GPO and Active Directory...HELP

[erfanos]

Hi guys,

I work in a special needs school was wondering about using group policies to lockdown computers so that only certain things can be done.We have Win2k8 Server and XP xp2 workstations. I want to keep a balance of speed for a user to logon with all policies being applied.

Also, how I can create an already created account from .dat to .man profiles. What I mean is that I need to create a mandatory profile for x students. These students already had a profile. Let me give u how this was done:

We have student a, his folder is in server\folder\class x\student a

This student a folder is shared as: studenta$
Inside Student folder we have the sort of viglen classlink layout; two folders:

\student a\cached - where the share is like: studentaCached$
\student a\profile

When we map this into active directory:

under user properties
Profile Path = \\server\studenta$\profile
Local Path (home folder) = \\server\studentaCached$

So looking at this long crappy way of doing things, i want to know if a user is created and I see .dat inside profile and change it to .man...will I need to do this with everyone.

Infact if the workstations (roaming profile) have already the details of profile, what will happen if I change it at the server end?

thanks for all help...

Erfan

[bio]

i wrote an article a while back..it may help
You can use it to create one .man profile for all students

bio