I create a mandatory profile for the user and that user could still change its profile when he logs on having mandatory roaming profile
