Create Windows 10 mandatory profile (without automation)
steps:
1. Login and set your customized settings
Sign in to a computer running Windows 10 as a member of the local
Administrators group. Configure the computer settings that you want to include
in the user profile. For example, you can configure settings for the desktop
background, uninstall default apps, install line-of-business apps, and so on.
For current, you cannot copy the setting for customized Start Menu. I'll add an
extra article for customized Strat Menu.
2. Rename Default profile folder
Restart your computer then login with the Administrator account. Locate
Default folder in %systemdrive%\users folder (you may need to select the
Show Hidden Files option in Explorer) then rename it to any name. Rename the user
folder with customization we made to Default
3. Set permission and generalize the profile folder
Open regedit.exe, click on the HKEY_USERS hive on the left,
and select File | Load Hive. Browse to the %systemdrive%\users\default\ntuser.dat.
The ntuser.dat file holds all of the user profile’s Registry keys.
The dialog will ask for a name for the key, type anything you want in
here.
Next expand the HKEY_USERS hive and right-click on the hive you’ve just
loaded Choose the Permissions option. And then give the Everyone or
Authenticated Users group Modify or Full Control. Use the Advanced button to
replace the permissions on all child folders with the ones you’ve defined.
Now, right-click on the hive you’ve just loaded then select export. On
export registry dialog box write name and select desired save location.
Now, the Registry will contain lots of references to the user which was
used to create the profile, now is the time to refine them. Edit file you just
exported using note pad then using replace tool to remove all references and
replace it with %username%. Save the file then run it.
Once you’ve done all of this, don’t forget to unload the profile by
clicking File | Unload Hive with the top-level key selected.
4. Place profile folder on shared
folder
Now it’s time for profile to come alive, we have to place profile folder
that can be accessed from users whom supposed to use profile. We have to copy
profile folder thru advanced system settings. On the advanced tab – User Profile
section click settings – select Default profile then copy to. Type shared
folder UNC in Copy profile to section then give Everyone group full control in Permitted
to user section.
You must rename folder name to end up with .V6 and remember it
defers due to Windows 10 versions as follows:
·
For Windows 10 RTM and
1511 builds – folder must end up with .V5
·
Windows 10 1607
build/Server 2016 – folder must end up with .V6
5. Rename the .dat file
Once you’ve done all of this, rename your ntuser.dat file to ntuser.man
to make it mandatory.
6. Deploy
The final step is to populate the user field in Active Directory Users and
Computers. You have to select user or group of users you want to apply
mandatory profile, right click then properties, in Profiles tab write profile
folder UNC then OK.