Profile Management 2103

Synchronize file security attributes

Security attributes can be synchronized when Profile Management copies files and folders in a user profile between the system on which the profile is installed and the user store. This feature aims to prevent inconsistencies among security attributes. It requires Windows 10 and later, and in Windows Server 2016.

This feature is enabled by default. To disable it, do the following:

  1. In the UPMPolicyDefaults_all.ini file, add SecurityPreserveEnabled=0 in the General Settings section.
  2. From a command line, run the gpupdate /force command.

Profile Management synchronizes profile changes based on the latest modification time of the profile. Profile Management does not synchronize a file if the changes are made only to the file’s security attributes.

Synchronize file security attributes