I have been working with mandatory profiles for at least 4 years in a Netware environnement with Zenworks. We are now moving to Active Directory and SMS. Since mandatory profiles worked fine with Zenworks, I want to use it with Active Directory. So I created a simple user on a new XP machine and moved its profile to a share on a windows 2003 server. I renamed NTUSER.DAT to NTUSER.MAN. I modified all the users of a school so their profile would point to the share where they can access the mandatory profile (a directory within that share). Right now the students have full control on that directory. When I log on with the user that I used to create the profile everything works fine. When I log with any other student user code all the windows configurations that I set up in the profile are gone (instead I get the configurations of the default user). But if I make all the students user codes member of the local Administrators group everything works fine.
I don’t want to give Administrator rights on the local machine to the students. What is the solution ? What am I missing?
All workstation are Windows XP sp2
All servers are 2003 R2
Roger