On 2013-02-18 09:46, Lars Schimmer wrote: > On 2013-02-15 15:28, Lars Schimmer wrote: >> Hi! >> >> Does anyone use windows 8 clients and windows roaming profiles in >> OpenAFS filespace? >> >> 1. I cannot get Windows 8 to get access to the roaming profile, although >> path is set to system:anyone write >> OpenAFS 1.7.2119 (today). >> roaming profile path set via system group policy to: >> \\AFS\.cgv.tugraz.at\home\win8\schimmer.V2 >> >> System log shows: access denied. >> Tested with some other users, some get a token on login ,some not. But >> all get a temp roaming profile. > > Ok, solved. I did messed up the setting in the group policy. Thank you, > Jeffrey for the Tip with Process Monitor Boot Logging. > Now User can login with "new" profile and data is saved into correct place. > I just need to create a third windows profile for each user (windows XP, > Windows 7, Windows 8).
Only partly solved. I do not know why, but the roaming profile folder does need system:anyuser rl ACLs to work under Windows 8. Setting the Domain Controller System on rl ACL does not work, it needs system:authuser. If I remove the system:anyuser ACL, windows 8 denies my access to the profile path and logs in with local cached profile and does not write back on logout any data to OpenAFS path. If I set system:anyuser rl on my profile path, Windows 8 does load profile from OpenAFS path and saves back data on logout to that path, and all files do have the correct UserID. I do use Windows 8 64bit, OpenAFS 1.7.2119 and "obtain tokens on login". It looks like windows tries to lookup profile ahead of obtaining tokens. Anyone using Win8 on OpenAFS roaming profiles at all yet? > MfG, > Lars Schimmer > MfG, Lars Schimmer -- ------------------------------------------------------------- TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: [email protected] Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723
signature.asc
Description: OpenPGP digital signature
