Guest aja44 Posted September 24, 2007 Posted September 24, 2007 I work in a HS environment and I am trying to standardize the look of the Default Profile every student gets the first time they logon and use roaming locked profiles. Here is what I have done: 1. Logon to a system as a "Template" account and make all required changes to background, desktop, start menu, IE settings, ect. 2. Reboot and login as the administrator and copied the Profile to DC\NETLOGON\Default User. 3. When my users first logon, they do not get the profile I specified, but when I login the 2nd time they do. Weird. But what I have found is that I have specified a particular background which is on every machine in the Default User profile. The background does not display when the user logs in or even after a reboot. I find that if I go into the settings, I see it is selected and when I hit OK it will then display. Why is this happening? 4. Created a hidden share on my DC called Profiles$ with Everyone - Full 5. I mapped the users profile path to this location. 6. When I logon as that user and off I find that the profile folder has been created but I dont have access as the administrator? Am I doing something wrong? Thanks
Guest Mathieu CHATEAU Posted September 24, 2007 Posted September 24, 2007 Re: User Profiles Hello, did you follow this KB, specially the way to export the profile ? How to Create a Base Profile for All Users http://support.microsoft.com/kb/168475/en-us Do you set through GPO to "always wait for the network" ? -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "aja44" <aja44@discussions.microsoft.com> wrote in message news:EB96520E-F15F-48FE-92B5-19AB7D9F2268@microsoft.com... >I work in a HS environment and I am trying to standardize the look of the > Default Profile every student gets the first time they logon and use > roaming > locked profiles. > > Here is what I have done: > 1. Logon to a system as a "Template" account and make all required > changes > to background, desktop, start menu, IE settings, ect. > 2. Reboot and login as the administrator and copied the Profile to > DC\NETLOGON\Default User. > 3. When my users first logon, they do not get the profile I specified, > but > when I login the 2nd time they do. Weird. But what I have found is that > I > have specified a particular background which is on every machine in the > Default User profile. The background does not display when the user logs > in > or even after a reboot. I find that if I go into the settings, I see it > is > selected and when I hit OK it will then display. Why is this happening? > 4. Created a hidden share on my DC called Profiles$ with Everyone - Full > 5. I mapped the users profile path to this location. > 6. When I logon as that user and off I find that the profile folder has > been created but I dont have access as the administrator? Am I doing > something wrong? > > Thanks >
Guest aja44 Posted September 24, 2007 Posted September 24, 2007 Re: User Profiles Mathieu, Not sure you understand the problem. The profile works fine and when the user logs in they all received the profile. There just seemed to be a "hickup" as to why the background did not display. And the profile was created on the same machine I just logged into with a domain account. The bigger question is when I enable "Roaming Profiles", placing the UNC path to the server share into the user attribute it creates a folder for that user but I am not able to get into the folder. I was trying to then lock the profile by changing the .dat to .man. This would allow me to lock the desktops totally so the students cannot make any changes. "Mathieu CHATEAU" wrote: > Hello, > > did you follow this KB, specially the way to export the profile ? > How to Create a Base Profile for All Users > http://support.microsoft.com/kb/168475/en-us > > Do you set through GPO to "always wait for the network" ? > > -- > Cordialement, > Mathieu CHATEAU > http://lordoftheping.blogspot.com > > > "aja44" <aja44@discussions.microsoft.com> wrote in message > news:EB96520E-F15F-48FE-92B5-19AB7D9F2268@microsoft.com... > >I work in a HS environment and I am trying to standardize the look of the > > Default Profile every student gets the first time they logon and use > > roaming > > locked profiles. > > > > Here is what I have done: > > 1. Logon to a system as a "Template" account and make all required > > changes > > to background, desktop, start menu, IE settings, ect. > > 2. Reboot and login as the