Roaming Profiles with Kerberos Login and domain accounts
Posted on 2004-09-14
We have a computing lab here that we are trying to integrate with Active
Directory and Kerberos logins. Currently we have the following setup:
We are trying to set up a lab with mandatory profiles (read-only roaming
profiles), where the users log into the windows machines using their Kerberos
However, we have found that when a user logs in directly to our domain -
they get the roaming profile. But, when we use the Kerberos realm, the user
can log in, but does not use the roaming profile.
We have created a required Mandatory profile (roaming profile that is read
only) that all user profiles must use when logging on to our lab machines.
We have a one-to-one mapping from the Kerberos account to a corresponding
domain account – which we create programmatically using ASP.NET/C#.
This works fine if the user chooses our domain when logging in with the
Active Directory account.
However, as soon as we change the user to log into the Kerberos Realm
(domain) then the account no longer uses the mandatory profile specified in
the profilePath of the Active Directory account. (Note the only change is
the domain drop down on the login screen of the lab machine – no changes at
all to the account in Active Directory).
Does anyone have ideas on how to get the account to use the mandatory
profile while choosing the Kerberos Realm for authentication?
Thank you for any comments you may have.