Windows Forum

Ask something
Discussion Locked

Using profile and group policy

0 helpful
3 replies

by joycetm

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,

How do I restrict my users to have a different set of desktops display based on the applications that they are allowed to access?

All the client PCs are running Win 2000 Professional connecting to a Win 2000 Advanced Server?

Also how do I implement a mandatory or roaming profile? What are the pros and cons of it?

I would appreciate any help.

Thank you,
Joyce

3 replies

by craig it mangaer

First the simple items. Under the AD users and computers go to a user you would like to setup with a profile. click on the profile tab and enter a UNC name for the profile (\\server\users\%username%\profile) that will supply you with a roaming profile location that can be pulled down to any machine. To make it a mandatory profile change the ntuser.dat to ntuser.man. If you want to use .man profiles stick them in a universal location for all and set the location to read only. (downfall of sharedprofile is if using Outlook the email profile info. will need to be setup for all users and have them choose their profile.. can get messy.) Use a generic account to setup the profile and copy to the location then setup who can use it, then change to .man. Or you can use the generic account to setup the desktop and save the profile to the individuals user folders on the network. Then if you want to lockdown the desktop and control panel with group policies you can. Takes some trial and error toget the desired results. any other info. you would like let me know.

This discussion is closed to new replies.