• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1349
  • Last Modified:

Windows 2008 R2 mandatory profiles and XenApp6

I follow all of the steps to create a mandory profile not I'm at the point I have to assign it. I just realize the setting for mandatory profiles is Computer based and not user!!!!! I do not want mandatory profiles to be processed by domain admins. CAn a mandatory profiles be specific on a per user basis in their ADUC properties? An other idea how to use this via GP wil out affect domain admins?
0
compdigit44
Asked:
compdigit44
  • 6
  • 3
  • 3
  • +1
3 Solutions
 
Sekar ChinnakannuStaff EngineerCommented:
You cannot set mandatory profile path in windows.  Changes made by users in  desktop settings are lost when the user logs off. Make sure only admin can make change in mandatory profile.check this http://forums.citrix.com/message.jspa?messageID=1523281
0
 
MeultjeCommented:
Hi compdigit44,

Perhaps this is what you're looking for..

http://technet.microsoft.com/en-us/library/cc742820.aspx

http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/43aef283-6f90-43f0-bd4a-beb762770d4d/

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/7df7635e-2816-41e3-a912-ffc2eab5f146/

http://markswinkels.nl/2009/12/how-to-create-a-mandatory-profile-in-windows-server-2008-r2/

When you're creating the GPO with GPM Editor right click on the Policy and choose Properties.
GPO Properties
Go to the Security Tab and at the Apply group policy option select the deny box for the appropriate
accounts / groups. Most likely the Domain Admins  and the Enterprise Admins. That way you won't be bothered with the policy on your domain admin account.

0
 
compdigit44Author Commented:
can Citrix Profile Manger 4 be used to set mandatory profiles?
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
compdigit44Author Commented:
I'm confused here. I initially want to create a mandatory profile for users when they access our published desktops on our XenApp servers that's it. From what I'm finding this seems to be very hard to do. mandatory profiles seems in windows seem to take a all or nothing approache. What is mean is either you do this everywhere to if done it's very hard to limit. I tried to specific my mandatory profile on my test user accounts ADUC profile and when I logged into my Citrix server is did not load the profile I create but the default one. Am I missing something here???
0
 
MeultjeCommented:
In concern of Profile Manager I'm not familiar. What I read about the previous version 3.0 it is not possible.

http://forums.citrix.com/thread.jspa?threadID=263032
0
 
compdigit44Author Commented:
For test purposes I've specified my network path to my mandaory in the RDP profile section of my user account in ADUC and without the .V2 and not matter what I do the profile will not load.
0
 
compdigit44Author Commented:
Could it be becuase I'm using a ICA connection instead of a RDP connection?
0
 
basrajCommented:
Did you specify under remote desktop service profile path instead of "profile" in ADUC?

Check this to configure profile using AD properties.

http://mrworkspace.nl/2010/07/howto-and-best-practices-creating-a-windows-2008-r2-mandatory-profile/

Note: I know you're doing the above for testing purpose but this will not help domain admins if you add profile path to ADUC.

You have to follow the virtualization admin link above, if you want to exempt domain admins.
0
 
compdigit44Author Commented:
I have tried to specifiy my mandatory profile path under RDP profile and regaualr profile and no matter what I try the profile will not load.

Under Profile Manager under Profile store I tried to specifiy the path for my mandatory profile and it still will not load
0
 
basrajCommented:
it is loading as what? temp profile? on registry see if anything profile with .bak is available. if yes, delete that registry.
0
 
MeultjeCommented:
Do you have the appropriate rights on that map..? Otherwise give yourself  full rights and see if the profile will load?
0
 
compdigit44Author Commented:
I figured out my problem. I got Citrix Profile Manager to work using the template profile. I had to change the NTUSER.MAN to NTUSER.DAT once I did this things started to work plus members of the local admin groups do not have the profile enforced!!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

  • 6
  • 3
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now