It’s not an NTFS permission but an internal one. That’s required to allow access to the registry hive contained in NTUSER.DAT.
Part of the dialog re-permissions the profile for a group such as Authenticated Users. You select the profile of the sample user and click on to copy the profile to a UNC path on a file server. You go into “Control panel – System – User Profiles”. You log out and then log in as an administrator. You log into a sample PC as a user and configure the profile – shortcuts, desktop, registry, etc. It was pretty much the same in all versions of Windows I’d used going back to 1996. I’d previously written it based on MS guidelines for Vista and Windows Server 2008. Part of this chapter (my fourth in the book) is the creation of mandatory profiles.
It was decided to update the content for Windows Server 2008 R2 and Windows 7. It was previously written using Windows Server 2008 and Windows 7 but some timing complexities stuffed the publication. I’m currently writing some content on advanced user management in Windows Server 2008 R2.
