Re: Users rename NTUSER.MAN!

Nothing you can do if the profile is a local profile and the user has local
admin right or floppy/CD boot right.

All text books teach you only NTUSER.MAN. Infact, a true mandatory profile
require 2 more steps:
1 As a Domain Admin on the profile share server, you need to take the
ownership of the profile folder (and sub-folder and files) as the
BUILDIN\Administrators group. If the user is the owner of his profile, he
can always change permission himself.
2 Revoke full control, write and modify permission on the profile folder
(and sub-folder and files) from the user. Now, the profile is already
mandatory. It can't be changed by the user. However, every time the user
log off, he gets an error message about he can't update the profile on
server.
3 Change the NTUSER.DAT file to NTUSER.MAN. This step just prevent the
error message you got from step 2



"Stan" <Stan@xxxxxxxxxxxxxxxxxxxxxxxxx>
news:5393B2BC-33F6-4362-B762-D4D1D5D73B4F@xxxxxxxxxxxxx
That doesn't help much! I need an answer! If you ain't got ones, than
what's
there to talk about?


.

Relevant Pages

  • Re: User Rights at Client Seem to Vary
    ... When the user logs on, using the domain profile, I ... logged on under the local profile no problems. ... >>One of the problem users has full Admin rights and the ...
    (microsoft.public.windows.server.active_directory)
  • Re: 1 of 4 users has a locked desktop Addl Info
    ... do it while logged in as "Chris" or do I do it from my Admin account/profile? ... Then I logged out of Chris, switched to my profile as Admin, changed his ... account back to Limited, ...
    (microsoft.public.windowsxp.general)
  • Re: Roaming Profile / Outlook Issues
    ... | without local admin privileges. ... On a new account ... I guess this is because of permission on the file system. ... | the profile on a old account and recreate it, ...
    (microsoft.public.windows.server.general)
  • Re: Loss of functionality in Administrator
    ... In all cases the error message ... Please contact your systems administrator." ... Fortunately one of the few things I can still do is create a new profile ... Log on as the main admin and see if this fixes things. ...
    (microsoft.public.win2000.general)
  • Re: group policies 2003 sbs
    ... > account name w/ privlages to change (Domain admin). ... but this isn't how you ought to do it in SBS. ... profile to their new domain profile - as well as put the workstation in the ... > logged back in as admin, and went to profiles tab. ...
    (microsoft.public.windows.server.sbs)
Loading