[THIN] Re: Cannot Delete/solution
- From: jstrowe@xxxxxxxxxxxxxxxx
- To: "Frederick R. Pabia" <Fred.Pabia@xxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 27 Dec 2004 09:16:41 -0500
----- Original Message -----
From: "Frederick R. Pabia" <Fred.Pabia@xxxxxxxxxxxxxxxxxxxxxxxx>
Date: Monday, December 27, 2004 9:06 am
Subject: RE: Cannot Delete
> Hi Jim,
> Yes. It was permissions on a sub-folder. Thanks. I'll look for the
> GPO. Happy New Year.
FRED HERE'S THE TID. Don't worry about the service pack, look for the GPO
issues. 222043 is the TID number
SYMPTOMS
When a roaming profile is written for the first time, permissions for the
created folder (\\Server\Profile\Username) that contains the roaming profile
are set as follows:
System: Full Control
Username: Full Control
Therefore, administrators do not have control of this area.
CAUSE
In Microsoft Windows NT 4.0, when the Administrators group is listed for the
parent folder of the new user profile folder, this permission is inherited by
the folder and files for the new user profile. In Windows 2000, this permission
is applied to System and the user only, without inheritance from the parent.
RESOLUTION
To resolve this problem, obtain the latest service pack for Windows 2000. For
additional information, click the following article number to view the article
in the Microsoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack
The English version of this fix should have the following file attributes or
later: Date Time Version Size File name
-------------------------------------------------------
07/26/2000 09:36a 738,586 System.adm
01/19/2001 05:57a 5.0.2195.2780 370,448 Userenv.dll
You must apply this hotfix to all domain controllers and clients. The hotfix
adds a new "Add the Administrators security group to roaming user profiles"
policy that must be applied by using Group Policy. To enable this new policy:
1. Start Microsoft Management Console (MMC). On the Console menu, click
Add/Remove Snap-in.
2. Add the Group Policy snap-in for the default domain policy. To do so, click
Browse when you are prompted to select a Group Policy object (GPO). The default
GPO is "Local Computer." Click Browse, and then click Default Domain Policy.
You can also add GPOs for other domain partitions (specifically, organizational
units).
3. Double-click the following items to open them: Computer Configuration,
Administrative Templates, System, and Logon.
4. Click to select the Add the Administrators security group to roaming user
profiles check box.
5. Click either Enable or Disable to enable or disable the new policy.
WORKAROUND
To work around this behavior, create the user profile folder ahead of time with
the appropriate permissions.
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that
are listed at the beginning of this article. This problem was first corrected
in Windows 2000 Service Pack 2.
MORE INFORMATION
The default location of the System.adm file for a default domain policy is:
%SystemRoot%\Sysvol\Sysvol\DomainName\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\System.adm
The contents of these folders are replicated throughout a domain by the File
Replication service (FRS). Note that the Adm folder is not populated until the
default domain policy is loaded for the first time.
For additional information about how to install Windows 2000 and Windows 2000
hotfixes at the same time, click the article number below to view the article
in the Microsoft Knowledge Base:
>
> -----Original Message-----
> From: Jim Strowe [jstrowe@xxxxxxxxxxxxxxxx]
> Sent: Sunday, December 26, 2004 8:10 AM
> To: thin@xxxxxxxxxxxxx
> Cc: Frederick R. Pabia
> Subject: Cannot Delete
>
>
> Fred you also might want to use filemon to see what might be accessing
> or holding the file open. The other fellow's method will work,
> but you
> should probably figure out what's the real problem.
> Checked the permissions? Source file in use sometimes points to a
> permissions issue. There are TID's at Microsoft pointing out that you
> (administrator) don't always GET permission to the documents and
> settings directory. (There's a GPO fix you have to do, I don't
> rememberwhat it is, but there is one)
>
> Check the permissions and make sure you have rights to delete
> period.
> -----------------------
> Good Morning,
> I have folders under 'Documents & Settings' which I can't delete. It
> says 'Access is denied. The source file may be in use'.
>
> The server in questions is not being used by any users and I have
> triedrebooting but I still cannot delete.
>
> Any help would be greatly appreciated. Thank you.
>
> Frederick R. Pabia
> Calgary Public Library
> 616 Macleod Trail SE
> Calgary, Alberta, Canada
> Telephone (403) 260 2744
> Facsimile (403) 234 8763
> E-mail Fred.Pabia@xxxxxxxxxxxxxxxxxxxxxxxx
> Internet http://CalgaryPublicLibrary.com
>
********************************************************
This Weeks Sponsor SeamlessPlanet.com Domain Names
Register your .com domain name for as low as $7.85
One of the lowest prices on the web! Part of The Kenzig Group.
http://www.seamlessplanet.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Awesome SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
- » [THIN] Re: Cannot Delete/solution
