+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Windows Thread, Mandatory Profiles in Technical; Hi, I've followed your very useful Wiki on how to create roaming mandatory profiles - which is great! The problem ...
  1. #1
    eddyc's Avatar
    Join Date
    Aug 2008
    Location
    Bristol
    Posts
    438
    Thank Post
    99
    Thanked 47 Times in 43 Posts
    Rep Power
    22

    Mandatory Profiles

    Hi,

    I've followed your very useful Wiki on how to create roaming mandatory profiles - which is great!
    The problem is now however that the user account that the profile was made for (255255) can log in without a problem, and open word fine, without the prompt asking for your initals and name does not appear. I then log in with this profile as another user 54321 and when I open Word I get prompted for my initals and name - do you know why this is happening or what I can do to fix it?! It's driving me mad!

    Thanks in advance.

    Ed

  2. #2

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    9,759
    Thank Post
    1,813
    Thanked 2,225 Times in 1,643 Posts
    Rep Power
    800
    Hi Ed

    Did you use Word, etc before locking the profile as mandatory?

    This thread has some tips in it: Creating a small mandatory profile

  3. #3
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    877
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    36
    Have you changed ntuser.dat to ntuser.man? don't know if that would make a difference but it's worth a shot!

  4. #4

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    9,759
    Thank Post
    1,813
    Thanked 2,225 Times in 1,643 Posts
    Rep Power
    800
    Quote Originally Posted by rh91uk View Post
    Have you changed ntuser.dat to ntuser.man? don't know if that would make a difference but it's worth a shot!
    A profile is roaming with ntuser.dat

    Renaming ntuser.dat to ntuser.man makes it mandatory

  5. #5
    eddyc's Avatar
    Join Date
    Aug 2008
    Location
    Bristol
    Posts
    438
    Thank Post
    99
    Thanked 47 Times in 43 Posts
    Rep Power
    22
    Hi,

    The profile was originally ntuser.dat which has all of the changes applied to it - I have then exported this out of windows back to the SYSVOL share - and changed it to ntuser.man - it applies the correct changes to 255255 - the student account it was made with, but does not apply to other accounts that log in with this profile. Most strange.

  6. #6

    Join Date
    Jan 2007
    Location
    Bacton
    Posts
    17
    Thank Post
    2
    Thanked 4 Times in 4 Posts
    Rep Power
    16
    Hi,

    It can be a bit of a pain.......but

    Log in as a user make the profile how you want it set macros and all other settings

    Log out login as administrator go to my computer -> Properties -> Advanced -> User Profiles -> pick the user that you have just made -> then click copy To put server location and add the everyone group in copy to the location change the Ntuser.DAT to NTuser.MAN then copy to your PC so you can load the file in regedit.


    Loading ntuser.man file

    The file ntuser.man located within the main profile folder contains all of the windows settings for a user. It can be edited using regedit.

    Click > Start > Run and type “regedit”

    Select HKEY_Local_Machine



    Click > File > Load hive , and select the location of ntuser.man.



    Name the key “ntuser” and click ok. The hive is now loaded into regedit.

    Within the ntuser file there will be entries that relate to a specific user, the majority of these are located in:

    Ntuser > software > Microsoft > windows > currentversion > explorer > shellfolders

    The string for “AppData” is an example of this. The path:
    “C:\Documents and settings\john doe\Application Data” will only work for the user john doe. In order to change this to work for all users the user name needs to be replaced with %USERNAME%.

    Make this change for all instances of the username, you can search for them and replace.


    Hope that make senes i'm in a bit of a rush.
    Last edited by theaman; 10th December 2009 at 03:47 PM.

  7. Thanks to theaman from:

    joe90bass (2nd February 2010)

  8. #7

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,069
    Thank Post
    210
    Thanked 430 Times in 310 Posts
    Rep Power
    144
    I place my money on a permissions problem within the registry hive.

    The user you created it with will have the correct rights, but any other user may not be able to read the registry hive, so will act as if it's a brand new profile - hence the prompting for details etc.

    Easy solution, load the registry hive into regedit as described by theaman above, and right had click the root of the loaded part of the registry, click permissions and add everyone as read only - then any user will be able to read that mandatory profile proprly - problem solved.

