From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, July 18, 2006 1:32 PM
To: [email protected]
Subject: Re: [ActiveDir] Home directories issue
The problem with XP clients mapping to the base of a share instead of the users folder can be solved by enabling Computer Configuration\Administrative Templates\System\Scripts\Run logon scripts synchronously. Depending on your environment you might also need to enable Computer Configuration\Administrative Templates\System\Logon\Always wait for the network at computer startup and logon. Warning the latter policy can significantly increase login time depending on your GPO complexity, the first will increase login time if you have large, complex login scripts! As always test in a lab environment before rolling to production. Unfortunatly this particular issue is hard to reproduce in the lab so testing is difficult for a cure, but impact testing should be easier.
Andrew Fidel
| "Matt Hargraves"
<[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 07/17/2006 07:42 AM
|
|
For some odd reason Google didn't show me your original message (it hides 'quoted' material for some messsages). I didn't see that portion of your message (that it was intermittent) and was trying to think of what all things would cause this.
There are a few questions that I have:
1) Are they always connecting from the same computer.
2) Are you using DHCP or static mapping?
3) AD Integrated DNS?
I'll look around and see what I run into. I haven't run into this personally (intermittent mapping of home drives) and just to be honest, I use a \\servername\driveletter$\directory mapping for my home drive (mostly so that I can always reach a particular drive location when on a network without having to share it out) and even I don't see it with this somewhat non-standard homedrive location type.
On 7/16/06, Arnold Arce <[EMAIL PROTECTED]> wrote:
Taking everything you said, why would this problem be intermittent and not every single time the user logs in?
From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Matt Hargraves
Sent: Sunday,
July 16, 2006 6:03 PM
To: [email protected]
Subject: Re: [ActiveDir] Home directories issue
Well, when you're mapping to
\\server\share\directory, if the user has permission issues at the directory
level (their actual home share location), I believe that it will simply map to
the share and not go into the directory.
Make sure that you have granted
all users "Full Control" at the share level. You don't need to grant them
anything more than "Read" at the NTFS level (since I believe the System account
creates their home directory), but to have full control (which is required for
the home drive location), you have to be *able* to have full control and you can
only have full control on a share if *both* the Share-level permissions and the
directory level permissions state that.
Example:
The
"\\server01\users" share is located on the E drive in the directory "users".
You can have the perms on that directory to be "Administrators: Full,
System: Full, Everyone: Read", the System will create the user directories
(E:\users\joebloe\) and grant the required permissions for that directory (full
control for joebloe). However, if the share perms state "Change" or "Read
Only", then the user can only have that level *or lower* of effective
permissions on the files. So even if joebloe has "Full Control" on his
directory, if the share says "Everyone: Change", then his effective permissions
on everything in that share (including his directory) won't ever be more than
"Change". You could actually have "E:\users" shared out as
"\\server01\users" and "\\server01\home" and if you have everyone as "Change" on
the users share and "Full Control" on the home share, even though it's the exact
same location on the system and the NTFS permissions haven't changed, the people
who are mapped to "\\server01\home" will work, while the people who are mapped
to "\\server01\users" won't work. Change everyone's mapping to
"\\server01\home" (or change "\\server01\users" to have Everyone: Full) and they
will all work.
Some of this is speculation and while I seem to remember
running into this in someone's network before, that was something like 6 years
ago and haven't run into it since. I could be mistaken.
On 7/16/06, Arnold Arce < [EMAIL PROTECTED]> wrote:
Has any headway been made with this problem? I can't find any solutions out there.
From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Conrad, Daniel C Mr. Nortel PEC
Solutions
Sent: Tuesday, December 13, 2005 3:17 PM
To:
[email protected]
Subject: RE: [ActiveDir] Home
directories issue
It's all AD on 2k3 with XP Pro clients, connecting to a real share (both by IP and NetBIOS to ensure name resolution isn't an issue. No DFS.
On behalf of Jerry
Dan
Nortel PEC Solutions
From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Dan Holme
Sent: Tuesday,
December 13, 2005 12:57 PM
To: [email protected]
Subject: RE: [ActiveDir] Home directories
issue
%USERNAME% won't help, as it is translated "on the fly" to the user's name the moment you use it, so it ends up joe.user anyway.
Are your users having the problem using W2K or later, I assume? (if not, there's your answer) And you ARE using a "real" share, not a DFS root share, right?
From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Arnold Arce
Sent: Monday,
December 12, 2005 9:00 PM
To: [email protected]
Subject: RE: [ActiveDir] Home directories
issue
I have experienced this same problem. Usually logging off and logging on fixes it. I need to find a better answer. I'll try the %USERNAME% variable like someone else suggested.
From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Condra, Jerry W Mr HP
Sent:
Monday, December 12, 2005 3:42 PM
To: [email protected]
Subject: [ActiveDir] Home directories issue
Hoping someone has seen this problem before.
Users are mapping home folders using AD profile tab which maps X: to \\servername\home\joe.user . Occasionally, upon logon, users will map to \\servername\home and not all the way to their own home directory. I've seen several blogs and the same problem posted elsewhere but no cause or solution.
Thanks
Jerry
