I am trying to add permissions for my Administrator group to the roaming profiles for terminal server.

The problem is I am barred access to the individual user profile folders.

I already tried enabling the GPO for "Add Administrators Group to Roaming Profile Folder" or something like that. It did not do anything.

What is it I am missing?


You'll have to add the Administrators group to the permissions of existing profile folders manually. The GPO setting affects new profiles as they are created, not existing profiles. You're probably going to have to take ownership of the existing profiles in order to add the Administrators group to the permissions.

  • Yeah I tried that, and then the user could not login even if I gave the full control over the folder. I also tried making a fresh account with a new profile and it did not add the admins to the list. – ianc1215 Aug 4 '11 at 21:16
  • Where do you have the GPO with the setting linked? To the computer OU or to the user OU? This is a computer setting and needs to be linked to the OU where the computer objects that the users log on to are located. The computer creates the profile folders, not the user. Did you follow this guide when setting up the Share and NTFS permissions for the roaming profile parent folder? technet.microsoft.com/en-us/library/cc737633(WS.10).aspx – joeqwerty Aug 4 '11 at 22:30
  • @Solignis, If you have lots of users, then you are probably going to need to write a script to take ownership, adjust the permissions, and then change the ownership back to the user. Look at SetACL.exe or takeown/icacls. – Zoredache Aug 4 '11 at 22:51
  • I set the roaming profile GPO in the Default Domain Policy. All of my TS settings for lockdown are in a loopback policy linked to the terminal server OU. – ianc1215 Aug 4 '11 at 22:51
  • @Zoredache, Lucky for me this is a new domain, and once all is added there will only be about 12 users. – ianc1215 Aug 4 '11 at 22:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.