Introduction
Once an administrator has configured a user’s roaming profile, the profile will be created at the user’s next login. The profile is created at the location that is specified by the administrator. The default file permissions for the newly generated profile are full control or read and write access for the user, and no file access for the administrators group.
New User Profile Folders
You can set it to auto provide full access to user’s profile to administrators using group policy. You can follow below guide.
Existing User Profile Folders
Create a Logon.bat and set it as Logon Script for all users. Change Roaming Profile folder location.
icacls \\<servername>\profile$\%username% /grant AD\administrators:(F) /T /C
