Solved

windows 2008 R2 Mandatory Profiles versus Default User Profile in Terminal Services

Posted on 2011-02-24
8
1,311 Views
Last Modified: 2013-11-21
In Windows 2008 R2, what is the relationship between Mandatory User Profiles and the Default User Profile? If I want every user to be forced to have a specific setup can I just do that within the
Mandatory User Profile itself  or do I have to first make change the Default User profile and then make the Default User Profile the   Mandatory User Profile? I am interested in this in Terminal Services environments foremost.
0
Comment
Question by:lineonecorp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
8 Comments
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 34968395
Yes, you have to first adjust Default User Profile and make it as Mandatory.

Default User profile is a template from which user's profile is created. But if it not marked as mandatory, user can make changes to his/her desktop settings. When you mark it as mandatory, it will be cleaned up during restart and all default features will be applied after new log on. Mandatory profiles cannot store any changes/files saved by user during his/her session.

Regards,
Krzysztof
0
 

Author Comment

by:lineonecorp
ID: 34968484
I just watched a video on Youtube where the presenter created a Mandatory Profile from scratch - http://www.youtube.com/watch?v=bDWEsJ0bJe8.  Is there something wrong with doing it the way shown in the video?  Also I do want the user to be able to make some changes e.g. change their default printer.  Can I combine that with a Mandatory Profile in some way?
0
 

Author Comment

by:lineonecorp
ID: 34995007
Any comment on my comment?
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 
LVL 78

Expert Comment

by:arnold
ID: 35030305
Mandatory profile means that on login all user profiles are one and the same.
Have not dealt with a mandatory profile specifically on windows 2008, I do not believe using mandatory profiles the user has rights to alter anything permanently.

The mandatory profile was useful when space was a constraint and one could not tolerate having 10 or 20 individual user profiles taking up space on the server

Why are you considering using mandatory profiles versus using GPO/Group preferences to limit what changes each user can make to their profile?
I.e. no changes to destop, etc. folder redirection to have my documents, application data, desktop, start meny stored on a central share simplifying backup strategies.

0
 

Author Comment

by:lineonecorp
ID: 35031330
I think we've gotten off-track here. I was asking a theoretical question to begin with. I'll break it up into separate questions so perhaps each point could be addressed separately.:

1)In Windows 2008 R2, what is the relationship between Mandatory User Profiles and the Default User Profile?

2) If I want every user to be forced to have a specific setup can I just do that within the
Mandatory User Profile itself  or do I have to first make change the Default User profile and then make the Default User Profile the   Mandatory User Profile?

 I am interested in this in Terminal Services environments foremost.

I am wondering though as you are not familiar with 2008 Mandatory Profiles and may not be able to respond to 1 and 2 from practical experience whether another Expert should be enlisted.
0
 
LVL 78

Accepted Solution

by:
arnold earned 300 total points
ID: 35032879
the mandatory profile could be the default profile whose ntuser.dat is changed to ntuser.man in prior versions and possibly in windows 2008.

http://support.microsoft.com/kb/307800

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Remote_Desktop-Terminal_Services/Q_24355892.html
0

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question