Security and Cryptography
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationSecurity and Cryptography

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old February 8th, 2005, 05:46 AM
morjo morjo is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2004
Posts: 42 morjo User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 8 h 30 m 6 sec
Reputation Power: 4
windows 2003 Profile Error

Not sure if i posted this in right channel but neways

Setup Win2003 Server and created Users.
Created a Profiles Folder on the C: and Shared it.

In Active Dir Users & Computers i added the //(servername)/Profiles/%Username%

However everytime i log out of a pc it says "Windows cannot update roaming profile, possible causes of error include network problems or insufficient security rights."

I gave that user full security and permission access to the Profiles folder but still same error. if i type in \\(servername) it allows me to access the profiles folder.

Help Please

Reply With Quote
  #2  
Old February 8th, 2005, 06:43 AM
mitakeet's Avatar
mitakeet mitakeet is offline
Last Day: May 28, 2005
Dev Shed Demi-God (4500 - 4999 posts)
 
Join Date: Jul 2003
Location: Maryland
Posts: 4,575 mitakeet User rank is Sergeant (500 - 2000 Reputation Level)mitakeet User rank is Sergeant (500 - 2000 Reputation Level)mitakeet User rank is Sergeant (500 - 2000 Reputation Level)mitakeet User rank is Sergeant (500 - 2000 Reputation Level)mitakeet User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 1 Week 2 Days 9 h 51 m 4 sec
Reputation Power: 21
I believe that your brackets are backwards, try '\\(servername)\Profiles\%Username%'.
__________________

Left DevShed May 28, 2005. Reason: Unresponsive administrators.
Free code: http://sol-biotech.com/code/.
Secure Programming: http://sol-biotech.com/code/SecProgFAQ.html.
Performance Programming: http://sol-biotech.com/code/PerformanceProgramming.html.

It is not that old programmers are any smarter or code better, it is just that they have made the same stupid mistake so many times that it is second nature to fix it.
--Me, I just made it up

The reasonable man adapts himself to the world; the unreasonable one persists in trying to adapt the world to himself. Therefore, all progress depends on the unreasonable man.
--George Bernard Shaw

Reply With Quote
  #3  
Old February 8th, 2005, 07:29 AM
morjo morjo is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2004
Posts: 42 morjo User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 8 h 30 m 6 sec
Reputation Power: 4
Quote:
Originally Posted by mitakeet
I believe that your brackets are backwards, try '\\(servername)\Profiles\%Username%'.


Sorry was a typo....yes i have the correct slashes in there still doesnt work....however i have mapped a drive to \\(servername)\Users\%Username% which works so i dont understand why the profiles doesnt work...maybe some policy issue?

Reply With Quote
  #4  
Old February 8th, 2005, 07:37 AM
mitakeet's Avatar
mitakeet mitakeet is offline
Last Day: May 28, 2005
Dev Shed Demi-God (4500 - 4999 posts)
 
Join Date: Jul 2003
Location: Maryland
Posts: 4,575 mitakeet User rank is Sergeant (500 - 2000 Reputation Level)mitakeet User rank is Sergeant (500 - 2000 Reputation Level)mitakeet User rank is Sergeant (500 - 2000 Reputation Level)mitakeet User rank is Sergeant (500 - 2000 Reputation Level)mitakeet User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 1 Week 2 Days 9 h 51 m 4 sec
Reputation Power: 21
I am not an admin, but I remember having similiar such problems at a previous job and am working off of memory, so keep that in mind. When the user initially logs on they have no security credentials, so any authentication is done on their behalf via the machine account. If the machine lacks access to the folder then it won't be able to copy the profile. Obviously giving each machine rights to each folder is problematic in an organization of any size so that couldn't have been the solution. I believe that the machine startup account was something besides localadmin or the logon procedure was launched as a central account or something like that. Hopefully others will see your post and provide more meaningful responses.

Reply With Quote
  #5  
Old February 8th, 2005, 02:45 PM
juniperr juniperr is offline
network dude
Dev Shed Intermediate (1500 - 1999 posts)
 
Join Date: Dec 2003
Posts: 1,679 juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 6 Days 21 h 55 m 2 sec
Reputation Power: 85
To work around this issue, verify that the user has sufficient permissions. At the share level, Full Control permissions are required. This is different from Windows NT 4.0, in which the Change share-level permission is sufficient.

At the NTFS level, the following permissions are required:
List Folder Contents
Read
Write

microsoft Q file 257848

Reply With Quote
  #6  
Old February 9th, 2005, 12:52 PM
morjo morjo is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Dec 2004
Posts: 42 morjo User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 8 h 30 m 6 sec
Reputation Power: 4
Quote:
Originally Posted by juniperr
To work around this issue, verify that the user has sufficient permissions. At the share level, Full Control permissions are required. This is different from Windows NT 4.0, in which the Change share-level permission is sufficient.

At the NTFS level, the following permissions are required:
List Folder Contents
Read
Write

microsoft Q file 257848



I have given a user Full Control of the Profiles folder and created a user folder within that folder and gave them full permissions to that also.....it still doesnt work.....as mentioned i can access the Profiles folder from a remote machine and i can also create new folders etc from that remote machine

Reply With Quote
  #7  
Old February 15th, 2005, 09:44 AM
juniperr juniperr is offline
network dude
Dev Shed Intermediate (1500 - 1999 posts)
 
Join Date: Dec 2003
Posts: 1,679 juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level)juniperr User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 6 Days 21 h 55 m 2 sec
Reputation Power: 85
ok you gave them full control at the share level but what did you give them at the NTFS level? also when you go to advanced security make sure you are not inhariting rights from a parent directory.

Last edited by juniperr : February 15th, 2005 at 09:46 AM.

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationSecurity and Cryptography > windows 2003 Profile Error


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 1 hosted by Hostway
Stay green...Green IT