Sunday, March 29, 2009

GPO: Add the Administrators security group to roaming user profiles path

Dont you hate it when a user rings up and you solve their problem you need access you their profiles on the server?

such examples might be they cannot login, or its slow to login due to profile size. Or you want to add an icon to their desktop? or you want to restore a file or something like that.

But you cannot do that by default, bucause 2003 server will set only the real user to have access to that folder (and system and stuff like that), but not even domain admins will have access by default.

Sure, you can go in there and take ownership, apply (wait 20 minutes for it to propergate to all sub folders and files, and then change the ACL's and repropergate again (thanks microsoft). 40 minutes later and 5 frantic phone calls from the user later, you can proceed.

Or, if you planned ahead, you would be added this following group policy before creating all of the users (i used this when setting up new domains).

i will not explain how to add this setting, just where it is. only admins will be applying it.

Computer Configuration/Administrative Templates/System/User Profiles/Add the Administrators security group to roaming user profilesSetting path

No comments:

Post a Comment