Every user needs a local mandatory profile on 1 PC

D

DragonNOA1

Supreme [H]ardness
Joined
Aug 15, 2004
Messages
4,301
No generic users allowed. But we need everyone to log in with their own userid to this one computer but we don't want them to be able to change any settings. How do we get every user that logs in to automatically have a mandatory profile on this one computer and not on any others. No roaming profiles allowed.

Any thoughts are helpful.
 
So you want everyone to have the same starting profile on the box? If so, configure a user account the way you want it and copy it into the default profile. When a new user logs in, they'll get whatever defaults you configured.
 
You've stated "no roaming profiles," so I'm assuming it's on a network. Like ND40oz stated, you will have to initially create a default profile, then upload it to a network share. Then set the profile path (on the user's options) to that share in Active Directory Users and Computers. For the rest of your situation, you will have to set the restrictions via Group Policy.
This is how I've set it up on one of our domains.
 
Quikstrumental said:
You've stated "no roaming profiles," so I'm assuming it's on a network. Like ND40oz stated, you will have to initially create a default profile, then upload it to a network share. Then set the profile path (on the user's options) to that share in Active Directory Users and Computers. For the rest of your situation, you will have to set the restrictions via Group Policy.
This is how I've set it up on one of our domains.
Click to expand...

it won't need to be on a network share. You would not want to set a profile path, if they only want this 1 particular box to have this specific type of profile.

But do as ND40oz said. As for disabling any changes allowed, just add Domain Users to the standard Users group, and you should be good.
 
But after they get the default user profile I don't want them to be able to make any changes to their profile. We need this so users can still have specific permissions and so we can monitor their internet access on a per user basis but we don't want them to be able to save any changes.

Right now the only way I can think to do it would be to delete the local user profile on log off, if a GP setting like that even exists, and then have it recreated everytime they log in.
 
DragonNOA1 said:
But after they get the default user profile I don't want them to be able to make any changes to their profile. We need this so users can still have specific permissions and so we can monitor their internet access on a per user basis but we don't want them to be able to save any changes.

Right now the only way I can think to do it would be to delete the local user profile on log off, if a GP setting like that even exists, and then have it recreated everytime they log in.
Click to expand...

Get your hands on a piece of software call Deep Freeze. It can reset your computer to whatever state you want after every restart. Check it out.

http://www.faronics.com/
 
DragonNOA1 said:
But after they get the default user profile I don't want them to be able to make any changes to their profile. We need this so users can still have specific permissions and so we can monitor their internet access on a per user basis but we don't want them to be able to save any changes.

Right now the only way I can think to do it would be to delete the local user profile on log off, if a GP setting like that even exists, and then have it recreated everytime they log in.
Click to expand...

Use the delprof.exe from the 2k3 resource kit. It'll delete all profiles on logout or reboot.

http://www.microsoft.com/downloads/...69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en

Another option is to setup up local security policy or domain gp to just lock down the pc. Look into GPs for terminal servers.

http://support.microsoft.com/kb/278295
 
Mandatory profile, fairly easy to setup and each person HAS to use it, google for steps to do it, I did it a long time ago and it worked good
 
You must log in or register to reply here.
Back
Top