Archive for February, 2009

Default Permissions For Roaming Profile and Folder Redirection Folders

Here are the recommended default permissions for the Profiles and Redirected folders folders so that new users automatically get their folders created for them when logging on for the first time:

Roaming profile parent folder:

Creator Owner = Full Control, Subfolders and Files Only
Domain Users = List Folder/Read Data, Create Folders/Append Data - This Folder Only
System =  Full Control, This Folder, Subfolders and Files

And don’t forget to change the GPO for the local computer (not the server) to add the Administrators security group to the roaming user profile share.  It’s in Computer/Administrative Templates/System/User Profiles/Add the Administrators security group to roaming user profiles  - Enable it.

Redirected Folders Parent:

Creator Owner = Full Control, Subfolders and Files Only
Domain Users = List Folder/Read Data, Create Folders/Append Data - This Folder Only
System =  Full Control, This Folder, Subfolders and Files
Admistrators =  Full Control, This Folder, Subfolders and Files

No Comments



SetPageWidth