How to setup Mandatory Profiles

I have a large network with about 100 users. I want to setup Mandatory profiles so I can streamline everything. I do not want the user to be able to save anything to their desktop or even download anything. I believe that some of this will need to be setup with a GPO. If anyone can help me start to create and setup a Mandatory profile I would appreciate it.
Who is Participating?
Mandatory profile 101 :)
1. create a new user, set profile path
2. log in as that user on a workstation
3. set up that users desktop, printers,  applications, settings  etc etc
4. log off that user
5. now on the server browse to the users profile, you will see a file in their profile called ntuser.dat rename it to

They now have a mandatory profile.
Now you can either set all users to use that profile path (give domain users group access to profile folder) or copy it to the next users profile folder.

And yes there are a few GPO settings to consider, ie: redirect my documents maybe... etc
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
There are some fairly good preset GPO templates which you can deploy.  First, take a look at this overview:

The templates and related info are/is here:

You can also create your own policies with the Desktop Deployment Accellerator...

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.