No Roaming Profile from clients running Zone Alarm

[Phrollux]

Hey all,

I have Win2k3 server running AD DNS DHCP & Fileserver.

I'm running a couple of XP Pro clients and a Win2k client.

Clients that have Zone Alarm do not create a profile on the server

whereas one machine (without ZA) is just fine.

I have configured zone alarm to trust the server and set trusted

zone to off (this at least allows me to authenticate) but still no

folders created in my profiles$ share.

All accounts share the same group policy and reside within

my "trusties" OU.

Is this a zone alarm issue and can it be fixed?

tia.

Edit: What might I look for in event viewer ?

[wobbley1]

Hey all,

I'm running a couple of XP Pro clients and a Win2k client.

Clients that have Zone Alarm do not create a profile on the server

whereas one machine (without ZA) is just fine.

I have configured zone alarm to trust the server and set trusted

zone to off (this at least allows me to authenticate) but still no

folders created in my profiles$ share.

?

Simple thing, turn zone alarm off and then try to log off and see if a profile is set up. Also check your user settings to ensure that the path your profiles are going to is correct and that the users have the rights to write to that location. Is the machine that works the win2k one or is it one of the winxp machines? If the profile is set up correctly you should be receiving logon errors stating that the profile can not be found and that a temp or locally cached profile is being used.

[Phrollux]

Scratch this, I'm going to have to do a full read up.

I have tried logging in with different accounts from different machines

(Known working(XP Client) + ZA Client(Also XP))

Only some accounts create profiles which does suggest incorrect

paths, but no errors are reported.

All clients are members of the same GG which in turn is a member

of a DLG as per the AGLP mantra.

Profiles from the ZA Client are created without adding

the administrator permissions (despite my GP settings)

and are also created without SYSTEM permissions.

I now believe there may be differences in local machine group

policies and so I'm thinking I'd be better of if I start anew and also

re-install windows fresh on the clients.

(Just not today )