+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 19
Windows Server 2000/2003 Thread, Students - Mandatory Profiles Vs "NETLOGON\Default User" method? in Technical; Hi all, CURRENTLY: In AD we have the "Profile Path" for all students empty. We have a modified copy of ...
  1. #1

    Join Date
    Aug 2007
    Posts
    811
    Thank Post
    98
    Thanked 64 Times in 46 Posts
    Rep Power
    25

    Students - Mandatory Profiles Vs "NETLOGON\Default User" method?

    Hi all,

    CURRENTLY:
    In AD we have the "Profile Path" for all students empty. We have a modified copy of a "Default User" folder in NETLOGON.

    When a student logs into a computer they havent logged into before they get a copy of this default user from the netlogon folder on the DCs..

    This was setup from: How to Create a Base Profile for All Users
    But it would seem that this method is possibly way outdated.

    When a student logs in it doesnt take them too long, they see "setting up internet explorer branding" among other popups, etc etc..

    If we moved to a mandatory profile method, would this vastly speed up all student logins?

    Has anyone tried both of the above to compare??
    Thanks in advance
    Last edited by burgemaster; 16th November 2010 at 11:01 AM.

  2. #2
    stevenlong1985's Avatar
    Join Date
    Apr 2008
    Location
    Birmingham
    Posts
    493
    Thank Post
    726
    Thanked 99 Times in 67 Posts
    Rep Power
    68
    mandatory profile is so much better than roaming profiles, you have more control, and kids cant change any settings. I've kept my Mandatory Profiles below 4mb, which is great for wireless log-on, as its much quicker.
    With Roaming profiles they can get very big and corrupted

  3. #3

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,154
    Thank Post
    114
    Thanked 527 Times in 450 Posts
    Blog Entries
    2
    Rep Power
    123
    What @burgemaster is suggesting is not a roaming profile - the profile won't get copied back to the server when they log off because there's no profile path specified.

    Given that, he would be better with a mandatory profile but it won't speed up the login process (you need to remove some of the active setup items if you want to get rid of things like IE setup)

    The mandatory profile will stop profiles being left on machines as users log off (unless the machine crashes or is hard powered off)

  4. #4
    stevenlong1985's Avatar
    Join Date
    Apr 2008
    Location
    Birmingham
    Posts
    493
    Thank Post
    726
    Thanked 99 Times in 67 Posts
    Rep Power
    68
    oh yeah I see what u mean now

  5. #5

    Join Date
    Aug 2007
    Posts
    811
    Thank Post
    98
    Thanked 64 Times in 46 Posts
    Rep Power
    25
    Ive setup a MAN profile for the test user. a little speed increase which is good.

    Also Our MAN profile is only 1.7meg.. Could I ask, as its so small am i missing steps that I should have done previously before copying the profile?
    I just ran Office and a few other applications.

    As we have desktop and startmenu setup from the server, can i clear both of these in the profile folder?

    Thanks in advance
    Last edited by burgemaster; 16th November 2010 at 12:45 PM.

  6. #6

    Join Date
    Aug 2007
    Posts
    811
    Thank Post
    98
    Thanked 64 Times in 46 Posts
    Rep Power
    25
    Quote Originally Posted by srochford View Post
    The mandatory profile will stop profiles being left on machines as users log off (unless the machine crashes or is hard powered off)
    I still get a local copy of the profile on the machine mate.

  7. #7
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    37
    Quote Originally Posted by burgemaster View Post
    I still get a local copy of the profile on the machine mate.
    true.. you can avoid this with a GPO or with the tool uphclean
    regards
    bio..

  8. #8

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,154
    Thank Post
    114
    Thanked 527 Times in 450 Posts
    Blog Entries
    2
    Rep Power
    123
    You have to have the profile on the machine while the user's logged on. @Bio has pointed to a GPO setting (it's for Windows 2000 but I don't think it's changed since) that will delete these profiles when the user logs off.

    UPHClean makes sure that profiles are closed cleanly at logoff (which is needed so that the group policy stuff can actually make them be deleted) but you can also use delprof (resource kit tool) as part of your machine startup script to clean up profiles which are left over following machine crashes etc.

  9. #9
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,774
    Thank Post
    213
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    Quote Originally Posted by srochford View Post
    (you need to remove some of the active setup items if you want to get rid of things like IE setup)
    How do you remove active setup items?

