User Profile Permissions -- Access is Denied

  • Thread starter Thread starter Mannington Administrator
  • Start date Start date
M

Mannington Administrator

Ok, I have the following permissions on the Users folder, all Full Control:
Administrators, Authenticated Users, Creator Owner, and System. On the
indivual profiles, I have all of the above, plus the actual user with Full
Control. However, when the user logs in, they can't write to any portion of
the profile. Trying to create something in My Documents gives Access is
Denied. The permissions are all full!! However, I did notice that a
permission gets added with the IDs.. starting with S-1-5-etc. Does this mean
I need to relink these accounts to account IDs? What should I do?
 
You might need to provide a bit more detail on this.

What OS's are involved?
Are you referring to a domain environment? If so, what version?
Are the "User folder" located on a server or on the user PC(s)?

My first guess would be that the "User folders" are being accessed
through a network share point and that the problem is the permissions on
the share itself.

However, your comment about the SIDs (e.g. S-1-5-...) indicates the
problem might be tied to network connectivity and/or a broken trust.
Either of these would prevent a machine from resolving a remote SID to
the associated account name.

Ok, I have the following permissions on the Users folder, all Full Control:
Administrators, Authenticated Users, Creator Owner, and System. On the
indivual profiles, I have all of the above, plus the actual user with Full
Control. However, when the user logs in, they can't write to any portion of
the profile. Trying to create something in My Documents gives Access is
Denied. The permissions are all full!! However, I did notice that a
permission gets added with the IDs.. starting with S-1-5-etc. Does this mean
I need to relink these accounts to account IDs? What should I do?
Click to expand...

--
Note, I seldom respond to email questions. Please keep discussions in
the news group, so everyone can benefit from them (including me <g>).
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
For direct access to all MS newsgroups: news://msnews.microsoft.com/

John R Buchan Orlando, Florida USA
MCSE -++- MVP ...................... jrb-tech(at)unknownegg(dot)org
 
The server is Windows Server 2003 and the clients are all Windows 2000 Pro.
The permissions on the share itself (\\Server\Users) is set to Everyone.
However, I have tried giving that folder the permissions of Administrators,
Authenticated Users, Creator Owner, and System. I've tried everything. The
user profiles are all stored in the path \\Server\Users\%Username%.

What should I do?
 
Is there a domain present?
Is the 2003 server a member of the domain?
Is the 2003 server a DC in the domain?
Are the 2000 clients members of the domain?

Are the accounts) to which you're assigning permissions domain accounts
or local accounts on the server? This refers to both users and groups.

Can you give a bit more detail on your comment about the permissions
appearing as SIDs? Exactly when do you seen this?
 
Yes this is a Windows domain. All computers (DC and clients) are members of
this domain. The users all log into the domain, not locally. The accounts
which I am assigning permissions are members of the domain.

As far as I can remember the SIDs appear as permissions immediately after I
log in with a particular account. My guess is that this account's SID is
attempting to auto-assign appropriate permissions for its own folder.
 
Back
Top