Mandatory Profile

[TheMan100]

I'm wondering how I can force users to use a mandatory profile via a GPO? I've tried Googling it but the results have been a little unclear.

Thanks

[featured_spectre]

I dont think its possible via GPO...you set it in their profile on the ADUC. It will automatically take next time you do GPUpdate and reboot

[TheMan100]

Ah, that's a little inconvenient. Is there no other way I could stop users from saving things such as themes, screensavers etc, so when they log back on, everything looks the same as it did when they first logged on?

[featured_spectre]

thats doable in GPO but you would need a mandatory profile to start.

[TheMan100]

Hmm, okay. Well... is there anything else you can suggest? I've got roaming profiles setup, would the only other solution be to delete the local profile on logoff?

 

Or do you have any other suggestions?

[featured_spectre]

roaming profiles are going to be the heart of your problem as they cannot be locked down properly due to the inherent problems when they login on different machines.

[timbo343]

Best of luck on the roaming profile front... i am having a nightmare with them at the mo... i need to find a solution to stop all users either with roaming or not saving to C:\users\%username%, its giving me a right headache.

[m25man]

Quite simply, it has to be mandatory for kids and roaming for staff (but only if they actually do roam) with a good GP applied on logon.