Very weird logon problem with Mandatory Profiles.
This one has really got me. Normally I'm pretty good at figuring out problems like this, but I just can't work out what the hell is going on with this one.
We run a mandatory profile for all our students now, I've worked with them before and am quite familiar with the ins and outs of setting one up. I set it up weeks ago, and tested a handful of students with it on various machine, and it worked brilliantly, everything as it should be no worries.
Come to today, first ICT lesson of the day and I get called to the new Enterprise area which I was kind of expecting. If I hadn't been so busy I'd have been there anyway regardless, but I needed to get on with other jobs if I wasn't actually needed. Students were able to logon, but it was logging them on with a local profile, and half the settings wern't working properly. I watched a couple of students logon, and it wasn't even attempting to load the profile, it was skipping past the 'loading your settings' screen.
I've spent all afternoon on this one, and eventually narrowed it down to a specific set of circumstances. If the box for 'change password at logon' is ticked then the logon behaves in the way described above. If it is not ticked then the logon is normal and the profile behaves as it was designed to.
Why does it make any difference if the user changes their password at logon? It works fine this way for roaming profiles that staff use, so what's different about the students mandatory one? I've got 5-6 weeks to try and solve it (because I've unticked the box for forcing the password change for now, and the students will just have to change their password manually when they logon) but in 6 weeks time it will prompt all the students to change their password and if they do it at login, it will log them on incorrectly and cause all sorts of problems.
Can any help with this? I've never come across it before and I've googled and can't find anything like this mentioned anywhere - it's completely stumped me.
(Before anyone suggests it, all the permissions are correct I've double and triple checked this!)