Link to home
Start Free TrialLog in
Avatar of Intelli-Seeker
Intelli-SeekerFlag for United States of America

asked on

Block creation of Windows profiles on Windows 10 computer in Active Directory environment

We are in a Windows Active Directory environment and are managing most things through group policy. We have a Windows 10 machine that has a smaller hard drive. We would like domain users to be able to sign into the computer but not have it create a profile because that blows up the storage space. I'm sure there is a way to log on with a temporary profile. Most things I see talk about fixing the problem of logging in with a temporary profile. We want to do that to conserve space.
Avatar of Scott Silva
Scott Silva
Flag of United States of America image

Most likely just easier to spend $50 on a larger hard drive in my opinion...
Or have the system start up as a default user and have the people rdp to their intended computer...
Avatar of Intelli-Seeker

ASKER

Additional information: This computer is a mini PC attached to a TV to be used for video conferencing. However, the users still want to have access to network resources at times. The other potential solution would be to put it in kiosk mode, but then they would not have access to as many resources.

You are right Scott - we did consider using RDP, but we have some less than savvy people in our organization who don't know how that works.
Most things I see talk about fixing the problem of logging in with a temporary profile.

right...it means that something broke in the registry for the profile location and can't be loaded

replacing it as scott said is the easiest and cheapest way
failing that, you could try compressing the drive to save some space
It's a new computer - not a broken profile. We're just trying to conserve storage space. Windows 10 really bloats the storage space especially when you have multiple people logging in.
If you do that, your users will complain about long login times because it'll recreate the temp profile for every person that logs in. Then the first time somebody saves to the desktop and loses the file, you'll be hearing about that, too. You're setting yourself up for a major headache here. Just get a bigger drive.
How large is your disk?

You could enforce the gpo policy to delete the user profiles.

Computer Configuration\Administrative Templates\System\Logon\Delete user profiles older than a specified number of days

You can also make user profiles on systems such as you describe use mandatory profiles. https://docs.microsoft.com/en-us/windows/client-management/mandatory-user-profile
The issue you are contending with is:
1) create a mandatory profike that all users use, but that will limit what files the user has access to.
2) to minimize space utilization on the system, you have to achieve two thing
     A) the profike that gets created us small
      B) it gets deleted on logout
The way to achieve small profike size is through the use of folder redirection, or work folders
Roaming profiles is one way to manage through GPO to delete cached copies on successful logouts.
ASKER CERTIFIED SOLUTION
Avatar of Intelli-Seeker
Intelli-Seeker
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial