Many a time system admins want to create a pre-configured person account which works with mounted settings. These profiles are known as Mandatory User Profiles (one among many ) in Windows 10. In this information, we’ll share how one can create a Mandatory User Profile, the place do you want it, and the way it works.
What are Mandatory User Profiles in Windows 10
Imagine a situation the place you want to arrange an account which has pre-configured entry to virtually the whole lot. It consists of the icons that seem on the desktop, desktop backgrounds, person preferences in Control Panel, printer alternatives, and extra. Any change the person makes in the course of the session isn’t saved and is just legitimate for that session.
This situation matches properly on a pc which is open to the general public. The person can solely have restricted entry to the whole lot. This situation additionally applies to a faculty pc the place you don’t need children to make any modifications to the system.
That mentioned, these profiles are often linked with a server. A system admin could make modifications. In case the server isn’t out there, customers with obligatory profiles can signal in with the domestically cached copy of the obligatory profile if one exists. Otherwise, the person will likely be signed in with a short lived profile.
Interesting to notice system admin can apply obligatory person profile to an present profile. We will get to see that in particulars.
How to create a compulsory person profile
Just earlier than we begin, this could solely apply to particular person instances & it’s difficult for a normal person. Its really helpful not to use a pc that’s for enterprise or work. This course of will take away all area accounts out there on the pc together with person profile folders. It will end result in lack of information.
- Create a default person profile, and set customizations for that person profile.
- Use Sysprep (Microsoft’s System Preparation instrument) to copy this personalized default person profile to a community share.
- Copy Profile & Set as Mandatory Profile.
- Apply a compulsory person profile to customers utilizing lively listing.
How to create a default person profile
1] Sign-in to a pc with an account which is a member of a neighborhood Administrator group. Make positive not to use a website account.
2] Next, make modifications to pc settings that needs to be a match to that person profile. It can embody background, uninstall functions, set up enterprise apps and so forth. Uninstalling pointless apps will assist to velocity up person sign-in occasions.
three] After this, we want to create a solution file (Unattend.xml) which units the CopyProfile parameter to True. In brief,
- The reply file comprises setting definitions and values to use throughout Windows Setup.
- The CopyProfile setting can customise a person profile and use the personalized profile because the default person profile.
First, we’re customizing an present profile after which set it because the default person profile.
four] Launch the Command Prompt, and kind in the Sysprep command
sysprep /oobe /reboot /generalize /unattend:unattend.xml
This command will reboot the pc, and run the setup expertise you often get to see if you arrange a brand new account. Once setup is full, signal in to the Windows machine utilizing an account that has native administrator privileges.
It is feasible that you could be get an error as “Sysprep was not in a position to validate your Windows set up.” If that’s the case go to %WINDIR%System32SysprepPanthersetupact.log. It could have a listing of apps that it’s best to take away. Do it manually.
You also can use the and instructions in PowerShell to uninstall these apps.
Copy Profile & Set as Mandatory Profile
5] Next steps is to copy this profile.
Go to Control Panel > System > Advanced system settings, and click on Settings in the User Profiles part.
In User Profiles, click on Default Profile, after which click on Copy To.
Click on Copy To, below Permitted to use, click on Change
Select User or Group, in the Enter the item identify to choose discipline, sort everybody, click on Check Names, after which click on OK.
Click OK to copy the default person profile.
If you discover, there’s a direct choice to set this as a compulsory profile which is our main intention. You can verify on it, and verify if it really works. If it doesn’t, now we have one other manner in case there’s a drawback.
To make the person profile obligatory
In File Explorer, open the folder the place you saved the copy of the profile. Make positive to earlier than that.
Rename the file Ntuser.dat to Ntuser.man.
Apply a compulsory person profile to customers utilizing Active Directory
If you need to ask a compulsory person profile to any person, you’ll be able to comply with these steps. Once full, you’ll have to look forward to the change to replicate to all area controllers.
- Open Active Directory Users and Computers (dsa.msc).
- Navigate to the person account that you’ll assign the obligatory profile.
- Right-click the person identify and open Properties.
- On the Profile tab, in the Profile path discipline, enter the trail to the shared folder with out the extension. For instance, if the folder identify is serverprofile.v6, you’ll enter serverprofile.
- Click OK.
While I’ve tried my greatest to simplify the method for you all, tell us if we will add something which is lacking.