Mantatory Profile Woes

  • Thread starter Thread starter KWME
  • Start date Start date
K

KWME

Guest
I'm running a Server 2003 network in a school setting where I'd like things
to be pretty locked-down. I use both mandatory profiles and group policy to
lock down user accounts. Lately I've had consistent errors when all users
load the mandatory profile. The error message states that the profile is
unavailable and that the error is that the system couldn't find the file
specified. I've checked and rechecked the permissions on the share where the
profile is located and they check-out. One thing I have noticed is that when
I change the file name from ntuser.dat to ntuser.man the file type label
doesn't change from "dat" to "man". It just stays on ".man" and when I get
out of the folder and then back into the folder the name has changed back to
".dat". Any help would be very welcome.
 
Re: Mantatory Profile Woes


"KWME" <KWME@discussions.microsoft.com> wrote in message
news:CA8B955E-BC1C-413A-84FB-4BCB47EBB0CF@microsoft.com...
> I'm running a Server 2003 network in a school setting where I'd like
> things
> to be pretty locked-down. I use both mandatory profiles and group policy
> to
> lock down user accounts. Lately I've had consistent errors when all users
> load the mandatory profile. The error message states that the profile is
> unavailable and that the error is that the system couldn't find the file
> specified. I've checked and rechecked the permissions on the share where
> the
> profile is located and they check-out.

SHARE permissions AND NTFS permission on the files, especially the
NTUser.MAN
file.

> One thing I have noticed is that when
> I change the file name from ntuser.dat to ntuser.man the file type label
> doesn't change from "dat" to "man". It just stays on ".man" and when I
> get
> out of the folder and then back into the folder the name has changed back
> to
> ".dat". Any help would be very welcome.

Huh? If you don't have enough permission to rename the file then you
need to get access to the file and get this done.

For one thing I would STOP using the (stupid) Explorer and use the COMMAND
PROMPT so you can see the file (almost) directly and not having some dumb
"gui" program 'interpreting' what you see.

NTFS and Share permission are COMPLETELY separate. They must BOTH
be SUFFICIENT for the users to access the files. (At least READ for
Mandatory
Profiles, files and shares.)
 
Back
Top