Roaming profile and my documents redirection not working with domain users on reinstal

[BenBloss]

Just purchased new server hardware and have reinstalled sbs using the same domain name and user accounts. Thought I would start from scratch seeing as had some problems with some of the user accounts on old server.
Well now the roaming profiles and my documents redirection do not work with Domain Users, but do with Domain Admins?
I have used xcacls and subinacl to make sure all securities are set and have set all the sharing and securities the same as old server settings.
Why are Domain Users not working?
Thanks in advance to anyone who can help.
Ben

Have you dropped the users back to workgroup and then re-joined the uses to
the domain ?
( the users will need to pick up the new Account SIDs - which means that
they will get new profiles too... )

--
Henry Craven {SBS-MVP}


"BenBloss" <BenBloss.2tfjfs@DoNotSpam.com> wrote in message
news:BenBloss.2tfjfs@DoNotSpam.com...
>
> Just purchased new server hardware and have reinstalled sbs using the
> same domain name and user accounts. Thought I would start from scratch
> seeing as had some problems with some of the user accounts on old
> server.
> Well now the roaming profiles and my documents redirection do not work
> with Domain Users, but do with Domain Admins?
> I have used xcacls and subinacl to make sure all securities are set and
> have set all the sharing and securities the same as old server
> settings.
> Why are Domain Users not working?
> Thanks in advance to anyone who can help.
> Ben
>
>
> --
> BenBloss
> ------------------------------------------------------------------------
> BenBloss's Profile: http://forums.techarena.in/members/27690.htm
> View this thread: Roaming profile and my documents redirection not working with domain users on reinstal
>
> http://forums.techarena.in
>

That's as expected, Ben ... even though you used the same domain/server
name, under the hood, the SID is different between the two servers, thus
requiring that you drop each workstaiton back to workgroup and rejoin.
That's one of the reasons we suggest using Jeff's Swing Migration, as it
retains the existing workstation functions, including roaming profiles.

http://www.sbsmigration.com/migratio...wing-migration

--
Kevin Weilbacher [SBS MVP]
"The days pass by so quickly now, the nights are seldom long"
"BenBloss" <BenBloss.2tfjfs@DoNotSpam.com> wrote in message
news:BenBloss.2tfjfs@DoNotSpam.com...
>
> Just purchased new server hardware and have reinstalled sbs using the
> same domain name and user accounts. Thought I would start from scratch
> seeing as had some problems with some of the user accounts on old
> server.
> Well now the roaming profiles and my documents redirection do not work
> with Domain Users, but do with Domain Admins?
> I have used xcacls and subinacl to make sure all securities are set and
> have set all the sharing and securities the same as old server
> settings.
> Why are Domain Users not working?
> Thanks in advance to anyone who can help.
> Ben
>
>
> --
> BenBloss
> ------------------------------------------------------------------------
> BenBloss's Profile: http://forums.techarena.in/members/27690.htm
> View this thread: Roaming profile and my documents redirection not working with domain users on reinstal
>
> http://forums.techarena.in
>

[BenBloss]

thanks for the wisdom.
I had logged off the network and logged back on again before trying the above.

To fix the problem I have created a new profile and my documents share for the users and then told then they will have recreate their pretty desktops and copy their documents in to their new my documents from the old ones that I have shared for everyone for now. Fortunately we don't need much security so for now they can copy their documents and I will unshare the old my documents in a week or so.
I can't wait for the moans and groans tomorrow when they realise they have to find that backdrop for their desktop again that they so loved.
Oh well, it works for me and thats all that matters.
thanks again for the advice.

BenBloss <BenBloss.2tfxbk@DoNotSpam.com> wrote:
> thanks for the wisdom.
> I had logged off the network and logged back on again before trying
> the above.
>
> To fix the problem I have created a new profile and my documents share
> for the users and then told then they will have recreate their pretty
> desktops and copy their documents in to their new my documents from
> the old ones that I have shared for everyone for now. Fortunately we
> don't need much security so for now they can copy their documents and
> I will unshare the old my documents in a week or so.
> I can't wait for the moans and groans tomorrow when they realise they
> have to find that backdrop for their desktop again that they so loved.
> Oh well, it works for me and thats all that matters.
> thanks again for the advice.

You should be using Folder Redirection for My Documents....especially if
you're using roaming profiles. Below please see my boilerplate on the
latter.
----

General tips:

1. Set up a share on the server. For example - d:\profiles, shared as
profiles$ to make it hidden from browsing. Make sure this share is not set
to allow offline files/caching!
2. Make sure the share permissions on profiles$ indicate everyone=full
control. Set the NTFS security to administrators, system, and users=full
control.
3. In the users' ADUC properties, specify \\server\profiles$\%username% in
the profiles field
4. Have each user log into the domain once from their usual workstation
(where their existing profile lives) and log out. The profile is now
roaming.
5. If you want the administrators group to automatically have permissions to
the profiles folders, you'll need to make the appropriate change in group
policy. Look in computer configuration/administrative templates/system/user
profiles - there's an option to add administrators group to the roaming
profiles permissions.

Notes:

* Make sure users understand that they should never log into multiple
computers at the same time when they have roaming profiles (unless you make
the profiles mandatory by renaming ntuser.dat to ntuser.man so they can't
change them). Explain that the
last one out
wins, when it comes to uploading the final, changed copy of the profile.

* Keep your profiles TINY. Redirect My Documents; usually best done to the
user's home directory on the server - either via
group policy (folder redirection) or manually (far less advisable). If you
aren't going to also redirect the desktop using policies, tell users that
they are not to store any files on the desktop or you will beat them with a
stick. Big profile=slow login/logout, and possible profile corruption.

* Note that user profiles are not compatible between different OS versions,
even between W2k/XP. Keep all your computers. Keep your workstations as
identical as possible - meaning, OS version is the same, SP level is the
same, app load is (as much as possible) the same.

* Do not let people store any data locally - all data belongs on the server.

* The User Profile Hive Cleanup Utility should be running on all your
computers. You can download it here:
http://www.microsoft.com/downloads/d...displaylang=en