[THIN] Re: Romaing profile permissions

  • From: Adam.Baum@xxxxxxxxxxxxxx
  • To: thin@xxxxxxxxxxxxx
  • Date: Mon, 6 Oct 2003 07:17:46 -0700

Access Denied errors.  Found a bunch of Technet articles.  Turns out the
permissions don't get set correctly.  MS uses a different API call when
creating profiles and it ignores inherited permissions.  The default
settings are System, Full Control and <User>, Full Control.   It was
supposed to have been fixed in W2K SP1, but I still get the problem.
According to KB222043, the fix is to either manually create the profile
folder before the user logs on or to run policy editor and change the
system policy so that "Add the Administrators security group to roaming
user profiles" is enabled.

adam




                                                                                
                                                      
                      "David E. Payne"                                          
                                                      
                      <DPayne@xxxxxxxxx        To:       <thin@xxxxxxxxxxxxx>   
                                                      
                      m>                       cc:                              
                                                      
                      Sent by:                 Subject:  [THIN] Re: Romaing 
profile permissions                                       
                      thin-bounce@freel                                         
                                                      
                      ists.org                                                  
                                                      
                                                                                
                                                      
                                                                                
                                                      
                      10/04/2003 04:45                                          
                                                      
                      PM                                                        
                                                      
                      Please respond to                                         
                                                      
                      thin                                                      
                                                      
                                                                                
                                                      
                                                                                
                                                      




 If you enter the profile path into the user's NT account, NT will
create the profile folder for you and set the permissions correctly.
Other than that, it sounds like the permissions you've set are correct.
You don't have to apply the individual ID to the directory.

What type of errors are you getting?

-dave

PS:  How's the weather in Phoenix these days?  I'm a GHS alumni.

-----Original Message-----
From: Adam.Baum@xxxxxxxxxxxxxx [mailto:Adam.Baum@xxxxxxxxxxxxxx]
Sent: Friday, October 03, 2003 10:25 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Romaing profile permissions

Hi All,

In an NT domain with W2K metaframe and resource servers, what
permissions do I need to have on the profiles directory?  I have given
Domain Users, Admins, etc  Full Control but I get a lot of errors.  Do I
have to apply the individual user id to his/her profile directory?

adam


********************************************************
This Week's Sponsor - Emergent Online
Essential Thin Client Utilities.
Meet Jim Kenzig of thethin.net at the Emergent Online Booth #24 at
Citrix iForum on October 13th.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com

For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode
use the below link:
http://thethin.net/citrixlist.cfm

********************************************************
This Week's Sponsor - Emergent Online
Essential Thin Client Utilities.
Meet Jim Kenzig of thethin.net at the Emergent Online
Booth #24 at Citrix iForum on October 13th.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com

For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm





********************************************************
This Week's Sponsor - Emergent Online
Essential Thin Client Utilities.
Meet Jim Kenzig of thethin.net at the Emergent Online
Booth #24 at Citrix iForum on October 13th.
http://www.go-eol.com 
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: