Synchronize file security attributes

Security attributes can be synchronized when Profile Management copies files and folders in a user profile between the system on which the profile is installed and the user store. This feature aims to prevent inconsistencies among security attributes. It requires Windows 10 and later, and in Windows Server 2016.

This feature is enabled by default. To disable it, follow the steps below:

  1. In the UPMPolicyDefaults_all.ini file, add SecurityPreserveEnabled=0 in the General Settings section.
  2. From a command line, run the command gpupdate /force.

Note that Profile Management synchronizes profile changes based on the latest modification time of the profile. Profile Management does not synchronize a file if the changes are made only to the file’s security attributes.