Roaming profile security

[jesse]

Hello,
Recently my server A crash from a CPU failure ok.
when I fix everything and bring my server A back up I have
lost all my security rights for my roaming profile that is
on server B.
is this normal or is there soemthing that i should know
about.
For the profile, can we manual add back the rights to the
folder. If so the rights should be user- full control and
admin-full control , Correct?


Jesse

 

[Richard McCall [MSFT]]

If Server B was not a DC and you lost ServerA then your accounts were
recreated and the SID on the files\folders can not resolve to a user and you
will have to manually readd them.

 

[jesse]

Both of my server are DC. however I just dont understand
how can i suddenly lose all my rights for the profiles.

Ok After i re add the rights manually I still get a
message like this:
You do not have permission to access your central profile
located at \\server\share\folder.

I have check that the user have full rights and admin and
system have full rights to the folder and nothing works.

Any Ideas?

Now I just realize that I can't create any roaming profile
anymore.

Jesse

-----Original Message-----
If Server B was not a DC and you lost ServerA then your accounts were
recreated and the SID on the files\folders can not resolve to a user and you
will have to manually readd them.

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."

Hello,
Recently my server A crash from a CPU failure ok.
when I fix everything and bring my server A back up I have
lost all my security rights for my roaming profile that is
on server B.
is this normal or is there soemthing that i should know
about.
For the profile, can we manual add back the rights to the
folder. If so the rights should be user- full control and
admin-full control , Correct?


Jesse

.

 

[Drew Cooper [MSFT]]

I'm confused.
Where is the profile located? On server A? Server B? Some other machine?
Do you see this failure only when you try to log on to server A?
Did the permissions actually change when your server went down? (I find
that really hard to believe.)
Did you check both folder and share permissions?
Do you have a backup of server A from before it failed? (No telling what
may have been corrupted when the CPU freaked out and died.)
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Both of my server are DC. however I just dont understand
how can i suddenly lose all my rights for the profiles.

Ok After i re add the rights manually I still get a
message like this:
You do not have permission to access your central profile
located at \\server\share\folder.

I have check that the user have full rights and admin and
system have full rights to the folder and nothing works.

Any Ideas?

Now I just realize that I can't create any roaming profile
anymore.

Jesse

-----Original Message-----
If Server B was not a DC and you lost ServerA then your accounts were
recreated and the SID on the files\folders can not resolve to a user and you
will have to manually readd them.

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."

Hello,
Recently my server A crash from a CPU failure ok.
when I fix everything and bring my server A back up I have
lost all my security rights for my roaming profile that is
on server B.
is this normal or is there soemthing that i should know
about.
For the profile, can we manual add back the rights to the
folder. If so the rights should be user- full control and
admin-full control , Correct?


Jesse

.

 

[jesse]

The profiles are located in server B.
I seems like the share profile folder is gone and i cant
do anything with it anymore. All the permission was gone
also. I have no idea how this happen but it did.

However I seem to recreate a new share folder and move the
old roaming profiles to the new locate and a little more
configuration with the users, everything is back to normal.

this is very weird since both server are DC. but the
serverA was the scheme operator. Would that be a reason
why?

Jesse

-----Original Message-----
I'm confused.
Where is the profile located? On server A? Server B? Some other machine?
Do you see this failure only when you try to log on to server A?
Did the permissions actually change when your server went down? (I find
that really hard to believe.)
Did you check both folder and share permissions?
Do you have a backup of server A from before it failed? (No telling what
may have been corrupted when the CPU freaked out and died.)
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Both of my server are DC. however I just dont understand
how can i suddenly lose all my rights for the profiles.

Ok After i re add the rights manually I still get a
message like this:
You do not have permission to access your central profile
located at \\server\share\folder.

I have check that the user have full rights and admin and
system have full rights to the folder and nothing works.

Any Ideas?

Now I just realize that I can't create any roaming profile
anymore.

Jesse and
confers no that
is

.

 

[Drew Cooper [MSFT]]

Share and file permissions shouldn't have changed when server A went down.
Maybe something was corrupted on server A, then replicated when server A
came back online. Maybe something specific to server A was damaged - I'm
pretty AD-ignorant, but I know the first DC gets stuff like GC and FSMOs by
default.

You might get a better answer to your mystery on an AD or group policy
newsgroup.

It's good to know that your profiles are working again.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

The profiles are located in server B.
I seems like the share profile folder is gone and i cant
do anything with it anymore. All the permission was gone
also. I have no idea how this happen but it did.

However I seem to recreate a new share folder and move the
old roaming profiles to the new locate and a little more
configuration with the users, everything is back to normal.

this is very weird since both server are DC. but the
serverA was the scheme operator. Would that be a reason
why?

Jesse

-----Original Message-----
I'm confused.
Where is the profile located? On server A? Server B? Some other machine?
Do you see this failure only when you try to log on to server A?
Did the permissions actually change when your server went down? (I find
that really hard to believe.)
Did you check both folder and share permissions?
Do you have a backup of server A from before it failed? (No telling what
may have been corrupted when the CPU freaked out and died.)
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Both of my server are DC. however I just dont understand
how can i suddenly lose all my rights for the profiles.

Ok After i re add the rights manually I still get a
message like this:
You do not have permission to access your central profile
located at \\server\share\folder.

I have check that the user have full rights and admin and
system have full rights to the folder and nothing works.

Any Ideas?

Now I just realize that I can't create any roaming profile
anymore.

Jesse
-----Original Message-----
If Server B was not a DC and you lost ServerA then your
accounts were
recreated and the SID on the files\folders can not
resolve to a user and you
will have to manually readd them.

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and
confers no
rights."
message
Hello,
Recently my server A crash from a CPU failure ok.
when I fix everything and bring my server A back up I
have
lost all my security rights for my roaming profile that
is
on server B.
is this normal or is there soemthing that i should know
about.
For the profile, can we manual add back the rights to
the
folder. If so the rights should be user- full control
and
admin-full control , Correct?


Jesse



.

.