Hello There 
I have a very frustrating site.... its a school with 30 identical Windows XP Professional machines. I also have a Windows 2003 Server installed.
Now. Each computer will be for the most part logging onto the domain with a generic user account = student.
I have set in the properties for the student account a profile path : \\jupiter\profiles\student
I created a local student account on a windows computer with resitricted rights and logged on. I then logged on as administrator and copied that profile folder from the computer onto the \\jupiter server (Jupiter being the Win2k3 PDC).
I shared the profiles folder with read-only permissions, and renamed ntuser.dat to ntuser.dat.man
The machines can now logon properly and they gave quite restircted rights. They cannot access the C drive etc.
This is all fine.
But. When the student logs off, they get an error that Windows cannot update the roaming profile.
Why would it want to update the profile if its a mandatory profile?!
Am I going about this the right way at all at all?
Basically at the end of the day I need to have 30 machines allowing login from a student account, such that they can't easily wreck the machines....
Thanks for any advice,
Jamie.
I have a very frustrating site.... its a school with 30 identical Windows XP Professional machines. I also have a Windows 2003 Server installed.
Now. Each computer will be for the most part logging onto the domain with a generic user account = student.
I have set in the properties for the student account a profile path : \\jupiter\profiles\student
I created a local student account on a windows computer with resitricted rights and logged on. I then logged on as administrator and copied that profile folder from the computer onto the \\jupiter server (Jupiter being the Win2k3 PDC).
I shared the profiles folder with read-only permissions, and renamed ntuser.dat to ntuser.dat.man
The machines can now logon properly and they gave quite restircted rights. They cannot access the C drive etc.
This is all fine.
But. When the student logs off, they get an error that Windows cannot update the roaming profile.
Why would it want to update the profile if its a mandatory profile?!
Am I going about this the right way at all at all?
Basically at the end of the day I need to have 30 machines allowing login from a student account, such that they can't easily wreck the machines....
Thanks for any advice,
Jamie.
