Roaming Profiles, Defualt permissions lock admin out 1

[programerrusuk]

I set up a share that was for profiles. I made sure that all the correct share and NTFS permissions were in place for the group that will use it. I make a user in AD and set the location of the share that i want it to create in. When the user logges on, the profile is set up and the user can use it, but only the user can, no admin, no groups nothing. The only way to gain controll is to take ownership and reset all permissions, but this locks the user out. Is there any way to set up Roaming Profiles not to be exclusive by default!!!!
HELP

 

[mrdenny]

Enable the Computer Configuration/Administrative Template/System/User Profiles/Add the Administrators security group to roaming user profiles setting. This will add the domain\administrators to the new profiles. You will need to update the current folders manually.

Denny
MCSA (2003) / MCDBA (SQL 2000)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)

 

[programerrusuk]

Thanks mate, why windows doesn't enable this by default makes be wonder.
You deserve a star

 

[mrdenny]

Thanks.

Yeah, I'd have to agree that it's kind of annoying that you can't set more specific default permissions. Like for backup accounts. With the defualt permissions that Windows uses, you can't backup the users profile.

Denny
MCSA (2003) / MCDBA (SQL 2000)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

(My very old site)