Windows Server 2008
--
Questions
--
Followers
Top Experts
Best Practices Configuring NTFS Permissions for Roaming Profiles
Hi
For exam preparation I created some Roaming Profiles on a Server 2008 R2 as I was used to do it in 2003 R2. But this is not working for .V2 profiles. My problem is also as Administartos we can’t open the *.V2 Folders. I created it exactly like this Tutorial:
http://blogs.technet.com/b/askds/archive/2008/06/30/automatic-creation-of-user-folders-for-home-roaming-profile-and-redirected-folders.aspx
Is there something new in Server 2008 R2? Needed to create Roaming Profiles that nobody else can read but only Administrators must have full permissions.
Many Thanks
For exam preparation I created some Roaming Profiles on a Server 2008 R2 as I was used to do it in 2003 R2. But this is not working for .V2 profiles. My problem is also as Administartos we can’t open the *.V2 Folders. I created it exactly like this Tutorial:
http://blogs.technet.com/b/askds/archive/2008/06/30/automatic-creation-of-user-folders-for-home-roaming-profile-and-redirected-folders.aspx
Is there something new in Server 2008 R2? Needed to create Roaming Profiles that nobody else can read but only Administrators must have full permissions.
Many Thanks
Zero AI Policy
We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.
To allow administrators access to roaming profiles, you must configure a computer GPO that adds the administrators group when the workstation creates the profile.
This GPO will only work on newly added users.
http://technet.microsoft.com/en-us/library/cc758768(v=ws.10).aspx
This GPO will only work on newly added users.
http://technet.microsoft.com/en-us/library/cc758768(v=ws.10).aspx
SOLUTION
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
First of all, thanks a lot to you both for answering.
@Arnold
I think this is the only solution… Give me some time to try this on Monday.
@ve3ofa
I give Administrators full permissions like the Tutorial requires Administrators: Full Control (on sharing & NTFS Permissions ). This should Inherit to the Subfolders. That’s the reason I don’t understand why administrators can’t access to these profiles. I know that these are not the best practices, but we must be able to repair corrupted profiles. How can we repair them if we don’t have any accesses? All sensitive data’s are forwarded to the home folder and we can’t access them. So the Profiles only have settings saved. If I take ownership and give back the permissions of a newly created profile, then this becomes corrupt again and the user gets a temporary profile.
@Arnold
I think this is the only solution… Give me some time to try this on Monday.
@ve3ofa
I give Administrators full permissions like the Tutorial requires Administrators: Full Control (on sharing & NTFS Permissions ). This should Inherit to the Subfolders. That’s the reason I don’t understand why administrators can’t access to these profiles. I know that these are not the best practices, but we must be able to repair corrupted profiles. How can we repair them if we don’t have any accesses? All sensitive data’s are forwarded to the home folder and we can’t access them. So the Profiles only have settings saved. If I take ownership and give back the permissions of a newly created profile, then this becomes corrupt again and the user gets a temporary profile.
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Thanks Arnold.






EARN REWARDS FOR ASKING, ANSWERING, AND MORE.
Earn free swag for participating on the platform.
Windows Server 2008
--
Questions
--
Followers
Top Experts
Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.