Log domain users onto thin client without roaming profile being downloaded

We are running XPE thin Clients with WIN XP embedded....(cut down version of XP) at our school which connect through to a Blade Server, and  are wanting to add the 25 thin clients to the domain and have users log in with their username and password as they normally would but have it ONLY do authentification.

we dont want the users profile being downloaded onto the machines.
we want the local profile that is embedded into windows to be used.... thus saving space on the limited 500mb of flash memory it boots on. At the moment the machine is off the network and the machine auto logs in, then if the user wants to do anything they must log authenticate several times etc

is this possible.

the reason we want to do this is so that the thin clients can be used on the domain for accessing the internet, library lookup software and the user can save things from the internet to their network share.

If they want to access everything else on the domain they log into a Blade PC which has everything installed. Just our way of having the Blades free as much as possible.

any ideas?

Just ask if this is too confusing
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Michael WorshamStaff Infrastructure ArchitectCommented:
Why use Roaming profiles then?

Dont use Thin clients, and it looks like the previous link could be helpful, but here is a different route.....

How to prevent folders from roaming with a profile in Windows Server 2003

You can exclude most of the non essential folders, and simply keep the favorites, cookies etc., Home Drives etc..., the items that are most familiar with them when they go to another machine....
jcmurphy777Author Commented:
mwecomputers link did not help.

the structure of the school is that the students have profiles that they use on the rest of the systems in the school.

The new Thin Clients have been installed into the Library and need to be used both as thinclients accessing the Blade Server and also as stand alone computers if there is no free blades.
we want the user to log in as themselves to gain access to network drives, library lookup share and internet.

The alternative we have been trialing is to have the thin client off the network and then users have to lauthenticate when they want to access the internet, access their share etc.

we dont want to make new profiles just for the Thinclients. we thought that if a policy existed or a tool was available to stop the profile being downloaded while still passing the username and password into the windows logon then it would be great
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Michael WorshamStaff Infrastructure ArchitectCommented:
Thin-clients aren't made to be used as stripped-down, stand alone PCs nor 'authenication boxes'. Yes, they have a bootable operating system, but that's only for giving the user an operating platform to work from and for accessing a terminal environment via the network (i.e. think in terms of 'PXE').

You might want to consider a platform like nComputing (www.ncomputing.com), which surprisingly, was actually designed for schools and libraries through what is a desktop extender platform.

jcmurphy777Author Commented:
yeah we know that... just thought that there might be some way of tricking the system or cheating a bit.
spose we just want to get as much as we can out of the boxes that we have bought.

The Ncomputing solution looks great but we already have the system installed and cruising in its current state. could be a viable solution in the future maybe.

will leave open a little longer just in case anyone has a brain wave.
thanks Ev one for your quick responses.
Would limiting the heavy size foilders in the roaming profile not help?
Michael WorshamStaff Infrastructure ArchitectCommented:
I found this article site concerning thin-clients. Perhaps it can shed some light...

jcmurphy777Author Commented:
no we cant afford to reduce the weight of the folders anymore than they are already. The built in Users in the Embedded XP install have been customised for the thin clients.

I checked out the link - http://ts.veranoest.net/ts_thinclients.htm
while it confirms what we have, it doesnt shed any more light on our position.

We are running a brand spanking new HP CCI Server. The Thinclients are XPE with WinXP embeded.
They connect to the SAM Manager and Deployment server provided by HP. They use their own HP RDP and SAM software.

Apparently we are number 3 in AUS to get the CCI gear so help is hard to find. we spent 9 hrs on the phone to HP to get the thing running. and they had the same manuals as we had.....
(just a little Background info)

So we have the right gear.... just wanting to see if we can use all its potential at our school

Here is a possible solution:

Set the policy following policy for the thin clients to enable:
Computer Configuration\Administrative Templates\System\Logon\Only allow local user profiles

Then use delprof;
To delete the profiles either as a schedule task or at restart.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jcmurphy777Author Commented:
will try on wednesday and get back to you
jcmurphy777Author Commented:
not yet done, will try tomorrow... sorry peoples
jcmurphy777Author Commented:

that works....
will just have to customise it a bit.
thanks for that StuFox100
jcmurphy777Author Commented:
thanks for the help
Setting is replaced to:
Computer Configuration\Administrative Templates\System\User Profiles\Only allow local user profiles
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.