Friends I created a group in Active Directory to manage my network profiles in a Terminal Services server. When I log on the TS server, and folder permissions vejos created with the new profile, it does not inherit the information folders that were set up in documents and setings. I marked the option to replicate to all child objects. Unfortunately I do not know where I can make the change. I need your help.

Hello, please describe in detail what you have configured. A security group in AD doesn't have any folder permissions by default. "I marked the optionto replicate to allchild objects." Please elaborate this. Also i have never seen that permissions must be set on the documents and settings folder, what is the reason for settings specific permissions on this level?Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

I'm wanting a security group has access to all objects in the folder documents and settings and such access to be replicated by inheritance to all profiles created.

Hello, each administrative account has access to the locally created/stored user profiles. So use restricted groups and add the people you think they should be admin to the local admin group of that server.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

It seems that you set permission like Full Control to a security group on c:\documents and settings folder and wish to inherit the setting to all profiles created later. Is this correct? If so, what's the "replicate to all child objects" step you mentioned? There are 2 kinds of settings which can be replicated to subfolders. "Replace all child object permissions with inheritable permissions from this object", or "Apply to:This folder, subfolders and files". The first one is of course incorrect as it will change the permission of user profile. Maybe you can workaround with "CreateOwner" - Full Control. The second one will not be applied to the folders which is not created yet. Thus you can try the suggestion provided by Meinolf to add the users to local Administrators group.Shaon Shan |TechNet Subscriber Support in forum |If you have any feedback on our support, please contact tngfb@microsoft.com

I created a group. Ex: Monitoring profile. In this group, I gave permission directly Documents and Settings folder permission to modify. When someone runs a TS server access, this newly created profile does not inherit these settings made. I don't can to add the security group in local group administratrs. This profile is created by automatic when one user do access via mstsc. Marcus

Hi Marcus, I'm thinking if it is a default setting, as the profile folders created under Documents and Settings (it changed to "Users" folder in newer systems) will not inherit the permission of the parent folder. You can try one of the following two ways to workaround this if available. 1. Using Roaming Profiles to change the location of profile folders and see if permission will be inherited. 2. Add a startup script to set permission manually.Shaon Shan |TechNet Subscriber Support in forum |If you have any feedback on our support, please contact tngfb@microsoft.com