From dc13afe1fdc585ff06a6d1c0f8597d2cf7f1406c Mon Sep 17 00:00:00 2001 From: Herbert Mauerer <41573578+HerbertMauerer@users.noreply.github.com> Date: Thu, 13 Apr 2023 15:08:39 +0200 Subject: [PATCH 1/2] Update mandatory-user-profile.md add steps to set the correct owner for the mandatory profile folders --- windows/client-management/mandatory-user-profile.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index 0771fcc433..425ea46700 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -118,6 +118,13 @@ First, you create a default user profile with the customizations that you want, 1. Rename `Ntuser.dat` to `Ntuser.man`. +### Check and set the correct owner for the mandatory profile folders + +1. Open the properties of the "profile.v6" folder. +2. Go to the "security" tab and click "Advanced". +3. Check the "owner" of the folder. It has to be the builtin Administrators group. To change it here if it does not match, you need to be in the Administrators group of the file server to take ownership, or have "set owner" privilege on the server. +4. When you have set the owner, check the box "Replace owner on subcontainers and objects" before you click OK. + ## Apply a mandatory user profile to users In a domain, you modify properties for the user account to point to the mandatory profile in a shared folder residing on the server. From 5d94ca3538aaea019f4349be856d4fc9f599ea74 Mon Sep 17 00:00:00 2001 From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Date: Thu, 13 Apr 2023 10:35:59 -0400 Subject: [PATCH 2/2] Update mandatory-user-profile.md --- windows/client-management/mandatory-user-profile.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index 425ea46700..6f1798eb0e 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -118,12 +118,12 @@ First, you create a default user profile with the customizations that you want, 1. Rename `Ntuser.dat` to `Ntuser.man`. -### Check and set the correct owner for the mandatory profile folders +### Verify the correct owner for the mandatory profile folders 1. Open the properties of the "profile.v6" folder. -2. Go to the "security" tab and click "Advanced". -3. Check the "owner" of the folder. It has to be the builtin Administrators group. To change it here if it does not match, you need to be in the Administrators group of the file server to take ownership, or have "set owner" privilege on the server. -4. When you have set the owner, check the box "Replace owner on subcontainers and objects" before you click OK. +1. Select the **Security** tab and then select **Advanced**. +1. Verify the **Owner** of the folder. It must be the builtin **Administrators** group. To change the owner, you must be a member of the Administrators group on the file server, or have "Set owner" privilege on the server. +1. When you set the owner, select **Replace owner on subcontainers and objects** before you click OK. ## Apply a mandatory user profile to users