[1703, cu] Creating Mandatory Profiles 1703

[mullet_man]

Deployment is very easy. If you're using Win10 1607 or 1703 then UE-V in included by default. It just needs switching on with a few GPO settings.

We used it with combined with Mandatory Profiles on our Win7 deployment to improve login times and give a roaming like experience while being immune to the usual roaming profile issues.

 

In theory, it should be quicker as it only syncs/loads application settings when that application is run, compared to regular profiles which has to download and apply the entire profile hive.

 

With our Win10 deployment however, I'm experimenting using Local Profiles (with a custom Default User profile on NETLOGON) with UE-V syncing the changes between devices.

These local profiles will be removed when they reach 30 days old via a DelProf2 scheduled task set to run on machine inactivity.

 

So far this appears to result in a slow initial login (profile creation) but all subsequent logins are practically instant (apart from drive and printer mapping).

 

With Roaming Profiles soon becoming a depreciated feature and with things like Enterprise State Migration and UE-V already in place, it feels like Microsoft is gently pushing us away from the old concepts of roaming/mandatory profiles.

 

That's interesting, we are mostly Windows 10 now still got some really old netbooks on W7 that can't run W10 very well so are staying on W7.

 

I might take a look at enabling it if it's already built in.

 

Local profiles are slow but the issues we had with roaming means I'd take a hit on login speed.

[DavR]

Clutching at straws, but has ANYONE managed to get a mandatory profile that will work with Microsoft Edge? And if so, how?

 

After a lot of false starts, I finally got a working-ish mandatory profile by following the James Rankin guide linked earlier in this thread. The only thing that won't work is Edge, which does the classic open then close again. None of the advertised solutions out there have fixed it for me.

 

I'm at the stage now of testing our Student user with local profile only - so annoying as Edge is the only sticking point! I can't believe I'm having to choose between having the default browser working, or dumping mandatory profiles.

[Arthur]

I finally got a working-ish mandatory profile by following the James Rankin guide linked earlier in this thread. The only thing that won't work is Edge, which does the classic open then close again. None of the advertised solutions out there have fixed it for me.

I have the following method on my list of things to try, but I haven't had time yet (especially since local profiles are working perfectly). Might be worth a shot?

 

www.reddit.com/r/sysadmin/comments/654y2h/will_mandatory_profiles_ever_be_fully_fixed_for/dg7wueo/

[DavR]

I have the following method on my list of things to try, but I haven't had time yet (especially since local profiles are working perfectly). Might be worth a shot?

 

www.reddit.com/r/sysadmin/comments/654y2h/will_mandatory_profiles_ever_be_fully_fixed_for/dg7wueo/

 

Doesn't sound notably different to any of the other methods I've tried (and failed) tbh. The thing that really made a difference for me was creating the profile in Audit mode, none of the others I made worked including sysprep alone.

[nicholab]

The other thing is do a find and replace on the user name on the exported reg. I did this by loading the reg from file and exporting to a file and loading into notepad and then find and replace for the user name used to create the profile with %username%. I think someone did cover this in one of the guides.

[mshill]

Clutching at straws, but has ANYONE managed to get a mandatory profile that will work with Microsoft Edge? And if so, how?

 

After a lot of false starts, I finally got a working-ish mandatory profile by following the James Rankin guide linked earlier in this thread. The only thing that won't work is Edge, which does the classic open then close again. None of the advertised solutions out there have fixed it for me.

 

I'm at the stage now of testing our Student user with local profile only - so annoying as Edge is the only sticking point! I can't believe I'm having to choose between having the default browser working, or dumping mandatory profiles.

 

Hi

 

Did you ever resolve this issue?

 

I am having the same problem myself.

 

Regards

[3s-gtech]

I can confirm that Edge works fine on 1703 with our mandatory profile. Can't say what's different, but it can work!

[mshill]

Using 1703 and followed the guide earlier but I am having the same issue where edge pops up and then vanishes again straight after

[alfatec]

How are you creating your default profile. We use a local profile and mandatory on RDP and edge works on both. There are a few new things that you need to do now that were not in the original setups.

[ReadTheNetwork]

Using Mandatory profiles which seems to be working, however can take up to a minute for it to log on. If I use UE-V alongside mandatory profile would it speed up the logon?

[DavR]

Hi

 

Did you ever resolve this issue?

 

I am having the same problem myself.

