My Mandatory Profile method

[Scottyboy99]

Hi All,

 

I have had some spare time for a change, to finally crack Windows 10 Mandatory profiles, ready for our academic roll out for September.

 

I am going to share this with everyone, in the hope that others find it a successful method too. This method allows a quick reliable log on, with start menu tiles intact on every log on, at least in my experience.

 

I plan on doing a proper write up with screenshot at some point soon.

 

Here it goes:

 

Firstly, make sure the computer you are using to create this profile has Delete Cached Roaming Profiles disabled, so the cache stays intact on the C: Drive. This can be enabled again after this process if finished.

 

Create a dummy student account username: dummystudent, and give the student a roaming profile.

 

Log the dummy student on and set up the profile as you wish, e.g. expanding the file explorer tabs, setting up start menu tiles etc.

 

Once happy, log the dummy student off and log on to your own network admin account.

 

Locate the roaming profile you have just set up, load the .DAT hive in Regedit and export to a .reg file. Open this .reg file in Notepad and find and replace dummystudent with %username%. This is as per most mandatory profile instructions. Save the .reg and Merge it back into the hive.

 

Set the Hive permissions to Everyone - Full Control and unload the hive.

 

Copy the above profile to your Mandatory Profile share, making sure permissions are appropriate. ie. student accounts can read the profile share and contents. put .V5 as an extension and rename NTUSER.DAT to NTUSER.MAN.

 

Now that local cached profile outlined above, copy the Local folder within AppData (C:\users\dummystudent\AppData\Local) to the AppData within the mandatory profile on the share.

 

There you go, a working mandatory profile. No black screen on login, no dodgey start menu, fast log in time.

 

Cheers

 

Scott

[safehands96]

I know this thread is really old and I'll prob get shot for it but we followed this and were still getting really slow logins.

 

So we copied the profile to the C drive and put it under the "Default" hidden folder.

 

Logins are

SSD

10 – 12 seconds

 

HDD

16 – 18 seconds

 

Still some policies to check over but its looking really promising