Roaming profile security

[Guest Joe Brown]

I want a few people on our help desk to have the ability to delete roaming

profiles. I've created a Profile Admins group and added it to the security

list for pcprofiles folder. If I check the box to replace permissions on

child objects the Profile Admins group gets added to exisiting profile

folders. New profiles, however, do not get the Profile Admins group when

they get created because the new profiles do not have the box checked to

inherit

permissions. How do I fix this to where that box is checked for new

profiles? We do not manually create the roaming profile.

[Guest Anthony [MVP]]

Re: Roaming profile security

 

In Group Policy you can specify that the profile is created allowing admin

access.

If you take ownership and change permissions you will also have to set the

policy not to check ownership of the profile.

I think trying to change this will be more trouble than it is worth.

You can run a periodic housekeeping task instead to delete old profiles,

Anthony,

http://www.airdesk.co.uk

 

"Joe Brown" <JoeBrown@discussions.microsoft.com> wrote in message

news:20166478-D81A-416C-BB18-C5965A2B5C21@microsoft.com...

> I want a few people on our help desk to have the ability to delete roaming

> profiles. I've created a Profile Admins group and added it to the

> security

> list for pcprofiles folder. If I check the box to replace permissions on

> child objects the Profile Admins group gets added to exisiting profile

> folders. New profiles, however, do not get the Profile Admins group when

> they get created because the new profiles do not have the box checked to

> inherit

> permissions. How do I fix this to where that box is checked for new

> profiles? We do not manually create the roaming profile.

>