 

Regards

 

Sorry @mshill, I never did. Gave up on mandatory profiles and went for local profiles in the end, which I'm not happy with, but they are working.

[ReadTheNetwork]

Clutching at straws, but has ANYONE managed to get a mandatory profile that will work with Microsoft Edge? And if so, how?

 

After a lot of false starts, I finally got a working-ish mandatory profile by following the James Rankin guide linked earlier in this thread. The only thing that won't work is Edge, which does the classic open then close again. None of the advertised solutions out there have fixed it for me.

 

I'm at the stage now of testing our Student user with local profile only - so annoying as Edge is the only sticking point! I can't believe I'm having to choose between having the default browser working, or dumping mandatory profiles.

@DaveAshworth, @mshill Have you tried creating a reg file HKCU\Software\Microsoft\Internet Explorer\Spartan then create RAC_LaunchFlags (DWORD set to 1)

Edited November 13, 2017 by ReadTheNetwork

[alfatec]

Drop me a PM. I have default and mandatory profiles working on 1709 with edge working without any issues.

[mshill]

I managed to get it working in the end, followed the rankin guide but when copying the proifle don't tick the box for mandatory profile, it messes up permissions.

 

I just need to try and figure out how to stop the welcome page popping up each time, tried a few methods none of which have worked.

[alfatec]

Which is the rankin guide?

[mshill]

How to create mandatory profiles in Windows 10 Creators Update (1703) - HTG | Howell Technology Group

[nicholab]

Please could someone expand out how you get to here "Build a Windows 10 1703 machine and enter Audit Mode"?

 

I have an MDT image of my Windows 10 machines how do I get to create the profile in Audit Mode?

[ReadTheNetwork]

C:\windows\System32\Sysprep\sysprep.exe

[Arthur]

Please could someone expand out how you get to here "Build a Windows 10 1703 machine and enter Audit Mode"?

Related video.

 

 

... you can do it on a fresh install, as long as it is the same version. There's no need to do it on a specific image. Simply build a new machine from the same version of Windows and enter audit mode there. You can throw the source machine away when finished.

[DavR]

I'm at the stage now of testing our Student user with local profile only - so annoying as Edge is the only sticking point! I can't believe I'm having to choose between having the default browser working, or dumping mandatory profiles.

@DaveAshworth, @mshill Have you tried creating a reg file HKCU\Software\Microsoft\Internet Explorer\Spartan then create RAC_LaunchFlags (DWORD set to 1)

 

I have not tried that, what does that do then?

 

No idea what Spartan could refer to in relation to Edge, perhaps it relates to some inbuilt warrior function that rampages through your profile and f***s it up to biblical proportions? Spartan=disabled, please.

 

I hope to have another bash at mandatory profiles on 1703 at some point, I will note this and @mshill's tip about not ticking the mandatory box in my next attempt. Thanks both!

[Patrick]

I think spartan was Edge's code name during development.

[ReadTheNetwork]

The RACAgent just gathers reliable information. That's all I Know. No idea why this registry would fix it or what it exactly does.

But I found a fix from a different site when I had a similar problem (it kept opening then closing). But I found this which might have more information (Fix: #1).

https://borncity.com/win/2017/09/26/fix-microsoft-edge-doesnt-work-anymore-or-crashes/

[alfatec]

I do one last thing after following the James Rankin instructions and that is to copy the TileDataLayer and Packages folders from the profile that was used in audit mode to the new default profile.

[eddyc]

Morning all,

 

I am having fun trying to set up our student mandatory profile.

 

I have followed the Rankin guide to the letter and the profile is under 1mb and logs in fairly fast, under 30 seconds.

 

I am having issues though with edge. It launches and the application is faded \ greyed out after a couple of minutes it then closes itself.

 

Once this has happened once, Edge refuses to launch at all going forward.

 

I've added the key as suggested by Dave but it's still not working for us.

 

Any suggestions would be appreciated!

 

Cheers, eddyc

 

 

I'm at the stage now of testing our Student user with local profile only - so annoying as Edge is the only sticking point! I can't believe I'm having to choose between having the default browser working, or dumping mandatory profiles.

@DaveAshworth, @mshill Have you tried creating a reg file HKCU\Software\Microsoft\Internet Explorer\Spartan then create RAC_LaunchFlags (DWORD set to 1)

[nicholab]

Does it need to go in the 64 bit of the registry as well?