Win7 mandatory profiles

Posted on 2011-04-25
Last Modified: 2012-05-11

I am working in a 2003 server 2008 forest environment, schema 44. i am using a win7 laptop with GPME installed, win 7 GPO policies applied to take effect immediately. I am trying to setup seven different mandatory profiles for 50+ win7 laptops,  i can get the profile logged in, and have worked out all the errors with mapping printers and temp profile errors, but my desktop items in my .v2 folder do not copy over.  i have tried placing the share for the profile on both a 2003 and 2008 server with no luck.

any help from the gods is greatly appreciated!! =D
Question by:CMH_TECH
    LVL 16

    Expert Comment

    Have a read through this - it includes sections on default domain profiles and mandatory profiles.
    Check you've not done anything wrong according to that method first.
    LVL 31

    Expert Comment


    I think you missed the link....

    LVL 16

    Expert Comment

    Ooops profound apologies:

    Author Comment

    Problem with that document is I'm not using a default profile for the domain, and i am not creating an image. These are win 7 pro clients, 52 of them ,and each will have a login to the domain. not a TS session. if one client goes down in area "A" and we have to move a client from area "B" we need to simply logout of one profile and login to another. This way they have the shortcuts, printers, mapped drives and all they need with no help desk support. the profiles work fine now, just no desktop items.

    These units are replacing 52 win xp clients that are in production now, i have two weeks to make them look, feel and act just about the same as the old ones the nurses are using now to avoid a lynch mob!
    LVL 16

    Expert Comment

    So these are just icons within the profile's desktop folder?  Is the desktop folder redirected or is part of the profile itself?
    Are other folder contents copying over OK?  I presume the permissions on the desktop items are definitely correct?

    Anything in the event logs from at logon?
    You could even try turning on the Diagnostic Log under Applications and Services Logs - Microsoft - Windows - Winlogon (Show them in the View menu first) but you might be somewhat swamped with data even after a single logon.

    Author Comment

    icons are shortcuts, some for applications, and some IE links. all are in the desktop folder on the share. all are valid, and permissions are ok for all sub-folders
    i don't really have anything else copied over,  i can add some favorites and see what they do.

    event viewer logs for application show one error for a GPO change to a printer to make it default, but it does what it is supposed to.

    support acticles about that log say there is nothing useful to a field engineer, only to MS. i can try it and see.

    I am building six more policies today, so i'll be doing lots more testing.

    Accepted Solution

    Ok, an update. and a resolution!

    The GPO option for windows 7 that states "remove common program groups from the start menu"
    also has teh following in its description in the GPM

     "by default the programs menu contains items from the all users profile and items from the user's profile. If you enable this setting ONLY ITEMS IN THE USERS PROFILE APPEAR IN THE PROGRAM S MENU."

    interesting though, this icon if toggled enabled, does stop all the "desktop" items from coming over.
    toggling it back off and logging out/in refreshes the icons, and they are all there.

    ALSO an interesting twist on creating users profiles locally for a mandatory or super mandatory profile. LOTS of posts about the grayed out box to "copy" a user profile; but the default user is able to be copied.  I tried several different ways, including the hassle of renaming the default user, and changing my created profile name to default, and copying, which DOES WORK HOWEVER!!
    i had a thought, and logged into a windows 2008 server, std non DC. created my users locally, copied all the icons to the desktop, logged out, and in as an admin and VOILA!!! i was able to copy any user profile from the server, unlike the W7 pc. it saved me many hours of work!!

    LVL 59

    Expert Comment

    This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

    Featured Post

    How does your email signature look on mobiles?

    Do your employees use mobile devices to reply to emails? With mobile becoming increasingly important to the business world, it is in your best interest to make sure that your email signature looks great across all types of devices.

    Join & Write a Comment

    So many times I have seen the words written in a question "if only I could show you" or " I know how hard it is for you since you can't see it" in any zone. That has inspired me to write about this tool in windows 7 called "Problem Steps Recorder…
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now