    You may also need to change the folders as described above, but these are usually replaced automatically by windows anyway - on my mandatory profile I blanked them all so there's no chance of any settings pointing to the wrong places.

    Mike.

  9. #8
    tosh74's Avatar
    Join Date
    Dec 2006
    Location
    Scotland
    Posts
    136
    Thank Post
    27
    Thanked 43 Times in 27 Posts
    Rep Power
    23
    when you exported the profile did you use the "Permitted to Use" function ?

  10. #9
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34
    Concur with above suggestions. 9 times out of 10, this is a permissions problem within the registry.

  11. #10

    Andrew_C's Avatar
    Join Date
    Sep 2005
    Location
    Winchester
    Posts
    2,986
    Thank Post
    64
    Thanked 379 Times in 289 Posts
    Rep Power
    160
    Sorry if this is a bit OT, but some time ago there was a long thread discussing the relative merits and otherwise of the various types of profile. I can't find it!

    ISTR it went on for pages; and I'd guess a couple of years ago... We're still using roaming, and it is taking over 10 mins for some kids to log on.

  12. #11
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,829
    Thank Post
    918
    Thanked 422 Times in 355 Posts
    Blog Entries
    12
    Rep Power
    88
    Quote Originally Posted by Andrew_C View Post
    Sorry if this is a bit OT, but some time ago there was a long thread discussing the relative merits and otherwise of the various types of profile. I can't find it!

    ISTR it went on for pages; and I'd guess a couple of years ago... We're still using roaming, and it is taking over 10 mins for some kids to log on.
    Use mandatory for the kids as its very quick

    And use Group policy settings for the teachers (they have profiles but not stored on the server).

    Once I did this we have incredibly quick logins and no corruptions or problems with the roaming element.

  13. #12
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,205
    Thank Post
    394
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    Quote Originally Posted by ittech View Post
    Use mandatory for the kids as its very quick

    And use Group policy settings for the teachers (they have profiles but not stored on the server).

    Once I did this we have incredibly quick logins and no corruptions or problems with the roaming element.


    We host a default user profile in the netlogon share everyone gets this at first logon, we then use group policy to deliver a different desktop and start menu to different groups of users. For staff we redirect the appdata folder to the server this makes most settings roam but it's much faster.

  14. #13
    eddyc's Avatar
    Join Date
    Aug 2008
    Location
    Bristol
    Posts
    438
    Thank Post
    99
    Thanked 47 Times in 43 Posts
    Rep Power
    22
    Sorry for the delay in getting back on here, when I exported the profile I used the permissions setting and granted it to everyone - I have since loaded this up in regedit and checked the key and everyone has read access, yet if anyone other than the original account that made the profile logs in, the user gets the prompts for details.

    I'm baffeled on this one!!!

  15. #14
    pritchardavid's Avatar
    Join Date
    Sep 2009
    Location
    South Ockendon, Thurrock, United Kingdom
    Posts
    932
    Thank Post
    18
    Thanked 64 Times in 58 Posts
    Rep Power
    26
    have you done what likeaman said?

    login as administrator go to my computer -> Properties -> Advanced -> User Profiles -> pick the user that you have just made -> then click copy To put server location and add the everyone group in copy to the location change the Ntuser.DAT to NTuser.MAN

  16. #15
    eddyc's Avatar
    Join Date
    Aug 2008
    Location
    Bristol
    Posts
    438
    Thank Post
    99
    Thanked 47 Times in 43 Posts
    Rep Power
    22
    have you done what likeaman said?
    Yes, I followed likeaman's instructions exactly.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Mandatory Profiles
    By jcollings in forum Wireless Networks
    Replies: 7
    Last Post: 9th September 2009, 03:36 PM
  2. Citrix and mandatory profiles
    By cookie_monster in forum Thin Client and Virtual Machines
    Replies: 5
    Last Post: 15th September 2008, 08:26 PM
  3. Mandatory Profiles
    By leegcvcc in forum Windows
    Replies: 12
    Last Post: 9th May 2008, 09:45 AM
  4. Mandatory Profiles and Macros
    By Midget in forum Windows
    Replies: 3
    Last Post: 24th January 2007, 05:07 PM
  5. Mandatory Profiles
    By HodgeHi in forum Windows
    Replies: 2
    Last Post: 6th December 2006, 11:56 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •