Windows 10: Windows 10 Mandatory Profile no longer loading profile from the share

When logging in using a mandatory profile none of the files from the share location profile copy locally. The profile has worked for years in Windows 10 and I just recently noticed it was no longer working correctly.Followed Microsoft's instructions for creating a mandatory profilePointed the profile path profile.v6 to the correct share in Active Directory Profile is read only and execute permissions for everyonentuser.dat was renamed to ntuser.manCurrently using Windows 10 21H2 and 22H2

:)

 

Windows 10 Mandatory Profile no longer loading profile from the share

When logging in using a mandatory profile none of the files from the share location profile copy locally. The profile has worked for years in Windows 10 and I just recently noticed it was no longer working correctly.

Followed Microsoft's instructions for creating a mandatory profile

Pointed the profile path (profile.v6) to the correct share in Active Directory

Profile is read only and execute permissions for everyone

ntuser.dat was renamed to ntuser.man

Currently using Windows 10 21H2 and 22H2

 

Mandatory Profile (.v5)


Hi
Has anyone successfully got mandatory profiles working with Windows 10 (currently running Win10 Enterprise 1511).

Essentially, I have it 99% of the way there, but whilst the start bar is clickable (which it previously wasn't), it now shows a blank start menu - ignoring either the Mandatory Profile Start Menu, or the XML Start Menu imported via Group Policy.

My steps are based on having a dedicated "mandatory" local account to do all user customisations before copying it up to the netlogon share rather than using the default profile - which works fine but has none of our app customizations built in - unless I start look at importing reg keys etc;

So here are my steps;

Login to the gold image machine as .\mandatory
1. Open Regedit
2. Right Click on HKCU and give the following full permissions – logging in as a domain admin first
a. Everyone
b. All Application Pools
c. Authenticated Users
4. Close Regedit
This is essentially instead of doing it via loading the hive - which seems to really help the start menu (I think)

5. Reboot the machine
6. Login as domain administrator – run Windows Enabler
7. Copy the profile to \\%domaincontroller%\netlogon\profiles\.v5 with everyone as permissions
8. Change a user to use that as their profile
9. Reboot the computer (giving AD enough time to replicate)
10. Login as that user
11. Start Menu is clickable and edge works on the task bar

However!.

It does not pull in the start menu xml that we have configured, nor the start menu contained within the mandatory profile, but the start menu is fully clickable!

I think other ways I have read on mandatory profiles about loading the hive from another machine didn't work because the DeviceAccess registry key seems to be permanantley locked even if I give everyone full permission - if I do it locally and then export the full mandatory profile it works.

In anticipation

John Paul

 

Windows 10 Mandatory Profile Configuration

Hello,

I'm trying to configure Mandatory Profiles in a Windows 10 Environment.

I'm following this article:

https://technet.microsoft.com/en-us/itpro/windows/manage/mandatory-user-profile

Everything works correctly if I specify the mandatory path in the properties of the user account in Active Directory Users and Computers.

I have the share

\\server\share\manny.v6

and the profile specified in the user properties as

\\server\share\manny

If I try to configure this in Group Policy it does not work. I tried under Computer Config | System | User Profiles.

Can you still configure the Mandatory Profile path through Group Policy?