[Samba] profile question

[éric le hénaff]

hello,
i have a profile question
here under is my profile definition. it's nothing more than the one from 
the idealx samba howto.
profiles just work fine on my box BUT i want more ...
i want a manager to have read/write acces on every users' profile 
subdirectory for troubleshooting from his windows workstation with 
invoking \\server\profiles. he's in the domain admins.
How to do that
Thank you for any help, i tried different scenarios (samba tweaking, 
acls inheritance and so on) for an afternoon and didnt find one working.
ELH

[profiles]
path = /home/profiles
read only = no
create mask = 0600
directory mask = 0700
browseable = No
guest ok = Yes
profile acls = yes
csc policy = disable
# next line is a great way to secure the profiles
force user = %U
# next line allows administrator to access all profiles
valid users = %U @"Domain Admins"

-- 
Éric LE HÉNAFF
École normale supérieure - Centre de ressources informatiques
Informaticien, Ingénieur développements et systèmes auprès des bibliothèques de l'ENS

Préférez firefox! http://www.mozilla-europe.org/fr/

SVP, évitez de m'envoyer des attachements au format Word, Excel ou PowerPoint.
Préférez les formats rtf, csv, html ou pdf au lieu des formats word et excel.
Voir http://www.gnu.org/philosophy/no-word-attachments.fr.html pour plus
d'explications.