2003server/xp profile issue.

[TsupportOne]

here is the problem. Two new hires,exchange emails..etc created 2 new profiles same day (we use folder redirection also) one works fine, but the other takes 20-30 to "apply computer settings" then when it finally gets in...no access to user folder redirected share (???)

now if I log off and log on as admin...I can access shares on same cpu,,so I log off as admin and can immediately log on as the user in question....and get in withing seconds (access to folders and shares and all) (????) this is all on the same pc.

if I completely reboot and log in as user (same pc) takes 20+ again. Ran gpresult and checked out gps' and security for user and pc and they look fine. I set cpu dns to the domain dns server also. dhcp ptr records are fine.

so I try on another pc with the user account...it logs in within seconds, but no folder redirection....everyother user including the other new one I created works fine....just this one for some odd reason.

any suggestions

 

[TsupportOne]

I'm thinking it's a folder redirection issue, but the other account created is fine. All the settings are fine also.

I'd hate to delete the account since I think that will wash away the (not working) folder redirection policy and new user will not apply or inherite the already created folders (desktop and my docs) in the direction share there now for that user in question.

 

[1toomany]

Hi LanAdminEng,

Perhaps irrelevant but could there be any conflicting local profile vs domain/OU GPOs or ADUC roaming profile vs GPO folder direction ?

Also unsure as to where to start on this one but, you never know.

 

[TsupportOne]

I checked the users folder in DFS and I noticed under security groups/advanced security the owner was set to "S-1-5-21-4042681282-3925133110-767266297-2734."

instead of admin or even the user. this was under the default (created owner, user, eveyone..etc) groups. under all my ohter either I am the owner or the user is.

this could be something I'll look into later. I'll change it and see what happens.

 

[1toomany]

LanAdminEng

Have you been deleting users ? Do you have any obsolete domain trusts ? A display of SID instead of user name is fairly common under only a handful of conditions.

I would suggest verifying AD database

 

[TsupportOne]

u r right 1toomany. I spoke to my jr admin who I had look into this and he said he tried to recreate the user ID.

that probably explains the SID. and redirection issue (SID from old account deleted i'm sure). I saw the extra(first) mailbox created also in exchange and just purged it since nothing is in it.

I wonder if I just change the owner, prob should suffice the issue. not sure. havent found any KB articles on it from MS.

 

[1toomany]

Suggest renaming the account (will keep group memberships, permissions et al) before deleting and re-creating.

 

[TsupportOne]

jr admin had already deleted it. he renamed it the exact user ID. I'm sure that is where the problem is. AD SID is o
ff whack now. Not recognizing the directed folders in DFS at all, but all the rest of the policies seem to flow.

 

[1toomany]

So everyone else is ok, it is just this one user that is problematic ?

Sounds like you will have to recreate the account with different properties (name, logon etc)

 

[TsupportOne]

yeah I was thinking that aswell. It's only that one user. no biggie.

but it def.was not seeing the redirected folder at all.

 

[1toomany]

good luck, please let us know the outcome...