One of the users within our organization who uses roaming profile had
some problems with starting Outlook and his profile wasn't loading
properly. As I thought it must have something to do with permissions
on his profile I started messing with permission settings. What I've
got at the moment is:

On Profiles folder

Everyone - Full Access Share permission on this folder and subfolders

Administrator and Administrators - Full Control NTFS on this folder
and subfolders
System - Full Control on this folder and subfolders
Creator Owner - Full Control on subfolders and files only
Domain Users - Full control - this folder, subfolders and files
Users - Read and Execute on this and subfolders
Users - Special on Profiles and subfolders

Allow inheritable permissions... unticked
Owner = Administrators

Then on user profile folders I've got:

Allow inheritable permissions... ticked
Owner = Administrators

Administrators - Special (Full control - not inherited- this folder
only)
Creator Owner - Special (Full control - not inherited- subfolders and
files only)
The User - Full control - not inherited - this folder, subfolders and
files
Administrator - Full control - inherited from Profiles - This folder
only
Administrators - Full control - inherited from Profiles - This folder
only
Domain Users - Full control - inherited from Profiles - this folder,
subfolders and files
System - Full control - inherited from Profiles - this folder,
subfolders and files
Users - Special (Create files and folders) - inherited from Profiles
- this folder and subfolders
Users - R&E - inherited from Profiles - this folder, subfolders and
files

Now the problem is that although as you can see The User has Full
control on his profile folder,
subfolders and files and I ticked the Replace permission entries...
check box when applying changes
there are still some folders inside the profile folder that The User
has no access to. Effectively his
profile cannot load when he's trying to log in.
How can it be fixed?

Jarek

Yaro

I can't quite understand why you would mess around with permissions when
it's only one user that is experiencing a problem. If I were you I would make
sure that you back up all of the users data and info within the profile (just
to be on the safe side), log the user out, delete or if you cannot to this
then rename the profile, ask the user to log back in again which will then
create a new profile then all you have to do is to restore anything that is
missing.

Regards,

G. Lucas MCP

"yaro" wrote:

> One of the users within our organization who uses roaming profile had
> some problems with starting Outlook and his profile wasn't loading
> properly. As I thought it must have something to do with permissions
> on his profile I started messing with permission settings. What I've
> got at the moment is:
>
> On Profiles folder
>
> Everyone - Full Access Share permission on this folder and subfolders
>
> Administrator and Administrators - Full Control NTFS on this folder
> and subfolders
> System - Full Control on this folder and subfolders
> Creator Owner - Full Control on subfolders and files only
> Domain Users - Full control - this folder, subfolders and files
> Users - Read and Execute on this and subfolders
> Users - Special on Profiles and subfolders
>
> Allow inheritable permissions... unticked
> Owner = Administrators
>
> Then on user profile folders I've got:
>
> Allow inheritable permissions... ticked
> Owner = Administrators
>
> Administrators - Special (Full control - not inherited- this folder
> only)
> Creator Owner - Special (Full control - not inherited- subfolders and
> files only)
> The User - Full control - not inherited - this folder, subfolders and
> files
> Administrator - Full control - inherited from Profiles - This folder
> only
> Administrators - Full control - inherited from Profiles - This folder
> only
> Domain Users - Full control - inherited from Profiles - this folder,
> subfolders and files
> System - Full control - inherited from Profiles - this folder,
> subfolders and files
> Users - Special (Create files and folders) - inherited from Profiles
> - this folder and subfolders
> Users - R&E - inherited from Profiles - this folder, subfolders and
> files
>
> Now the problem is that although as you can see The User has Full
> control on his profile folder,
> subfolders and files and I ticked the Replace permission entries...
> check box when applying changes
> there are still some folders inside the profile folder that The User
> has no access to. Effectively his
> profile cannot load when he's trying to log in.
> How can it be fixed?
>
> Jarek
>

Well that sound like a plan but applying changes to permissions seemed
to me to be
much faster way of fixing it. Also it would be good to know why my
chanes to permissions
are not being propagated to all of the subfolders.
yaro