[Samba] Windows Vista roaming profiles "access denied" forced local profile (samba PDC), but Windows XP OK

[Elliot Mackenzie]

Hello,

I'm having an "Access denied" issue using roaming profiles for Windows
Vista Ultimate RTM (patched to current).  The actual login is
successful, the full name is set properly and the password is handled
correctly, however only a temporary profile is created.  The interesting
thing is that all else being the same, I do not encounter the same issue
for Windows XP roaming profiles against the same server.

I should point out that this is using Windows Vista from a fresh
install.  I can also confirm that I am able to rename directories and so
forth on samba shares with no problems.

So, in summary, I have a Samba 3.0.24 standalone server running as a PDC
on a Linux host.  Roaming profiles are working for Windows XP clients,
and have been for some time.  For Windows Vista clients, however, I get
an "Access is denied" error during login, which causes the Vista host to
set up a temporary profile.  Once logged in, the user has full access to
their profile directory on the server (write/read etc).

I cannot see anything even in a level 10 log which would seem to
indicate why the profile creation is failing, so I would appreciate a
second opinion.  I'll attach the log in a second email.

Kind regards,
Elliot.

This is the error I receive on the Windows host:

Log Name:      Application
Source:        Microsoft-Windows-User Profiles Service
Date:          17/02/2007 08:23:31
Event ID:      1521
Task Category: None
Level:         Error
Keywords:      Classic
User:          UK\macka
Computer:      arwen
Description:
Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the profile
will not be copied to the server when you log off. This error may be
caused by network problems or insufficient security rights. 

 DETAIL - Access is denied. 
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-User Profiles Service"
Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc"
/>
    <EventID Qualifiers="49152">1521</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2007-02-17T08:23:31.000Z" />
    <EventRecordID>1030</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>arwen</Computer>
    <Security UserID="S-1-5-21-3536605386-3037442868-4014227280-3010" />
  </System>
  <EventData Name="EVENT_CENTRAL_NOT_AVAILABLE_DISABLE">
    <Data Name="Error">Access is denied. </Data>
  </EventData>
</Event>