Question on user access rights for AD user

I used this post to set profile and roaming profile with some slight modifications:

chgrp "domain users@<domain>" /var/lib/nethserver/profiles
chmod 1770 /var/lib/nethserver/profiles

I am not sure if 1770 is appropriate but I had problems with 1750 and 1757.

For Folder redirection I created a folder named redirection with same access rights as the profile folder and used the rsat tools to point to the redirection folder.