[K12OSN] K12LTSP/Samba roaming profiles broke! Help?

[dahopkins at comcast.net]

All,

I do not like bothering the list but I am at a loss on how to fix this problem.  A couple of weeks back, I patched my Win2K Terminal Server, and ... roaming profiles have now stopped working, for some users, sporadically.

I located information that indicated some new policies were added to the group policies, one of which was to check for ownership of files covered briefely at: http://nic.phys.ethz.ch/readme/45  Implementing this fixed the problem for a few days, but now some accounts are again not allowed to login, although roaming profiles did not roam, the user could log in.  I am using the Samba defaults for the roaming profile setup (there is not an explicit setting in smb.conf for  [Profiles]

When logging in a user, I get Access is denied.  This can be caused variously due to inability to copy a file from the user's profile on the Samba server, or "Windows cannot load your profile', or just a generic 'Access is denied' when connecting.  I sometimes get a username.bak local profile cache created for the user.

I am leery of pulling the system out of the Domain and reconnecting since I am not sure that the system would be allowed to reconnect.

I am running Samba 2.2, which I need to upgrade to 3.0, but since I also have LDAP, the possibility of problems on the upgrade also bother me. 

Any suggestions are welcome (including finding another job ;) ).

Sincerely,
Dave Hopkins
Parent Volunteer
Newark Charter School
Newark Delaware 19713