Single Mandatory Roaming profile, multiple users w/restictive policy

[rmate]

I have recently tried combining mandatory roaming profiles with very restrictive group policies. This is a school environment, so the desktops, applications and taskbar are locked down. My problem is that I need to have a profile for each user (500+), so that the policy takes effect. If I copy a working profile, the desktop is ok, but the policy to lock the desktop is not applied (remove run, remove find, etc). If I logon as each user, let the profile go up to the server, rename it to ntuser.MAN, then log back on as the user, the policy to lock the desktop is applied. I've tried following articles that describe how to create common/shared templates profiles, but no luck.

Also, I store the user data on the server: "usrmanager connect h:\\server\users\%usrname%. Is there a way to get to the individual users folder:h:\\server\users\joe, when Joe goes into Word or Excel ? Right now, H shows up in My Computer, but the user must navigate to their individual folder. I have tried login scripts with NET USE %usrname% with no luck, as well as changing the "file location" is Word / Excel

NT Server SP6a 1 PDC, 3BDC
NT Workstation SP4
Office 97-SR2

Thanks, you people are great

 

[wolluf]

Little confused - if you're using mandatory profiles, why do you need one for each user? (eg, one for all normal pupil users would suffice? If you have several levels of access, one for each level. So, you create a 'template' user on a workstation. Set it up as per your requirements. Use the copyto function from system properties, user profiles to copy it to the server. On the server, rename ntuser.dat to ntuser.man. In User Manager for Domains on the server, point all the relevant users to load this as their profile (you can use 'net user' command to do this in batch).
For the home folder in User Manager, you can share each users folder as username$ (so its hidden), then point home folder to it (\\server\username$). You can ran a net share batch file to set them up, and again a net user one to set them individually.
Just a suggestion.

 

[rmate]

To wolluf
Thanks for the reply....it is the template that is giving me problems. When I use 1 profile for all pupils, the desktop is ok, but the policy selections aren't there. I do not want to have a profile for each student. It woould be great to have a single profile / template for all pupils. Thanks again

 

[itsfisko]

Hi I have the same requirements in a school. I am using server 2000 with XP pro on the stations. I currently have it set up so that all pupils are in an OU with the policy locked down as required. The wallpaper is loaded from the server the My documents is redirected to the server ie: \\"server name"\pupils\%\username\ this places all the pupils work into a folder that I have created on the server (pupils). At first logon a folder is created in this folder for their work. The deck top is setup by creating a folder the PC in c:\document & settings called PUPILS into this I have placed all the shortcuts to the programs that I want the pupils to access (I also have one called STAFF)IN in the PUPILS OU, I have directed the desktop to this. ie c:\docs & settings\PUPILS. This works for me and also allows me to have different desktops for staff and pupils, also I can have different desktops for different areas ie: Library, science etc.The users work is always available any- where, via the redirected desktop and the desktop looks the same and cannot be changed by the user.
If there is a better way perhaps someone would tell me? This standard profile sounds interesting.... Some lead, some follow....I just Hope!