Re: user profiles.

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Doug Sherman [MVP] (dsherman_at_nospamtampabay.rr.com)
Date: 03/24/05


Date: Thu, 24 Mar 2005 00:01:14 -0500

When a computer is joined to an Active Directory domain, the domain users
group is added to the Local machine's users group. However, you cannot
logon to the local machine with a domain user account - you can only logon
to the domain. So, as long as a domain user does not have or know the
password for a local user account, he/she can only logon to the domain.

Mandatory profiles are roaming profiles. They do not prevent users from
changing settings - they only prevent the changes from being saved. If you
are using local profiles, you can create a local custom default user
profile; but you have to do this on each machine - see:

http://support.microsoft.com/default.aspx?scid=kb;en-us;305709

Use Group Policy to control and lock down the settings you do not wish users
to change.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"Drexler" <Drexler@discussions.microsoft.com> wrote in message
news:433395D3-7EF7-43D6-86AE-B11C4DAD8D59@microsoft.com...
> Currently I have to setup a server and a heap of clients. However these
> clients are off site, and bandwidth is a major problem. I have to allow
many
> users to access the machines, but dont want roaming profiles. Each user
needs
> thier own account but I want them to have an identical profile.
>
> Server 2003, and XP workstations
>
> How can I setup my domain so the users have to log onto the domain, but
> access a common profile stored locally on the machine? Users cannot change
> the profile, and cant log on locally if they cannot be authenticated by
the
> server.
>
> any help would be greatly appreciated.



Relevant Pages

  • Re: Changing users and retaining the desktop/login settings?
    ... Right click on My Computer and select Properties - click the User Profiles ... Configure a user account with the desired settings. ... user and expand the Documents and Settings folder. ... > entirely new desktop and server logins. ...
    (microsoft.public.win2000.networking)
  • Re: Workstations not logging on to new windows2003 server.
    ... course you can't just logon with PC from old domain to new domain without ... Here is a good guide how to upgrade NT domain to Windows 2003 domain. ... Upgrading Windows NT 4.0 Domains to Windows Server 2003 Active Directory ... > profiles). ...
    (microsoft.public.windows.server.setup)
  • Re: TS Roaming Profiles on DFS /FRS problem on NUSER.DAT
    ... Presentation server is Enterprise Edition, ... TMP file was delete by the help desk team to restore the user ... profiles directory. ... logon from WBT. ...
    (microsoft.public.windows.terminal_services)
  • Re: Swapping email accounts
    ... mailbox from the AE logon account, and then reassociate it with a different ... >> since the person is John, he would get his own environment. ... >> I realize that I will need to deal with the Outlook profiles, ... > and the login - they may not get it. ...
    (microsoft.public.exchange2000.admin)
  • Re: Replacing a DC
    ... You should be able to move the profiles to the new location and point the ... users AD TS profile to this so when they logon they shouldn't even realize ... tab and redirect to the new server once you have moved the profile. ... There are 25 clients with WYSE terminals connecting to the DC/TERM. ...
    (microsoft.public.windows.server.active_directory)