Solved

Single Mandatory Profile for Multiple Users Not Working on Windows 7

Posted on 2011-02-24
4
1,162 Views
Last Modified: 2012-05-11
I would like to have several users running of the same mandatory profile.  i created a roaming profile called template and copied it within the same folder renaming to templateman.  i then renamed the ntuser.dat within to ntuser.man and set the path in the users AD properties but the only account that can log on with this mandatory profile is the user that originally made the roaming profile template. (hope that makes sense  please ask if you need clarification.)  other users get temporary profiles.  This only affects Windows 7 logons. the same procedure works in windows XP.

I have set a GPO to stop users logging on with a temporary profile. the policy also deletes cached copies of roaming profiles.  the logon error i get is:  "The Group Policy Client service failed the logon.  Access is denied."  so looking like a permissions issue.  help much appreciated with this one.  
0
Comment
Question by:Luxtech
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 16

Expert Comment

by:cantoris
ID: 34974960
Have you checked on the permissions of the profile folder that all the relevant users (or a group they're in has full control of that folder)?  And if you've moved any files into that folder, the permissions on those file(s) will need to be reset to inherit from the parent.
0
 
LVL 1

Author Comment

by:Luxtech
ID: 34978115
yes i have put all the users that will use this profile in to a group and added them to the profile folder with full control for this folder, subfolders and files.
0
 
LVL 1

Accepted Solution

by:
Luxtech earned 0 total points
ID: 34980467
think i found the correct way to do this.  there are 2 options:
1.  create your profile on a windows 7 machine and sysprep to overwrite the default profile, then copy that profile to the network profile path and give permission to users during that stage
2.  create the profile on windows vista, then log in as admin and copy the profile same as above without doing sysprep.

why did windows 7 lose the ability to copy any profile like vista.
0
 
LVL 1

Author Closing Comment

by:Luxtech
ID: 35015450
found the solution with google.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to install and use the NTBackup utility that comes with Windows Server.
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question