Add the Administrators security group to roaming user profiles

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2003, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP

This policy setting adds the Administrator security group to the roaming user profile share. Once an administrator has configured a user's roaming profile, the profile will be created at the user's next login. The profile is created at the location that is specified by the administrator. For the Windows XP Professional and Windows 2000 Professional operating systems, the default file permissions for the newly generated profile are full control, or read and write access for the user, and no file access for the administrators group. By configuring this policy setting, you can alter this behavior. If you enable this policy setting, the administrator group is also given full control to the user's profile folder. If you disable or do not configure this policy setting, only the user is given full control of their user profile, and the administrators group has no file system access to this folder. Note: If the policy setting is enabled after the profile is created, the policy setting has no effect. Note: The policy setting must be configured on the client computer, not the server, for it to have any effect, because the client computer sets the file share permissions for the roaming profile at creation time. Note: In the default case, administrators have no file access to the user's profile, but they may still take ownership of this folder to grant themselves file permissions. Note: The behavior when this policy setting is enabled is exactly the same behavior as in Windows NT 4.0.

This policy has no additional user input fields.

• User
  Connect home directory to root of the share

  Windows Server 2003, Windows XP, and Windows 2000 only
• Computer
  Control slow network connection timeout for user profiles

  At least Windows 2000
• Computer
  Delete cached copies of roaming profiles

  At least Windows 2000
• Computer
  Delete user profiles older than a specified number of days on system restart

  At least Windows Vista
• Computer
  Disable detection of slow network connections

  At least Windows 2000
• Computer
  Do not check for user ownership of Roaming Profile Folders

  At least Windows Server 2003 operating systems, Windows XP Professional Service Pack 1, or Windows 2000 Service Pack 4
• Computer
  Do not forcefully unload the users registry at user logoff

  At least Windows Vista
• Computer
  Do not log users on with temporary profiles

  At least Windows 2000
• Computer
  Download roaming profiles on primary computers only

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Establish timeout value for dialog boxes

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Exclude directories in roaming profile

  At least Windows 2000
• Computer
  Leave Windows Installer and Group Policy Software Installation Data

  At least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2