Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Mandatory Profiles and Group Policy

Posted on 2004-08-23
14
475 Views
Last Modified: 2008-02-01
Is there a way to set up Mandatory profiles using group policy rather than having to assign on a per user basis?

Additionally when you create a mandatory profile and assign all accounts to use that profile - does it use that profile to create a copy on the local machine when they log in or does it always use the same profile.

For example if UserA logs in and UserB will you end up with a profile for "GenericUser" that they both use or will you end up with a "UserA" profile and "UserB" profile that are based off of the "GenericUser" profile.

Thanks.
0
Comment
Question by:mrichmon
  • 7
  • 7
14 Comments
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11876017
You can use admodify.net to change the profile path for multiple users at the same time.  It is good for this and a thousand other uses.  Give it a try:

ftp://ftp.microsoft.com/PSS/Tools/Exchange%20Support%20Tools/ADModify/admodify_1.6.zip

Let me know if this helps
Crow
0
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11876046
As for the second question:

When you designate a mandatory network profile for a group of users it works in much the same way that a roaming user profile does.  It downloads when they log on and uploades when they log off.  The only difference is that changes are not saved.
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11876130
I noticed there is also a ADModify.NET

What is the difference.

Is there any documentation on either version?
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11876174
Oops it looks like I sent you the link for the 1.6 version.  I have had some issues recently getting the admodify.net from the microsoft FTP site but have been able to locate it here:

http://www.gotdotnet.com/community/workspaces/workspace.aspx?ID=F5CBBFA9-E46B-4A7A-8ED8-3E44523F32E2
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11876291
I got it from MS, but they are down there.
0
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11876307
There is a help file that comes with it if my memory serves me correctly
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11876421
There is but it is VERY VERY basic and generic...
0
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11876446
Lol, I never looked at it myself.  the application is very simular to the user properties in AD Users and Computers once you get throught the initial screen.
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11903799
SamuraiCrow,

It looks like the answer to the first part of my question is NO - it cannot be set with Group Policy, but it can be set programatically.

If you can help me with the second part of the question I will give you the points.

How exactly do you go about making multiple user accounts use a shared mandatory profile?

For example, if you were doing this manually:

what exactly would the profilepath look like ?

are there any other settings needed?
0
 
LVL 9

Accepted Solution

by:
SamuraiCrow earned 500 total points
ID: 11905586
The profile path for a given user is set by modifying the users profile tab in active directory users and computers.  Once you have set up a mandatory network profile you can use the ADModify.net tool to simutaneously change any users you select within the utility.  For instance if I wanted to change the profile path to \\Server1\profile$\profile.man for all users in the ABC OU I would first:

Build the Mandatory Network Profile (see the link below for details)
Open ADModify.net
Select Modify Attributes
Select my Domain from the first drop down list
Select the Domain Contoller I want to interact with
Select the 'Users' Check Box
Click the Green Arrow button
Double click the domain to expand it
Select the OU and Click 'Add to List'
Click the 'Select All' button then Click 'Next'
Select the profile tab and place a check next to the profile path
Enter the path for the new Mandatory profile (\Server1\profile$\profile.man)
Click on 'Go!'

If you would like additional clarification or instruction let me know


Mandatory Network Profile Instructions
http://support.microsoft.com/?kbid=323368
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11907327
I have been trying to follow those instructions for the last day or so, but when I get to the "COpy Profile To " part and I enter the share name I get the following error :

Failed to set security on Destination Profile. Error - Access is denied


I made sure that I am logged in as a domain admin to the workstation that has the profile and also that the share has permission of full control for the domain admin group.
0
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11910374
MRichmon,

Can I assume since I received the points that you were successful in the 'copy profile to' phase or should I keep looking into it?
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11914072
yep I was.

thanks.
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11914085
I posted another question and got the answer

http:Q_21108942.html
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Most MSPs worth their salt are already offering cybersecurity to their customers. But cybersecurity as a service is wide encompassing and can mean many things.  So where are MSPs falling in this spectrum?
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

791 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question