Roaming Profile Permissions Not Inherited on Server

• Microsoft Windows NT Server version 4.0
• Microsoft Windows NT Workstation version 4.0

SYMPTOMS

You may notice that roaming profiles stored on the computer running Windows NT Server do not inherit the parent folder's permissions or the source folder's permissions from the local drive.

CAUSE

This behavior occurs because the process used in Userenv.dll to create the new profile folder uses the CreateSecureDirectory() API to set the following permissions:

Administrators = FULL
%username% = FULL
System = FULL

RESOLUTION

To resolve this behavior, perform one of the following:

• Create the profile folder in advance if it is necessary for the profile folder to inherit the parent's permissions.


-or-


• Delete the profile folder on the server after the user has logged on but prior to the user logging off. The process used to create the folder when the user logs off (or update the profile on the server) does not set any permissions, effectively inheriting the parent's permissions.

Additional query words:

Keywords : kbenv kbnetwork
Version : winnt:4.0
Platform : winnt
Issue type : kbprb