Specifying Default Permissions for roaming profiles and documents folders

Currently GP only gives the user permissions to his/her "profiles" and "documents" folders when he/she logs in for the first time and the folders are created.  How can I specify the permissions I want GP to give the folders when it creates them?  I want both the local administrators group and the domain admins group to have permissions along with the user.  I tried the following setting ...
"config/policies/admin templates/system/user profile:add the admin security group to roaming user profiles"
But that didn't do what I want it to do.  I also tried setting inheritable permissions on the parent folder of these folders, but the folders got added without "inherit permissions" checked, and I had to take ownership of the folders to check the "inherit permissions" boxes and then set ownership back to the user.