Hello,
It probably is if you want to spend the time locating all the references to
the wrong profile in the registry and in shortcuts that point back the
wrong profile.
So this is dependant on the profile, what it contains and what applications
are installed. It is different for everyone.
There are tools to change the ACLS in the filesytem and registry, that you
could run as well.
Thanks,
Darrell Gorter[MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
<Thread-Topic: profile with no administrator rights don't work anymore
<thread-index: AcXqAWquBtdIUKr0Q6ql96H6/PzG/w==
<X-WBNR-Posting-Host: 207.96.161.128
<From: =?Utf-8?B?TW9yYW5kTW9y?= <>
<References: <7724D37D-09AE-4690-9E16->
<6$>
<Subject: RE: profile with no administrator rights don't work anymore
<Date: Tue, 15 Nov 2005 08:27:05 -0800
<Lines: 82
<Message-ID: <8A63A511-386F-4EEA-AB58->
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 8bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
<Newsgroups: microsoft.public.windows.server.general
<NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
<Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
<Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.general:81560
<X-Tomcat-NG: microsoft.public.windows.server.general
<
<Hi Darrel,
<
<is it possible to reset the acls and pointers using the registry or maybe
<with a command line options or using a file in the user profile instead of
<recreate the profile normally
<
<Thanks
<
<""Darrell Gorter[MSFT]"" wrote:
<
<> Hello,
<> When you copied the profile over to the user profile, the profile
contains
<> ACLS and pointers specific to the administrator profile.
<> As long as the users are admins they can access everything. If they are
<> not admins, they don't have the rights to use the files and folders or
<> links back to the administrator profile.
<> The best way to recreate the profiles normally instead of copying over
them
<> with the adminstrators profile.
<> Thanks,
<> Darrell Gorter[MSFT]
<>
<> This posting is provided "AS IS" with no warranties, and confers no
rights
<> --------------------
<> <Thread-Topic: profile with no administrator rights don't work anymore
<> <thread-index: AcXpSmpz1NSuXZWNQd2v2ZyTiunWlA==
<> <X-WBNR-Posting-Host: 207.96.161.128
<> <From: =?Utf-8?B?TW9yYW5kTW9y?= <>
<> <Subject: profile with no administrator rights don't work anymore
<> <Date: Mon, 14 Nov 2005 10:37:07 -0800
<> <Lines: 28
<> <Message-ID: <7724D37D-09AE-4690-9E16->
<> <MIME-Version: 1.0
<> <Content-Type: text/plain;
<> < charset="Utf-8"
<> <Content-Transfer-Encoding: 8bit
<> <X-Newsreader: Microsoft CDO for Windows 2000
<> <Content-Class: urn:content-classes:message
<> <Importance: normal
<> <Priority: normal
<> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
<> <Newsgroups: microsoft.public.windows.server.general
<> <NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
<> <Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSF TNGXA03.phx.gbl
<> <Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windows.server.general:81489
<> <X-Tomcat-NG: microsoft.public.windows.server.general
<> <
<> <we were using Novell Netware for a couple of years and for some
convenient
<> we
<> <decide to give administrator right on local machine to everybody.
<> <
<> <we were doing all the basic setting in the administrator profile and
made
<> <ghost file of the workstation, (Probably the source of the problem), we
<> start
<> <to copy the administrator profile to the user profile to accelerate all
<> the
<> <setting configuration.
<> <
<> <when we did the migration to win2k3 server, we got a serious problem
with
<> <the right, to execute program and get back all the normal options on
the
<> <workstations, so to bypass the problem we put domain users in the
<> <administrators group (that was a bad idea)
<> <
<> <but now we need to reverse it and take off every administrator right on
<> the
<> <workstations for better control.
<> <
<> <
<> <but we got a problem, if we remove administrator rights on pc's,
nobody
<> <can access their profiles with normal rights (can’t open Outlook
<> anymore,
<> <missing menu and option in the start menu etc…)
<> <
<> <I’ll check for solution in the newsgroup, I found a lot of
things about
<> <restrict group (GPO)
<> <But that’s good to give administrator right to the workstations
for a
<> <limited number of people.
<> <
<> <How can I get back the basic right to make the profile work?
<> <
<> <
<>
<>
<
|