Wirral_Wonderer Posted January 17, 2018 Posted January 17, 2018 (edited) Has anyone got a Mandatory Profile creation process which works and they would like to share? All the ones I have tried either have major typo errors on them or they don't work. Either that or I give up and take up something more fulfilling like repeatedly bash my head against a brick wall! Edited January 17, 2018 by Wirral_Wonderer
Katy Posted January 17, 2018 Posted January 17, 2018 I settled with a half-way solution, I copied the default Default User profile in the normal way and renamed ntuser.dat to ntuser.man, gave everyone read only permissions on the server, then set this as the pupil profiles. All the customisation is done with GPOs. This way they get the same as if I'd let them have local profiles but without being able to save changes to the local PC (or to anywhere). I gave up in trying to make a mandatory profile with changes in the normal way.
alfatec Posted January 17, 2018 Posted January 17, 2018 PM me with your email address and I will send full instructions over plus a 1709 group policy. 1
mcgintyl Posted January 19, 2018 Posted January 19, 2018 Hi Alfatec, I cannot PM you as not enough post but would you be able to share your solution of Manadatory profile. I've been trying for ages to get it to work and it is never right. Tried with WIndows 10 1709 and same issues with not being able to left cleck start button. Many Thanks
alfatec Posted January 19, 2018 Posted January 19, 2018 Just need your email address so I can send you the information.
sarge Posted February 7, 2018 Posted February 7, 2018 Ive also com across the left click of the windows button not working with a .man profile, (created using MS method). Has anyone found a solution/
Wirral_Wonderer Posted February 7, 2018 Author Posted February 7, 2018 For me the issue wasn't the profile, it was a computer setting in a GPO. I had to create a gpo and test the settings in groups - took me half a day, but it works now. I was so shocked I had solved it, I stupidly forgot to make a note of the setting - sorry! I just hope it doesn't happen again!
antartis Posted February 7, 2018 Posted February 7, 2018 I've tried all the recommendations, from a lot of forums, like loading the hive / deleting entries for user that created the profile, enabling the "SpecialRoamingOverrideAllowed" key, setting the "allow deployment operations in special profiles"policy etc, but still when a user logs on, when he clicks on the start menu/windows icon nothing happens ! Anyone has a clue on what's goin' on? It seems Microsoft doesn't have asolution to this ;?
Wirral_Wonderer Posted February 8, 2018 Author Posted February 8, 2018 I tried all of that, we struggled on for a few months using shortcuts on the desktop. Have you tried it with a local account? when I did, it worked with no issues, it was then I realised it was a GPO issue.
sarge Posted February 8, 2018 Posted February 8, 2018 do you know what the setting is? , isolated the machine so it only runs the user gpo ( new totally untouched blank gpo) and it still doent work. Its worked on older versions.
Wirral_Wonderer Posted February 8, 2018 Author Posted February 8, 2018 Sorry I am really annoyed at myself for not making a note of the setting, but it was definitely a computer setting not user.
sarge Posted February 12, 2018 Posted February 12, 2018 Turned out to be a permission issue , The ALL Applications Group need sto be added. found this site explains it fully http://www.htguk.com/how-to-create-mandatory-profiles-in-windows-10-creators-update-1703/ 1
Wirral_Wonderer Posted February 12, 2018 Author Posted February 12, 2018 Glad you got it sorted. Glad to see M$ making life easier for admins!
paulhowes Posted March 5, 2018 Posted March 5, 2018 hi @alfatec i too am stuck with getting W10 1709 Mandatory profiles working and any help would be gratefully received! I will drop you a pm! Thanks
paulhowes Posted March 5, 2018 Posted March 5, 2018 Turned out to be a permission issue , The ALL Applications Group need sto be added. found this site explains it fully http://www.htguk.com/how-to-create-mandatory-profiles-in-windows-10-creators-update-1703/ Did you have to create the 'ALL Application Packages' group? I don't seem to be able to find that group!? Cheers
sarge Posted March 5, 2018 Posted March 5, 2018 It wont show in ADUC , its a server 2012/w10 permission
paulhowes Posted March 5, 2018 Posted March 5, 2018 ahhh it was searching the directory. Changed to the server and it found it! thanks! Im gonna try and and start again from scratch with a W10 Mandatory profile. I have tried so many ways in the past i am confused now with what works with which method and what doesn't etc Does anybody have a known working method for building a Mandatory profile on W10 v1709 that they could share before i tear my hair out again!?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now