Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Use same Local profile for all AD users

14 Nov 2011   #1
JonasDavis

windows 7
 
 
Use same Local profile for all AD users

Hello:

I have a group of computers joined to an AD domain that are running windows 7 Enterprice and the DCs are windows 2008 R2. My objective is to get all of these computers (about 50 of them) so that when any AD user logs in they all use the same profile folder under C:\Users. This means that they would all have the same desktop, my documents, libraries and registry (HKLU). I have control over some (about 10%) of the users that will be accessing these 50 computers but most reside out of the OU that I manage so I figured I would have to use some sort of GPO loopback for this to happen. I have been looking around for a way to do this but unfortunately I have not come accross anything that will let me do this.

However, recently I was taking a class a my local college and I notice that on the school's computer (also windows 7) when a user logs in (with their own individual AD credentials) they all get the same desktop. Upon closer inspection, any user that logged into a classroom computer got redirected to use the C:\users\classroomuser profile. This means that if I leave a file on the desktop and log out then the next user that logs in to that computer also sees that file in their desktop. I checked the permissions for 'C:\users\classroomuser' and it looks like 'everyone', 'administrators' and 'classroomuser' all have full access to that folder and its decendants. I looked some more and it seems that domain users is part of their local administrators group as well. And although this is a big no-no, they do have a price of software installed on all their PCs that allows them to restore the systems back with a simple reboot in the event that someone trashes it. In either case, I kept looking around to try and figure out how they were doing this so a ran a rsop.msc command to see what policies they were using to do this but I couldn't see anything outside of firewall settings, and regular system lockdown info. I looked in the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList and noticed that there were only two listed users (aside from the builtin stuff) one was classroomuser and one was my own. However, they both had the same value for 'ProfileImagePath'.

My questions are, how did they manage to do set the value of that ProfileImagePath variable for my user when I logged into the system if I did not see this under any setting on GPO? how can I achieve the same functionality?


My System SpecsSystem Spec
.
07 May 2012   #2
Mike908

Windows 7 Professional x64
 
 

Hello,
We would like to do the same thing. I think your detailed description has helped me frame some of the questions I had, but I was hoping you had found something in the time since this was posted.
My System SpecsSystem Spec
Reply

 Use same Local profile for all AD users




Thread Tools




Similar help and support threads
Thread Forum
Profile Migration from local to domain Profile.
HI Guys Hope that you can assist me. I need to merge a local profile on a computer it's domain profile. Example local\test1 to domain\0004 Each computer will have its own domain profile, it will not be a roaming profile.
General Discussion
Remove PC from Domain and keep domain profile as local profile?
I want to remove a PC from a domain and keep the actual domain-profile as a local profile. I would like to keep all the settings for the installed programs and all my data in the various user folders like \documents, \music, \videos, \pictures ... Do you have any tutorial like this one to do...
Installation & Setup
Local or Roaming Profile?
I'm creating a 2nd User acct, haven't done this in awhile and not real sure about some logistics thereof. In the User Acct setup I noticed an option to make a User Acct either Local or Roaming. I have a peer to peer workgroup of 3 nodes in my home (no server). When I look on my C drive in the...
General Discussion
Local accounts and custom profile
Hi I have Windows 7 SP1 and I want to create a custom default profile so that, when I will have to create the local accounts, they already will have the custom profile. Thanks Bye
Installation & Setup
Delete copy of local profile not working
We have the GPO setup at our company which deletes a copy of local profile after 1 day. All our PC are XP Win7 What we are finding is for some reason on log off or on startup it is trying to delete a profile but cant and event viewer show errors either with event code 1533 or 1530 ...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:12.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App