JSI Tip 1757. Roaming Profiles do not inherit parent permissions?

Jerold Schulman

October 28, 1999

1 Min Read
ITPro Today logo in a gray background | ITPro Today

If the user's profile folder does not exist when they first logon, the folder is created by a process in Userenv.dll, which sets:

Administrators = FULL
%username% = FULL
System = FULL

When the user logs off, no additional persmissions are set.

To workaround this behavior:

Pre-create the user's profile folder

          OR

Delete the user's profile folder after they logon but before they logoff.

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like