Guest SPP-IT Posted October 6, 2008 Posted October 6, 2008 When a new user is created we add under terminla server profile in AD the path to the location we store all are users profiles. \\Servername\profiles\username what is happening, when the folder for the user is created it is not inherating permisions from the parent folder. This is not a problem for the domain admins, but we have Help Desk Techs who are a member of a Group and we have added them to the profiles folder with modify permisions, since the folders do not inherat the perminsion we need to go in manually and check this option. I have two questions. 1) is this because the System Account is creating the folder and by design does not check the option to inherat permisions and if so 2) how do i fix this so we don't have to do it manually. Thank you for your help in advance
Guest Jeff Pitsch Posted October 6, 2008 Posted October 6, 2008 Re: Terminal server Profile folders You would have to precreate the folders ahead of time. I don't think there is a way to automatically fix the problem as it's done from a security perspective. Jeff Pitsch Microsoft MVP - Terminal Services SPP-IT wrote: > When a new user is created we add under terminla server profile in AD the > path to the location we store all are users profiles. > \\Servername\profiles\username what is happening, when the folder for the > user is created it is not inherating permisions from the parent folder. This > is not a problem for the domain admins, but we have Help Desk Techs who are a > member of a Group and we have added them to the profiles folder with modify > permisions, since the folders do not inherat the perminsion we need to go in > manually and check this option. I have two questions. 1) is this because the > System Account is creating the folder and by design does not check the option > to inherat permisions and if so 2) how do i fix this so we don't have to do > it manually. Thank you for your help in advance
Guest SPP-IT Posted October 7, 2008 Posted October 7, 2008 Re: Terminal server Profile folders That's what i thought just wanted to get some outside advice, also to any one you reads this you can script it through xcacls.exe http://support.microsoft.com/kb/318754 "Jeff Pitsch" wrote: > You would have to precreate the folders ahead of time. I don't think > there is a way to automatically fix the problem as it's done from a > security perspective. > > Jeff Pitsch > Microsoft MVP - Terminal Services > > SPP-IT wrote: > > When a new user is created we add under terminla server profile in AD the > > path to the location we store all are users profiles. > > \\Servername\profiles\username what is happening, when the folder for the > > user is created it is not inherating permisions from the parent folder. This > > is not a problem for the domain admins, but we have Help Desk Techs who are a > > member of a Group and we have added them to the profiles folder with modify > > permisions, since the folders do not inherat the perminsion we need to go in > > manually and check this option. I have two questions. 1) is this because the > > System Account is creating the folder and by design does not check the option > > to inherat permisions and if so 2) how do i fix this so we don't have to do > > it manually. Thank you for your help in advance >
Recommended Posts