[1703, cu] Creating Mandatory Profiles 1703

[mdrabble]

Ok..... thought would look at moving from LTSB to 1703 Enterprise edition and would create a new Mandatory profile.

 

Gone though the normal steps.... come to copy the profile, and thought ok, control panel etc..... and no control panel!!

 

How do I copy a profile off 1703 when I can get access to the advanced settings section to copy the profile etc....

[mdrabble]

Never mind.... found it....... under my nose!

 

System -> About -> System Info

[3s-gtech]

Control Panel can also be found by searching the Start Menu, but if you've disabled search obviously that's not much help!

[Arthur]

@mdrabble. You might find this article and video useful.

 

How to create mandatory profiles in Windows 10 Creators Update (1703)

 

Now, the only officially supported way to create a mandatory profile is by using Audit Mode to create a custom default user profile, and then using the Copy Profile command to move the customized default user profile to a network share. This is the way I’ve attacked it in the new video I’ve recorded. This article is intended to supplement that – and if you choose to do it the old-fashioned way, by copying an existing profile directly into a network share, you’re going to get problems. Believe me, I’ve tried!

 

 

Need to set up a mandatory profile for Windows 10 on the Creators Update (1703)? This video will show you the extra tricks you need to do in addition to the Microsoft method, to ensure that it works correctly.

[Guest obsidianpillar]

@mdrabble. You might find this article and video useful.

 

How to create mandatory profiles in Windows 10 Creators Update (1703)

 

 

 

 

Do you use Mandatory Profiles in your environment Arthur? If so, does the referenced video share parallels with how you did yours? Your threads have been very helpful with regards to configuring and deploying Windows 10. However, with so many "different" ways to achieve Mandatory Profiles - it would be useful to see how others did theirs specifically.

 

Thanks.

[mdrabble]

Having had a play with 1703 edition I have opted to go back to LTSB until I decide what to do about whole school deployment in September.

 

I understand that the profiles for 1703 and 1607 are the same so I'll have a play and watch the video properly.

[3s-gtech]

My mandatory profile was not made with audit mode and works fine, but I appreciate I'm lucky/very experienced at hacking them about until they work.

[mdrabble]

Having just watched the whole video I did notice there were some bits I didn't do...... definitely will have a play on Monday morning

 

Not to mention looking at ways of speeding login times - current anything from 1 - 2 minutes!

[Asgard]

@mdrabble. You might find this article and video useful.

 

How to create mandatory profiles in Windows 10 Creators Update (1703)

 

 

 

 

Pretty much how I did our 1511 Mandatory profile that weighs in at about 5Mb and logs in on an i3/SSD in sub 9 seconds. But we could never get some UWP apps like calculator or sway to work so we took them out. Had to deploy a standalone calculator which works but is an annoyance.

 

Will be giving this a try Monday

 

thanks @Arthur

[Arthur]

Do you use mandatory profiles in your environment Arthur?

I've almost given up on creating mandatory profiles for Windows 10. Despite trying the audit mode method shown in the video above I keep having issues with Edge not opening (all of the other UWP apps are fine). I am going to follow Microsoft's guide next (which is identical except for step 10)...

 

https://docs.microsoft.com/en-us/windows/client-management/mandatory-user-profile#how-to-create-a-mandatory-user-profile

 

Like some other Edugeek's I have also been testing local profiles + UE-V + folder redirection and this works a lot better so I think this is probably the way to go.

[Guest obsidianpillar]

I've almost given up on creating mandatory profiles for Windows 10. Despite trying the audit mode method shown in the video above I keep having issues with Edge not opening (all of the other UWP apps are fine). I am going to follow Microsoft's guide next (which is identical except for step 10)...

 

https://docs.microsoft.com/en-us/windows/client-management/mandatory-user-profile#how-to-create-a-mandatory-user-profile

 

Like some other Edugeek's I have also been testing local profiles + UE-V + folder redirection and this works a lot better so I think this is probably the way to go.

 

Thanks for your advice. I will follow your recommendation and use Local Profiles + UE-V + Folder Redirection which should hopefully work!

 

Thanks,

 

Tom

 

[skell]

Anyone got a guide on local profiles for Windows 10?

 

Also, UE-V has stopped working for Chrome 57+. Anyone come across this and fixed it?

[Arthur]

Also, UE-V has stopped working for Chrome 57+. Anyone come across this and fixed it?

Have you seen the following UE-V template? It has been reported to work with v58. I am going to give it a try myself shortly.

 

http://djerfhowididit.blogspot.co.uk/2017/02/ue-v-template-google-chrome.html

[skell]

Tried it, doesn't work.

[skell]

@Arthur - Did you test the Chrome xml? Am I going mad or is it not working?

[Arthur]

Did you test the Chrome xml?

