Solved

Mandatory Profiles and Group Policy

Posted on 2004-08-23
14
467 Views
Last Modified: 2008-02-01
Is there a way to set up Mandatory profiles using group policy rather than having to assign on a per user basis?

Additionally when you create a mandatory profile and assign all accounts to use that profile - does it use that profile to create a copy on the local machine when they log in or does it always use the same profile.

For example if UserA logs in and UserB will you end up with a profile for "GenericUser" that they both use or will you end up with a "UserA" profile and "UserB" profile that are based off of the "GenericUser" profile.

Thanks.
0
Comment
Question by:mrichmon
  • 7
  • 7
14 Comments
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11876017
You can use admodify.net to change the profile path for multiple users at the same time.  It is good for this and a thousand other uses.  Give it a try:

ftp://ftp.microsoft.com/PSS/Tools/Exchange%20Support%20Tools/ADModify/admodify_1.6.zip

Let me know if this helps
Crow
0
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11876046
As for the second question:

When you designate a mandatory network profile for a group of users it works in much the same way that a roaming user profile does.  It downloads when they log on and uploades when they log off.  The only difference is that changes are not saved.
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11876130
I noticed there is also a ADModify.NET

What is the difference.

Is there any documentation on either version?
0
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11876174
Oops it looks like I sent you the link for the 1.6 version.  I have had some issues recently getting the admodify.net from the microsoft FTP site but have been able to locate it here:

http://www.gotdotnet.com/community/workspaces/workspace.aspx?ID=F5CBBFA9-E46B-4A7A-8ED8-3E44523F32E2
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11876291
I got it from MS, but they are down there.
0
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11876307
There is a help file that comes with it if my memory serves me correctly
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11876421
There is but it is VERY VERY basic and generic...
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11876446
Lol, I never looked at it myself.  the application is very simular to the user properties in AD Users and Computers once you get throught the initial screen.
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11903799
SamuraiCrow,

It looks like the answer to the first part of my question is NO - it cannot be set with Group Policy, but it can be set programatically.

If you can help me with the second part of the question I will give you the points.

How exactly do you go about making multiple user accounts use a shared mandatory profile?

For example, if you were doing this manually:

what exactly would the profilepath look like ?

are there any other settings needed?
0
 
LVL 9

Accepted Solution

by:
SamuraiCrow earned 500 total points
ID: 11905586
The profile path for a given user is set by modifying the users profile tab in active directory users and computers.  Once you have set up a mandatory network profile you can use the ADModify.net tool to simutaneously change any users you select within the utility.  For instance if I wanted to change the profile path to \\Server1\profile$\profile.man for all users in the ABC OU I would first:

Build the Mandatory Network Profile (see the link below for details)
Open ADModify.net
Select Modify Attributes
Select my Domain from the first drop down list
Select the Domain Contoller I want to interact with
Select the 'Users' Check Box
Click the Green Arrow button
Double click the domain to expand it
Select the OU and Click 'Add to List'
Click the 'Select All' button then Click 'Next'
Select the profile tab and place a check next to the profile path
Enter the path for the new Mandatory profile (\Server1\profile$\profile.man)
Click on 'Go!'

If you would like additional clarification or instruction let me know


Mandatory Network Profile Instructions
http://support.microsoft.com/?kbid=323368
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11907327
I have been trying to follow those instructions for the last day or so, but when I get to the "COpy Profile To " part and I enter the share name I get the following error :

Failed to set security on Destination Profile. Error - Access is denied


I made sure that I am logged in as a domain admin to the workstation that has the profile and also that the share has permission of full control for the domain admin group.
0
 
LVL 9

Expert Comment

by:SamuraiCrow
ID: 11910374
MRichmon,

Can I assume since I received the points that you were successful in the 'copy profile to' phase or should I keep looking into it?
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11914072
yep I was.

thanks.
0
 
LVL 35

Author Comment

by:mrichmon
ID: 11914085
I posted another question and got the answer

http:Q_21108942.html
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
This video discusses moving either the default database or any database to a new volume.
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now