MANDATORY PROFILE for students - Can anyone please share a "working" profile with me?

[burgemaster]

I don't think I can cope spending any more time working in our library win 7 machines working correctly with mandatory profiles!!!

 

As the profile is created off domain, i don't think there should be any issues using someone else's folder????? Am I wrong?

 

Each time I try I have failed. When I follow the guides students can login for a while then they randomly get a profile error not letting them log in at all!

Profiles are not correctly removed (set to delete older than 3 days) they are left with half removed profiles mean they then create a new profile with username.domain then username.domain2 onwards!

Would anyone please be as kind to send me a 100% working mandatory profile?? (preferably with the mail bloat removed?)

 

Students currently have nothing in their profile tab meaning they created one each time they log in..

If anyone would be kind enough to share? I can then rule out the creation of the profile!

 

Many thanks in advance!

[Davit2005]

I'm too having this issue. I tried setting up mandatory profiles to start with after the Windows 7 deployment as some software needs to be opened as a admin user to create the correct profile files. Since removing the mandatory setting (due to certain software) when a student logs onto a machine where they have a mandatory profile they get the Profile Service error. If you delete their profile through registry then delete the users folder it cleared the profile completely then they could log in ok.

 

Don't really want to go to Roaming Profiles either, allthough if I could set it so doesn't store/cache the profile at all on the machine it could be a way forward.

 

A lot has changed in Windows 7 compared to Windows XP :-( .

[ronnoco]

Hi,

 

We use Windows 7 with Mandatory profiles with Start Menu & Folder Redirection. Touch wood, we haven't had any problems at all but it did take me some time to crack it.

 

You must create your profile the MS way. I found other methods just didn't work or will give you problems down the line. Here is the link, How to customize the default local user profile when you prepare an image of Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2

 

We use the Adobe Master Collection CS5 site wide and we had to write a script to give 'Domain Users' group permission to various directories otherwise various titles wont work.

 

Our profile size is 6.88MB. This is quite hefty but the Adobe CS5 and Music software takes up a fair bit of this.

 

Hope this helps.

[burgemaster]

Thanks

Will have another look through...

 

We are getting MASSIVE login times now and again, its when they login for the first time. We have no profile set so do you think the system having to create a new profile from scratch each time is causing this? Does a 7meg profile login really quickly ? (quickly would be under 20sec like XP does)

 

Thanks in advance

Edited January 20, 2012 by burgemaster

[apeo]

If you havent specified a mandatory or roaming profile then it will create a local profile if its the first time that user is logging into that computer.

 

We have a ~2.37MB super mandatory profile here and it doesnt login under 20 secs due to folder redirections and some computers arent the best spec.

[burgemaster]

Sorry to be lazy, but would you be able to please share?

Is there anything school/network specific within it? I dont think there is as it is created offline and without being a member of the domain.

Thanks in advance

[CallumCatterall]

Sorry to be lazy, but would you be able to please share?

Is there anything school/network specific within it? I dont think there is as it is created offline and without being a member of the domain.

Thanks in advance

Heres the V2 and the V1 for 7 and XP, both have blanked Start Menus.

 

Mandatory.zip

[burgemaster]

Many thanks,

Will try and put some time aside today to have a play

[internetuser]

Cheers for this, might save me a few days hassle.

 

I plan to use redirected start menus for students, so would the blank start menu be an issue ?

[CallumCatterall]

Cheers for this, might save me a few days hassle.

 

I plan to use redirected start menus for students, so would the blank start menu be an issue ?

 

Shouldnt be, Im currently using Group Policy shortcuts for my Start Menu though.

[fiza]

Thanks @CallumCatterall

 

Worked a treat

[internetuser]

What is the best place to place mandatory profiles these days ?

 

Would

\\SERVERNAME\Profiles\Windows7

 

Or should I put it in the sysvol to replicate ?

[Frosh]

Can anyone clarify this point about mandatory profiles... Does having mandatory profile mean it won't go through the personalization as if the user first login, does that cut down on the time a user logs in? Cause currently it does take a while for the user to go from typing credentials to windows finally finish loading.

[Patrickv]

Can anyone clarify this point about mandatory profiles... Does having mandatory profile mean it won't go through the personalization as if the user first login, does that cut down on the time a user logs in? Cause currently it does take a while for the user to go from typing credentials to windows finally finish loading.

 

To answer your question. A mandatory profiles is a profile that doesn't save any changes when you logoff. When you login in next time you get a fresh copy of the mandatory profile. I find this useful in school setups.

[Frosh]

Thanks for answering what mandatory profiles are. Does that mean that the personalization that happens when new accounts are first login happens all the time for mandatory profiles? By personalization, that little screen in the upper left at the beginning when the user first logons.

[ronnoco]

Hi,

 

We use a 7MB mandatory profile and when students log on to our Windows 7 machines, they see 'welcome' with a circle spinning around for 15 - 30 seconds, they are then on to their desktop (re-directed desktop through GP) Whole process takes an average of 1 minute before they are ready to go (waiting for egg timer, acceptable use policy to load, etc)

 

Hope this helps.

Edited January 27, 2012 by ronnoco

[burgemaster]

Frosh,

This startup script removes the "personalisation" stage on XP machines...

Might be worth a look:

 

@echo off

setlocal EnableDelayedExpansion

set KEY="HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components"

set FND=find /i %KEY%

for /f "Tokens=*" %%a in ('reg query %KEY% /s^|%FND%') do (

set SP=N

for /f "tokens=*" %%b in ('reg query "%%a"^|find /i "STUBPATH"^|find "REG_"') do (

set SP=Y

)

if "!SP!" EQU "Y" reg delete "%%a" /V STUBPATH /F

)

endlocal

[burgemaster]

Using the above "MAN" profile (thanks CallumCatterall) here are our login times on Windows 7

First Login (profile not on machine) 1min 16sec

Second login - 1min 5sec

 

These machines are Atom Acer Revo`s so not the highest spec. The main delays seem to be the "GPP Printer" policy. Might go back to a script

[Frosh]

Thanks for all the response.

The timing for 1 minute still seem sucky as our machine do 1 minute more or less. Although I have ran a extensive debug mode, haven't figure out how to read it. Any help would be great in deciphering it. From the timer, it seems to hang for like 30 seconds on one group policy. This is still cryptic to me UserEnv Debugging Line by Line - Rich Peckham&#39s Technical Blog - Site Home - MSDN Blogs.

 

For mandatory profile, I was unable to replicate this Mandatory Profiles Solution for Windows 7 | K-5 Computer Lab with the profile stored locally. It maybe that it can't be done.

I'm guess everyone mandatory profile is not a local one, if so I have tried a few guidelines to follow upon googleing, but none yielded any fruit, just a temporary profile, and one situation where it was not working at all. I made ntfs permission to Everyone, and in registry permission too. Any other pointers about mandatory profile, although it doesn't seem to be of any benefit since we use deep freeze. Unless it may shave a few more seconds off.

 

More or less this is my situation: Specify same User Profile location for all users

[burgemaster]

As the actual profile is around 7mb, I dont think that it is this "copying" time that is delaying the logins.

I think it only takes around 5 secs to copy the profile from server to machine.

If you enable verbose logging you will be able to see each GP as they execute.

Will look at the debug mode. thanks

[Frosh]

How did you create your mandatory profile? and 7 mb quite small, any programs installed?

[internetuser]

How do you stop adobe reader creating about 18meg in the profile, once you accept the licence terms and conditions ?

[JJanisch]

Just to make sure I'm getting this right, because for me Callum's profile isn't working; you transfer the profile into a folder (for example "MandatoryProfile"), share it to the user/group, add the user/group to the special permissions security (read/write/view), and update the path of the users profile to "\\server\mandatoryprofile$\mandatory" ?

 

Every time I log in it uses a local profile

[burgemaster]

The XP profile for me does the same for me. GPs dont apply on it for some reason.

[internetuser]

Mandatory Profiles Solution for Windows 7 | K-5 Computer Lab

 

I used the above guide for Windows 7, makes it a lot easier, and works.