I did and it's not working for me either. It is driving me mad too!

 

One of the things I tried today was to create a new XML template that syncs just the roaming Chrome profile folder (%AppData%\Google\Chrome\User Data) which is created after enabling the new "Enable the creation of roaming copies of Google Chrome profile data" GPO. This folder contains a small profile.pb file which is less than 20KB. UE-V still refused to sync Chrome's settings.

 

    xmlns="http://schemas.microsoft.com/UserExperienceVirtualization/2012/SettingsLocationTemplate">
   Google Chrome
   Google-Chrome
   7
   
       IT
   
   
       
           chrome.exe
       
   
   
       
           Software\Google
       
       
           Software\MozillaPlugins
       
       
           Software\RegisteredApplications
       
       
           
               APPDATA
           
           Google\Chrome\User Data
       
   

[skell]

Yeah I don't get it. As per this Technet thread, apparently one user reports that UE-V works with Chrome 59. In my testing, this isn't the case. Even went to the dev version - still no go.

 

https://social.technet.microsoft.com/Forums/windows/en-US/37e292e2-9889-4ac7-9a62-cfe08ae81f81/uev-google-chrome-build-56-and-57-syncronization-not-working?forum=mdopuev

 

This is really hampering my Windows 10 rollout.

[Arcolite]

I've decided against mandatory profiles for Win10.

 

Instead I've opted for a preconfigured Default User profile at install time, with all machines configured to use local profiles only with the now built-in UE-V capturing preferences between devices. The local profiles are removed from ICT Suites, Trolleys and Classrooms by a delprof2 startup script when the profile reaches 30 days old, leaving Staff Laptops and Office machines with profiles intact.

 

This gives all users the experience of roaming profiles with none of the overheads (profile resets and the hassle of creating the mandatory). Repeat logins on the same machine are far quicker in my testing than I found mandatory to be.

 

From what I understand, Local Profiles plus UE-V or Enterprise State Roaming (UWP only) is now the Microsoft approved method of retaining User Preferences in the modern Windows environment.

Edited July 18, 2017 by Arcolite

[skell]

Yep, that's the way I want to go. UE-V is causing issues though. Not even sure it's saving passwords.

[Arcolite]

Yep, that's the way I want to go. UE-V is causing issues though. Not even sure it's saving passwords.

 

Can't help with that one I'm afraid. I haven't tested Chrome with UE-V yet.

We're deploying Chrome because Edge is a bit poo, but neither Edge nor Chrome will store passwords.

 

Our Staff leave their machines unlocked too often and we've had evidence of Students accessing things they shouldn't via saved credentials. Sorry, you'll have to remember them from now on (SMT decision, not mine, but I completely agree!).

[skell]

Changes to the user settings cannot upload to the settings storage location because an earlier error occurred while downloading the settings package for the settings location template "Google Chrome".

 

GRRRRRR! WHY!!!

[Patrick]

Has anyone got a mandatory profile that's working they can email me? I'm testing server 2016 out with a win10 client and could really do with a man profile to test out! It'd be a massive help

[nicholab]

Please could someone explain capturing the Local admin profile into the default profile using MDT? I have SCCM but apparently MDT is what should be use but I can't see the right information on line. The default task deploys the image but give you no time to customizes it. I would then would also like to make this the default network profile.

[mullet_man]

Sorry to hijack this thread but does using UE-V help with login times?

 

Is it easy to deploy? We use local profiles and folder redirection, so win 10 machines are pretty slow to login so anything that will speed up the process am happy to try.

[Arcolite]

Sorry to hijack this thread but does using UE-V help with login times?

 

Is it easy to deploy? We use local profiles and folder redirection, so win 10 machines are pretty slow to login so anything that will speed up the process am happy to try.

 

Deployment is very easy. If you're using Win10 1607 or 1703 then UE-V in included by default. It just needs switching on with a few GPO settings.

We used it with combined with Mandatory Profiles on our Win7 deployment to improve login times and give a roaming like experience while being immune to the usual roaming profile issues.

 

In theory, it should be quicker as it only syncs/loads application settings when that application is run, compared to regular profiles which has to download and apply the entire profile hive.

 

With our Win10 deployment however, I'm experimenting using Local Profiles (with a custom Default User profile on NETLOGON) with UE-V syncing the changes between devices.

These local profiles will be removed when they reach 30 days old via a DelProf2 scheduled task set to run on machine inactivity.

 

So far this appears to result in a slow initial login (profile creation) but all subsequent logins are practically instant (apart from drive and printer mapping).

 

With Roaming Profiles soon becoming a depreciated feature and with things like Enterprise State Migration and UE-V already in place, it feels like Microsoft is gently pushing us away from the old concepts of roaming/mandatory profiles.