  10. #10


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,505
    Thank Post
    227
    Thanked 848 Times in 727 Posts
    Rep Power
    287
    Quote Originally Posted by chazzy2501 View Post
    How do you remove active setup items?
    depending on the item in question run it when creating the profile or in the case of ie/media player gpo

  11. Thanks to sted from:

    chazzy2501 (17th November 2010)

  12. #11

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,154
    Thank Post
    114
    Thanked 527 Times in 450 Posts
    Blog Entries
    2
    Rep Power
    123
    <long explanation>
    Active Setup is a system used by a number of installers which need "something" to happen when each user uses the package that has been installed by an admin.

    If you look in the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components you'll see a set of GUIDs which identify various packages. As a user logs on, Windows checks this list and compares it with HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components. If you look at the list under HKLM you'll see that there's a version value for each one. If the version value is different (or missing) under HKCU then Windows runs the stubpath program from the HKLM bit.
    </long explanation>

    So, if you want to stop the active setup stuff running, one way is to try and capture what happens after a user logs on but sometimes this doesn't work (it writes stuff into HKCU which points to a user profile path that won't exist for other users or it writes the UNC of a home directory etc). The alternative is to either delete the Active Setup values from HKLM or just add the matching stuff to HKCU

  13. Thanks to srochford from:

    chazzy2501 (17th November 2010)

  14. #12

    Join Date
    Aug 2007
    Posts
    811
    Thank Post
    98
    Thanked 64 Times in 46 Posts
    Rep Power
    25
    This scripts gets rid of all the "Setting up personised settings for internet explorer", etc popups that appear top left when loggin in....

    @echo off
    setlocal EnableDelayedExpansion
    set KEY="HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components"
    set FND=find /i %KEY%
    for /f "Tokens=*" %%a in ('reg query %KEY% /s^|%FND%') do (
    set SP=N
    for /f "tokens=*" %%b in ('reg query "%%a"^|find /i "STUBPATH"^|find "REG_"') do (
    set SP=Y
    )
    if "!SP!" EQU "Y" reg delete "%%a" /V STUBPATH /F
    )
    endlocal
    Last edited by burgemaster; 17th November 2010 at 07:40 PM.

  15. #13


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,618
    Thank Post
    275
    Thanked 777 Times in 604 Posts
    Rep Power
    223
    It's also worth running through what you're setting in group policy for the users.

    Sitting down with a bare policy and a stopwatch and adding things one at a time, it's surprising how much time you can trim / add by setting or not setting various things.

    You can do it with a populated policy too, but it's easier (and safer) to build from scratch in a test OU.

  16. #14

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,154
    Thank Post
    114
    Thanked 527 Times in 450 Posts
    Blog Entries
    2
    Rep Power
    123
    @burgemaster - I assume you're running that as part of machine startup (or your build process)? A normal user wouldn't be able to delete those values.

    For most apps, that's not going to cause a problem but I know we deploy some apps (VMWare player comes to mind) where we've put in an active setup that we really do need to run for a user (it's trivial, doesn't display anything on screen and takes a fraction of a second but it was the easiest way to make sure the VM settings are configured properly for the user)

  17. #15

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,644
    Thank Post
    858
    Thanked 645 Times in 428 Posts
    Rep Power
    498
    Woould any of this help me with my issue?

    Since we came back in September I've been getting reports from Staff saying that all their settings have gone from their PC - Outlook settings/Sigs, Pinned taskbar/start menu items (we are using Windows 7)
    When I check the Pcs i am seeing a lot of this:

    username
    username.DOMAIN
    username.DOMAIN.000
    username.DOMAIN.001
    etc
    etc

    When I look in it there are random files that haven't been deleted - its not just limited to NTUSER.DAT

    It's affecting the kids as well, but since they cannot customise their settings, is not a big deal other than loads of profile folders - I have added them all to the Domain Guests group which removes their profile at logoff, but this doesn't help for staff..
    I have set a few staff up on Roaming profiles so that most of their settings are saved to the sever, but I would rather not be using them

    Also not an option for staff is DELPROF.. not too sure about UPHClean - heard its in Beta for win7 and not sure if it deletes the profile

    I have no idea why its started as there hasn't been any new software or any majopr policy changes made to the Domain.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 14
    Last Post: 8th April 2011, 11:14 PM
  2. Mandatory profiles (Again!)
    By joe90bass in forum Windows Server 2008 R2
    Replies: 0
    Last Post: 28th January 2010, 01:10 PM
  3. Replies: 9
    Last Post: 1st December 2009, 05:03 PM
  4. Mandatory Profiles
    By leegcvcc in forum Windows
    Replies: 12
    Last Post: 9th May 2008, 09:45 AM
  5. Default Profiles - setting user directories
    By speckytecky in forum Windows
    Replies: 0
    Last Post: 22nd June 2007, 07:52 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •