+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 21
Windows 7 Thread, Mandatory Profiles, How to make them? in Technical; Hi everyone, I'am currently setting up our shiny new windows 7 domain we are almost there but I have hit ...
  1. #1
    ravenadsl's Avatar
    Join Date
    Jan 2010
    Location
    Maidenhead
    Posts
    57
    Thank Post
    25
    Thanked 36 Times in 5 Posts
    Rep Power
    16

    Mandatory Profiles, How to make them?

    Hi everyone,

    I'am currently setting up our shiny new windows 7 domain we are almost there but I have hit a bump in the road. Please help

    I went to create a mandatory profile for our students and copy it to a share like i have always done in windows XP and found the button grayed out. After talking to Google I have found Microsoft have disabled this button. I have also found loads of old men moaning about it. every one was so busy slating Microsoft i cant find any guides on how i should go about making a mandatory profile.

    Please help!

    Thanks,

  2. #2

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    11,792
    Thank Post
    1,623
    Thanked 1,878 Times in 1,396 Posts
    Blog Entries
    2
    Rep Power
    422
    We had this, we had to create a new user, and do everything on that user. We copied the profile and overwrote the "default" profile and then copied the default profile to our server and renamed it to Mandatory.V2

    Not very in-depth explanation but it is how we did it.

  3. Thanks to nephilim from:

    ravenadsl (12th May 2010)

  4. #3


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,579
    Thank Post
    228
    Thanked 853 Times in 732 Posts
    Rep Power
    294
    download windows enabler then you can make the copy button work like it does in previous versions of windows

    Windows Enabler 1.1 Download - Freeware Files.com - Utilities Category

  5. 3 Thanks to sted:

    nephilim (12th May 2010), ravenadsl (12th May 2010), speckytecky (11th May 2010)

  6. #4
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34
    This sounds to me like an account security elevation issue. As I'm sure you know, when you run apps in Win7, it runs as a limited user, even if you have local admin rights. The Copy To button is presumably part of the Explorer shell process or is launched by it and therefore runs in the same security context. I've not looked at Windows Enabler, but my guess is that it allows you to use shell features in an elevated context.

    EDIT - Ignore all the above. There is more to this than security levels and Windows Enabler does not affect privilege levels.

    Also turned up this...

    The Deployment Guys : Configuring Default User Settings
    Last edited by ajbritton; 13th May 2010 at 12:19 AM.

  7. #5
    ravenadsl's Avatar
    Join Date
    Jan 2010
    Location
    Maidenhead
    Posts
    57
    Thank Post
    25
    Thanked 36 Times in 5 Posts
    Rep Power
    16
    Quote Originally Posted by nephilim View Post
    We had this, we had to create a new user, and do everything on that user. We copied the profile and overwrote the "default" profile and then copied the default profile to our server and renamed it to Mandatory.V2

    Not very in-depth explanation but it is how we did it.
    Thanks nephilim,
    your Not very in-depth explanation worked fine. thanks !

    Quote Originally Posted by sted View Post
    download windows enabler then you can make the copy button work like it does in previous versions of windows

    Windows Enabler 1.1 Download - Freeware Files.com - Utilities Category
    Thats a nice little tool. This also worked well.

    its a bit strange Microsoft just grayed out the button but left behind the code so it still works :S


    Thanks for you help guys!

  8. #6
    mjs_mjs's Avatar
    Join Date
    Jan 2009
    Location
    bexleyheath, london
    Posts
    1,018
    Thank Post
    37
    Thanked 111 Times in 95 Posts
    Rep Power
    37
    Quote Originally Posted by ravenadsl View Post
    its a bit strange Microsoft just grayed out the button but left behind the code so it still works :S
    Apple macs have a right click but they done come with a mouse that can right click.

  9. #7
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34
    Quote Originally Posted by nephilim View Post
    We had this, we had to create a new user, and do everything on that user. We copied the profile and overwrote the "default" profile and then copied the default profile to our server and renamed it to Mandatory.V2

    Not very in-depth explanation but it is how we did it.
    Nephilim, how did you copy the profile if the 'CopyTo' button was greyed out? Do you mean you just copied the files? I don't consider myself an expert on profiles on Win 7, but in the XP days, this would not have worked as it would not reset the permissions inside the user registry file NTUSER.DAT. This would mean the group policies would not be applied.

    Interestingly, I note that on my home PC (Windows 7 Home Premium), the CopyTo button does become enabled if I select the 'Default Profile' entry. Not sure what this means.

  10. #8


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,579
    Thank Post
    228
    Thanked 853 Times in 732 Posts
    Rep Power
    294
    Quote Originally Posted by ajbritton View Post
    Nephilim, how did you copy the profile if the 'CopyTo' button was greyed out? Do you mean you just copied the files? I don't consider myself an expert on profiles on Win 7, but in the XP days, this would not have worked as it would not reset the permissions inside the user registry file NTUSER.DAT. This would mean the group policies would not be applied.

    Interestingly, I note that on my home PC (Windows 7 Home Premium), the CopyTo button does become enabled if I select the 'Default Profile' entry. Not sure what this means.
    windows enabler allows you to ungrey the button so it works as in previous versions of windows

  11. #9
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34
    Quote Originally Posted by sted View Post
    windows enabler allows you to ungrey the button so it works as in previous versions of windows
    Indeed, but in Nephilims first post, he simply said that he copied the profile. He did not say how. I'm concerned that if he simply copied the files, there will problems further down the line.

    I would also sound a note of caution about what Windows Enabler appears to do. There is presumably a reason why the Copy To button is greyed out in some instances. It would seem to me unlikely that the programmers disabled the CopyTo button just to inconvenience everyone. More likely there is a reason for this.
    Last edited by ajbritton; 13th May 2010 at 12:26 AM.

  12. #10


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,579
    Thank Post
    228
    Thanked 853 Times in 732 Posts
    Rep Power
    294
    Quote Originally Posted by ajbritton View Post
    Indeed, but in Nephilims first post, he simply said that he copied the profile. He did not say how. I'm concerned that if he simply copied the files, there will problems further down the line.

    I would also sound a note of caution about what Windows Enabler appears to do. There is presumably a reason why the Copy To button is greyed out in some instances. It would seem to me unlikely that the programmers disabled the CopyTo button just to inconvenience everyone. More likely there is a reason for this.
    possibly but it could just be an oversight and i have yet to find a better way of doing it reliably

  13. #11
    marekbrad's Avatar
    Join Date
    May 2006
    Location
    Bradford
    Posts
    137
    Thank Post
    25
    Thanked 38 Times in 31 Posts
    Rep Power
    23

  14. Thanks to marekbrad from:

    ajbritton (14th May 2010)

  15. #12
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34
    Quote Originally Posted by marekbrad View Post
    Props to Marekbrad for sorting this out. I also came across that MS KB article, but did not read close enough until now. It mentions that the CopyTo button has been deliberately disabled (as I suspected) to avoid problems. As I noted in a previous post though, CopyTo is enabled for the Default User profile, and the MS KB article tells us all we need to know.

    In essence then, the 'supported' way of doing things is as follows;

    To customize the Default User profile on a Win 7 PC;
    1 - Create a local account with admin rights (cannot be domain account)
    2 - Log on to that account and set it up the way you want it
    3 - Whilst still logged on, use Sysprep (as detailed in MS KB 973289) to copy the profile to Default User profile

    To make a custom Default User profile for the network;
    1 - Make a custom Default User profile on a Win 7 PC (as above)
    2 - Log on as network user with the necessary rights to right to NETLOGON share
    3 - Use the 'Copy To' button to copy the Default User profile to the appropriate folder under NETLOGON (again, as detailed in MS KB 973289)

    EDIT - I also note several other threads on EG relating to this. At least one of which gives mentions reasons why the use of Windows Enabler to force the Copy To button live is not recommended. Creating user profile for use in Windows 7.0
    Last edited by ajbritton; 14th May 2010 at 12:12 AM.

  16. Thanks to ajbritton from:

    marekbrad (14th May 2010)

  17. #13
    marekbrad's Avatar
    Join Date
    May 2006
    Location
    Bradford
    Posts
    137
    Thank Post
    25
    Thanked 38 Times in 31 Posts
    Rep Power
    23
    @ajbritton .. cheers fella! .. Tested the MS way this am and works a treat ... don't forget the tricks mentioned in the gottcha post to get folder redirection working properly

  18. #14

    Join Date
    Sep 2009
    Posts
    23
    Thank Post
    2
    Thanked 2 Times in 2 Posts
    Rep Power
    10
    Good afternoon,

    I also have been messing about with profiles on Windows 7.

    The problem i'm having is that after a period of time, any windows 7 machine can randomly deny logon attempts. We'll often end up with certain machines only granting access to certain users.
    All the users use the same mandatory profile on the server with the .v2 extension on the folder, and when a logon attempt is successfull everything appears to work correctly.
    I've struggled to recreate the problem in testing, and it only appears to occur during the average daily use of the computer.
    The server profile was created from a clean domain profile and copied using the windows enabler method.

    I'm running Server 2003 and use the windows 7 RSAT to administer group policy on the win 7 machines. I've populated the central store with .admx files and group policy works ok.

    If anyone has got any input it'd be much appreciated.

    i'm guessing its the profile at fault, possibly not unloading the registry settings properly.
    My next task would be to try the sysprep profile method, but i'm a little unsure about the unattend.xml file.

    Cheers,
    Mike
    Last edited by CtrlAltDel; 14th May 2010 at 02:21 PM. Reason: typo

  19. #15


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,579
    Thank Post
    228
    Thanked 853 Times in 732 Posts
    Rep Power
    294
    ive had that with xp i think. in that case it just wasnt deleting the local cached copy of the profile i just wrote a script that at boot up deletes all profiles except mine default user all user and any others i need

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Mandatory profiles (Again!)
    By joe90bass in forum Windows Server 2008 R2
    Replies: 0
    Last Post: 28th January 2010, 01:10 PM
  2. Mandatory Profiles
    By eddyc in forum Windows
    Replies: 15
    Last Post: 28th January 2010, 01:40 AM
  3. Mandatory Profiles
    By jcollings in forum Wireless Networks
    Replies: 7
    Last Post: 9th September 2009, 03:36 PM
  4. Moodle Make a feild none mandatory
    By FN-GM in forum Virtual Learning Platforms
    Replies: 0
    Last Post: 27th July 2009, 01:25 PM
  5. Mandatory Profiles
    By HodgeHi in forum Windows
    Replies: 2
    Last Post: 6th December 2006, 11:56 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •