+ Post New Thread
Results 1 to 10 of 10
Windows Server 2008 R2 Thread, Mandatory Profile in Technical; Hi All, Seems like a really n00b question, but having follwed the MS guide on how to create a mandatory ...
  1. #1
    Koldov's Avatar
    Join Date
    May 2011
    Location
    Bedfordshire
    Posts
    544
    Thank Post
    116
    Thanked 56 Times in 48 Posts
    Rep Power
    41

    Mandatory Profile

    Hi All,

    Seems like a really n00b question, but having follwed the MS guide on how to create a mandatory profile and putting it on a test server, I can't figure out if it has worked or not...

    I didn't really customise it as such (desktop, shortcuts etc.) as I was advised to redirect this and GPO that, I did the Office, IE and media player first runs. So although I do know it is a working mandatory profile due to me renaming .dat to .man and it not being able to save changes, when I log on as the test user it goes through some settings...

    Setting up personalized settings for:

    Web Platform Customizations
    Themes setup
    Microsoft Windows Media Player
    Desktop Update
    Browser Customizations... and a few others that flash past too quickly!

    It also does a Media Player set up and tries to take me to a 'go.microsoft' webpage on opening IE... All things I thought I'd done on the PC I took the default profile from.

    I take it this means it didn't copy my test profile correctly to the 'default' profile?

    Kol.

  2. #2
    simpsonj's Avatar
    Join Date
    Apr 2009
    Location
    Oxford
    Posts
    397
    Thank Post
    164
    Thanked 69 Times in 58 Posts
    Blog Entries
    8
    Rep Power
    23
    Have you redirected any other folders? If not, then add something to the Start Menu or Favorites folder of your Mandatory profile. If they appear when you login with an account using that Mandatory profile then it's probably safe to assume it's worked!

  3. #3
    Koldov's Avatar
    Join Date
    May 2011
    Location
    Bedfordshire
    Posts
    544
    Thank Post
    116
    Thanked 56 Times in 48 Posts
    Rep Power
    41
    I haven't actually got round to the redirecting part yet, until I know the profile is working properly.

    The actual 'mandatory' part of the profile is all fine as far as I can tell, as documents saved to the desktop disappear when logging off and back on again.

    It was the creation of the original profile I'm questioning, as I'm sure I did things like the Media Player and IE first run settings and yet they appear when I log on as that profile now.

    So I am unsure now when I did the MS way of sysprep, creating a 'new' default profile and then copying that new profile out, whether it worked correctly and if there was any way I could tell.

    Kol.

    Kol.

  4. #4
    Koldov's Avatar
    Join Date
    May 2011
    Location
    Bedfordshire
    Posts
    544
    Thank Post
    116
    Thanked 56 Times in 48 Posts
    Rep Power
    41
    OK, I'm sure you are all tired of me not 'getting' this by now.

    Anyhow, just in case anybody is willing to help a 'special' learner...

    I created a very basic (didn't really change much) profile and did the whole MS sysprep thing, however I need all the info in one place (and not 4 like the technet pages) so I used this:

    Gerry Hampson ConfigMgr: Creating a Windows 7 Mandatory profile

    Which I liked, had a couple of issues but 'think' I worked them out...

    Copied out the 'new' default profile up to my test server and logged on to a workstation.

    It seems to have worked fine and due to the fact .dat was changed to .man and the profile folder is read-only it disregards changes as it should (you know, could this work with a .dat and just a read-only folder?). There was a test document on the desktop which also replicated to the new profile desktop.

    Thing is, as stated above in a previous post, there are some first run things happening on Media Player and IE... Does this happen with your mandatory profiles? Because Im' sure I ran them in the profile before I saved it...

    Anyway, I've seen on a previous post that someone had created a profile by leaving .dat and the ability to write back to the profile on the server, make the changes actually in the profile whilst logged on, log off and change it back to read-only and .man...

    So I did this, went through the first-runs and made it mandatory again. Well it worked, no more first-run screens but the question is if I'm going to see any issues from this procedure?

