Roaming Profils & Redirected Documents

[Liebo]

Hi.

I'm new to the site and new to administrating roaming profiles of which I am trying to learn.

I'm having difficulty finding any specific tutorial or guide which is similar to what I want to achieve.

Basically its this:

There will be a single domain running Server 2003 R2 SP2 and this will be AD, DHCP and DNS. Initially there will be 5 client PC's but up to 20 users.

I've installed AD, DHCP and DNS. That's all working. I've tinkered with GPO, folder redirection and roaming but I can't get my head around some of it. I've got 3 OUs - IT user (eventually I will be in here), management (1 user currently) and sales & marketing (1 user currently).

I want all users to have a roaming profiles. How do I create the initial profile new users receive when logging on?

The server is clean server with 2 test users. Do I have to specify the roaming profile path manually for each user when creating the account or can this be set automatically via GP?

The "My Documents" folder needs to be redirected to the network so wherever the user logs on, their "My Documents" is available. I don't want to allow offline files. I've set up a share and configured this in GP for the users but then as the administrator, I cannot access the contents of the "My Documents" for each user from the server. I understand permissions must be wrong but during testing, the only way I've found to remove the folders is to quick format the drive (I don't know how to allow the Administrator account access AND the user.

Thanks in advance for any help or links.

[Liebo]

Ok, so I think I've managed to do the roaming profiles bit.

I created a folder called "Default User" in the root of NETLOGON share. In there I put the NTUSER.dat file and some other bits copied from a local profile.

I followed some instructions on this page to set the permissions and created a group policy to allow the administrator access - I noticed this only works on new profile folders.

Security Recommendations for Roaming User Profiles Shared Folders: Group Policy

I also fumbled around and managed to force ownership of the locked folders to the administrators so I could remove them and then logged in on the client PC to create them again but this time with the group policy set so the administrator could access them them.

I'll have another go at the documents shares next...