gavinh

ntuser.dat contains all the users registry entries, renaming it to ntuser.man locks the profile so no changes can be made. No there is no problem as such copying entries from one ntuser.dat to another ntuser.man file, apart from you may get some reference to the other user. This doesn't seem to cause us any problems and can be easily sorted later if it causes any issues. A cleaner way but more work is to just copy over the reg setting you want need such as "%HKEY%\Control Panel\ will be control panels changes. "%HKEY%\Software\Microsoft\Internet Explorer (internet explorer) etc.. I've now found this article which may better explain things, and even though it is for Windows 8 still seems relevant here: http://stealthpuppy.com/customize-the-windows-default-profile/

Yes log in with a user and let Windows generate a new profile, make any changes and log out. Then load its ntuser.dat file to a registry hive and export all its registry entries or just the ones you require. Import the registry settings into the copy of the 'Default' profile taken from c:\users\default. Hope this helps.

Hi just to clarify we are currently running: Windows 10 Education V1511 build 10586.17 We have redirected start menu, desktop and appdata and use an xml file to control the Start Layout. Logon times seem fine so far (about 30 seconds on slowest workstations) but it does to appear to copy 100mb into the c:\users\userprofile\appdata\local\microsoft folder, which should get removed on logout. Below are our profile Computer Group Policy settings System/User Profile Policy Setting Comment Add the Administrators security group to roaming user profiles Enabled Delete cached copies of roaming profiles Enabled Delete user profiles older than a specified number of days on system restart Enabled Delete user profiles older than (days) 1 Policy Setting Comment Do not log users on with temporary profiles Enabled Wait for remote user profile Enabled Windows Components/App Package Deployment Policy Setting Comment Allow deployment operations in special profiles Enabled ----------- I didn't notice Cortana/search not working as I hid that from the task bar as didn't really see the need for our students. Found out if you copy the hidden folder C:\users\Default to \\ServerName\ProfileShare\profilename.V5\ ntuser.man instead of copying the "Default Profile" and follow the rest of my procedure it seems to work OK. Sorry I didn't pick that up before. Now apart from removing the settings menu from the start menu, and other silly things for the students to mess with, we are ready to roll out Windows 10 to all our workstations. So instead we will leave Microsoft to put out their 200434393 service/security/patches/updates and also wait till the Sun is hot and the days are longer

The problem appears to be when a user first logs on a restricted registry entry is created in: HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\DeviceAccess You currently unable to edit, delete or rename those keys. and the Start-Menu is restricted to the first User to log in. --------------- Quick notes --------------- Copy the 'Default Profile' from a workstation, rename to \\ServerName\ProfileShare\profilename.V5\ ntuser.man set NTFS and registry permissions for 'Authenticated users' and use that for a mandatory profile. If you want to make changes; log in as a different user and export its ntuser.dat registry values and import to the \\ServerName\ProfileShare\profilename.V5\ ntuser.man ------------------ Full instructions ------------------ Step1 Log into Windows 10 as an administrator Right Click Start Menu Select 'System' > 'Advanced system settings' Click on 'Default Profile' Click 'Copy To' e.g \\ServerName\ProfileShare\profilename.V5 Run regedit click on HKEY-Users and Load Hive - browse to \\ServerName\ProfileShare\profilename.V5\ntuser.dat Give hive a name e.g. hive Set the permissions on the hive (FULL CONTROL for 'authenticated users) unload hive Set the NTFS permissions on: \\ServerName\ProfileShare\profilename.V5 (READ for 'authenticated users') make sure owner is 'Administrators' rename 'ntuser.dat' to 'ntuser.man' This will be your mandatory profile which can be given / copied and assigned to any user. WARNING: never log on with your mandatory profile without renaming 'ntuser.dat' to ntuser.man, otherwise this will Break the Start-Menu for all other Users using the profile. Step2 If you want to modify the mandatory profile: Login as another user and make any necessary changes. run regedit and load the ntuser.dat from chosen users profile and load to a registry hive under HKEY-Users (keep the the same name as before. e.g. hive) export the registry keys unload hive load the ntuser.man from your mandatrory profile to registry hive (keep the same name as before. e.g. hive) import the registry keys you have just exported unload hive delete the .LOG1 or .blf files if you want Done DISCLAIMER: This works for us but no guarantees, hopefully Microsoft will fix this! so those steps may not be necessary in the future and standard practices may resume. Good Luck!!