I have a domain group (called GSG_TECH_USER) which need "full control" right to the folder "document & setting" of all servers and workstation.
I made a test with this configuration:
- On a workstation, add a local group LSG_PROFILE_RW
- Add the domain group GSG_TECH_USER to LSG_PROFILE_RW
- Go to the security of "Document & Settings" folder
- Add the group LSG_PROFILE_RW with "full control"
- Apply & test
Of course, the test fails, because inheritance is not checked for "doc & settings" folder.
Do you have any ideas ?
Thanks
Grégoire
EDIT
GSG_TECH_USER needs full control on folders & subfolders of "doc & settings".
In other words, on all profiles.
More precisely, GSG_TECH_USER should be able to create folder in %USERPROFILE% (c:\doc&setting\user\) of all the profiles present in the computer. In this created folder, it should be able to create files & folders.
The users of GSG_TECH_USER are technical users, not human users; so local admin rights is a solution, but not the best.