Solved

Terminal server roaming profile security settings does not have domain admin access

Posted on 2006-06-30
2
618 Views
Last Modified: 2012-06-27
I have setup a citrix environment.  the users use a local profile for computers, and a roaming profile for terminal services.
The terminal services profiles have security access for the user and the system group.  i need to add the domain admins to this so we can go in and fix user profile issues.  The root folder gives domain admins access, but the roaming profiles do not inherit the permision.

Does anyone know how to add the domain admins to the security of the terminal services roaming profiles an give Full control?
0
Comment
Question by:RKNichols
2 Comments
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 17019456
Start by adding some group policy settings for your terminal servers: Computer Configuration\System\User Profiles, "Don't check ownership of roaming profiles" (enable this), "Add security group Administrators to the permissions for roaming profiles" (enable this); I'm not using an English version, so check for settings similar to these. The second option will only work for new profiles.
Then take ownership of the roaming profiles (during off-hours, obviously), and set the permissions the way you want them (or, if you manage your TS profiles using group policies, and you don't have anything vital in them, delete them and let them recreate).
0
 

Author Comment

by:RKNichols
ID: 17020481
English GPO location:
computer Configuration\Administrative Template\System\User Profiles
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now