Windows 10 - Roaming Profile Permissions

[Bob_the_Goon]

I'm testing our Win 10 rollout and I've noticed that administrators don't have any permissions to the V6 profile folders. I have to take ownership and then add the permissions in. Why does it do that and is there a way of resolving this?

 

My Win7 V2 profiles have the correct permissions i.e. the user is the owner but the administrator is added into the ACL with full control.

 

The V6 profiles seem to work ok for the user however I'm concerned that I won't easily be able to delete/rename profiles in the future.

 

Has anyone else came across this issue?

[svardy]

Hello,

 

We have found that if you haven't created the profile.V6 folder with the correct permisisons before user login, then it auto-creates the folder and sets the permissions incorrectly.

 

We created the folders for each user to ensure this doesn't happen!

[Bob_the_Goon]

Gotcha. Weirdly, I hadn't thought to create the directory before login. We usually just let them auto-create. I'll give that a whirl. Thanks for that.

[synaesthesia]

Any reason for using roaming profiles rather than UE-V? Much better, choose what you want to store; saves a LOT of hassle and a hell of a lot of disk space. Plus no farting around with profiles in AD

[Bob_the_Goon]

Any reason for using roaming profiles rather than UE-V? Much better, choose what you want to store; saves a LOT of hassle and a hell of a lot of disk space. Plus no farting around with profiles in AD

 

I haven't considered UE-V to be honest. Will login times not be longer with UE-V as they will have to wait for the local profile to be created? Is this just a one-off profile creation per computer? This may sound like a stupid question however I have no experience with that technology.

[svardy]

Our network manager is currently looking into UE-V for our setup too. We tried at the beginning of term and had a number of issues(not related to UE-V as such, but Windows 10 swapover) so reverted back to what we know worked. But we are thinking of changing it now that other issues have been sorted.

[synaesthesia]

Shouldn't do no, as GPO will disable most of the guff involved in setting up a profile; once it's done it's done, careful use of delprof on shared machines will keep them tidy but may add a couple of seconds to logon, but leave admin machines as they are and should save time; although that does actually sort of defeat the point of UEV a little