Manadatory Profile Issue 1

[Joniboy]

We are trying to implement mandatory profiles across our site (over 1200 users) it). We have created two users; one local to a clean machine and one network user without any policies affecting them. We then copy the created profiles, transfer these to a shared (but hidden) location, change the ntuser.dat to ntuser.man and test using another clean, network account. However, this new user now has full control over the local computer, dekstop theme is not as set and though GPOs are being implemented according to RSoP there is no affect of them on the actual user. What are we doing wrong?

 

[iolair]

Do the users have rights to the hidden location? They'll at least need to be able to read them, I think.

Iolair MacWalter

 

[GazNew]

I have the same problem. The users have READ permissions but not WRITE (since that would negate the objective of mandatory profiles). Yet I cannot get the profile to simply set up the basic user layout I want (theme, menu, etc).

 

[Joniboy]

Yes, same here. Also we can see that the profile is working so far because the start menu is as expected and if we add something to the dekstop this appears when the user logs in. However, the dekstop theme is not correct (Windows Classic rather than Windows XP) and they have full control (with some limitations).