+ Reply to Thread
Results 1 to 9 of 9
  1. Senior Member tdean's Avatar
    Join Date
    Mar 2009
    Posts
    522
    #1

    Question Profiles not loading, please help.

    i havent done much permission stuff in years. we are having a problem with some users getting an error that their profile wont load. the permissions are all screwed up here. whats a quick fix for this? rt clicking the profile folder and adding domain users with full permission and propagate to child objects? we just need to get through the week b/c we are wiping everything over the weekend.
    Reply With Quote Quote  

  2. SS -->
  3. Solutions Architect gateway's Avatar
    Join Date
    May 2010
    Location
    Manchester, UK
    Posts
    232

    Certifications
    MCITP:EDA7, EDST7, MCSA 2003, MCSA Windows 7 NetApp NCDA-7 Mode VCP5-DCV, VCP6-DCV ITILv3-Foundation, ITILv3-Intermediate-OSA, AWS CSA
    #2
    How did this happen?

    Depending on the problem, local admin rights should do the trick, or you can re point the profiles in the registry if they are really screwed.

    hklm\software\microsoft\windows nt\current version\profilelist

    The profile by default should have local administrators, system, and the domain user account of whoever the profile belongs to in the ACL.

    HTH
    Reply With Quote Quote  

  4. Senior Member tdean's Avatar
    Join Date
    Mar 2009
    Posts
    522
    #3
    i removed the acct of the former IT company from years ago. then half the profiles blew up. how about if i went back to the root folder and checked the "propagate" box. would that reset things?

    right now, i have it exactly like this, but its not working b/c it was never set up right.

    Security Recommendations for Roaming User Profiles Shared Folders: Group Policy

    the ones that are working, when i click on them it says i dont have permissions to view. even though i am in the domain admin group.
    Reply With Quote Quote  

  5. Its all smoke and mirrors dales's Avatar
    Join Date
    Jan 2008
    Posts
    223

    Certifications
    vExpert 2014+2015, VCP5-DT,VCP3+5, CCE-V, CCE-AD, CCP-AD ,CCEE, CCAA XenApp, CCA Netscaler,Xenapp 6.5,Xendesktop 5 & Xenserver 6,MCSA, MCDST, MCP, A+
    #4
    You'll need to take ownership of the folders and sub folders, might as well go from docs and settings under the folder properties goto advanced and then the owner tab, click on a user account or group (best to be domain admins) and then check the replace owner on sub container then click ok, do a bit of progress bar engineering and you should now have access to whatever you want.
    Reply With Quote Quote  

  6. Senior Member tdean's Avatar
    Join Date
    Mar 2009
    Posts
    522
    #5
    its weird b/c some people can get profiles off one particular term server, but not the other. permissions are the same on both.
    Reply With Quote Quote  

  7. Senior Member tdean's Avatar
    Join Date
    Mar 2009
    Posts
    522
    #6
    Quote Originally Posted by dales View Post
    You'll need to take ownership of the folders and sub folders, might as well go from docs and settings under the folder properties goto advanced and then the owner tab, click on a user account or group (best to be domain admins) and then check the replace owner on sub container then click ok, do a bit of progress bar engineering and you should now have access to whatever you want.
    i did that with a bunch of them and now their profiles wont load.
    Reply With Quote Quote  

  8. Senior Member tdean's Avatar
    Join Date
    Mar 2009
    Posts
    522
    #7
    now for some reason when i try to use tsadmin, i get a message i am not authorized on that server. this is all new.
    Reply With Quote Quote  

  9. Senior Member Devilsbane's Avatar
    Join Date
    Apr 2010
    Posts
    4,203

    Certifications
    MCSE:Security, MCDST, A+, Network+, Security+, ITIL V3 Foundations, ITIL 2011 Intermediate: Service Transition, MOS 2007 (MCAS) BAS Computer Forensics
    #8
    I've seen this on my personal laptop once. I was able to restart and everything came back (I suspected a failing HDD).

    But we also see this once every couple reasons, not sure why exactly. Every so often someone will boot up and windows will build them a new profile because the old one couldn't be and they call into our help desk about icons on their desktop being missing. It is a pretty quick fix to restore the documents from the old profile over to the new one, but I'm not sure why it is happening in the first place.
    Reply With Quote Quote  

  10. Solutions Architect gateway's Avatar
    Join Date
    May 2010
    Location
    Manchester, UK
    Posts
    232

    Certifications
    MCITP:EDA7, EDST7, MCSA 2003, MCSA Windows 7 NetApp NCDA-7 Mode VCP5-DCV, VCP6-DCV ITILv3-Foundation, ITILv3-Intermediate-OSA, AWS CSA
    #9
    Quote Originally Posted by tdean View Post
    i removed the acct of the former IT company from years ago.
    What exactly do you mean by this?

    Sorry, I wasn't aware that you were referring to roaming profiles.

    Take a look at subinacl to re-drill permissions back through profiles, make sure you only test it on one profile at a time until you get it working. You will need to make sure that the individual domain accounts of the people who own these profiles is also listed on the ACL.

    Also check permissions all the way through the folder structure to where your profiles are located. Use effective permissions on ntuser.dat to see if the domain user account has full control.
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks