Mandatory Profiles

[Gohtar345]

We have 30 computers that we want to use the same mandatory profile
with.

We do not have a domain controller. We are in a workgroup
environment.

What I have done is:
set up 1 computer with the profile settings that we want.
Changed the ntuser.dat to .man
Transfered that whole profile folder to a network share
Change the user profile path to point to that share.

This will work for the computer where I created the profile but not
for any other computer. On the other computers the settings don't all
come through, Like IE defaulting to MSN instead of the page I set.
Program settings are all not set too.

The accounts are all LUA. When I change the local user to
administrator then the Mandatory profile works just fine, so I know
this is some sort of permission issue but cannot find anything about
what permission is having the issue.

Anybody know what I need to change? Or maybe we are going about this
the wrong way and you can advise a better way.

Thanks,

 

[Lanwench [MVP - Exchange]]

We have 30 computers that we want to use the same mandatory profile
with.

We do not have a domain controller. We are in a workgroup
environment.

What I have done is:
set up 1 computer with the profile settings that we want.
Changed the ntuser.dat to .man
Transfered that whole profile folder to a network share
Change the user profile path to point to that share.

This will work for the computer where I created the profile but not
for any other computer. On the other computers the settings don't all
come through, Like IE defaulting to MSN instead of the page I set.
Program settings are all not set too.

The accounts are all LUA. When I change the local user to
administrator then the Mandatory profile works just fine, so I know
this is some sort of permission issue but cannot find anything about
what permission is having the issue.

Anybody know what I need to change? Or maybe we are going about this
the wrong way and you can advise a better way.

Thanks,

Without a domain, there isn't much you can do that will act on all
computers; there's no centralized account management possible. A 30-computer
workgroup sounds like a real pain to me...if you have a Windows server, I'd
create a domain. Otherwise, you might look into third party stuff to lock
down your workstations.