Windows 2008 R2 mandatory profiles and XenApp6

I follow all of the steps to create a mandory profile not I'm at the point I have to assign it. I just realize the setting for mandatory profiles is Computer based and not user!!!!! I do not want mandatory profiles to be processed by domain admins. CAn a mandatory profiles be specific on a per user basis in their ADUC properties? An other idea how to use this via GP wil out affect domain admins?
LVL 21
compdigit44Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Sekar ChinnakannuStaff EngineerCommented:
You cannot set mandatory profile path in windows.  Changes made by users in  desktop settings are lost when the user logs off. Make sure only admin can make change in mandatory profile.check this http://forums.citrix.com/message.jspa?messageID=1523281
0
MeultjeCommented:
Hi compdigit44,

Perhaps this is what you're looking for..

http://technet.microsoft.com/en-us/library/cc742820.aspx

http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/43aef283-6f90-43f0-bd4a-beb762770d4d/

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/7df7635e-2816-41e3-a912-ffc2eab5f146/

http://markswinkels.nl/2009/12/how-to-create-a-mandatory-profile-in-windows-server-2008-r2/

When you're creating the GPO with GPM Editor right click on the Policy and choose Properties.
GPO Properties
Go to the Security Tab and at the Apply group policy option select the deny box for the appropriate
accounts / groups. Most likely the Domain Admins  and the Enterprise Admins. That way you won't be bothered with the policy on your domain admin account.

0
compdigit44Author Commented:
can Citrix Profile Manger 4 be used to set mandatory profiles?
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

compdigit44Author Commented:
I'm confused here. I initially want to create a mandatory profile for users when they access our published desktops on our XenApp servers that's it. From what I'm finding this seems to be very hard to do. mandatory profiles seems in windows seem to take a all or nothing approache. What is mean is either you do this everywhere to if done it's very hard to limit. I tried to specific my mandatory profile on my test user accounts ADUC profile and when I logged into my Citrix server is did not load the profile I create but the default one. Am I missing something here???
0
MeultjeCommented:
In concern of Profile Manager I'm not familiar. What I read about the previous version 3.0 it is not possible.

http://forums.citrix.com/thread.jspa?threadID=263032
0
compdigit44Author Commented:
For test purposes I've specified my network path to my mandaory in the RDP profile section of my user account in ADUC and without the .V2 and not matter what I do the profile will not load.
0
compdigit44Author Commented:
Could it be becuase I'm using a ICA connection instead of a RDP connection?
0
basrajCommented:
Did you specify under remote desktop service profile path instead of "profile" in ADUC?

Check this to configure profile using AD properties.

http://mrworkspace.nl/2010/07/howto-and-best-practices-creating-a-windows-2008-r2-mandatory-profile/

Note: I know you're doing the above for testing purpose but this will not help domain admins if you add profile path to ADUC.

You have to follow the virtualization admin link above, if you want to exempt domain admins.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
compdigit44Author Commented:
I have tried to specifiy my mandatory profile path under RDP profile and regaualr profile and no matter what I try the profile will not load.

Under Profile Manager under Profile store I tried to specifiy the path for my mandatory profile and it still will not load
0
basrajCommented:
it is loading as what? temp profile? on registry see if anything profile with .bak is available. if yes, delete that registry.
0
MeultjeCommented:
Do you have the appropriate rights on that map..? Otherwise give yourself  full rights and see if the profile will load?
0
compdigit44Author Commented:
I figured out my problem. I got Citrix Profile Manager to work using the template profile. I had to change the NTUSER.MAN to NTUSER.DAT once I did this things started to work plus members of the local admin groups do not have the profile enforced!!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.