Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am trying to add permissions for my Administrator group to the roaming profiles for terminal server.

The problem is I am barred access to the individual user profile folders.

I already tried enabling the GPO for "Add Administrators Group to Roaming Profile Folder" or something like that. It did not do anything.

What is it I am missing?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

You'll have to add the Administrators group to the permissions of existing profile folders manually. The GPO setting affects new profiles as they are created, not existing profiles. You're probably going to have to take ownership of the existing profiles in order to add the Administrators group to the permissions.

share|improve this answer
    
Yeah I tried that, and then the user could not login even if I gave the full control over the folder. I also tried making a fresh account with a new profile and it did not add the admins to the list. –  Solignis Aug 4 '11 at 21:16
    
Where do you have the GPO with the setting linked? To the computer OU or to the user OU? This is a computer setting and needs to be linked to the OU where the computer objects that the users log on to are located. The computer creates the profile folders, not the user. Did you follow this guide when setting up the Share and NTFS permissions for the roaming profile parent folder? technet.microsoft.com/en-us/library/cc737633(WS.10).aspx –  joeqwerty Aug 4 '11 at 22:30
    
@Solignis, If you have lots of users, then you are probably going to need to write a script to take ownership, adjust the permissions, and then change the ownership back to the user. Look at SetACL.exe or takeown/icacls. –  Zoredache Aug 4 '11 at 22:51
    
I set the roaming profile GPO in the Default Domain Policy. All of my TS settings for lockdown are in a loopback policy linked to the terminal server OU. –  Solignis Aug 4 '11 at 22:51
    
@Zoredache, Lucky for me this is a new domain, and once all is added there will only be about 12 users. –  Solignis Aug 4 '11 at 22:52

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.