+ Post New Thread
Results 1 to 11 of 11
Windows 7 Thread, Windows 7 - do I still need mandatory profile or can GPO do it all? in Technical; Hi, I have migrated a few of our classroom pcs to Windows 7 and have set quite a few GPOs ...
  1. #1

    Join Date
    Mar 2011
    Posts
    30
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Windows 7 - do I still need mandatory profile or can GPO do it all?

    Hi,

    I have migrated a few of our classroom pcs to Windows 7 and have set quite a few GPOs to configure them. I have implemented Redirected Desktop for the pupils who will be using these computers in the hope that I can just drop all the shortcuts they need into the redirected folder. I have configured their desktop background via a GPO and (hopefully) prevented them from making any changes to the desktop.

    My question is now: do I still need mandatory profiles as I used to have them in XP?

    Also, if I want to remove a shortcut from their redirected desktop - do I just delete it from the folder in the redirected shared folder? I tried this with one machine, but the icon remained on the pupil desktop even after I had removed it from the redirected folder ...?!

    Thanks

  2. #2

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,841
    Thank Post
    569
    Thanked 994 Times in 766 Posts
    Blog Entries
    15
    Rep Power
    460
    Yes you'd still need a mandatory profile - just like in XP it's possible to recreate all the restrictions of an MP via GPO but that's besides the point. Just setup man profiles in the same way. They're faster than roaming profiles anyway, plus you won't need to slow it down further with more GPOs limiting things.

  3. #3

    Join Date
    Mar 2011
    Posts
    30
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    OK - thanks! Is there a general rule to follow of which settings are done in the mandatory profile and which are done through GPO?

  4. #4

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,841
    Thank Post
    569
    Thanked 994 Times in 766 Posts
    Blog Entries
    15
    Rep Power
    460
    Depends entirely on your circumstances and what you want to do, but speaking generally if you can put it in the profile, it's better off there. The profile should be as light as possible.
    I tend to have a mandatory profile for certain users (teachers, associate, student) - you could expand that if you liked to 6th form, finance staff etc etc as you see fit. It doesn't matter much at all. One thing to remember is that a mandatory profile is less likely to "not appear" than a GPO They're pretty much hand in hand, one really isn't a replacement for the other.

  5. #5
    free780's Avatar
    Join Date
    Sep 2012
    Posts
    897
    Thank Post
    41
    Thanked 67 Times in 64 Posts
    Rep Power
    17
    If you do the work and discover the reg keys gpo with gpp is better. Roaming isn't too slow as long as you lock it down.

  6. #6

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,272
    Thank Post
    614
    Thanked 1,567 Times in 1,407 Posts
    Rep Power
    412
    I just wonder why you all want to restrict your users so much with mandatory profiles.

    Ben

  7. #7

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,841
    Thank Post
    569
    Thanked 994 Times in 766 Posts
    Blog Entries
    15
    Rep Power
    460
    "Roaming isn't too slow" - no, but it creates problems (recreating/resetting profiles? Not any more!) and increases network load especially at logon time.
    Again it's not a one size fits all thing. Mandatory profiles for us enforce good practice, speed up logon times, save us a hell of a lot of time (see above re resetting corrupt profiles) and give everyone an identical user experience, removing so many factors from problems. The amount of times on CC3/CC4 something was untowards because a profile was squiffy was beyond a joke. Again, so much time saved because we didn't have to try and diagnose what was failing.

  8. #8

    Join Date
    Mar 2011
    Posts
    30
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by plexer View Post
    I just wonder why you all want to restrict your users so much with mandatory profiles.

    Ben
    In my case, I am used to using mandatory profiles with XP as a way of ensuring a fresh desktop each time the pupils log in which contains all the program shortcuts/printers etc that they need. Previously, with Windows 95/98 I would spend half my day sorting out desktops, renaming/arranging icons and putting the Start bar back where it should be and making it a normal size again - so mandatory profiles were a god-send!!

    I have found with Win7 and GPOs/redirected folders that I can achieve most of the same functionality, so thought I could abandon profiles altogether .... but perhaps I do still need them after all ... I just need to see which settings I configure in the profile and which I do via a GPO/GPP.

    So, in answer to your question Ben - it's not so much that I want to restrict my users, I just want to give a consistent look to the desktop and to prevent it being meddled with ....

  9. #9

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,272
    Thank Post
    614
    Thanked 1,567 Times in 1,407 Posts
    Rep Power
    412
    Redirected desktops worked fine for us with XP clients and we've kept the same setup moving forward to Win7.

    Ben

  10. #10

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,841
    Thank Post
    569
    Thanked 994 Times in 766 Posts
    Blog Entries
    15
    Rep Power
    460
    You can abandon profiles if you so wish - I believe there's a fair few people happy to use local profiles. All you need to do there is to embed the default profile you wish into your system image and you're good to go. Not quite as convenient but then it's mostly GPO managed.

  11. #11

    Join Date
    Feb 2009
    Posts
    16
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    11
    What I've done, is keep the mandatory profiles, but use Group Policy for as much as I possibly can. I done very few customisations for settings etc to our mandatory profile.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 4
    Last Post: 25th February 2013, 05:46 PM
  2. Do we still need virtual memory?
    By chazzy2501 in forum Windows 7
    Replies: 7
    Last Post: 2nd July 2012, 09:56 AM
  3. Replies: 14
    Last Post: 5th August 2010, 02:25 PM
  4. How do you create a mandatory profile on a network?
    By hig in forum Windows Server 2000/2003
    Replies: 1
    Last Post: 7th April 2009, 09:34 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •