Networks

Ask something
Question Locked

Roaming/Mandatory Profile - Auto Login - DeepFreeze

0 helpful
2 replies

by rstack13

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a problem that I hope someone has seen before or can help with.

Setup:

I have a computer lab for students that is using DeepFreeze to protect drive C. The account the student computers use is one shared roaming account (AD) that is used on each computer (30) in this lab. This account is automatically logged in with TweakUI so all a student needs to do is sit,turn the computer on, and it logs in without any prompt. After I set the roaming account with the settings for each application and other user settings, I change the profile to a mandatory account, by change .dat to .man in the profile on a server. This is to keep students from changing it. After I change the profile to mandatory, login for the 1st time creating the local profile copy, turn DeepFreeze on, and reboot, everything is fine.

The Problem:

When I want to change the profile, say add a new application and settings, change .man back to .dat, once I start the computer it will hang at "Loading Profile" and not log in to the student account.

The Workaround:

I found that if I change the profile back to .man, log in w/o a problem, turn DF off, reboot computer to safe mode, delete local user profile for the roaming profile, change .man back to .dat on the server (have I lost you yet?) then log in to the computer with the account now being a roaming account, I can make changes. This fix means I have to delete the local profile every time I want to make a change. I know that I can keep local copies of the profile from staying on the computer with a GPO but I really do not want all my computer labs that are setup in this way to have to pull a copy of the profile across the network every time it boots.

Does anyone have any better ideas then this? I would think you can easily change back and forth from .man to .dat but it is not working currently for me.

2 replies

by rob miners

Delete the Profile contents from the Folder On the File Server.

Logon to a workstation as the User and set it up as you want it for your users. When you are happy with what you want log off and then log back on to double check.

Log off and go to the file server.

1. On the server ,Start "regedt32".

2. From the "Window' menu choose "HKEY_USERS".

3. Next, select"Registry" from the menu and then "Load Hive".

4. Browse and select the ntuser.dat from the folder called ProfNT.Man.

5. Enter "auser" as the name for the key.

6. Highlight "auser" in the pane on the left.

7. From the "Security" menu choose"Permissions".

8. Give "Everyone" Full Control and tick "REplace Permissions on Existing Subkeys".

9. Click OK.

10. Once completed, ensure "auser" is highlighted and choose "Unload Hive" from the "REgistry Menu".

Close regedt32.

Navigate to the ProfNT.Man folder and rename ntuser.dat to ntuser.man

Direct your new users to the ProfNT.Man folder for their profiles.

This discussion is closed to new replies.