[Samba] [SOLVED] Samba 4: 'Access denied' error when accessing user profile during logon

[Konstantin Boyandin]

Hello,

Looks like the solution was rather simple.

If user profile matching OS doesn't yet exist, Windows attempts to 
create one under '[profiles]'. I.e., for user 'username' Windows 7 will 
attempt to create [profiledir]\username.V2

If it can't create that directory, 'Access denied' is written to system 
event log and a temporary profile is created.

The solution (following the default how-to directories structure):

# chmod g+w /srv/samba/profiles

The hint posted in

https://windowsserveressentials.com/2011/02/25/quick-fix-access-denied-to-romaing-profile-windows-7/

Note: taking the above into account, I believe that corresponding 
section (Using POSIX ACLs) should be updated in

https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles

namely, replace

# chmod 1750 /srv/samba/profiles/

with

# chmod 1770 /srv/samba/profiles/

Sincerely,
Konstantin

Konstantin Boyandin via samba писал 2018-09-20 12:25:
> Hello,
> 
> After joining Windows 7 to a Samba 4 (AD), when logging on I
> experience 'Access denied' error accessing user profile. As a result,
> Windows creates temporary profile for the domain user (the profile is
> deleted upon logoff).
> 
> [...]