Hi, > For a mandatory profile you should rename the NTUSER.DAT to NTUSER.MAN, > then you can disable any write access for that group. This way it worked > for me. thanks, but the problem is that I still need one NTUSER.MAN file and a profile directory per user. I would like to serve a bunch of users out of one directory. :-) Florian