Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Terminal server roaming profile security settings does not have domain admin access

Posted on 2006-06-30
2
Medium Priority
?
624 Views
Last Modified: 2012-06-27
I have setup a citrix environment.  the users use a local profile for computers, and a roaming profile for terminal services.
The terminal services profiles have security access for the user and the system group.  i need to add the domain admins to this so we can go in and fix user profile issues.  The root folder gives domain admins access, but the roaming profiles do not inherit the permision.

Does anyone know how to add the domain admins to the security of the terminal services roaming profiles an give Full control?
0
Comment
Question by:RKNichols
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 85

Accepted Solution

by:
oBdA earned 2000 total points
ID: 17019456
Start by adding some group policy settings for your terminal servers: Computer Configuration\System\User Profiles, "Don't check ownership of roaming profiles" (enable this), "Add security group Administrators to the permissions for roaming profiles" (enable this); I'm not using an English version, so check for settings similar to these. The second option will only work for new profiles.
Then take ownership of the roaming profiles (during off-hours, obviously), and set the permissions the way you want them (or, if you manage your TS profiles using group policies, and you don't have anything vital in them, delete them and let them recreate).
0
 

Author Comment

by:RKNichols
ID: 17020481
English GPO location:
computer Configuration\Administrative Template\System\User Profiles
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question