Sunday, January 1, 2023

Create Windows 10 mandatory profile (without automation)

 Create Windows 10 mandatory profile (without automation) steps:

1. Login and set your customized settings

Sign in to a computer running Windows 10 as a member of the local Administrators group. Configure the computer settings that you want to include in the user profile. For example, you can configure settings for the desktop background, uninstall default apps, install line-of-business apps, and so on. For current, you cannot copy the setting for customized Start Menu. I'll add an extra article for customized Strat Menu.

2. Rename Default profile folder

Restart your computer then login with the Administrator account. Locate Default folder in %systemdrive%\users folder (you may need to select the Show Hidden Files option in Explorer) then rename it to any name. Rename the user folder with customization we made to Default

3. Set permission and generalize the profile folder

Open regedit.exe, click on the HKEY_USERS hive on the left, and select File | Load Hive. Browse to the %systemdrive%\users\default\ntuser.dat. The ntuser.dat file holds all of the user profile’s Registry keys.

The dialog will ask for a name for the key, type anything you want in here.


Next expand the HKEY_USERS hive and right-click on the hive you’ve just loaded Choose the Permissions option. And then give the Everyone or Authenticated Users group Modify or Full Control. Use the Advanced button to replace the permissions on all child folders with the ones you’ve defined.

Now, right-click on the hive you’ve just loaded then select export. On export registry dialog box write name and select desired save location.

Now, the Registry will contain lots of references to the user which was used to create the profile, now is the time to refine them. Edit file you just exported using note pad then using replace tool to remove all references and replace it with %username%. Save the file then run it.

Once you’ve done all of this, don’t forget to unload the profile by clicking File | Unload Hive with the top-level key selected.



4.  Place profile folder on shared folder

Now it’s time for profile to come alive, we have to place profile folder that can be accessed from users whom supposed to use profile. We have to copy profile folder thru advanced system settings. On the advanced tab – User Profile section click settings – select Default profile then copy to. Type shared folder UNC in Copy profile to section then give Everyone group full control in Permitted to user section.

You must rename folder name to end up with .V6 and remember it defers due to Windows 10 versions as follows:

·         For Windows 10 RTM and 1511 builds – folder must end up with .V5

·         Windows 10 1607 build/Server 2016 – folder must end up with .V6

5. Rename the .dat file

Once you’ve done all of this, rename your ntuser.dat file to ntuser.man to make it mandatory.

6. Deploy

The final step is to populate the user field in Active Directory Users and Computers. You have to select user or group of users you want to apply mandatory profile, right click then properties, in Profiles tab write profile folder UNC then OK. 




 

 

No comments:

Post a Comment

Configure VLANs on EnGenius switch

Configure VLANs on EnGenius switch In this video we have configured two VLANs on Engenius EWS1200-28TFP switch. 1- Management VLAN 64 ...