administrator and copied the Profile to > > DC\NETLOGON\Default User. > > 3. When my users first logon, they do not get the profile I specified, > > but > > when I login the 2nd time they do. Weird. But what I have found is that > > I > > have specified a particular background which is on every machine in the > > Default User profile. The background does not display when the user logs > > in > > or even after a reboot. I find that if I go into the settings, I see it > > is > > selected and when I hit OK it will then display. Why is this happening? > > 4. Created a hidden share on my DC called Profiles$ with Everyone - Full > > 5. I mapped the users profile path to this location. > > 6. When I logon as that user and off I find that the profile folder has > > been created but I dont have access as the administrator? Am I doing > > something wrong? > > > > Thanks > > > >
Guest Mathieu CHATEAU Posted September 24, 2007 Posted September 24, 2007 Re: User Profiles since SP2, XP lock the roaming profile to exclusive access. You neeed this GPO: MACHINE Administrative Templates\ System\ User Profiles Add the Administrators security group to roaming user profiles It must be set before profiles are created! -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "aja44" <aja44@discussions.microsoft.com> wrote in message news:F46E02B3-FC26-4EA0-8985-0CAB346969DF@microsoft.com... > Mathieu, > > Not sure you understand the problem. The profile works fine and when the > user logs in they all received the profile. There just seemed to be a > "hickup" as to why the background did not display. And the profile was > created on the same machine I just logged into with a domain account. > > The bigger question is when I enable "Roaming Profiles", placing the UNC > path to the server share into the user attribute it creates a folder for > that > user but I am not able to get into the folder. I was trying to then lock > the > profile by changing the .dat to .man. This would allow me to lock the > desktops totally so the students cannot make any changes. > > "Mathieu CHATEAU" wrote: > >> Hello, >> >> did you follow this KB, specially the way to export the profile ? >> How to Create a Base Profile for All Users >> http://support.microsoft.com/kb/168475/en-us >> >> Do you set through GPO to "always wait for the network" ? >> >> -- >> Cordialement, >> Mathieu CHATEAU >> http://lordoftheping.blogspot.com >> >> >> "aja44" <aja44@discussions.microsoft.com> wrote in message >> news:EB96520E-F15F-48FE-92B5-19AB7D9F2268@microsoft.com... >> >I work in a HS environment and I am trying to standardize the look of >> >the >> > Default Profile every student gets the first time they logon and use >> > roaming >> > locked profiles. >> > >> > Here is what I have done: >> > 1. Logon to a system as a "Template" account and make all required >> > changes >> > to background, desktop, start menu, IE settings, ect. >> > 2. Reboot and login as the administrator and copied the Profile to >> > DC\NETLOGON\Default User. >> > 3. When my users first logon, they do not get the profile I specified, >> > but >> > when I login the 2nd time they do. Weird. But what I have found is >> > that >> > I >> > have specified a particular background which is on every machine in the >> > Default User profile. The background does not display when the user >> > logs >> > in >> > or even after a reboot. I find that if I go into the settings, I see >> > it >> > is >> > selected and when I hit OK it will then display. Why is this >> > happening? >> > 4. Created a hidden share on my DC called Profiles$ with Everyone - >> > Full >> > 5. I mapped the users profile path to this location. >> > 6. When I logon as that user and off I find that the profile folder >> > has >> > been created but I dont have access as the administrator? Am I doing >> > something wrong? >> > >> > Thanks >> > >> >>
Guest Lanwench [MVP - Exchange] Posted September 26, 2007 Posted September 26, 2007 Re: User Profiles Mathieu CHATEAU <gollum123@free.fr> wrote: > since SP2, XP lock the roaming profile to exclusive access. Actually, I believe this is a W2003 thing entirely. > > You neeed this GPO: > MACHINE > Administrative Templates\ > System\ > User Profiles > Add the Administrators security group to roaming user profiles > > It must be set before profiles are created! Yep! annoying, isn't it? > > > "aja44" <aja44@discussions.microsoft.com> wrote in message > news:F46E02B3-FC26-4EA0-8985-0CAB346969DF@microsoft.com... >> Mathieu, >> >> Not sure you understand the problem. The profile works fine and >> when the user logs in they all received the profile. There just >> seemed to be a "hickup" as to why the background did not display. And the >> profile was created on the same machine I just logged into >> with a domain account. The bigger question is when I enable "Roaming >> Profiles", placing the >> UNC path to the server share into the user attribute it creates a >> folder for that >> user but I am not able to get into the folder. I was trying to then >> lock the >> profile by changing the .dat to .man. This would allow me to lock >> the desktops totally so the students cannot make any changes. >> >> "Mathieu CHATEAU" wrote: >> >>> Hello, >>> >>> did you follow this KB, specially the way to export the profile ? >>> How to Create a Base Profile for All Users >>> http://support.microsoft.com/kb/168475/en-us >>> >>> Do you set through GPO to "always wait for the network" ? >>> >>> -- >>> Cordialement, >>> Mathieu CHATEAU >>> http://lordoftheping.blogspot.com >>> >>> >>> "aja44" <aja44@discussions.microsoft.com> wrote in message >>> news:EB96520E-F15F-48FE-92B5-19AB7D9F2268@microsoft.com... >>>> I work in a HS environment and I am trying to standardize the look >>>> of the >>>> Default Profile every student gets the first time they logon and >>>> use roaming >>>> locked profiles. >>>> >>>> Here is what I have done: >>>> 1. Logon to a system as a "Template" account and make all >>>> required changes >>>> to background, desktop, start menu, IE settings, ect. >>>> 2. Reboot and login as the administrator and copied the Profile >>>> to DC\NETLOGON\Default User. >>>> 3. When my users first logon, they do not get the profile I >>>> specified, but >>>> when I login the 2nd time they do. Weird. But what I have found >>>> is that >>>> I >>>> have specified a particular background which is on every machine >>>> in the Default User profile. The background does not display when >>>> the user logs >>>> in >>>> or even after a reboot. I find that if I go into the settings, I >>>> see it >>>> is >>>> selected and when I hit OK it will then display. Why is this >>>> happening? >>>> 4. Created a hidden share on my DC called Profiles$ with >>>> Everyone - Full >>>> 5. I mapped the users profile path to this location. >>>> 6. When I logon as that user and off I find that the profile >>>> folder has >>>> been created but I dont have access as the administrator? Am I >>>> doing something wrong? >>>> >>>> Thanks
Guest Lanwench [MVP - Exchange] Posted September 26, 2007 Posted September 26, 2007 Re: User Profiles aja44 <aja44@discussions.microsoft.com> wrote: > Mathieu, > > Not sure you understand the problem. The profile works fine and when > the user logs in they all received the profile. There just seemed to > be a "hickup" as to why the background did not display. And the > profile was created on the same machine I just logged into with a > domain account. > > The bigger question is when I enable "Roaming Profiles", placing the > UNC path to the server share into the user attribute it creates a > folder for that user but I am not able to get into the folder. I was > trying to then lock the profile by changing the .dat to .man. This > would allow me to lock the desktops totally so the students cannot > make any changes. If you're going to do this, why not just have them all share a single user profile, then? Mandatory profiles are a huge pain. The users won't be able to do a lot of things that you might actually want them to. You won't easily be able to control printers, etc., and other stuff that is really handy to manage centrally when you've got AD. It would probably be better to look at implementing some group policy settings to lock down your user & computer environment. Try posting in m.p.windows.group_policy for more help with this. Note also that roaming profiles can be great, but can be a big PITA if you aren't careful. Make sure you use folder redirection for My Documents, Application Data, and Desktop, even, or you'll run into problems with large profiles/profile corruption. > > "Mathieu CHATEAU" wrote: > >> Hello, >> >> did you follow this KB, specially the way to export the profile ? >> How to Create a Base Profile for All Users >> http://support.microsoft.com/kb/168475/en-us >> >> Do you set through GPO to "always wait for the network" ? >> >> -- >> Cordialement, >> Mathieu CHATEAU >> http://lordoftheping.blogspot.com >> >> >> "aja44" <aja44@discussions.microsoft.com> wrote in message >> news:EB96520E-F15F-48FE-92B5-19AB7D9F2268@microsoft.com... >>> I work in a HS environment and I am trying to standardize the look >>> of the Default Profile every student gets the first time they logon >>> and use roaming >>> locked profiles. >>> >>> Here is what I have done: >>> 1. Logon to a system as a "Template" account and make all required >>> changes >>> to background, desktop, start menu, IE settings, ect. >>> 2. Reboot and login as the administrator and copied the Profile to >>> DC\NETLOGON\Default User. >>> 3. When my users first logon, they do not get the profile I >>> specified, but >>> when I login the 2nd time they do. Weird. But what I have found >>> is that I >>> have specified a particular background which is on every machine in >>> the Default User profile. The background does not display when the >>> user logs in >>> or even after a reboot. I find that if I go into the settings, I >>> see it is >>> selected and when I hit OK it will then display. Why is this >>> happening? >>> 4. Created a hidden share on my DC called Profiles$ with Everyone >>> - Full >>> 5. I mapped the users profile path to this location. >>> 6. When I logon as that user and off I find that the profile >>> folder has been created but I dont have access as the >>> administrator? Am I doing something wrong? >>> >>> Thanks
Guest Mathieu CHATEAU Posted September 26, 2007 Posted September 26, 2007 Re: User Profiles Hello, in fact it starts from Windows Server 2003, Windows XP SP1, and Windows 2000 SP4: Windows XP SP1 and Windows 2000 SP4 checks for existing roaming user profile folders when a roaming user profile is created http://support.microsoft.com/kb/327462/en-us -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message news:OPLuyS9$HHA.4164@TK2MSFTNGP06.phx.gbl... > Mathieu CHATEAU <gollum123@free.fr> wrote: >> since SP2, XP lock the roaming profile to exclusive access. > > Actually, I believe this is a W2003 thing entirely. > >> >> You neeed this GPO: >> MACHINE >> Administrative Templates\ >> System\ >> User Profiles >> Add the Administrators security group to roaming user profiles >> >> It must be set before profiles are created! > > Yep! annoying, isn't it? >> >> >> "aja44" <aja44@discussions.microsoft.com> wrote in message >> news:F46E02B3-FC26-4EA0-8985-0CAB346969DF@microsoft.com... >>> Mathieu, >>> >>> Not sure you understand the problem. The profile works fine and >>> when the user logs in they all received the profile. There just >>> seemed to be a "hickup" as to why the background did not display. And >>> the profile was created on the same machine I just logged into >>> with a domain account. The bigger question is when I enable "Roaming >>> Profiles", placing the >>> UNC path to the server share into the user attribute it creates a >>> folder for that >>> user but I am not able to get into the folder. I was trying to then >>> lock the >>> profile by changing the .dat to .man. This would allow me to lock >>> the desktops totally so the students cannot make any changes. >>> >>> "Mathieu CHATEAU" wrote: >>> >>>> Hello, >>>> >>>> did you follow this KB, specially the way to export the profile ? >>>> How to Create a Base Profile for All Users >>>> http://support.microsoft.com/kb/168475/en-us >>>> >>>> Do you set through GPO to "always wait for the network" ? >>>> >>>> -- >>>> Cordialement, >>>> Mathieu CHATEAU >>>> http://lordoftheping.blogspot.com >>>> >>>> >>>> "aja44" <aja44@discussions.microsoft.com> wrote in message >>>> news:EB96520E-F15F-48FE-92B5-19AB7D9F2268@microsoft.com... >>>>> I work in a HS environment and I am trying to standardize the look >>>>> of the >>>>> Default Profile every student gets the first time they logon and >>>>> use roaming >>>>> locked profiles. >>>>> >>>>> Here is what I have done: >>>>> 1. Logon to a system as a "Template" account and make all >>>>> required changes >>>>> to background, desktop, start menu, IE settings, ect. >>>>> 2. Reboot and login as the administrator and copied the Profile >>>>> to DC\NETLOGON\Default User. >>>>> 3. When my users first logon, they do not get the profile I >>>>> specified, but >>>>> when I login the 2nd time they do. Weird. But what I have found >>>>> is that >>>>> I >>>>> have specified a particular background which is on every machine >>>>> in the Default User profile. The background does not display when >>>>> the user logs >>>>> in >>>>> or even after a reboot. I find that if I go into the settings, I >>>>> see it >>>>> is >>>>> selected and when I hit OK it will then display. Why is this >>>>> happening? >>>>> 4. Created a hidden share on my DC called Profiles$ with >>>>> Everyone - Full >>>>> 5. I mapped the users profile path to this location. >>>>> 6. When I logon as that user and off I find that the profile >>>>> folder has >>>>> been created but I dont have access as the administrator? Am I >>>>> doing something wrong? >>>>> >>>>> Thanks > > >
