Security

Ask something
Discussion Locked

Roaming Profiles / Access Denied

0 helpful
2 replies

by leptor 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
All of our profiles are centrally stored and are automatically created. We are still in an NT4 domain with all the servers except for the PDC and BDC running Windows 2000. The problem is when the profiles are created, Administrators cannot access the files within those directories, only the User and the System account can. How can we set the Admin account to always have access to every profile? Any help would be appreciated.

2 replies

by pemrichm

Where are the Administrators at when they are trying to access these roaming profiles?

They must be attempting to access them from the NT4 Workstations.

In which case, I believe that these Administrators must be added to the Administrators Group on the local computers (the NT4 Workstations).

If not, maybe it's the other way around, and your local computer Administrators must be domain users, and have the privileges on the PDC system to access the contents of the users profiles (this attribute should replicate to the BDCs).

You can create domain user accounts on your PDC that have these properties, and add them to the Administrators Group using the local computer Administrator account on each NT4 Workstation.

by leptor

I found out that because we're in mixed mode, it's actually something that Microsoft did away with. If we were running in native mode (win2k) than the administrator's would automatically be added to the newly created profile directories. The workaround that we have found was to create the directory names first, then assign the proper permissions after the user logs on. Sorry for not getting back to this post sooner.

This discussion is closed to new replies.