[ActiveDir] Roaming Profile Permissions

[Edwin]

I would like to be able to view the files contained within a users roaming profile but keep getting a “permission denied” error.  I have a Windows 2003 DC and testing on a Windows XP machine.   I have enabled Computer Configuration\Administrative Templates\System\User Profiles\Add the Administrators Security Group to the roaming user profiles but that only allows be to go into the root directory of the user profile but not into other directories such as the Desktop or My Documents.   I know that I can update the NTFS permissions to the sub directories but I am not sure if this is wise to where it may affect the user.  I am sure that there have been required investigations in the past by an Administrator.  What is the recommended solution for this without affecting the user?   Thank you all for your responses in advance.   Edwin