Trying to create mandatory profiles....

I want to control the user desktops (not allow them to install stuff or hose
up the desktop for the next user) and I am trying to create mandatory
profiles on a Windows 2000 Server.

The Windows 2000 Server Administrator's Companion (Microsoft Press), on page
276, says to...

"1. Create a user account with a descriptive name.... This is just a blank
account that you'll use to create a template for the customized
configuration.

2. Log on using the template account and create the desktop settings you
want, including applications, shortcuts, apperance, network connections,
printers, and so forth.

3. Log off the template account. Windows 2000 creates a user profile on the
system root drive in the Documents And Settings folder. ....

4. Log on using an administrator account. Open Active Directory Users and
Computers, and find the account for which you want to assign the customized
roaming profile."

I'll stop here....because I can't get passed step #2.

When I log off the server as Administrator and try to log in as my template
user, I get a "Logon Message" that says "The local plicy of this system does
not permit you to logon interactively."

So I logged back in as Administrator, and added the user to the Local
Security Settings>User Rights Assignment>Log On Locally policy setting. I
also checked that Users group was checked there.

I tried logging in locally as Template again and got the same message.

What am I doing wrong?

jim


.

Relevant Pages

  • Re: XP Home with Two Administrators - Aggravations
    ... On a clean operating system with default settings both users should be able ... administrator to see if both users have the same group membership. ... Mode and logon as an administrator to examine folder NTFS permissions to see ... one account cannot do all the things the other can do. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: SP2 has stopped me being an Administrator and upgrading
    ... This behavior may also occur if there are incorrect restriction settings on ... Log on as an administrator or follow the instructions in the Windows ... Update error message to use the Run As command with an administrator ... |>> | log into my normal account and the Administrator account with my ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: XP Users
    ... desktops created for each account. ... there was only one user profile. ... > administrator login. ... > app specific settings are all taken from either the Owner or the ...
    (microsoft.public.windowsxp.general)
  • Re: PC folder has stopped sharing over network!
    ... So following Jim's principle I've just tried creating a new user account on the PC - "Kids2", and enabled sharing on its component folders. ... There is a security tab that lists the access permissions and you can add to these to "open" the account in any way you wish. ... I've just been in to the security tab, and the access permissions for both kids and administrator are set to "Full Control". ... I browsed around all the tabs, and can't see any differences at all between the settings for kids and administrator. ...
    (uk.comp.misc)
  • Re: XP home Administrative Password Hacked Over internet..HOW?
    ... What settings are most likely the ... off - took advantage of lax security settings they found on the moms ... After getting the Administrator account password reset to a pass phrase, ...
    (microsoft.public.windowsxp.general)