+ Post New Thread
Results 1 to 10 of 10
Windows Thread, Mandatory Profiles Question in Technical; Im confused here, My GPO's and redirections don't seem to be getting applied to the man profile? I am following ...
  1. #1
    craigg's Avatar
    Join Date
    Feb 2008
    Location
    Birmingham, UK
    Posts
    175
    Thank Post
    15
    Thanked 9 Times in 6 Posts
    Rep Power
    14

    Mandatory Profiles Question

    Im confused here,

    My GPO's and redirections don't seem to be getting applied to the man profile?

    I am following the tutorial in the wiki...

    Do I have to apply all GPO's and redirections before i change ntuser.dat to ntuser.man?

    If so how do I set about adding new policys etc?



    Hope someone can help.

    Thanks.

  2. #2


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,657
    Thank Post
    350
    Thanked 789 Times in 710 Posts
    Rep Power
    344
    Folder redirections/etc should function as normal.

    Use gpresult to see what policies are being applied when logged on to see if they are being blocked for some reason.

  3. Thanks to kmount from:

    craigg (3rd February 2010)

  4. #3
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,386
    Thank Post
    10
    Thanked 483 Times in 423 Posts
    Rep Power
    110
    Use the profiles option in system properties to copy the profile. Change permitted to use to everyone. Once it's exported like this then you can set the permissions on the share/folder appropriately. This will set the registry permissions inside the ntuser.dat.

    If you just copy the profile or do not set this so that the relevant users can write to the registry then things like GPO will fail as they cannot be written once the profile is copied to the machine at logon.

  5. #4
    craigg's Avatar
    Join Date
    Feb 2008
    Location
    Birmingham, UK
    Posts
    175
    Thank Post
    15
    Thanked 9 Times in 6 Posts
    Rep Power
    14
    Just gonna give your suggestions a go!

    Thanks for the fast replys.

  6. #5
    craigg's Avatar
    Join Date
    Feb 2008
    Location
    Birmingham, UK
    Posts
    175
    Thank Post
    15
    Thanked 9 Times in 6 Posts
    Rep Power
    14
    Quote Originally Posted by DMcCoy View Post
    Use the profiles option in system properties to copy the profile. Change permitted to use to everyone. Once it's exported like this then you can set the permissions on the share/folder appropriately. This will set the registry permissions inside the ntuser.dat.

    If you just copy the profile or do not set this so that the relevant users can write to the registry then things like GPO will fail as they cannot be written once the profile is copied to the machine at logon.
    You said in this reply change the permitted use to everyone. I presume this is before I export it to the server?

    Would I do this from the folder permissions in docs and settings? There doesnt seem to be an option in the User Profiles option.

    Cheers

  7. #6

    Join Date
    Jun 2007
    Location
    London
    Posts
    894
    Thank Post
    64
    Thanked 171 Times in 140 Posts
    Rep Power
    54
    Quote Originally Posted by kmount View Post
    Use gpresult to see what policies are being applied when logged on to see if they are being blocked for some reason.
    In Group Policy Management Console check the link order to see if your policies are being applied in the correct order (click on the domain name to see link order) - those at the top of the list are applied last & overwrite those below if they're different.

    The event log on the PC may also give you more info on why redirection is failing.

    Your users shouldn't need write access to the shared profile since the system will automatically give them write access to the relevant parts of the copy it writes to the PC. You don't want users writing back to the server copy. GPOs should be applied to the profile as it's copied to the PC. Works ok for us.

    P.S. redirection doesn't work if you have Windows 2000 though (see MS KB295349)

  8. Thanks to timzim from:

    craigg (3rd February 2010)

  9. #7
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,386
    Thank Post
    10
    Thanked 483 Times in 423 Posts
    Rep Power
    110
    Quote Originally Posted by craigg View Post
    You said in this reply change the permitted use to everyone. I presume this is before I export it to the server?

    Would I do this from the folder permissions in docs and settings? There doesnt seem to be an option in the User Profiles option.

    Cheers
    You don't need to go anywhere near the documents and settings folder. Windows will do it for you. Copy User Profiles in Windows XP

    If it's greyed out on the profile you want, you need to reboot and make sure you are not logged in the as the users who's profile you wish to copy.

  10. Thanks to DMcCoy from:

    craigg (3rd February 2010)

  11. #8


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,211
    Thank Post
    218
    Thanked 812 Times in 694 Posts
    Rep Power
    274
    Quote Originally Posted by craigg View Post
    You said in this reply change the permitted use to everyone. I presume this is before I export it to the server?

    Would I do this from the folder permissions in docs and settings? There doesnt seem to be an option in the User Profiles option.

    Cheers
    When you export the profile like in the enclosed pic (excuse the butchered usernames etc lol)
    Attached Images Attached Images

  12. Thanks to sted from:

    craigg (3rd February 2010)

  13. #9
    craigg's Avatar
    Join Date
    Feb 2008
    Location
    Birmingham, UK
    Posts
    175
    Thank Post
    15
    Thanked 9 Times in 6 Posts
    Rep Power
    14
    Excelent,

    I'll make a fresh one now and report back.

    Thanks

  14. #10
    craigg's Avatar
    Join Date
    Feb 2008
    Location
    Birmingham, UK
    Posts
    175
    Thank Post
    15
    Thanked 9 Times in 6 Posts
    Rep Power
    14
    It looks like its sorted now!


    I have a nice small 1.28mb profile,

    Appdata, Mydocs, Desktop & Start Menu redirected via gpo








    Thanks for your help.

SHARE:
+ Post New Thread

Similar Threads

  1. Mandatory profiles (Again!)
    By joe90bass in forum Windows Server 2008 R2
    Replies: 0
    Last Post: 28th January 2010, 01:10 PM
  2. Mandatory Profiles
    By eddyc in forum Windows
    Replies: 15
    Last Post: 28th January 2010, 01:40 AM
  3. Mandatory Profiles
    By jcollings in forum Wireless Networks
    Replies: 7
    Last Post: 9th September 2009, 03:36 PM
  4. Mandatory Profiles
    By leegcvcc in forum Windows
    Replies: 12
    Last Post: 9th May 2008, 09:45 AM
  5. Mandatory Profiles
    By HodgeHi in forum Windows
    Replies: 2
    Last Post: 6th December 2006, 11:56 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •