USER PROFILES
Profile refers to personal settings of a user. There are three types of
profiles.
Local
Profile: – It is the profile of a local user, available in Workgroup.
Profile: – It is the profile of a local user, available in Workgroup.
Roaming
Profile: – This type of profile is present only in domain network. In a domain,
user can log on to any client PC and can get his/her personal settings, and
hence the profile of the user is said to be ‘roaming’.
Profile: – This type of profile is present only in domain network. In a domain,
user can log on to any client PC and can get his/her personal settings, and
hence the profile of the user is said to be ‘roaming’.
Mandatory
Profile: – Only roaming profile can be converted into mandatory profile. When
the profile of the user becomes mandatory, his/her personal settings are not
saved. The user always gets default settings or administrator-defined settings.
Profile: – Only roaming profile can be converted into mandatory profile. When
the profile of the user becomes mandatory, his/her personal settings are not
saved. The user always gets default settings or administrator-defined settings.
SETTING PATH FOR ROAMING PROFILE
1. By
default, the roaming profile of a domain user is saved in the c-drive of the DC.
default, the roaming profile of a domain user is saved in the c-drive of the DC.
2. You
can also give a path to save the profile in another location, other than
c-drive.
can also give a path to save the profile in another location, other than
c-drive.
3. Go
to your DC, in any drive; create a folder ‘profiles’.
to your DC, in any drive; create a folder ‘profiles’.
4.
Share the folder and give ‘allow full control sharing permissions.
Share the folder and give ‘allow full control sharing permissions.
5. Open
‘Active Directory Users and Computers’.
‘Active Directory Users and Computers’.
6.
Create a user ‘Ajay’.
Create a user ‘Ajay’.
7.
Right-click on the user > properties > profile.
Right-click on the user > properties > profile.
8. In
the ‘profile path’, type:
the ‘profile path’, type:
\name of your DCshare-folder-nameuser-name
e.g,
\pc1profilesajay
9.
Click Apply & O.K.
Click Apply & O.K.
10. Now
the profile of the user will be saved in the folder ‘profiles’ present in the
DC.
the profile of the user will be saved in the folder ‘profiles’ present in the
DC.
SETTING PATH FOR MULTIPLE USERS
1. Open
‘Active Directory Users and Computers’.
‘Active Directory Users and Computers’.
2.
Select all the users by pressing ‘Ctrl’ on the keyboard.
Select all the users by pressing ‘Ctrl’ on the keyboard.
3.
Right-click on the selected users > properties > profile.
Right-click on the selected users > properties > profile.
4.
Select ‘profile path’ and type:
Select ‘profile path’ and type:
\name of DCshare-folder-name%username%
e.g.,
\pc1profiles%username%
5.
Click Apply & O.K.
Click Apply & O.K.
SETTING ‘INTERNET EXPLORER’ AS
LOGON SCRIPT
LOGON SCRIPT
1. Go
to your DC and go to c-drive > program files > internet explorer
> copy the file ‘iexplore.exe’ to c-drive > windows >
sysvol > sysvol > click on the domain-name > scripts
> paste the file.
to your DC and go to c-drive > program files > internet explorer
> copy the file ‘iexplore.exe’ to c-drive > windows >
sysvol > sysvol > click on the domain-name > scripts
> paste the file.
2. Open
‘Active Directory Users and Computers’.
‘Active Directory Users and Computers’.
3.
Right-click on ‘Ajay’ > properties > profile > logon
script.
Right-click on ‘Ajay’ > properties > profile > logon
script.
4. Type
iexplore.exe
iexplore.exe
5.
Click apply & O.K.
Click apply & O.K.
6. Go
to client, logon as Ajay.
to client, logon as Ajay.
7.
Internet Explorer will open automatically.
Internet Explorer will open automatically.
8. You
can set any program as logon script.
can set any program as logon script.
HOME FOLDER
It is
the personal folder of a user. If user saves his/her data in the home folder,
his/her data cannot be accessed by other users.
the personal folder of a user. If user saves his/her data in the home folder,
his/her data cannot be accessed by other users.
SETTING PATH FOR HOME FOLDER
1. Go
to your DC or file server, create a shared folder ‘userdata’ and give ‘allow
full control sharing permissions’.
to your DC or file server, create a shared folder ‘userdata’ and give ‘allow
full control sharing permissions’.
2. Open
‘Active Directory Users and Computers’.
‘Active Directory Users and Computers’.
3.
Right-click on ‘Ajay’ > properties > profile > home folder
> connect.
Right-click on ‘Ajay’ > properties > profile > home folder
> connect.
4.
Select a drive letter and type:
Select a drive letter and type:
\name of DC or file servershare-folder-nameuser-name
e.g.,
\pc1userdataajay
5.
Click Apply & O.K.
Click Apply & O.K.
6. Go
to client, logon as Ajay.
to client, logon as Ajay.
7. Open
‘My Computer’ and you can see a network drive in which user can save his/her
data.
‘My Computer’ and you can see a network drive in which user can save his/her
data.
HOW TO CONVERT ROAMING PROFILE INTO MANDATORY PROFILE?
1. In the previous example, you have
created a user ‘Ajay’ and has set path for the roaming profile.
created a user ‘Ajay’ and has set path for the roaming profile.
2. Now go to client PC, logon as Ajay.
3. Change wallpaper and log off as Ajay.
4. To convert roaming profile of Ajay into
mandatory profile, go to your DC and open the folder ‘profiles’.
mandatory profile, go to your DC and open the folder ‘profiles’.
5. To open the folder ‘ajay’, right-click
on the folder > properties > security > O.K. >
advanced.
on the folder > properties > security > O.K. >
advanced.
6. Select owner > select the group
‘administrators ‘ > apply & O.K. > O.K.
‘administrators ‘ > apply & O.K. > O.K.
7. Again right-click on the folder ‘ajay’
> properties > security > add > type administrator
> O.K. > Give Allow Full Control to administrator > Apply
& O.K.
> properties > security > add > type administrator
> O.K. > Give Allow Full Control to administrator > Apply
& O.K.
8. Now open the folder ‘ajay’.
9. Go to tools > folder options
> Select ‘show hidden files and folders’ and also uncheck the option ‘
hide file extensions……………’
> Select ‘show hidden files and folders’ and also uncheck the option ‘
hide file extensions……………’
10. Now right-click on the file
‘ntuser.dat’ > properties > security > Do the same
security settings as we did for the folder ‘ajay’.
‘ntuser.dat’ > properties > security > Do the same
security settings as we did for the folder ‘ajay’.
11. Rename the file ‘ntuser.dat’ to
‘ntuser.man’.
‘ntuser.man’.
12. Right-click on the file ‘ntuser.man’
> properties > security > Remove the user ‘administrator’
> O.K.
> properties > security > Remove the user ‘administrator’
> O.K.
13. Also remove the user ‘administrator’
from the security tab of the folder ‘ajay’.
from the security tab of the folder ‘ajay’.
14. Go to client PC, log on as Ajay.
15. Set wallpaper.
16. Log off as Ajay
17. Personal settings of Ajay will not be
saved as his profile is now mandatory.
saved as his profile is now mandatory.
18. Log on as Ajay and you can get only
the default profile settings.
the default profile settings.
