Permissions issue, profiles not accessable etc

[Guest]

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

History: -

I did an upgrade to my servers, basically I had SBS 2003 with 50 users on
it, the server was old so we bought a new server. I built the server to be a
2003 Server in the same domain, server name, same settings the lot etc and
then installed Exchange with all the same settings etc etc

I then manually re-created all the users (easiest way as I only have 50
users, didn’t want to swing or migrate, wanted to leave current config in
place while I built the other).

I then Exmerged all the email, copied all the data and profiles, switched
off the old servers plugged in the new, re-added all the PC’s to the new
domain.

Issue: -

When I log in (with admin privileges) my profile comes down correctly, my
email works, printers are available and policies are present. All works fine.

When a normal user logs in (with Domain User privileges) firstly the group
policies aren't coming into effect. No got any more info than this at the
min, no errors no nothing! I backed up and restored my GPO's from the last
server.

Secondly when my users log on and download there profile form the server
they don't see all of the profile. I restored there profiles from backup.
When I look on the PC when they are logged in in documents and settings at
the profile they can only see certain folders: -

Users Documents
Desktop
Favorites
Start Menu
WINDOWS

They can't see: -

Application Data
Local Settings
etc
etc

I thought at first it wasn't downloading those folders but if I log on as an
administrator and click on the cached copy of there profile all the folders
are there, it's only when they are logged in that they can't see it.

It shouldn't be a permissions thing on the folder as they can download it.

It's not that they are hidden as I clicked to show hidden files and folders.
This is causing outlook to fail as they can't see the application data
folder. Also no printers etc

Anyone any ideas as to what’s happening here? Not sure if there’s an overall
permissions issue because the way I got round this problem was to put all my
users into the Domain Admins group, everything works fine now but I need to
get them all out of Domain Admins asap!

Any help would be greatly appreciated.

Thanks in advance.

Mike

 

[Guest]

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

If I understand this correctly you Installed a new machine, built a new
domain, and created new users.
New users will have new Security IDs, so previous permissions to
files/folders will not be valid any longer.
As far as GPOs not appling you should at the very least see some events in
the application log. If not I would recommend enabling Userenv logging,
this might be helpful for both issues.

221833 How to enable user environment debug logging in retail builds of
Windows
http://support.microsoft.com/?id=221833

My initial guess is permissions. An easy test would be for one user add
their new domain account to the profile with full control and push that down
to the child objects. I would also do the same thing at the ownership tab.

James

--
James Brandt [MSFT]


"Ziguana" <Ziguana@discussions.microsoft.com> wrote in message
news:CEC0E195-9372-4411-A8FE-E8B57408318F@microsoft.com...
> History: -
>
> I did an upgrade to my servers, basically I had SBS 2003 with 50 users on
> it, the server was old so we bought a new server. I built the server to be
> a
> 2003 Server in the same domain, server name, same settings the lot etc and
> then installed Exchange with all the same settings etc etc
>
> I then manually re-created all the users (easiest way as I only have 50
> users, didn't want to swing or migrate, wanted to leave current config in
> place while I built the other).
>
> I then Exmerged all the email, copied all the data and profiles, switched
> off the old servers plugged in the new, re-added all the PC's to the new
> domain.
>
> Issue: -
>
> When I log in (with admin privileges) my profile comes down correctly, my
> email works, printers are available and policies are present. All works
> fine.
>
> When a normal user logs in (with Domain User privileges) firstly the group
> policies aren't coming into effect. No got any more info than this at the
> min, no errors no nothing! I backed up and restored my GPO's from the last
> server.
>
> Secondly when my users log on and download there profile form the server
> they don't see all of the profile. I restored there profiles from backup.
> When I look on the PC when they are logged in in documents and settings
> at
> the profile they can only see certain folders: -
>
> Users Documents
> Desktop
> Favorites
> Start Menu
> WINDOWS
>
> They can't see: -
>
> Application Data
> Local Settings
> etc
> etc
>
> I thought at first it wasn't downloading those folders but if I log on as
> an
> administrator and click on the cached copy of there profile all the
> folders
> are there, it's only when they are logged in that they can't see it.
>
> It shouldn't be a permissions thing on the folder as they can download it.
>
> It's not that they are hidden as I clicked to show hidden files and
> folders.
> This is causing outlook to fail as they can't see the application data
> folder. Also no printers etc
>
> Anyone any ideas as to what's happening here? Not sure if there's an
> overall
> permissions issue because the way I got round this problem was to put all
> my
> users into the Domain Admins group, everything works fine now but I need
> to
> get them all out of Domain Admins asap!
>
> Any help would be greatly appreciated.
>
> Thanks in advance.
>
> Mike
>