Re: access to roaming user profile



duke wrote:
from my research I've found that you can alter the GPO to allow admin
access to a roaming user profile folder.

"If you want the administrators group to automatically have
permissions to the profiles folders, you'll need to make the
appropriate change in group policy. Look in computer
configuration/administrative templates/system/user profiles - there's
an option to add administrators group to the roaming profiles
permissions."

I've looked under 'user profiles' and did not see anything except
'Add the administrators group to roaming user profiles'. I enabled
that and i am still denied access. Whats the story?

You did the right thing - but you did it after the profile was created. The
policy will apply to *new* profiles.

To remedy this on existing ones - make sure the user is logged out - then
take ownership of their profile subfolder as the Administrators group (*not*
the user account Administrator). Then reset the NTFS permissions so that
Administrators, System, and <username> have full control,and make sure those
settings get pushed down through all subfolders.


.



Relevant Pages

  • Re: Problem with roaming profles
    ... any permissions assigned to them but they worked fine. ... automatically add the Administrators group to all profiles before creating ... take ownership as the Administrators group (*not* the Administrator ... account), and then reset the NTFS permissions so that in each folder, ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem with roaming profles
    ... any permissions assigned to them but they worked fine. ... automatically add the Administrators group to all profiles before creating ... take ownership as the Administrators group (*not* the Administrator ...
    (microsoft.public.windows.server.sbs)
  • Re: Roaming Profile Error
    ... policy to add the Administrators group to the list automatically ... ... Make sure the share permissions on profiles$ indicate ... Keep all your computers. ...
    (microsoft.public.windows.server.sbs)
  • Re: Roaming Profile Error
    ... policy to add the Administrators group to the list automatically ... ... profiles$ to make it hidden from browsing. ... Make sure the share permissions on profiles$ indicate everyone=full ... Keep all your computers. ...
    (microsoft.public.windows.server.sbs)
  • Copy XP User Profiles - Permission Denied
    ... The XP SP2 machines are using roaming profiles, and the permissions on the ... copy the profiles is included within the local Admin group, ... select the Advanced Tab, select the Settings button under User Profiles, ...
    (microsoft.public.windowsxp.security_admin)