user permission to local drive & roaming profiles

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

My users can read, but can't edit, save, move or copy files located on their
local drive. I've recently swithced to roaming profiles. I'm using 2003
servers and XP pro clients. The user can log on and access any network
resource. All local software works correctly. I'm sure I'm missing
something simple. I'm not assigning any user permission at the client ...
which I guess is the issue. How do I go about giving the user access to the
local drive without manually adding them as local users with certain
permissions? Needing to do this would defeat the capabilities of roaming
profiles.

Any ideas?

Chris H

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

In news:929AADEC-33DE-4A7C-A377-D8957DAD3F23@microsoft.com,
chawk <chawk@discussions.microsoft.com> typed:
> My users can read, but can't edit, save, move or copy files located
> on their local drive. I've recently swithced to roaming profiles.
> I'm using 2003 servers and XP pro clients. The user can log on and
> access any network resource. All local software works correctly.
> I'm sure I'm missing something simple. I'm not assigning any user
> permission at the client ... which I guess is the issue. How do I go
> about giving the user access to the local drive without manually
> adding them as local users with certain permissions? Needing to do
> this would defeat the capabilities of roaming profiles.
>
> Any ideas?
>
> Chris H

OT, but why would you want them to do anything with the local drive if
you're on a domain anyway? They shouldn't be storing data there.

Is Domain Users a member of Users on the local workstation?

Are you using group policy to lock anything down?

Are you using folder redirection for My Documents (at the very least - also
may wish to redirect Desktop) to the user's home directory?

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Lanwench,

I'm not using GP to lock anything.

Yes, I'm using folder redirection for My Docs, Dekstop and App Data.

No, I don't have Domain Users in the local User account. This is probably
the problem.

Access to the local drive is more of an issue for users' older files that
were placed on the C drive, rather than in a folder in their profile. Also,
I think there's an issue with certain software that needs to access the C
drive to create temp files other than the standard Temp folder.

Anyway, I'll try modifying the local User account ... this should do the
trick.

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

In news:57C4AC2E-4DD6-4311-9348-88AAFB05199F@microsoft.com,
chawk <chawk@discussions.microsoft.com> typed:
> Lanwench,
>
> I'm not using GP to lock anything.
>
> Yes, I'm using folder redirection for My Docs, Dekstop and App Data.
>
> No, I don't have Domain Users in the local User account. This is
> probably the problem.

Yep. They'd be there by default - so someone changed this.
>
> Access to the local drive is more of an issue for users' older files
> that were placed on the C drive, rather than in a folder in their
> profile.

Move it to the server or show the users how to do it - if it's business
data, that is.

> Also, I think there's an issue with certain software that
> needs to access the C drive to create temp files other than the
> standard Temp folder.

You can play with that.
>
> Anyway, I'll try modifying the local User account ... this should do
> the trick.