exact specific privileges are
required but does not require the granting of administrative
privilege, PLEASE send me a copy of the message? Thanks.

Barney
 
T

techguru100

Jason-

Do those users in question have mandatory profiles
assigned to them? If so, only the Administrators group
can save changes to profiles at logoff.
 
G

Guest

I'm not sure how to check which kind of profile is being
used. Is it as simple as looking at the extension of the
ntuser.xxx file? Would I look at the copy of ntuser on
the client machine, or do I have to set up a \\profile\%
sername% entry on a server? I am new to AD so any help
will be appreciated.

Jason
 
T

techguru100

Ok, here are some steps into checking the profile types.
You will need to be logged on with admin privs to complete
these procedures.

Procedure 1: Open the System control panel, then move to
the Advanced tab, then click the button in "User Profiles"
When the dialog appears, look for the word "Mandatory" in
the Status and Type columns.
Procedure 2: Check the user's profile path mapping. One
example is to use "net user
(account_that_you_want_to_check)" at a command prompt. Be
sure to look carefully at the Profile Path field.
Procedure 3: If you know the path of the user's central
profile(s)(as found in Procedure 2), browse to that
location. Check for a file named "ntuser.man",
or "ntuser.man.dat" or "ntuser.dat.man" (Note: You may
need to show all files, including protected operating
system files.)
Procedure 4: Search any mapped network drives
for "ntuser.*" files. Profile folders marked as mandatory
will have a .man extension to the folder name and/or the
ntuser file.

BTW-You may also want to check permissions and/or read-
only attribs for profile folders and files within them .
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top