Need some help with Cacls to set roaming user profile rights.

[Leoniksvier]

Hello everyone,

I have a problem with roaming "user profiles" i want to reset the default rights.

because as a admin i have "default" no acces to the users profiles, and it,s verry

irritating if i want to access a user profile i have to manualy set that the "Admins group" is granted for

access it full.

i have to do about 200 "user-profiles" can someone help me with this.

We are running win2003 server and as client Winxp Pro

Thank you,

Leon

[InTheWayBoy]

Do you have all your profiles under one directory? Like:

C:\Profiles\Username1

C:\Profiles\Username2

etc

Cause if so, you should be able to set admin rights on the main folder (Profiles in this example), and apply that to all child folders. It's a check-box somewhere...I think it's under the advanced options of the security tab.

[Gouki]

Do you have all your profiles under one directory? Like:

C:\Profiles\Username1

C:\Profiles\Username2

etc

Cause if so, you should be able to set admin rights on the main folder (Profiles in this example), and apply that to all child folders. It's a check-box somewhere...I think it's under the advanced options of the security tab.

Yes. The check box you are talking about is located on the Advanced tab. However, the permissions will be henrerited by default.

Edited October 9, 2005 by Gouki

[Hamins]

ummm.... I think there's a GPO that says "Add Admin access to user profils" go through the GPO list. I'm sure there's an option.

Yes, the exact Group Policy is :

Add the Administrator security group to roaming user profiles--

This policy allows an administrator to choose the same behavior as Windows NT version 4.0, and permit the administrators group to have full control of the user's profile directories. In Windows 2000, the default file permissions for newly generated roaming profiles are full control, or read and write access for the user, and no file access for the Administrators group.

[Leoniksvier]

Thank you very much to all

Yes this is what i ment Hamins, The Group Policy setting about: "the administrator group" was the thing i looked for.

Many thanks.