locked
Windows cannot copy original .orig file and user cannot log on RRS feed

  • Question

  • Sorry for starting a duplicate thread, but the other was marked as answered and a resolution has yet to be found, although a possible workaround has been offered it defeats one of the benefits of Steady-State. 

     

    A concern exists when a machine is not properly shut down or loses power.  A restricted account cannot be accessed when this failure occurs and the error below is received.

    Windows cannot copy file C:\ Documents & Settings \ Instructor original \ desktop to location C:\ documents & settings \ Instructor \ desktop.

    Probable cause : network problems or insufficient security rights. Windows cannot log you on because your profile cannot be loaded.

     

    Please see this link http://forums.microsoft.com/WindowsToolsandUtilities/ShowPost.aspx?PostID=1920216&SiteID=69

     

    With over 17,000 views it appears there may be many users affected by this.

     

    Thank you in advance,

    Peter

    Monday, September 29, 2008 7:50 PM

Answers

  • Hi,

    Thanks, this suggests that the SteadyState service was unable to restore the original ACLs on the user's desktop folder.  I've opened a bug in our database to track this issue. 

    Meanwhile, you could try disabling the restriction
    "Prevent users from saving files to the desktop."  Since you're using a locked profile, changes that the user makes to the desktop will be discarded anyway, so perhaps that's acceptable in your situation.  You'll have to manually fix the security settings on the desktop folder of any existing profiles that are currently affected by this (they should be identical to the user.orig\desktop folder ACLs).

    Thanks,
    Rob Elmer
    Development Lead
    Windows SteadyState

    Thursday, October 2, 2008 5:02 AM

All replies

  • Hi,

    Can you tell me what the permissions are on this folder?  You can open a cmd prompt and copy the output of "cacls" for this directory:

    C:\> cacls "C:\Documents and Settings\Instructor\Desktop"
    c:\Documents and Settings\Instructor\Desktop VM1\Instructor: F
    VM1\Instructor: (OI)(CI)(IO)F
    NT AUTHORITY\SYSTEM: F
    NT AUTHORITY\SYSTEM: (OI)(CI)(IO)F
    BUILTIN\Administrators: F
    BUILTIN\Administrators: (OI)(CI)(IO)F

    Thanks,
    Rob Elmer
    Development Lead
    Windows SteadyState
    Tuesday, September 30, 2008 4:23 AM
  • Rob,

    Here are the results


    C:\documents and settings\instructor\Desktop 4Z9MBF1\Instructor:R
                                                 4Z9MBF1\InstructorSadOI)(CI)(IO)(special accessSmile
                                                                               
    GENERIC_READ
                                                                               
    GENERIC_EXECUTE                              NT AUTHORITY\SYSTEM:F
                                                 NT AUTHORITY\SYSTEMSadOI)(CI)(IO)F
                                                 BUILTIN\Administrators:F
                                                 BUILTIN\AdministratorsSadOI)(CI)(IO)F

     

     

    Thank you,

    Peter

    Wednesday, October 1, 2008 1:29 PM
  • Hi,

    Thanks, this suggests that the SteadyState service was unable to restore the original ACLs on the user's desktop folder.  I've opened a bug in our database to track this issue. 

    Meanwhile, you could try disabling the restriction
    "Prevent users from saving files to the desktop."  Since you're using a locked profile, changes that the user makes to the desktop will be discarded anyway, so perhaps that's acceptable in your situation.  You'll have to manually fix the security settings on the desktop folder of any existing profiles that are currently affected by this (they should be identical to the user.orig\desktop folder ACLs).

    Thanks,
    Rob Elmer
    Development Lead
    Windows SteadyState

    Thursday, October 2, 2008 5:02 AM