Hi,
I'm aware that if the user profile area for persona manager is set up correctly, it will follow MS Roaming Profile practices.
- When a user logs in, the PM user profile folder is created.
- It only has permissions for the user and SYSTEM.
- If the GPO "Add the Administrators security group to roaming user profiles" is added, then the admin group of the server (which the share resides on) gets access as well.
- Permissions of other user/groups are not inherited from the parent.
To circumvent the last point, I wrote a quick VBS script that runs on user login that simply sets another domain group to have full control of the users profile folder. This works well - on login, the folder is created (if not already there) as usual, and the extra permissions are added.
However, when the user logs out... the permissions are removed.
It reverts back to the permissions that were present before my script runs. There is no script to perform this work, it just happens as if it is default behaviour.
I'm not aware of this functionality. Is it part of PM or just MS roaming profile?
Can it be stopped?