Some Notes on the Machines

Sometimes a user is accidentally created in SBS 2008 outside of the SBS wizard. This can lead to all sorts of problems, including inability to do RWW regardless of group membership. Here’s how to fix.

1. In SBS console, in “Users and Groups”, “Users” tab, right-click on background, choose “Change User Role for User Accounts”.
2. Choose “Standard User”. Choose “Replace user permissions or settings”. Click Next.
3. The user may not be in the account list. Choose “Display all user accounts in the Active Directory”. The user will pop in. Choose him/her to change.
4. Click “Change User Role”. Complete the wizard.

Many fixes like the below can be found on the WWW:

http://windows7themes.net/fix-temporary-profile-error-in-windows-7.html

but none of them worked for me. I eventually just deleted the appropriate profile folder in C:\Users as well as the appropriate .bak folder in the registry, under

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList

and a new one was created.

Here is the All Users desktop:

C:\Users\Public\Public Desktop\

and here is the All Users start menu:

C:\ProgramData\Microsoft\Windows\Start Menu\

Here is some excellent info:

http://serverfault.com/questions/43794/using-icacls-to-set-permissions-on-user-directories

Quoted, a simple CMD script to set permissions so that Administrator can see the contents:

set /p userDir=Enter the login of the user's directory you're modifying permissions for. (i.e. jDoe)
TAKEOWN /f "E:\Home Directories\%userDir%" /r /d y
ICACLS "E:\Home Directories\%userDir%" /reset /T
ICACLS "E:\Home Directories\%userDir%" /grant:r "MYDOMAIN\%userDir%":(OI)(CI)F
ICACLS "E:\Home Directories\%userDir%" /setowner "MYDOMAIN\%userDir%" /T