We are currently setting up computer labs at two sites. The computers at both sites were imaged with the same image and both sites use mandatory profiles (created seperately) for students. The problem is that at one site group policy does not apply to the mandatory profile unless the domain “students” group is added to the local “administrators” group. Since we use Deep Freeze to prevent changes to the local machines, this is not much of a problem, however since everything works perfectly at one site, it should work at the other as well without giving students local administrative priveleges. Some of the settings in group policy are: restrict access to the command prompt, restrict access to browse the network, restrict access to the control panel, and apply proxy server settings. One anomaly is that the students who are local administrators get the default XP “bliss” desktop picture, whereas those who are not get the classic solid blue desktop but there is nothing in group policy regarding the desktop.
I suspect it may be a permission issue stemming from when the mandatory profile was copied over using the “copy to” function in XP. It’s possible that the “permitted to use” option was not configured properly. Is there any way to change this after the fact or does it need to be copied all over again? I’ve already checked the ntfs and share permissions for their mandatory profile folder as well as the group policy permissions. Or could it be something else?
Thanks in advance!
