This setting adds the Administrator security group to the roaming user profile share. Once an administrator has configured ...

This setting adds the Administrator security group to the roaming user profile share.

Once an administrator has configured a users' roaming profile, the profile will be created at the user's next login. The profile is created at the location that is specified by the administrator.

For the Windows 2000 Professional and Windows XP Professional operating systems, the default file permissions for the newly generated profile are full control, or read and write access for the user, and no file access for the administrators group.

By configuring this setting, you can alter this behavior.

If you enable this setting, the administrator group is also given full control to the user's profile folder.

If you disable or do not configure it, only the user is given full control of their user profile, and the administrators group has no file system access to this folder.

Note: If the setting is enabled after the profile is created, the setting has no effect.

Note: The setting must be configured on the client computer, not the server, for it to have any effect, because the client computer sets the file share permissions for the roaming profile at creation time.

Note: In the default case, administrators have no file access to the user's profile, but they may still take ownership of this folder to grant themselves file permissions.

Note: The behavior when this setting is enabled is exactly the same behavior as in Windows NT 4.0.