Solved

Creating a mandatory Windows7 Profile using SCCM2012

Posted on 2014-09-29
6
286 Views
Last Modified: 2014-09-29
I'm in the process of deploying Windows7 out to a lab. The lab requires that the profiles on the system be mandatory. The users are able to make changes to the profile while logged in.. but once logged off everything reverts back to the standard profile.

I want to know if there is anyone to do this using an SCCM task sequence or a configuration base line. Any help will be appreciated.
0
Comment
Question by:AnthonySmithMCP
  • 3
  • 3
6 Comments
 
LVL 23

Expert Comment

by:rhandels
ID: 40349876
There is a base line on how to create a mandatory profile (enough links to be found on google) but why would you like to create this using SCCM?? Normally a mandatory profile is created once manually and then copied to a centralized environment. After that you change the roaming profile settings of the user account to point to that mandatory profile. That would be the easiest way of doing it for multiple users.

I don't think you can just copy over the profile (because that would be what you are doing then) with the ntuser.man and use it with a local account.

Or are you just trying to change the current profile to a mandatory one?? So only rename the ntuser.dat of all users on a machine to ntuser.man??
0
 
LVL 1

Author Comment

by:AnthonySmithMCP
ID: 40350062
I already know how to create a mandatory profile manually on the systems. I want to use SCCM to deploy this to classrooms and not bother the users AD account. I only want this change to apply when they login to specific computers... Not all computers they login to.

The reason for using SCCM is because i want this to apply to the systems while I'm deploying out the OS.
0
 
LVL 23

Expert Comment

by:rhandels
ID: 40350070
The problem is that you need to change the ntuser.dat to ntuser.man somehow while the user is not logged in yet, otherwise you will get the message that the file is in use.

I guess that you could create some sort of batch or vbs script to rename this file but still.
If you have a script that does the trick you should be able to deploy it using SCCM.

I would however still suggest doing this "the normal way" because i have no idea what happens if you change the file if a user is not logged in yet.
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 
LVL 1

Author Comment

by:AnthonySmithMCP
ID: 40350079
So changing the ntuser.dat to ntuser.man will allow the user to make changes to the profile while their logged in... but will revert back to the default profile when the loggoff?
0
 
LVL 23

Accepted Solution

by:
rhandels earned 500 total points
ID: 40350151
Yes, that is all you need to do to change a profile from a "normal" profile to a mandatory profile. And yes, a mandatory profile will revert back to this once logged off.. I'm not quite sure if this can be done on a local profile though, you should test it. As said, normally you create a mandatory profile as a base and place it on a network share and point all users towards that profile. But it is worth a shot.

Do keep in mind that the profile needs to exist to get this working. So the user must have logged in once so the local profile is already created, otherwise you cannot change the file. And by default a profile is not mandatory.
0
 
LVL 1

Author Comment

by:AnthonySmithMCP
ID: 40350186
Got it. Thank you.
0

Featured Post

Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

Join & Write a Comment

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now