asked on

Mandatory Profiles and Group Policy

Is there a way to set up Mandatory profiles using group policy rather than having to assign on a per user basis?

Additionally when you create a mandatory profile and assign all accounts to use that profile - does it use that profile to create a copy on the local machine when they log in or does it always use the same profile.

For example if UserA logs in and UserB will you end up with a profile for "GenericUser" that they both use or will you end up with a "UserA" profile and "UserB" profile that are based off of the "GenericUser" profile.

Thanks.

SamuraiCrow

You can use admodify.net to change the profile path for multiple users at the same time. It is good for this and a thousand other uses. Give it a try:

ftp://ftp.microsoft.com/PSS/Tools/Exchange%20Support%20Tools/ADModify/admodify_1.6.zip

Let me know if this helps
Crow

SamuraiCrow

As for the second question:

When you designate a mandatory network profile for a group of users it works in much the same way that a roaming user profile does. It downloads when they log on and uploades when they log off. The only difference is that changes are not saved.

mrichmon

ASKER

I noticed there is also a ADModify.NET

What is the difference.

Is there any documentation on either version?

SamuraiCrow

Oops it looks like I sent you the link for the 1.6 version. I have had some issues recently getting the admodify.net from the microsoft FTP site but have been able to locate it here:

http://www.gotdotnet.com/community/workspaces/workspace.aspx?ID=F5CBBFA9-E46B-4A7A-8ED8-3E44523F32E2

mrichmon

ASKER

I got it from MS, but they are down there.

SamuraiCrow

There is a help file that comes with it if my memory serves me correctly

mrichmon

ASKER

There is but it is VERY VERY basic and generic...

SamuraiCrow

Lol, I never looked at it myself. the application is very simular to the user properties in AD Users and Computers once you get throught the initial screen.

mrichmon

ASKER

SamuraiCrow,

It looks like the answer to the first part of my question is NO - it cannot be set with Group Policy, but it can be set programatically.

If you can help me with the second part of the question I will give you the points.

How exactly do you go about making multiple user accounts use a shared mandatory profile?

For example, if you were doing this manually:

what exactly would the profilepath look like ?

are there any other settings needed?

ASKER CERTIFIED SOLUTION

SamuraiCrow

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

mrichmon

ASKER

I have been trying to follow those instructions for the last day or so, but when I get to the "COpy Profile To " part and I enter the share name I get the following error :

Failed to set security on Destination Profile. Error - Access is denied

I made sure that I am logged in as a domain admin to the workstation that has the profile and also that the share has permission of full control for the domain admin group.

SamuraiCrow

MRichmon,

Can I assume since I received the points that you were successful in the 'copy profile to' phase or should I keep looking into it?

mrichmon

ASKER

yep I was.

thanks.

mrichmon

ASKER

I posted another question and got the answer

http:Q_21108942.html