LoLoh

Formerly the site: Google would work for NON SSL searches, now the Google link just forwards you right over to HTTPS. We used to have a DNS entry that would redirect all Google searches to the non secure site; Now it looks like everything is https, including you tube :-( We used to have the youtube.com/education working where only filtered videos would come up; now just pop in https and watch what ever you want. Sounds like most of the filtering appliances don't have a solution for this...

You could also implement the Always wait for the network at computer startup and logon GPO Administrative Template: System Policy Node: MACHINE Policy Path: Administrative Templates\System\Logon that should prevent temp profiles from being created...

I am having this exact same issue with a mandatory profile I created. First time logon for a student and the GPO applies perfectly. any subsequent logon and the GPO does not apply. While testing this, I noticed that I used "student12" to initially setup my mandatory profile and student12 is the only one that can logon multiple times and have the GPO applied. When all other students logon for the 2nd time, the GPO does not apply. (logon as an admin to the machine and remove the profiles for Studnet13, student14 etc and then when they logon for the 1st time again the GPO works.

You could do a Group Policy that forces the network to be ready before logging on. Policy Node: MACHINE Policy Path: Administrative Templates\System\Logon "Always wait for the network at computer startup and logon"

One more note on this, the windows 7 profiles have the username hard coded in various places; if you are planning on using the same mandatory profile for multiple users when you load the ntuser.dat registry hive, export it to your desktop as "tempfile.reg" then open this tempfile.reg in notepad and do a search and replace. If the original user that setup the profile was "student123" then search for all instances if "student123" and replace it with %username%. Save the text file before closing it and then double click on the tempfile.reg that you just modified. It should load the changes you made back into the registry hive. unload the registry hive and then you can rename your ntuser.dat back to ntuser.man