What is the best way to create and maintain multiple (nearly) identical user folders?

First, a little background.  We are setting up a (virtual) Windows Server 2003 machine as a secure terminal server, used to connect to customer locations.  As part of the security, we have created multiple "virtual" users in AD, where each user account is named VUser1 to VUser20, or whatever.  The actual user starts a client application on their desktop that logs into the TS server (using Remote Desktop) as one of the predefined virtual users.

There is a requirement that each actual user who logs in as one of these virtual users have exactly the same environment (application settings, etc).  Also, as time goes by and the environment needs change, we will need to update all these user folders with new files and such.

What is the best way to approach this?  Someone mentioned the default user profile, but I haven't been able to find much information on this.  Also, that doesn't address the maintenance issue.

FYI, I am primarily a programmer, not a systems guy, so what may be obvious to you may not be obvious to me...

Thanks for any help
DaveN59Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MightySWCommented:
This should help.

http://support.microsoft.com/kb/319974

The best way to do this is to setup the default windows profile as you want it and everyone that logs in for the first time will inherit that profile and it will become theirs so they can modify as much as is allowed.

Hope this helps.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DaveN59Author Commented:
Thanks!  That gives me everything I need to know about the default user profile, but I still need a way to change all existing profiles if something changes, say the addition of a new printer that everybody needs access to.

We will actually have 4 machines and close to 90 user accounts.  It is unfeasible to logon to each separate account on each machine and make the changes manually...

0
MightySWCommented:
Well since you are using Win 2k3 R2 then you can deploy printers through GPO's

http://www.windowsnetworking.com/articles_tutorials/Deploying-Printers-Group-Policy-Windows-R2.html

If you are talking about other changes to their profiles then you can write batch files and then deploy them by using login scripts.  These can be changed by going into active directory users and computers and then open up the user accounts and then select the profile tab.  If you want a user to use a particular login script then type in the login script under the "logon Script:" heading.

The way to create login scripts is simple.  They just have to be DOS batch files and then they are copied into the %systemroot%\SYSVOL\domain name.xxx\SCRIPTS folder or you can just goto your domain controller (login as admin) and click on start and run and then type \\"servername"\netlogon  (servername being YOUR servername no quotes).  This will take you to the netlogon directory where all of the logins originate.

A caveat to all of this is you WILL have to manually type in the login script for the user in Active directory users and computers.  So if you only have one logon script then just call it logon.bat and it will automatically be used.  You will not have to type it into the Profile box in ADUC.  If you have separate commands that you want to issue then you can create other login.bat files and place them under the netlogon directory and specify the user account(s) with that login.bat file (whatever you are going to name it).

Hope this helps.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.