Roaming profile security

  • Thread starter Thread starter Joe Brown
  • Start date Start date
J

Joe Brown

Guest
I want a few people on our help desk to have the ability to delete roaming
profiles. I've created a Profile Admins group and added it to the security
list for pcprofiles folder. If I check the box to replace permissions on
child objects the Profile Admins group gets added to exisiting profile
folders. New profiles, however, do not get the Profile Admins group when
they get created because the new profiles do not have the box checked to
inherit
permissions. How do I fix this to where that box is checked for new
profiles? We do not manually create the roaming profile.
 
Re: Roaming profile security

In Group Policy you can specify that the profile is created allowing admin
access.
If you take ownership and change permissions you will also have to set the
policy not to check ownership of the profile.
I think trying to change this will be more trouble than it is worth.
You can run a periodic housekeeping task instead to delete old profiles,
Anthony,
http://www.airdesk.co.uk

"Joe Brown" <JoeBrown@discussions.microsoft.com> wrote in message
news:20166478-D81A-416C-BB18-C5965A2B5C21@microsoft.com...
> I want a few people on our help desk to have the ability to delete roaming
> profiles. I've created a Profile Admins group and added it to the
> security
> list for pcprofiles folder. If I check the box to replace permissions on
> child objects the Profile Admins group gets added to exisiting profile
> folders. New profiles, however, do not get the Profile Admins group when
> they get created because the new profiles do not have the box checked to
> inherit
> permissions. How do I fix this to where that box is checked for new
> profiles? We do not manually create the roaming profile.
>
 
Back
Top