Modifying a mandatory profile - printers

[GrumbleDook]

A question on another site ...

-------------
Good morning everybody.
I set up a mandatory profile a while ago for our students to use on the network, the problem is, I think there is a printer connection hiding in there as students always seem to have an 'extra' printer when they go to print out their work.
I tried to modify the mandatory profile (un successfully) by doing the following...

- copied all the profile files and folders into a new folder called temp.
- renamed the ntuser.man to ntuser.dat
- set a test users profile to the temp folder
- made the test user an administrator on the machine i used to log in.

I logged in with no problems, no error messages as expected, however I was not able to perform the remove printer operation (this is normally done by a user with admin rights).

Is there any way that I can remove the printer conections from the mandatory profile without having to load it up, i.e. by just making changes to files within the profile?

Thanks in advance for any help!

Chris Jenkins
------------

Any ideas?

[Ric_]

It's not the Document image writer is it? This appears randomly and cannot be deleted easily.

[GrumbleDook]

I don't think so, but I have posted the script and see where it goes from there.

Thanks.

[ajbritton]

- copied all the profile files and folders into a new folder called temp.
- renamed the ntuser.man to ntuser.dat
- set a test users profile to the temp folder
- made the test user an administrator on the machine i used to log in.

Hmmm... At not point were the permissions in the registry changed during this procedure.

Registry permissions are usually sorted out when using the Windows GUI to copy profiles from palce to place. This cannot be done in this instance however, as the profile is already disconnected from it's original source PC. NB - The file permissions on the NTUSER.DAT are nothing to do with the permissions built into the registry file itself, although it goes without saying that to edit the file you should have at least Change access to it.

It is possible to load NTUSER.DAT into REGEDIT and make the changes. The user hive will appear unter HKEY_USERS with the name chosen when the file is loaded. Changes to permissions can then be made. BE SURE TO UNLOAD the hive before exiting Regedit if you decide to do this.

[_Rob_]

We tend to use Con2prt as part of the logon script i.e.

REM Delete All Printers
\\SERVER\NETLOGON\Cont2prt.exe /F

REM Connect Printers (/C = Connect   /D = Default Printer)
IF %Location% == "ITSuite" \\SERVER\NETLOGON\Cont2prt.exe /CD \\SERVER\Share
IF %Location% == "ITSuite" \\SERVER\NETLOGON\Cont2prt.exe /C \\SERVER\Share

IF %Location% == "Room1" \\SERVER\NETLOGON\Cont2prt.exe /CD \\SERVER\Share
IF %Location% == "Room1" \\SERVER\NETLOGON\Cont2prt.exe /C \\SERVER\Share