Terminal server Profile folders

[SPP-IT]

When a new user is created we add under terminla server profile in AD the
path to the location we store all are users profiles.
\\Servername\profiles\username what is happening, when the folder for the
user is created it is not inherating permisions from the parent folder. This
is not a problem for the domain admins, but we have Help Desk Techs who are a
member of a Group and we have added them to the profiles folder with modify
permisions, since the folders do not inherat the perminsion we need to go in
manually and check this option. I have two questions. 1) is this because the
System Account is creating the folder and by design does not check the option
to inherat permisions and if so 2) how do i fix this so we don't have to do
it manually. Thank you for your help in advance

 

[Jeff Pitsch]

Re: Terminal server Profile folders

You would have to precreate the folders ahead of time. I don't think
there is a way to automatically fix the problem as it's done from a
security perspective.

Jeff Pitsch
Microsoft MVP - Terminal Services

SPP-IT wrote:
> When a new user is created we add under terminla server profile in AD the
> path to the location we store all are users profiles.
> \\Servername\profiles\username what is happening, when the folder for the
> user is created it is not inherating permisions from the parent folder. This
> is not a problem for the domain admins, but we have Help Desk Techs who are a
> member of a Group and we have added them to the profiles folder with modify
> permisions, since the folders do not inherat the perminsion we need to go in
> manually and check this option. I have two questions. 1) is this because the
> System Account is creating the folder and by design does not check the option
> to inherat permisions and if so 2) how do i fix this so we don't have to do
> it manually. Thank you for your help in advance

 

[SPP-IT]

Re: Terminal server Profile folders

That's what i thought just wanted to get some outside advice, also to any one
you reads this you can script it through xcacls.exe
http://support.microsoft.com/kb/318754

"Jeff Pitsch" wrote:

> You would have to precreate the folders ahead of time. I don't think
> there is a way to automatically fix the problem as it's done from a
> security perspective.
>
> Jeff Pitsch
> Microsoft MVP - Terminal Services
>
> SPP-IT wrote:
> > When a new user is created we add under terminla server profile in AD the
> > path to the location we store all are users profiles.
> > \\Servername\profiles\username what is happening, when the folder for the
> > user is created it is not inherating permisions from the parent folder. This
> > is not a problem for the domain admins, but we have Help Desk Techs who are a
> > member of a Group and we have added them to the profiles folder with modify
> > permisions, since the folders do not inherat the perminsion we need to go in
> > manually and check this option. I have two questions. 1) is this because the
> > System Account is creating the folder and by design does not check the option
> > to inherat permisions and if so 2) how do i fix this so we don't have to do
> > it manually. Thank you for your help in advance
>