+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 21 of 21
Windows 7 Thread, Mandatory Profiles, How to make them? in Technical; I'm looking into setting up mandatory profiles here, and I'm trying to follow the MS way but I'm having trouble ...
  1. #16

    Join Date
    Feb 2008
    Posts
    43
    Thank Post
    17
    Thanked 5 Times in 2 Posts
    Rep Power
    14
    I'm looking into setting up mandatory profiles here, and I'm trying to follow the MS way but I'm having trouble with the unattend.xml file and adding the CopyProfile parameter to it.

    I have no experience of WAIK before now, could anyone provide detailed instructions on how to generate the Unattend.xml file with the CopyProfile parameter please?

  2. #17

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    12,080
    Thank Post
    1,637
    Thanked 1,957 Times in 1,431 Posts
    Blog Entries
    2
    Rep Power
    440
    sorry, i havent reviewed this thread further. I used windows enabler to be able to copy the profile.

  3. #18

    Join Date
    Aug 2009
    Location
    Huddersfield
    Posts
    55
    Thank Post
    10
    Thanked 14 Times in 10 Posts
    Rep Power
    13
    Quote Originally Posted by chriscubed View Post
    I'm looking into setting up mandatory profiles here, and I'm trying to follow the MS way but I'm having trouble with the unattend.xml file and adding the CopyProfile parameter to it.

    I have no experience of WAIK before now, could anyone provide detailed instructions on how to generate the Unattend.xml file with the CopyProfile parameter please?
    I used this to help me build the unattend.xml to create the default profile.

  4. Thanks to Dave84 from:

    chriscubed (27th May 2010)

  5. #19

    Join Date
    Feb 2012
    Location
    Florence
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi,
    i had the same problem. I have to set up a P.C. classroom for students with mandatory profiles without the use of an active directory domain server.
    I needed to setup and customize a LOCAL mandatory profile on a sample machine for replication.
    I wrote some notes to describe the working solution, in italian, below an attempt to translate it (i apologize for my poor english)

    1) login as an user of group 'Administrators'

    2) From the "User Management" create user 'student' with password 'student' and set:
    -Password never expires
    -User can not change password

    3) Start Menu> Change User> log in as user 'student'

    4) "Disconnect"

    5) Create a new folder in C:\Users\ and call it with a name like 'bloccato.v2'.

    6) Login as Administrator and copy the profile "DEFAULT" (the default system profile) to the newly created folder using the System Settings menu Advanced> User Profiles Settings> BUTTON "Copy to ...".
    IMPORTANT! Before you copy use the "Change" to allow the group 'Authenticated Users' use of the new profile.

    This operation overwrites the entire contents of the folder 'bloccato.v2' with the content of the default profile, but allows 'Authenticated Users' to use it.

    7) Menu "User Management"> user "student"> "Profile" - enter in the "Profile Path" box the path of the folder 'bloccato.v2' remembering that the folder must be specified omitting the extension. v2 - so the path becomes C:\Users\bloccato

    8) "Switch User"

    9) login again as "student"

    10) customize the desktop settings, the home page of the browsers, the proxy, and anything else you need blocked.

    11) "Disconnect"

    12) go back in as user 'student' and verify that the settings are all stored.

    13) Before you continue you should Log off and back several times, opening several applications to make sure they are all properly configured.

    14) At this point it is time to change, within the profile folder "bloccato.v2" filename "ntuser.dat" in "Ntuser.man"

    15) "Switch User"

    16) DONE! login as "student" and try to change some settings - disconnect and go back. The profile "student" is locked!

    Further customizations of the mandatory profile can be done ulocking it by renaming back ntuser.man to ntuser.dat.

    I hope this is useful to someone. By,
    Stefano

  6. #20

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    Interesting how a lot of have different methods. This is how I do it:

    Create a template account in Active Directory, but with no home directory specified.

    Logon as an administrator on a workstation. Navigate to Control Panel > User Accounts > Configure advanced user profile profile properties.

    Highlight the Default profile and the 'Copy to' button becomes active.

    Copy this to your \\SERVERNAME\Profiles$ share, name the profile (randomname) and give Everyone access. Logoff the workstation as an administrator.

    Update the template account profile directory in Active Directory so it reads the same (as above) - \\SERVERNAME\Profiles$\randomname

    Logon using the template account on a workstation and make required changes.

    Logoff the workstation, then return to the server. On the server navigate to Control Panel > Folder Options > View and untick Hide protected operating system files (Recommended).

    Rename the profile ntuser.dat to ntuser.man, then re-tick Hide protected operating system files (Recommended) when finished.

    Update other account to use the mandatory profile, job complete.

  7. #21
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,662
    Thank Post
    166
    Thanked 220 Times in 203 Posts
    Rep Power
    67
    I remember reading that unless you do it the MS supported way certain symbolic links and other background pieces stop working properly?

    When we do our Windows 7 build I'm thinking of doing this...

    - build "Gold" image in VMWare so it's truly hardware-agnostic
    - capture to SCCM
    - deploy via SCCM with driver packages
    - take a snapshot of the VM before making changes
    - do all the settings required for mandatory profile
    - sysprep etc as per MS documentation
    - revert snapshot to "clean" state

    Rinse and repeat for as many times as we need to make changes to the profile
    Last edited by gshaw; 27th February 2012 at 12:14 PM.

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Mandatory profiles (Again!)
    By joe90bass in forum Windows Server 2008 R2
    Replies: 0
    Last Post: 28th January 2010, 01:10 PM
  2. Mandatory Profiles
    By eddyc in forum Windows
    Replies: 15
    Last Post: 28th January 2010, 01:40 AM
  3. Mandatory Profiles
    By jcollings in forum Wireless Networks
    Replies: 7
    Last Post: 9th September 2009, 03:36 PM
  4. Moodle Make a feild none mandatory
    By FN-GM in forum Virtual Learning Platforms
    Replies: 0
    Last Post: 27th July 2009, 01:25 PM
  5. Mandatory Profiles
    By HodgeHi in forum Windows
    Replies: 2
    Last Post: 6th December 2006, 11:56 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •