Intelli-Seeker
asked on
Block creation of Windows profiles on Windows 10 computer in Active Directory environment
We are in a Windows Active Directory environment and are managing most things through group policy. We have a Windows 10 machine that has a smaller hard drive. We would like domain users to be able to sign into the computer but not have it create a profile because that blows up the storage space. I'm sure there is a way to log on with a temporary profile. Most things I see talk about fixing the problem of logging in with a temporary profile. We want to do that to conserve space.
ASKER
Additional information: This computer is a mini PC attached to a TV to be used for video conferencing. However, the users still want to have access to network resources at times. The other potential solution would be to put it in kiosk mode, but then they would not have access to as many resources.
You are right Scott - we did consider using RDP, but we have some less than savvy people in our organization who don't know how that works.
You are right Scott - we did consider using RDP, but we have some less than savvy people in our organization who don't know how that works.
Most things I see talk about fixing the problem of logging in with a temporary profile.
right...it means that something broke in the registry for the profile location and can't be loaded
replacing it as scott said is the easiest and cheapest way
failing that, you could try compressing the drive to save some space
ASKER
It's a new computer - not a broken profile. We're just trying to conserve storage space. Windows 10 really bloats the storage space especially when you have multiple people logging in.
If you do that, your users will complain about long login times because it'll recreate the temp profile for every person that logs in. Then the first time somebody saves to the desktop and loses the file, you'll be hearing about that, too. You're setting yourself up for a major headache here. Just get a bigger drive.
How large is your disk?
You could enforce the gpo policy to delete the user profiles.
Computer Configuration\Administrati ve Templates\System\Logon\Del ete user profiles older than a specified number of days
You can also make user profiles on systems such as you describe use mandatory profiles. https://docs.microsoft.com/en-us/windows/client-management/mandatory-user-profile
You could enforce the gpo policy to delete the user profiles.
Computer Configuration\Administrati
You can also make user profiles on systems such as you describe use mandatory profiles. https://docs.microsoft.com/en-us/windows/client-management/mandatory-user-profile
The issue you are contending with is:
1) create a mandatory profike that all users use, but that will limit what files the user has access to.
2) to minimize space utilization on the system, you have to achieve two thing
A) the profike that gets created us small
B) it gets deleted on logout
The way to achieve small profike size is through the use of folder redirection, or work folders
Roaming profiles is one way to manage through GPO to delete cached copies on successful logouts.
1) create a mandatory profike that all users use, but that will limit what files the user has access to.
2) to minimize space utilization on the system, you have to achieve two thing
A) the profike that gets created us small
B) it gets deleted on logout
The way to achieve small profike size is through the use of folder redirection, or work folders
Roaming profiles is one way to manage through GPO to delete cached copies on successful logouts.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Or have the system start up as a default user and have the people rdp to their intended computer...