Roaming Profiles Prevent GPO from applying

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Strange problem. I created a roaming profile for a user for an active directory user. Check the profile and it follows around the user with no problem. First I make a backup of the profile directory and then I make the profile a mandatory profile by changing ntuser.dat to ntuser.man. Profile still works like a champ tried it on several machines. Assigned user permission to this profile to allow everyone to have access to it. Assign the roaming profile to another user in the property box for another user. Log in using the other user account. Profile downloads and seems to be working with no problems.

Next I created a new GPO and linked it to the same OU and configured it. Set all the security settings and log in to the original account that I used to make the profile. GPO settings apply perfectly. Log in using the other account and they don't apply at all. Check GPO security and it seems to have proper permissions for the users and it does. I remove the Profile associated second user account and logged in and tried it again. The GPO applied. I create a new user and login without user profile and the GPO applies fine. I create a new roaming profile and associate it to the new test account. Log in and out of several computers and the profile and GPO applies fine. I associate another user in the OU to the same new roaming profile and the GPO no longer applies. I need a generic desktop with a predefined set of icons for multiple users and I don't want them to edit the icons. I would really like to make Multiple users use the same manditory profile. Any ideas
 
Mandatory profiles aren't the same as roaming profiles. You're only talking
about mandatory profiles, right?

When you log on with a mandatory profile are all of the policies not being
applied or just some of them? Knowing which ones might yield further clues.

Have you checked the event logs? Usually when policy fails to apply there's
diagnostic info there.

For extended diagnostic info about the profile load, check out the
troubleshooting section here:
http://www.microsoft.com/technet/tr...et/prodtechnol/winxppro/maintain/XPUsrDat.asp

There are also a couple of newsgroups for group policy questions:
microsoft.public.windows.group_policy
microsoft.public.win2000.group_policy

I know that doesn't solve your problem, but there aren't enough clues yet to
know what's happening.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Jonathan Lackey said:
Strange problem. I created a roaming profile for a user for an active
Click to expand...
directory user. Check the profile and it follows around the user with no
problem. First I make a backup of the profile directory and then I make the
profile a mandatory profile by changing ntuser.dat to ntuser.man. Profile
still works like a champ tried it on several machines. Assigned user
permission to this profile to allow everyone to have access to it. Assign
the roaming profile to another user in the property box for another user.
Log in using the other user account. Profile downloads and seems to be
working with no problems.
Next I created a new GPO and linked it to the same OU and configured it.
Click to expand...
Set all the security settings and log in to the original account that I used
to make the profile. GPO settings apply perfectly. Log in using the other
account and they don't apply at all. Check GPO security and it seems to have
proper permissions for the users and it does. I remove the Profile
associated second user account and logged in and tried it again. The GPO
applied. I create a new user and login without user profile and the GPO
applies fine. I create a new roaming profile and associate it to the new
test account. Log in and out of several computers and the profile and GPO
applies fine. I associate another user in the OU to the same new roaming
profile and the GPO no longer applies. I need a generic desktop with a
predefined set of icons for multiple users and I don't want them to edit the
icons. I would really like to make Multiple users use the same manditory
profile. Any ideas?
 
The person who owns the roaming profile has no problem accessing it. But when you try to assign the same profile to another user you get folder redirection warnings in the event viewer. I set the computer GPO to ignore ownership but still no dice. When the user who doesn't own the Folder with the profile it stops and the user GPO fails as a result. At first I only gave the users read to the folder but then I added modify and then I tried full control. I can create several mandatory profiles from a copy and then assign each user to their own copy and take ownership of the folder with that user but it seems like this should work.
 
I'm stumped. I'll see if I can get one of the Intellimirror folks to help.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Jonathan Lackey said:
The person who owns the roaming profile has no problem accessing it. But
Click to expand...
when you try to assign the same profile to another user you get folder
redirection warnings in the event viewer. I set the computer GPO to ignore
ownership but still no dice. When the user who doesn't own the Folder with
the profile it stops and the user GPO fails as a result. At first I only
gave the users read to the folder but then I added modify and then I tried
full control. I can create several mandatory profiles from a copy and then
assign each user to their own copy and take ownership of the folder with
that user but it seems like this should work.
 
Back
Top