Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Use same Local profile for all AD users

14 Nov 2011   #1
JonasDavis

windows 7
 
 
Use same Local profile for all AD users

Hello:

I have a group of computers joined to an AD domain that are running windows 7 Enterprice and the DCs are windows 2008 R2. My objective is to get all of these computers (about 50 of them) so that when any AD user logs in they all use the same profile folder under C:\Users. This means that they would all have the same desktop, my documents, libraries and registry (HKLU). I have control over some (about 10%) of the users that will be accessing these 50 computers but most reside out of the OU that I manage so I figured I would have to use some sort of GPO loopback for this to happen. I have been looking around for a way to do this but unfortunately I have not come accross anything that will let me do this.

However, recently I was taking a class a my local college and I notice that on the school's computer (also windows 7) when a user logs in (with their own individual AD credentials) they all get the same desktop. Upon closer inspection, any user that logged into a classroom computer got redirected to use the C:\users\classroomuser profile. This means that if I leave a file on the desktop and log out then the next user that logs in to that computer also sees that file in their desktop. I checked the permissions for 'C:\users\classroomuser' and it looks like 'everyone', 'administrators' and 'classroomuser' all have full access to that folder and its decendants. I looked some more and it seems that domain users is part of their local administrators group as well. And although this is a big no-no, they do have a price of software installed on all their PCs that allows them to restore the systems back with a simple reboot in the event that someone trashes it. In either case, I kept looking around to try and figure out how they were doing this so a ran a rsop.msc command to see what policies they were using to do this but I couldn't see anything outside of firewall settings, and regular system lockdown info. I looked in the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList and noticed that there were only two listed users (aside from the builtin stuff) one was classroomuser and one was my own. However, they both had the same value for 'ProfileImagePath'.

My questions are, how did they manage to do set the value of that ProfileImagePath variable for my user when I logged into the system if I did not see this under any setting on GPO? how can I achieve the same functionality?


My System SpecsSystem Spec
.
07 May 2012   #2
Mike908

Windows 7 Professional x64
 
 

Hello,
We would like to do the same thing. I think your detailed description has helped me frame some of the questions I had, but I was hoping you had found something in the time since this was posted.
My System SpecsSystem Spec
Reply

 Use same Local profile for all AD users




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
How to have same profile for all users in the domain!
Hi. Sorry my language i am from Portugal, and is the first time i post in this fórum! I have a question! I working with several computers in a domain! After restarting before installing the operating system again, I was wondering how do I set the same profile for all profiles! In windows...
General Discussion
Local accounts and custom profile
Hi I have Windows 7 SP1 and I want to create a custom default profile so that, when I will have to create the local accounts, they already will have the custom profile. Thanks Bye
Installation & Setup
help i can not access my users profile information
i can not acces to my information and when i logged in a message appeared and it said that all my information would be deleated when i log off, it is what i did, i clicked in my profile properties and then i clicked in the security tab and i clicked in edit then i marked all in deny because i...
General Discussion
Delete copy of local profile not working
We have the GPO setup at our company which deletes a copy of local profile after 1 day. All our PC are XP Win7 What we are finding is for some reason on log off or on startup it is trying to delete a profile but cant and event viewer show errors either with event code 1533 or 1530 ...
Network & Sharing
administrator profile in c:\users
Hi folks, i have question :) I did a clean Windows 7 Home Premium 64-bit install and something i have noticed is that there is a administrator profile folder in the c:\users What I know is that the administrator account is disabled by default so the administrator folder should not be there? ...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 18:01.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App