Search the Community

Morning All, We're currently in the process of testing Windows 10 for students (we already have some staff testing it for us who are giving helpful feedback), for students we would like to stick with a Mandatory profile, mainly because it is easier to manage one profile rather than 4000+ roaming profiles, and it is quick to log on. I have configured a Mandatory profile for Windows 10 and assigned it to our test student account, however when logged on with this profile the user's start menu does not open, the action centre doesn't work, nor does Cortana.. has anybody else experience this? If so, have you found a fix? Cheers

Hi, I have come to a school where all the student profiles were set up as roaming instead of mandatory. This means it takes forever for them to log on. Is there an easy way for me to change their profiles to mandatory?

Hello everyone, I was wondering if someone can help, we currently have a mix of Windows 7 computers and some new Surface 3s running Windows 10. For the last few years we have used mandatory profiles on windows 7 which has worked well. However with the new Surfaces running Windows 10 I have created a new .v5 profile which works however the default apps such camera don't seem to work. Has anyone got them working or knows of a way to get them working. Let me know if you need anymore information? Kind Regards

I am having a problem with our mandatory student profile on Windows 7 whereby when a student logs on to the machine the pinned taskbar shortcuts are unavailable (see attachments). These shortcuts are the Windows default (IE9, Library, Media Player) and point to the usual places but still the user cannot access them. I was leaning towards a permission issue but wasn't sure where to start. Anybody seen this problem before and can point me in the right direction? Many thanks,

Hello, We are having an issue with Sage Payroll (v21) when we try to use it with Mandatory Profiles on Windows 7, If we use a roaming profile it works fine however we need to make the change to Mandatory profiles for students. When we fire up Sage Payroll on a machine with a user that has a mandatory profile Sage Payroll will start in restricted mode Has anyone else ran into this issue and did you find a fix for it? Thanks

I am sorry to bring this back up as I know there have been a few threads about it before .... but we cannot find a solution. We are using mandatory profiles for our students, and they get copied to 'C:\Documents and Settings\' on log on. On log off the profile is supposed to be deleted. This has been working fine previously until not long ago. Because they are not being deleted multiple copies of the profile are being created, such as username.domain and username.000 etc. The files that are being left behind, therefore the profile not being totally deleted are: C:\Documents and Settings\*Username*\Local Settings\History\History.IE5\index.dat C:\Documents and Settings\*Username*\IETldCache\index.dat C:\Documents and Settings\*Username*\Cookies\index.dat We have GPO set to delete profiles on log off, we run the User Profile Hive Cleanup Service, we also have a script that runs ... and it just seems impossible for these profiles to be deleted properly. We run Windows Server 2003 and Windows XP. Any help is gratefully received. Many Thanks Tom

Hi all, don't you love roaming profiles? Right well we have a 2008 R2 system using Roaming profiles. Each student is setup to \\servername\logons$\%username% and the same is for the GPO setting in Computers\User Profiles to point to the same path. Some google sites have suggested that it should be \\servername\logons$\%username%\ (with that extra back slash at the end). I am correct in asuming that Roaming profiles take their settings from GPO and no - pre build profile is required? like the mandatory. This seems to work well BUT XP clients are having issues, where there is no desktop/start menu/ no GPO settings are copied down. You can imagine I am pulling my hair out, I have gone through all the settings and cleared out the XP profiles just incase they are causing the problem. Does anyone have any ideas? we switched from mandatory to roaming because we had the opposite problem where XP clients worked fine but Windows 7 was randomly not working and students were required to log off and back on possibly up to 3-4 times before it worked. Any help would be great edit: When it goes very slow for XP clients that is when it struggles to properly login. Have done even more testing and one minute it works fine, next problems occur. The slow ones seem to sit there for about 5+ minutes where the ones that work are pretty instant.

I currently use Windows Remote Assistance (msra.exe /expert) to connect to, view and control users' computers if they have a software problem. This works great with users who have roaming profiles - but not for those who have mandatory profiles. When attempting to connect to a user who has a mandatory profile the following error is displayed on the user's screen: "There was a problem starting Remote Assistance Remote Assistance is unavailable for the current user account. If you are using a Windows Guest account try logging in with another account. If you are not using a Guest account, try restarting your machine." The Remote Assistance on the initiator's PC times out after a few minutes. The problem appears not to be our mandatory profile; I have created a new mandatory profile using the 'default' user profile and this still failed. When the ntuser.dat extension was changed to .man the error above was displayed and the connection would not be made. After rebooting the PC, changing the ntuser.man extension to .dat allowed the connection to be made OK. i.e. the problem appears not to lie within the content of the ntuser file or profile, but the way in which Windows interprets the .man extension - apparently placing a restriction on Remote Assistance connections. Does anyone have a solution / suggestions that may lead to a solution to this? We are using Windows 7 64bit Enterprise with all the latest updates. The roaming / mandatory profile is hosted on a share which the users have full control (share & NTFS) over. Thanks in advance, FW.

Error when logging in: User Profile Service service failed the sign-on. User profile cannot be loaded. This is a random error we keep getting again and again in our Windows 10 lab. Clicking ok and try again will allow login. Note: We are running mandatory roaming profiles. Windows cannot copy file \\?\C:\Users\Win10lab\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\ to location \\?\UNC\Server1\Profiles\Win10lab.2016.V5\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5\. This error may be caused by network problems or insufficient security rights. DETAIL - Access is denied. Any thoughts how to address this?

