Creating a roaming profile:

On Domain Controller
  • Create a user account
  • Create a folder And share it and give full control permission for everyone
  • Start >Program Files >Active Directory User & Computers
  • Double click the user Go to Profile tab
  • Enter Profile path For example :
    \\sys1\profile\username
  • Apply then click ok
  • To verify Move on to your member server
  • Log in as user
  • My computer then Properties
  • Advanced-Profile settings-you should notice the status change to “roaming profile”.

Creating a mandatory profile:


  • Open the profiles folder you’ve created for roaming.There will be a user folder
  • Take the ownership of the folder of the user
  • Right click on the folder properties Security –
    ok – advanced Owner – administrators Replace owner on sub >apply – ok
  • Open the folder
  • Rename the file Ntuser.dat to ntuser.man
  • Back Give back the permission (ownership)
  • Folder Properties Security – advanced Check the box Allow inheritable Check - Replace permission entries on all
  • Apply – ok

Verifying:

  • Move on to client machine
  • Login as user
  • Make some desktop changes
  • Create a folder or delete a folder
  • For removing mandatory profile just rename ntuser.man to ntuser.dat