Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hi, I am trying to setup a mandatory profile on my Win2000 Server Domain controller(Win2000Pro and WinXPpro client computers) for a certain group of users. I am following a books directions and step-by-step tutorials on the internet to setup this mandatory profile, each step is very easy to follow, but once I implement it, users are getting this message at logoff; "Windows could not update your Roaming Profile. Contact your network administrator". Here are the steps I am taking.
1. In the users folder on the server I have created a user called "testuser" that will setup the mandatory profile, and a group called "manprofusers" wich will hold all the users that will be assigned this mandatory profile. I added the users to this group.
2. On the server I then created a shared folder called "profiles" with admin/everyone having full control. In this shared folder I have created another folder that is not shared called "mandatory" with security setup as admin = full control and "manprofusers" = read&execute.
3. I logged into a Win2000Pro client as "testuser" and configured a simple desktop (I made a shortcut to notepad on the desktop). I then logged off the client.
4. I logged into the Win2000Pro client as the domain administrator and copied the "testuser" profile to the "mandatory" folder on the server, with 'permission to use' given to the "manprofusers" group. I then logged off the client.
5. On the server I went to the "mandatory" folder, unhid the hidden files, a few additional folders then appeared along with a single DAT file called ntuser (this file had an icon that looked like a sheet of paper with the windows logo on it). I right clicked this file, went to rename, and renamed it ntuser.man.
6. I went to each individual users account that are going to use this mandatory profile and changed their profile path to '\\dc-svr\profiles\mandatory'.
7. I logged into a client computer with a user assigned to receive the mandatory profile. No shortcut to notepad is on the desktop so I assume that if this is the first time the user logs in, they are given a local profile and not the mandatory profile until the 2nd time they log in. I log out and receive the message "Windows could not update your Roaming Profile. Contact your network administrator". I click 'OK'.
8. I log back in with the same user for the 2nd time, the mandatory profile is applied (I see the shorcut to notepad on the desktop). I then log out and receive the same "Windows could not update your Roaming Profile. Contact your network administrator" message.
9. I log into the client computer as the local admin to check the user profiles on that computer. The users that I have assigned to have a mandatory profile have there profile type listed as 'Roaming' and not 'mandatory'.
What am I doing wrong??
It seems that it must be a permission issue for the users I want to have mandatory profiles, but I can't see where it could possibly be. Read&Execute are the permission listed to give to the group assigned to receive this mandatory profile, it seems that by the message I am getting the profile is trying to get written to wich should not be the case.When I look at the user profiles folder on the client computer I see 2 ntuser files, a DAT and a txt file, but only the DAT file is being copied to the server location i specify.
Am I renaming the ntuser DAT file correctly?
What is that ntuser txt file that is not being copied to the server from the client for?

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |