We help IT Professionals succeed at work.

Member Profiles and Policies

RobotMan asked
 I am using Windows 2000 server on a Dell PowerEdge 2500 Server.  I am trying to set up profiles and/or policies for a group of workstations to use.  I want to enable the users to only use certain programs (i.e. Internet Browsers, Word Processors, and a few others).  I also want to restict the users so they cannot see/do critical things (i.e. install new software, uninstall current software, view or modify Control Panel, run programs through "Run", modify registry settings, etc.  

  I have read a little about manditory profiles and they seem to be the most useful for my problem.  I want to serve a very limited new desktop to every user.  When they logoff, I do not want to store the changes that they made, though I do want to allow them to change things like monitor resolution, etc.  I also want to link each user to a shared folder on the server so that they can download from instructors.  Furthermore, each user has a folder set up on the server so that they can save their files.  I want to set this folder up as their default save path.

  I am new to Windows server (have a lot of experience w/ Macs) and would really appreciate all the help and specificity that can be offered.  Thank you in advance.

P.S.  I have assigned 200 points becuase of all of the detail that I am asking for.  I am pretty sure that all of these things are actually pretty easy, common place things to do for someone who know Windows 2k Server very well, but I have (after all) asked for a lot of specifics.

Thank you very much  :-)
Watch Question


Check here:
Under 'users and computers' user profiles

Top Expert 2007

Here is some good info :
From: snirh   Date: 03/28/2001 12:39AM PST Group policy planning with screen shots


 Windows 2000 Group Policy White Paper

Step by Step Guide to Managing the Group Policy Feature Set

"Troubleshooting Group Policy in Windows 2000"


               Wayne's Windows NT Administration Tips


From: dew_associates    Date: 07/30/2001 12:07AM PST policy tools
         For system-policy files, the best tool I?ve come across is Tools4ever?s Policy Template Editor. It's
      a must-have utility for creating custom .adm policy template files that contain custom Registry settings
         (the files from which .pol system-policy files are created). You can use Policy Template Editor?s GUI
       to create per-machine or per-user policies?a much easier process than creating and editing the .adm
               files manually.

        Another handy resource for creating custom system-policy files is the NT Zero Administration Kit (ZAK),
    which includes several excellent enhanced and custom .adm files for the OS and for particular applications.
          Using the ZAK?s templates files, you can build a much more comprehensive system-policy file than you
               can with NT?s default templates (i.e., winnt.adm and common.adm).

          As for user profiles, you?ll unfortunately find a dearth of profile-management utilities for NT. In
      fact, I?ve long felt that third-party utility vendors have all but ignored user profiles. The Microsoft
       Windows NT Server 4.0 Resource Kit includes one profile-management utility, delprof.exe, a command-line
   tool that helps with the deletion of a machine?s unused user profiles. (For more information about Delprof,
        see Mark Minasi, This Old Resource Kit, ?DELPROF,? July 1998.)

     Unfortunately, Delprof represents the extent of Microsoft?s built-in user-profile-management tools.
    Microsoft never shipped an NT 4.0-updated version of the handy User Profile Editor utility (upedit.exe)
      that shipped with the NT 3.5x resource kits. However, both Win2K and NT 4.0 support some techniques
        that might help you create your user profiles.

    To create a master (or template) user profile, you simply need to create a user account for that profile,
   then log on as the template user. After you configure the profile to your liking?including applications
       and per-user Registry settings for the desktop?you can then use the Control Panel System applet?s User
  Profile tab to copy that profile to a different location. This dialog box also lets you assign permissions
       for the users or groups that will use a particular user profile. If you?d rather not create a template
      or master version from scratch, you can copy a user profile by simply copying an actual user?s existing
      profile (from a machine that holds the desired version of the user?s profile). However, if you use this
       method, you need to ensure that this profile contains no sensitive data that might compromise security
               or user privacy.

I hope this helps !

Go here for additional info on system policy:  http://www.dewassoc.com/support/index.html
and click on
Windows 2000  |  Windows 2000 FAQ  |  then click on 'system policy' in right-hand pane


Also if you have Active Directory the Windows 2000 Server Resource Kit advises that you use Group Policy instead of
mandatory profiles.


  I have tried to use the Active Directory, but don't really understand how to use it set up policies or profiles.  


  I have already seen all the papers you sibmitted.  I've read books on this too, but I still don't know what specifiacally to do.


Explore More ContentExplore courses, solutions, and other research materials related to this topic.