    Kol.

  5. #5
    simpsonj's Avatar
    Join Date
    Apr 2009
    Location
    Oxford
    Posts
    397
    Thank Post
    164
    Thanked 69 Times in 58 Posts
    Blog Entries
    8
    Rep Power
    23
    You'll most likely see issues when you try to login with a different user account using the same mandatory profile. I almost guarantee it won't work (that was the way it used to work with XP, much simpler days).

    The first run issues I think do occur with mandatory profiles because they're aren't saved anywhere useful in the profile (at least, not as far as I'm aware of) and are more likely to be registry changes. There is a group policy that prevents the IE welcome screen, not sure about Media player as I never use it, preferring VLC across the school.

  6. Thanks to simpsonj from:

    Koldov (1st April 2014)

  7. #6
    Koldov's Avatar
    Join Date
    May 2011
    Location
    Bedfordshire
    Posts
    544
    Thank Post
    116
    Thanked 56 Times in 48 Posts
    Rep Power
    41
    OK so I tested it and it didn't work for the 2nd user I assigned this mandatory profile to and then also wouldn't let the 1st user log in either... Whoops!

    However, I deleted the locally cached copy of the profile (which it must of corrupted as you say) and then logged on as both users and it seems to work fine (with no first-run screens) will test it further, but seems to work.

    Kol.

  8. #7
    simpsonj's Avatar
    Join Date
    Apr 2009
    Location
    Oxford
    Posts
    397
    Thank Post
    164
    Thanked 69 Times in 58 Posts
    Blog Entries
    8
    Rep Power
    23
    Interesting, hope it works for you. I remember rebuilding to Windows 7 over the summer holidays, creating a mandatory profile the XP way, and watching in horror on the first day of term as no students could logon. That was a bit of a pressure situation to get a working profile!

  9. #8
    Koldov's Avatar
    Join Date
    May 2011
    Location
    Bedfordshire
    Posts
    544
    Thank Post
    116
    Thanked 56 Times in 48 Posts
    Rep Power
    41
    Oh wow, I bet it was! Amzed you managed it, I've been at this weeks now...

    Well, I created 3 more test accounts, 2 logged on fine, then it couldn't log on for the third....

    I'll keep testing!

    Kol.

  10. #9

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,935
    Thank Post
    155
    Thanked 605 Times in 544 Posts
    Rep Power
    160
    What permissions have you set on the registry hive NTUSER.MAN (should be Everyone, propogated down)? Not the file permissions, but the registry permissions.

  11. #10
    Koldov's Avatar
    Join Date
    May 2011
    Location
    Bedfordshire
    Posts
    544
    Thank Post
    116
    Thanked 56 Times in 48 Posts
    Rep Power
    41
    Erm, yeah, about that... I'm a bit of a dummy with permissions

    Especially when it gets past the basics into 'inheritable, descendants, special, effective'.

    If I read you right, loading the ntuser.man hive and right-clicking on it and selecting permissions (the only tab is security) it seems 'everyone' has full control, the 'effective permissions' seem to show 'everyone' has evry permission going.

    Not sure how to check if this is propogated down.

    Need a quick permissions 101 or a step-by-step if anyone has a little time...

    Kol.



SHARE:
+ Post New Thread

Similar Threads

  1. Mandatory profile and GPO settings
    By windy in forum Wireless Networks
    Replies: 14
    Last Post: 7th April 2006, 12:17 PM
  2. Cant create Mandatory profiles
    By spike in forum Windows
    Replies: 10
    Last Post: 4th April 2006, 11:42 AM
  3. Printing issues, Mandatory profiles
    By doomie in forum Windows
    Replies: 8
    Last Post: 15th February 2006, 08:58 PM
  4. Modifying a mandatory profile - printers
    By GrumbleDook in forum Windows
    Replies: 4
    Last Post: 23rd January 2006, 11:54 AM
  5. Replies: 61
    Last Post: 14th November 2005, 09:27 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •