While creating a Home Folder on a child domain, the user is assigned read only permissions instead of full control when using HomeFolderProvisioning.
The following error can be seen in the DS log:
“The process does not possess the 'SeSecurityPrivilege' privilege which is required for this operation.”
ARS service account is missing Manage auditing and security log rights on the FileServer.
Assign Manage auditing and security log rights to the service account on the specific File Server:
Local Security Policy- > Local Policies -> User Rights Assignment
Note: This may affect home folder provisioning on user creation.