Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have created one shared folder to store domain user roaming profile on a profile server. The issue is only the user has the right to open the user profile folder on a profile server, not even the domain administrator and the local server administrator can open it.This is means I have to manually add myself in every of the user profile to administer it.Is there a workaround?

share|improve this question
up vote 2 down vote accepted

What it sounds like you are looking for would be control by this group policy which allows you to add permissions to profiles.

Computer Configuration\Administrative Templates\System\User profiles\Add the administrators security group to roaming user profiles

This setting adds the administrator security group to the roaming user profile share.

Once an administrator has configured a users´ roaming profile, the profile will be created at the user´s next login. The profile is created at the location that is specified by the administrator.

For the Windows 2000 Professional and Windows XP Professional operating systems, the default file permissions for the newly generated profile are full control, or read and write access for the user, and no file access for the administrators group.

By configuring this setting, you can alter this behavior.

If you enable this setting, the administrator group is also given full control to the user´s profile folder.

share|improve this answer
+1. Just a note that enabling this option will affect NEW profiles but will not add the Administrators group to the permissions of existing profiles. – joeqwerty Jul 2 '10 at 10:47

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.