[1903, au] Profiles - Mandatory for Kids, Roaming for Staff - Possible in W10?

[JRA]

Hello all,

 

Just getting nervy, of course EXTREMELY late in the day getting W10 ready for the deadline.

 

Question is pretty much as the title really. Aside from reading mandatory profiles are AWFUL to get set up (allegedly) I'd like to enforce a mandatory profile for students and have staff use their own profiles.

 

Is this possible or is it going to be awful?

 

Thanks any and everyone. Hold me... :/

[Primus]

Why do you want to have a mandatory profile for students?

 

Why do you want to have a roaming profile for staff?

 

If you outline what you need then you'll get better advice.

[3s-gtech]

Yes, mandatory is possible. Not used roaming for many years - I get the impression it's even more archaic than mandatory and should be phased out. We went to local profiles.

[robyholmes]

Local profiles with UEV is the route we took. Working well for both staff and students.

[slears]

I have my network configured with local profiles only for staff and students.

 

GPO is set to remove profiles where a user hasn’t logged into the machine after 4 weeks. I usually re-image most machines in the holidays anyway.

 

Site is now mostly Intel i5 with GB link to most machines.

 

No problems here. Average 10 second login.

 

I understand that UEV is being deprecated and roaming/mandatory are a pain in the backside for users and administrators alike. Local profiles remove most headaches.

[free780]

Local profiles with FSLogix but you'll need a fair bit of storage.

[jslate1980]

How much space you using per user with FSLogix?

[timbo343]

Mandatory for all students and the majority of staff. Only those staff that use MS Outlook Desktop client have roaming profiles but they tend to stick to the same machine.

[Zoom7000]

I have my network configured with local profiles only for staff and students.

 

GPO is set to remove profiles where a user hasn’t logged into the machine after 4 weeks. I usually re-image most machines in the holidays anyway.

 

Site is now mostly Intel i5 with GB link to most machines.

 

No problems here. Average 10 second login.

 

I understand that UEV is being deprecated and roaming/mandatory are a pain in the backside for users and administrators alike. Local profiles remove most headaches.

 

Is that 10 second on initial login? I'm running Windows 10 images with pretty much all apps stripped out and I still get between 1:30 to 2 mins for initial login.

 

I can't figure out how to speed it up. Most of my PCs are Dell AIO, quad core i5 with 128GB SSD and 8GB RAM. So definitely isn't a performance issue on the PC.

[free780]

1st login is always slower as there are a lot of one time operations. It was similar in Win7 but can be worse in Win10. You can try using a shared mode ppkg.

[jslate1980]

Copy a version of the default profile into the netlogon will speed up your login times. Here is a useful video

[Oaktech]

I've gone local everywhere. Roaming breaks modern apps and mandatory is just a pita to set up. Gpo set to remove every 5 days on student devices and 30 on staff.

[2097]

Im also just rolling out mandatory & roaming on windows 10 ( only 1 suite atm )

 

Roaming on 1903 def breaks a lot of the builtin windows 10 apps ( i.e. calculator and photos) But ! they are pretty rubbish any way and can be replaced pretty easily

 

This week will be my initial test with them , If it causes a lot of issues then ill be going local..

[JRA]

Okay this is getting madder than I thought! Lol!

 

People don't use roaming OR mandatory profiles any more? How does this even work now?

 

Oh my god I think I have much reading...

[Oaktech]

Okay this is getting madder than I thought! Lol!

 

People don't use roaming OR mandatory profiles any more? How does this even work now?

 

Oh my god I think I have much reading...

 

Just clear the profile field in the users AD entry and let windows get on with it. Oh, and stop redirecting appdata. That way madness lies.

[free780]

If you really need to roam the whole profile. Use FSLogix. If it's just favorites then you can usually sync them via a folder or gsuite/azuread account. Roaming Profiles have continually had issues as the user profile service doesn't release them properly. Local profiles are much better. Of course ideally you have 1:1 for students and staff then roaming profiles becomes a non issue, but that isn't going to happen.