One final question nanout mandatory files.

[Kyle]

I am new to this so please bear with me. I have read lots of older posts about this subject so please hear me out.

 

I have read that we no longer need or should have mandatory profiles and i tend to agree ( i think ) What i have is a default user profile for all pupil users. this profile has a user.man to prevent any changes being saved.

 

But does the GPO setting ' don't save settings on exit' do exactly the same.?

 

If it does, does this also include any history or cookies that may have come down when using the internet?

 

Thanks

[ChrisH]

The default profile is copied over to the local machine as a local profile so its the local profile that gets changed.

[kingswood]

A default domain profile- if it exists- will be used when users log on to a machine rather than the default local profile. Using roaming profiles (if that's what you mean) you would have to set two GPO settings to make them *kind of mandatory*:

 

1. "Delete cached copies of roaming profiles"

 

This takes out everything. It has downsides though- like slow links, server going down, laptop users (they would get temporary profiles--yuck!)

 

2. "Prevent roaming profile changes from propagating to the server"

 

If a machine has a local profile in existence when you logon with a roaming profile, the OS merges the two profiles. This might not be what you want, so set this one and make sure any merge doesn't propagate to the server.

 

You could set a third, and important, GPO setting:

 

3. "Wait for remote user profile"

 

It won't use a locally cached (or local) profile. It will (as it says) wait for the remote profile. Caveat? Have slow links? Ouch!

 

I still think there is an argument for roaming profiles and I see that people like CSE are implementing these in schools now. However, mandatory offers a much simpler way of setting things as you want them and not worrying about changes to profiles. Or you could use a "forced super-mandatory" profile: make sure your user gets *ony* the profile you set up for them and never gets the chance to log on locally.

 

OK. Well, if it's changes to settings you are worried about try out both on test machines. But to answer your question directly- what gets deleted is everything inside the profile that is stored locally on logoff. Like I said, test it and see if it does what you want it to do.

 

Paul

 

:-)

[MrDylan]

We have a mandatory profile that everyone gets at logon.

 

Local logons are disabled, without server connectivity there's no logon at all except local Admin.

 

The profile is the same for everyone, except the Start Menu, and noone can change anything at all, and if they do it's undone at logoff.

[john]

I had a mandatory setup at my last place, worked the best, it annoyed staff as they had the same as the kids, but it worked well, and the problems were very minimal. I have roaming at my current place and I can see the advantages / disadvantages of both now, and the last network I setup for a local charity has Roamings, and I am still deciding what to do for my next setup, I may do a mixed setup - Kids Mandatory, Staff Roaming, but cannot 110% finally decide yet.

[tosca925]

Our si kids mandatory and staff roaming......works well for us.

[john]

If you do Man and Roam mixed, I think I may just do that, I got to decide soon, only 3 weeks to go till its installed!

[GrumbleDook]

Works for us too ...

[john]

Oh well, thats sorted then, the 4 members of staff can have Roamers, and the 40 kids can have a mandatory or two (two classes - Infants and Juniors)