Account Management - MCTS Guide to Microsoft Windows Server 2008 Active Directory Configuration - page 170

the user logs on? This type of profile is called a mandatory profile . It works much like a regular
roaming profile, except changes to the profile aren't copied to the server.
Mandatory profiles are sometimes used when users are assigned a generic logon shared by
several employees. For example, a company might have a class of user referred to as Night
Administrator. If several full-time or part-time employees share this designation, they can all be
assigned the logon name “nightadmin.” The network administrator can keep a tight rein on
these users by creating a mandatory profile for the nightadmin user account with these steps:
1. Create the nightadmin account and log on as that account.
2. Configure the desktop and Start menu settings as necessary.
3. Log off as nightadmin and back on as Administrator.
4. Copy the nightadmin profile to the Shared Profiles folder on the server by using the User
Profiles dialog box (opened from the Advanced tab of the System Properties dialog box),
shown in Figure 5-14. When you click the Copy To button, you're prompted for the path to
the server.

Figure 5-14 The User Profiles dialog box

5. