Windows 10: Windows 10 Mandatory Profiles

Hi I have setup a demo of Azure Lab Services for my Windows 10 Image

I need to lock this image down with mandatory profile, once all has been locked down, I need to ensure only 1 application is available - ie. Adobe CC Suite.

So when my student users login to the RDP Session of the Azure Lab Services VM - all they get is the Adobe CC. Suite.

Once they log off, the image is refreshed immediately and nothing is saved on the desktop.

submitted by /u/irus76
[link] [comments]

:)

 

Mandatory Profile (.v5)


Hi
Has anyone successfully got mandatory profiles working with Windows 10 (currently running Win10 Enterprise 1511).

Essentially, I have it 99% of the way there, but whilst the start bar is clickable (which it previously wasn't), it now shows a blank start menu - ignoring either the Mandatory Profile Start Menu, or the XML Start Menu imported via Group Policy.

My steps are based on having a dedicated "mandatory" local account to do all user customisations before copying it up to the netlogon share rather than using the default profile - which works fine but has none of our app customizations built in - unless I start look at importing reg keys etc;

So here are my steps;

Login to the gold image machine as .\mandatory
1. Open Regedit
2. Right Click on HKCU and give the following full permissions – logging in as a domain admin first
a. Everyone
b. All Application Pools
c. Authenticated Users
4. Close Regedit
This is essentially instead of doing it via loading the hive - which seems to really help the start menu (I think)

5. Reboot the machine
6. Login as domain administrator – run Windows Enabler
7. Copy the profile to \\%domaincontroller%\netlogon\profiles\.v5 with everyone as permissions
8. Change a user to use that as their profile
9. Reboot the computer (giving AD enough time to replicate)
10. Login as that user
11. Start Menu is clickable and edge works on the task bar

However!.

It does not pull in the start menu xml that we have configured, nor the start menu contained within the mandatory profile, but the start menu is fully clickable!

I think other ways I have read on mandatory profiles about loading the hive from another machine didn't work because the DeviceAccess registry key seems to be permanantley locked even if I give everyone full permission - if I do it locally and then export the full mandatory profile it works.

In anticipation

John Paul

 

Windows 10 Mandatory Profile Configuration

Hello,

I'm trying to configure Mandatory Profiles in a Windows 10 Environment.

I'm following this article:

https://technet.microsoft.com/en-us/itpro/windows/manage/mandatory-user-profile

Everything works correctly if I specify the mandatory path in the properties of the user account in Active Directory Users and Computers.

I have the share

\\server\share\manny.v6

and the profile specified in the user properties as

\\server\share\manny

If I try to configure this in Group Policy it does not work. I tried under Computer Config | System | User Profiles.

Can you still configure the Mandatory Profile path through Group Policy?

 

Windows 10 Mandatory Profile Path


Hello,

Has anyone configured mandatory profiles for Windows 10 v1607? It works if I specify the mandatory path in the properties of the user account, but it does not work if I specify the path in Group Policy under computer configuration | System | User Profiles.
.