GPO settings with mandatory profiles

[CyberNerd]

Our mandatory profiles seem to be overriding the group policy settings.

 

When there is a mandatory profile - with a user.man file the group policy is not applied.

 

When there is a non-mandatory profile - with a user.dat the group policy is applied but the session errors due to write access problems on logout. This is correct as the profile is shared and users cannot write back to user.dat

We want to use user.man so that there is no attempt to write back to the profile.

 

How do we use user.man and ensure that the GPO settings get applied?

 

Client is XPSP3 and DC is 2003

[jsnetman]

I think you have probably taken a copy of a profile from a machine where group policy has already been applied. It reallly needs to be a profile from a machine where no GP has been applied.

[maniac]

Have you imported the user.man file into regedit and checked the permissions within the file itself? I find that's the most common reason for mandatory profiles overriding GPOs, that the permissions within the actual file are set so only the original user the profile was created with can read and write to it.

 

Mike.

[CyberNerd]

I think it was a combination of the both. some tweaking around and it seems to be running ok now. thanks