dtakias

I've read that the SP2 version of Mini-Setup uses the Administrator account profile rather than Default User profile to apply customisations to the new user.Does that mean that i will have to copy the local user profile to administrator? Maybe that is the reason that I will need to rename the administrator account to something else like admin. Any sysprep guru to confirm this ?

It was cause by active desktop yes. I was aware of the setting on the local pc, but I wasnt aware that same thing happens when using crappy active desktop Bginfo looks really clever. Its again that guy from sysinternals who was employed by microsoft.. I hope I can deploy BGinfo with group policy.

I wasnt aware that i need to copy the local profile to the default user profile. Since I am using roaming mandatory profiles what is the point of copying the local profile to the default user profile? Do you do it in case you don't want to use roaming profiles for some users? Does the local computer use it when there is no profile available for the user who is about to login?

I am just one step before syspreping an image and I am not sure if i should copy the desired profile on the default profile. The problem is that i have made various scripts to run programs as administrator and as you say i need to rename administrator acocunt. If i rename the administrator account then some of the programs might not work. IF i dont rename can something go wrong during Sysprep? The administrator account is fully configured and I dont want it to be messed up during imaging...

if i disable active desktop how will i be able to force the same wallpaper to all computers across the domain. Is there a way to place it in the local profile and use it without having active desktop to be in operation ?

Does anyone know how to remove the shadow from desktop shortcuts? I remember I was doing it in the past somehow, maybe with tweakui but I cant remember now and Ive been searching the web with no success...

I will be using Ghost with sysprep. I think for now I will just rename them manualy and will consider using that script srochford posted. I wonder if I use something like CLASS* or CLASS# will it keep the first part and then ask me to enter manually the second part?

When you create a new user with Windows SteadyState you have have many options for Windows and Feature Restrictions. If you click and choose "no restrictons" does that ovveride the local policy and registry settings you already made before installing SteadyState ??

When comes to the entry for the ComputerName is there a way to set it to start counting by itself? For example If I need to name the computers as CLASS00,CLASS01,CLASS02,CLASS03.... Can i keep the first part and let it name the second part or something similar to that ?

Actually I was looking at the SteadyState in the afternoon. Its looks like a really useful utility. Although I am not sure about the disk protection feature as some programs have been configured to have access on the C drive and I don't want something to go wrong with them. So as I understand it, its not possible to have a local mandatory profile the way you have it when using roaming profiles.

Maybe if the script can check if the user is logged in domain will run the domain script(with domain info) and if is logged on local computer will run the local script(with local info). is that possible?

Basically I need something that will work for everyone and run on all the machines, local and domain. Local admin and Domain admin have diferent passwords. Where can I get more explanation for this command: RunAsSet ( ["user", "domain", "password" [, options]] ) What is the options for ?

I have already created and configured a local profile , I just need to find a way to make it mandatory.

Ok I see what you all mean. But in that case I will not have a true mandatory profile. I need the changes not to be saved by the profile. If I just copy it over to the defauolt profile their changes will still be there when they logon again. And if I rename to .man I will get error messages during logon! I just need the ability to have the teachers logon locally(NOT IN THE DOMAIN) in case they have to and NOT have their settings saved by the profile when they logoff!

I think ive seen that somewhere. Yes but how will this profile be mandatory If I dont rename the extension to .man ?

Its OK, It works fine for everyone! cheers:)

Do I need to enter something at computername? How do i make it run for all computers of the domain??

Hi, Is it possible to have a local mandatory profile? A profile that will be mandatory and not load of the network? If I go on the local profile and rename the extension to .man then I get errors during logon that profile cannot be found. I have even tried to move the profile to another location on the local hard drive and rename it to .man but i get the same errors...

Or you can use password_reset_v2.0 ;-) Its really simple and does the job! password_reset_v2.0.rar

no because they will start messing about with the system

I've found this program which does the trick although its free only for private use...http://www.robotronic.de/runasspcEn.html

@Jona - The only problem is that it will not keep the password and ask everytime for it. I will investigate it with filemon and regmon. @SYNACK - I will try that option, I am preatty sure I've used it in the past when I was trying to run a program as a service on my thinkpad @mattx - That script looks really clever. But how do I run with the program? Could you please explain with an example. @gecko - No matter what security permissions I give the required files I will still get the same problem. I've tried Power Users group but it will still not work as it needs to run as an administrator.

IS there a way to run an executable always under the administrator account? If yes how to do it. As the program is on the startup folder I need it to be able to run as administrator under every account...

Is there anyone experienced here with Hitachi Smartboards? I ve got a problem as one of the schools that uses those boards uses Prolific USB to Serial adapters . The only way to make the board work with the computer is to logon as administrator. IF you logon as user there is no connection. I am suspecting that the driver is not able to load properly when login in as a limited user. I have changed a couple of registry settings like "Load and Unload Device Drivers" on Local Security Policy with no luck. Does anyone a way to force the driver to load properly on a limited account? The device name is PRolific GMUS-03

that setting worked thank you very much.