Dinh The only way you can do this is by adding that Group to each profile after its created using something like cacls.exe. I don't believe that you can do it at the top level profiles share because those profiles that get created do not inherit the permissions of the parent folder, for obvious reasons. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of DinhDuy Sent: Monday, February 26, 2007 7:57 PM To: GPTalk Subject: [gptalk] Roaming Profile Dear All, Server: Windows Server 2003 Client: Windows XP SP2 As default, roaming profile folders do not allow anyone access them except System and profile's owner. I want to add Group of IT to all profile folders in order that Group of IT can control them. How can I do that? Thanks. P.S: I can use Add the Administrators security group to roaming user profiles to apply to all roaming profile folders.