[prev in list] [next in list] [prev in thread] [next in thread] 

List:       thin
Subject:    [THIN] Re: Cross Forest Roaming profiles
From:       "TSguy92 Lan" <tsguy92 () gmail ! com>
Date:       2007-02-27 23:26:53
Message-ID: 8381a6360702271526l78eecd82y631aeaf19074e29a () mail ! gmail ! com
[Download RAW message or body]

Any special circumstances with the trust relationship? IE - is it a full
2way trust or limited on one side or the other?

Have you tried running procmon / filemon during the log off of one of these
users to see if you might be hitting any permissions problems on the roaming
profile share? It sounds like they are loading up their roaming profiles
correctly so I'd assume 'read' permissions are there, but if we can't write
back...

You can also look at enabling user
debug...http://www.windowsitpro.com/Article/ArticleID/41876/41876.html?Ad=1

We've got no events in the logs when the log offs occurs?

-Lan


On 2/27/07, Malcolm Bruton <malcolm.bruton@designlineit.co.uk> wrote:
>
>  Guys
>
> Have two separate forests running windows 2003 with a trust
>
> Have citrix servers running windows 2000 in Domain A
>
> Users log onto Citrix server using account in Domain A and all works fine.
>
> Users log onto Citrix server using account in Domain B in the other forest
> and all policies etc are applied but they do not save their roaming
> profiles.
>
> Thought it was something to do with the allow Cross-Forest User Policy and
> Roaming User Profiles policy but this appears to be a 2003 policy only.
>
> Although the article below seems to suggest this is possible on Windows
> 2000
>
> http://support.microsoft.com/kb/823862
>
> Anyone come across this or know how to sort?
>
> Malcolm
>

[Attachment #3 (text/html)]

Any special circumstances with the trust relationship? IE - is it a full 2way trust \
or limited on one side or the other?<br><br>Have you tried running procmon / filemon \
during the log off of one of these users to see if you might be hitting any \
permissions problems on the roaming profile share? It sounds like they are loading up \
their roaming profiles correctly so I&#39;d assume &#39;read&#39; permissions are \
there, but if we can&#39;t write back... <br><br>You can also look at enabling user \
debug...http://www.windowsitpro.com/Article/ArticleID/41876/41876.html?Ad=1<br><br>We&#39;ve \
got no events in the logs when the log offs occurs?<br><br>-Lan<br><div><span \
class="gmail_quote"> <br><br>On 2/27/07, <b class="gmail_sendername">Malcolm \
Bruton</b> &lt;<a href="mailto:malcolm.bruton@designlineit.co.uk">malcolm.bruton@designlineit.co.uk</a>&gt; \
wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, \
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">



<div>
<div><font color="#000000" face="Arial" size="2">Guys</font></div>
<div><font face="Arial" size="2"></font>&nbsp;</div>
<div><font face="Arial" size="2">Have two separate forests running windows 2003 with \
a trust</font></div> <div><font face="Arial" size="2"></font>&nbsp;</div>
<div><font face="Arial" size="2">Have citrix servers running windows 2000 in Domain \
A</font></div> <div><font face="Arial" size="2"></font>&nbsp;</div>
<div><font face="Arial" size="2">Users log onto Citrix server using account in Domain \
A and all works fine.</font></div> <div><font face="Arial" \
size="2"></font>&nbsp;</div> <div><font face="Arial" size="2">Users log onto Citrix \
server using account in Domain B in the other forest and all policies etc are applied \
but they do not save their roaming profiles.</font></div> <div><font face="Arial" \
size="2"></font>&nbsp;</div> <div><font face="Arial" size="2">Thought it was \
something to do with the allow Cross-Forest User Policy and Roaming User Profiles \
policy but this appears to be a 2003 policy only.</font></div> <div><font \
face="Arial" size="2"></font>&nbsp;</div> <div><font face="Arial" size="2">Although \
the article below seems to suggest this is possible on Windows 2000</font></div> \
<div><font face="Arial" size="2"></font>&nbsp;</div> <div><a \
href="http://support.microsoft.com/kb/823862" target="_blank" onclick="return \
top.js.OpenExtLink(window,event,this)">http://support.microsoft.com/kb/823862</a></div>
 <div>&nbsp;</div>
<div>Anyone come across this or know how to sort?</div><span class="sg">
<div>&nbsp;</div>
<div>Malcolm</div></span></div></blockquote></div><br>


SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com 
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************

[prev in list] [next in list] [prev in thread] [next in thread]