Guest Lanwench [MVP - Exchange] Posted September 26, 2007 Posted September 26, 2007 Re: User Profiles Mathieu CHATEAU <gollum123@free.fr> wrote: > Hello, > > in fact it starts from Windows Server 2003, Windows XP SP1, and > Windows 2000 SP4: D'oh, you're right. I must be thinking pre SP4....I still have a couple of W2k environments and could've sworn the profile folders still inherited the permissions from the parent! I will now slink off into the corner :) > > Windows XP SP1 and Windows 2000 SP4 checks for existing roaming user > profile folders when a roaming user profile is created > http://support.microsoft.com/kb/327462/en-us > > > "Lanwench [MVP - Exchange]" > <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in > message news:OPLuyS9$HHA.4164@TK2MSFTNGP06.phx.gbl... >> Mathieu CHATEAU <gollum123@free.fr> wrote: >>> since SP2, XP lock the roaming profile to exclusive access. >> >> Actually, I believe this is a W2003 thing entirely. >> >>> >>> You neeed this GPO: >>> MACHINE >>> Administrative Templates\ >>> System\ >>> User Profiles >>> Add the Administrators security group to roaming user profiles >>> >>> It must be set before profiles are created! >> >> Yep! annoying, isn't it? >>> >>> >>> "aja44" <aja44@discussions.microsoft.com> wrote in message >>> news:F46E02B3-FC26-4EA0-8985-0CAB346969DF@microsoft.com... >>>> Mathieu, >>>> >>>> Not sure you understand the problem. The profile works fine and >>>> when the user logs in they all received the profile. There just >>>> seemed to be a "hickup" as to why the background did not display. >>>> And the profile was created on the same machine I just logged into >>>> with a domain account. The bigger question is when I enable >>>> "Roaming Profiles", placing the >>>> UNC path to the server share into the user attribute it creates a >>>> folder for that >>>> user but I am not able to get into the folder. I was trying to >>>> then lock the >>>> profile by changing the .dat to .man. This would allow me to lock >>>> the desktops totally so the students cannot make any changes. >>>> >>>> "Mathieu CHATEAU" wrote: >>>> >>>>> Hello, >>>>> >>>>> did you follow this KB, specially the way to export the profile ? >>>>> How to Create a Base Profile for All Users >>>>> http://support.microsoft.com/kb/168475/en-us >>>>> >>>>> Do you set through GPO to "always wait for the network" ? >>>>> >>>>> -- >>>>> Cordialement, >>>>> Mathieu CHATEAU >>>>> http://lordoftheping.blogspot.com >>>>> >>>>> >>>>> "aja44" <aja44@discussions.microsoft.com> wrote in message >>>>> news:EB96520E-F15F-48FE-92B5-19AB7D9F2268@microsoft.com... >>>>>> I work in a HS environment and I am trying to standardize the >>>>>> look of the >>>>>> Default Profile every student gets the first time they logon and >>>>>> use roaming >>>>>> locked profiles. >>>>>> >>>>>> Here is what I have done: >>>>>> 1. Logon to a system as a "Template" account and make all >>>>>> required changes >>>>>> to background, desktop, start menu, IE settings, ect. >>>>>> 2. Reboot and login as the administrator and copied the Profile >>>>>> to DC\NETLOGON\Default User. >>>>>> 3. When my users first logon, they do not get the profile I >>>>>> specified, but >>>>>> when I login the 2nd time they do. Weird. But what I have found >>>>>> is that >>>>>> I >>>>>> have specified a particular background which is on every machine >>>>>> in the Default User profile. The background does not display >>>>>> when the user logs >>>>>> in >>>>>> or even after a reboot. I find that if I go into the settings, I >>>>>> see it >>>>>> is >>>>>> selected and when I hit OK it will then display. Why is this >>>>>> happening? >>>>>> 4. Created a hidden share on my DC called Profiles$ with >>>>>> Everyone - Full >>>>>> 5. I mapped the users profile path to this location. >>>>>> 6. When I logon as that user and off I find that the profile >>>>>> folder has >>>>>> been created but I dont have access as the administrator? Am I >>>>>> doing something wrong? >>>>>> >>>>>> Thanks
Recommended Posts