I'm still fairly new at mandatory and windows profiles, so pardon me if i miss anything. Bottom line is, We need to setup 10 mandatory profiles for 1 PC running aster multiseat. Multiseat is where you host multiple workstations from a single PC. This multiseat server is then connected to the monitors with the help of GPU. More info here ASTER: Multiseat for Windows 8.1/8/7/XP So long story short, we need mandatory profile to "deepfreeze" between logoff session, because in multiseat shutdown is not possible. I'm following this guide : https://4sysops.com/archives/create-and-deploy-windows-10-roaming-mandatory-profile/ And this is how it went " Install Windows 10 1511 Go to audit mode Install all drivers Make 3 administrators account for multiseat, Multi1, Multi2, Multi3 (all on administrators level) Install Aster multi seat and assign 3 workstations to each accounts in step 4 respectively, so at this point we have 3 accounts running on 3 monitors, 3 mice and 3 keyboards Ran C:\Windows\System32\Sysprep\Sysprep.exe /oobe /generalize /reboot /Unattend:C:\Windows\System32\Sysprep\CopyProfile.xml frm Multi2.. about 20 mins later "your pc ran into a problem and needs to restart" 8."getting ready" >> region, keyboard etc setup After waiting a while,>> region keyboard language settings. enter new account Aster gets scrambled again, e.g have to re-assign all of them So i'd assume the deepfreeze didn't work, probably because bluescreen problem earlier I suspect this has something to do with me creating multiple accounts for multiseat Any idea how to do this properly?

Hi All, I have had some spare time for a change, to finally crack Windows 10 Mandatory profiles, ready for our academic roll out for September. I am going to share this with everyone, in the hope that others find it a successful method too. This method allows a quick reliable log on, with start menu tiles intact on every log on, at least in my experience. I plan on doing a proper write up with screenshot at some point soon. Here it goes: Firstly, make sure the computer you are using to create this profile has Delete Cached Roaming Profiles disabled, so the cache stays intact on the C: Drive. This can be enabled again after this process if finished. Create a dummy student account username: dummystudent, and give the student a roaming profile. Log the dummy student on and set up the profile as you wish, e.g. expanding the file explorer tabs, setting up start menu tiles etc. Once happy, log the dummy student off and log on to your own network admin account. Locate the roaming profile you have just set up, load the .DAT hive in Regedit and export to a .reg file. Open this .reg file in Notepad and find and replace dummystudent with %username%. This is as per most mandatory profile instructions. Save the .reg and Merge it back into the hive. Set the Hive permissions to Everyone - Full Control and unload the hive. Copy the above profile to your Mandatory Profile share, making sure permissions are appropriate. ie. student accounts can read the profile share and contents. put .V5 as an extension and rename NTUSER.DAT to NTUSER.MAN. Now that local cached profile outlined above, copy the Local folder within AppData (C:\users\dummystudent\AppData\Local) to the AppData within the mandatory profile on the share. There you go, a working mandatory profile. No black screen on login, no dodgey start menu, fast log in time. Cheers Scott

Greetings, Our setup currently uses forced mandatory profiles, this is great for applying the same settings throughout the users and them not being able to change anything. This does however cause problems when using programs that need personalising such as outlook and a lot of our media software. We also chose them to keep network load at a minimum while using laptops and keep the logon times respectable. One example is some music software we use which would normally ask the user to set up the hardware and project storage area during start up. With a normal profile you could change this yourself and choose the hardware relative to the machine. Because they are all identical i can set through the mandatory profile for them which generally works, however if anything about the machine changes, especially if its reimaged and the hardware is assigned a different id this does not work.. I need a more flexible aproach that will allow users to personalise programs/environments the way they want to while at the same time keeping the profiles as small as possible. I would appreciate any advice you all may be able to give as to whether i should change the type of profiles we use or if there are ways around the issue. Thanks James

Currently going through the process of creating mandatory profiles for students before rolling out Windows 10 this summer, so far I've stripped out most the Provisional packages from the image and removed those originally deployed to the administrator, I've created the unattended.xml required and ran the sysprep to create the new default profile but I'm still getting 200Mbish! Over 50Mb was just Onedrive app files which I manually deleted without any noticeable side effects. Having read several articles on here on large profiles with Win10 I was wondering what sort of acceptable size people had managed and if possible some details on how you achieved this? Edit: Should add we are using Win10 Education

We currently share a single mandatory profile with all students and we have encountered problems with students saving some work in word 07, when saving they are told normal.dotx is in use, their work is then saved but the file is 0kb/empty. How do other people have their word options setup on shared mandatory profiles as I'm not sure ours is correct. We currently set words default template path to the app data/microsoft/templates folder of their mandatory profiles which they do not have write access to but my understanding is word should not save back to this and only use this template as the default. Its not always happening so I think there is a pattern to when it occurs, going on the files it has happened to it appears to be letters so possibly saving templates for letters? Details are still a little unclear from the IT Teacher but I'll try to get more.