Profiles

[Makis Marmaridis]

Dominik,

you are correct, to convert profiles from roaming to mandatory all that
needs to be done is rename NTUser.dat to NTUser.man and that's it. What this
will do is allow for the profile to get downloaded to the client machine at
user logon but when the user logs off the profile will not get sent back to
the server as a roaming profile would have.

In a lab I have setup in the past, I used one (1) mandatory profile for all
the users. in the smb.conf file, I simply pointed the profile for all users
to be the same. This way every user is getting the exact same profile (same
start menu etc) and even if they manage to change it somehow (they create
shortcuts etc on the desktop for example) when they log off and log back on
they will get another unaltered copy of the mandatory profile. I would also
advise though alongside with a common mandatory profile you also make sure
you put some policies in place to prevent users from accessing certain parts
of the client machines otherwise you might have to re-install them  /
re-image them quite often! :-)

HTH,

Regards,
Makis.



> -----Original Message-----
> From: samba-ntdom-admin at us5.samba.org
> [mailto:samba-ntdom-admin at us5.samba.org]On Behalf Of Greg J. Zartman
> Sent: Wednesday, March 21, 2001 3:04 AM
> To: Dominik Buerkle
> Cc:
> Subject: Re: Profiles
>
>
> Dominik,
>
> To be honest, I have never had a reason to employ mandatory
> profiles so I
> can't remember exactly how to do it.  I only know that they
> do exist and
> will work to force a user into a semi-static GUI.  If I were
> to employ them,
> I'd likely goto the Microsoft Knowledge Base or look in some of my
> documentation.  You suggestion of changing the extension on
> the user.dat to
> .man sounds very familiar though.  Give it a shot.  Worst
> case, you'll have
> to restart with a boot disk and change the extension back.
>
>
> Sorry I couldn't be more help.
>
> Greg
>
> ----- Original Message -----
> From: "Dominik Buerkle" <>
> To: "Greg J. Zartman" <greg at kwikfind.com>
> Sent: Tuesday, March 20, 2001 1:25 AM
> Subject: Re: Profiles
>
>
> > Hello Greg,
> >
> > isn't it possible to rename a user.dat file to user.man, making it
> MANdatory,
> > and aren't those contents read-only?
> > Else how do I set up a mandatory profile, is there a special service
> program?
> >
> > Kind regards,
> > Dominik
> >
> > At 10:41 19.03.01 -0800, you wrote:
> > >Well, with Win9x machines you're very limited in what you can force
> people
> > >to do or not do.  You can kind of fake security with a
> domain (although
> I've
> > >been corrected in saying that a win9x is a true member of
> a domain), but
> > >even then you are limited.
> > >
> > >Your best option may be to set the Win9x machine to share
> level security,
> > >not user level security.  That way everyone logs on under the same
> account.
> > >The start menu would then be the same for all, provided
> you made sure
> people
> > >aren't installing software on their own.
> > >
> > >Maybe even put together a little VB program to write over
> the start menu
> > >each time at bootup (very messy though).
> > >
> > >Good luck.
> > >
> > >Greg
> > >
> > >
> > >
> > >----- Original Message -----
> > >From: <eder at uems.br>
> > >To: "Greg J. Zartman" <greg at kwikfind.com>
> > >Sent: Monday, March 19, 2001 10:21 AM
> > >Subject: Re: Profiles
> > >
> > >
> > > > Hi, first thanks for your tip!
> > > >
> > > > "Greg J. Zartman" <greg at kwikfind.com> wrote:
> > > >
> > > > > 1) Set up a mandatory profile (you could have one or
> many).  The
> profile
> > > > > would have a standardized start menu for all.
> > > > >
> > > >  That's the best option. We already have a standard
> menu, but how can
> we
> > >put
> > > > it in client machines, I mean, without logon script?
> > > >
> > > > ________________________________________________________________
> > > >
> > > > Esta mensagem foi gerada pelo Webmail da UEMS.
> > > > Para maiores informacoes acesse www.uems.br
> > > >
> > > >
> >
> >
> >
> >
>