0

I have set up a windows server 2008 R2 and set the profile path for every user to a samba share. I believe the samba share is set correctly since I can access it and store files in it.

The problem I am facing the last few days is that whenever I try to login I get the following error:

Windows cannot locate the server copy of your roaming profile and is attempting to log you on with your local profile.

DETAILS - logon failure unknown username or bad password.

Can somebody please help me?

Many thanks

user186855
  • 1

1 Answers1

1

Don't use Profile Paths in Active Directory Users and Computers. It's a very old Roaming Profile method from Win NT and has been replaced with GPO Folder Redirection.

1) Remove all the profile paths from AD Users & Computers, leave this field blank 2) Create AD folders to separate users into logical/physical groups to which you will apply Group Policy Objects 3) Open the Group Policy Editor, create a GPO that applies to the user folder in question, and use the Users Folder Redirection settings to send/create their profiles in the right SMB share.

Note: Make sure your SMB share has the right permissions. There's some slightly complex things where you need to set CREATOR to have Full Control but USERS not to have any control past creating folders in the main folder (ie each user (CREATOR) should have Full Control over their files, but all users (DOMAIN USERS) should only have access to create their profile folder, not access to other user's profiles).

FYI, If you have Win8 computers on the network, you can install RSAT on one, copy their GPO definitions into the DC GPO share, and use it to maintain your GPO. That way you'll have the latest available copy of all the GPO settings.

Dom
  • 741
  • 1
  • 8
  • 19