Roaming Profiles – Win 7 & SBS 2011

What about just using the Redirected Folders?

Run the "Redirect folders for user accounts to the server" task from the Users and Groups tab of the SBS Console. From here you can choose Desktop, My Documents, and Start Menu (although you may just want the My Documents).

You can fine-tune what gets redirected in the Group Policy Management Console > "Small Business Server Folder Redirection Policy" and then drill down to User Configuration > Policies > WIndows Settings > Folder Redirection

you should be able to change which folders you want to include there. May take some trial and error (and gpupdate /force) to get the right folders you want/need as I'm not sure where some of those registry key are located (likely Application Data).

1. If you have Authenticated Users = Full in shared, you don't need any of the others.

2. Your NTFS permissions have no way for a normal user to create their home folder. As such, you'll have to create the folder yourself. The best way to do this is to create all the home folders, and use chown to set the owner to them. That way they own the folder and you can use the Creater Owner security object to set permissions appropriately.

   I highly suggest that Creater Owner does not get Full Control, as this will also allow the users to muck with the permissions of their home folder, something they should never need to do.

   The alternative is to grant the "Create Folders" permission on the Profiles folder, and set it to apply to "This folder only". This will allow the users to create the folder, but it will only apply to that single folder. This will also allow any user to create any arbitrary folder.

The permission you have in the question would not have worked on Server 2003. Permissions are almost identical between 2003/2008/2008R2.