Solved

Creating a mandatory Windows7 Profile using SCCM2012

Posted on 2014-09-29
6
307 Views
Last Modified: 2014-09-29
I'm in the process of deploying Windows7 out to a lab. The lab requires that the profiles on the system be mandatory. The users are able to make changes to the profile while logged in.. but once logged off everything reverts back to the standard profile.

I want to know if there is anyone to do this using an SCCM task sequence or a configuration base line. Any help will be appreciated.
0
Comment
Question by:AnthonySmithMCP
  • 3
  • 3
6 Comments
 
LVL 23

Expert Comment

by:rhandels
ID: 40349876
There is a base line on how to create a mandatory profile (enough links to be found on google) but why would you like to create this using SCCM?? Normally a mandatory profile is created once manually and then copied to a centralized environment. After that you change the roaming profile settings of the user account to point to that mandatory profile. That would be the easiest way of doing it for multiple users.

I don't think you can just copy over the profile (because that would be what you are doing then) with the ntuser.man and use it with a local account.

Or are you just trying to change the current profile to a mandatory one?? So only rename the ntuser.dat of all users on a machine to ntuser.man??
0
 
LVL 1

Author Comment

by:AnthonySmithMCP
ID: 40350062
I already know how to create a mandatory profile manually on the systems. I want to use SCCM to deploy this to classrooms and not bother the users AD account. I only want this change to apply when they login to specific computers... Not all computers they login to.

The reason for using SCCM is because i want this to apply to the systems while I'm deploying out the OS.
0
 
LVL 23

Expert Comment

by:rhandels
ID: 40350070
The problem is that you need to change the ntuser.dat to ntuser.man somehow while the user is not logged in yet, otherwise you will get the message that the file is in use.

I guess that you could create some sort of batch or vbs script to rename this file but still.
If you have a script that does the trick you should be able to deploy it using SCCM.

I would however still suggest doing this "the normal way" because i have no idea what happens if you change the file if a user is not logged in yet.
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 1

Author Comment

by:AnthonySmithMCP
ID: 40350079
So changing the ntuser.dat to ntuser.man will allow the user to make changes to the profile while their logged in... but will revert back to the default profile when the loggoff?
0
 
LVL 23

Accepted Solution

by:
rhandels earned 500 total points
ID: 40350151
Yes, that is all you need to do to change a profile from a "normal" profile to a mandatory profile. And yes, a mandatory profile will revert back to this once logged off.. I'm not quite sure if this can be done on a local profile though, you should test it. As said, normally you create a mandatory profile as a base and place it on a network share and point all users towards that profile. But it is worth a shot.

Do keep in mind that the profile needs to exist to get this working. So the user must have logged in once so the local profile is already created, otherwise you cannot change the file. And by default a profile is not mandatory.
0
 
LVL 1

Author Comment

by:AnthonySmithMCP
ID: 40350186
Got it. Thank you.
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question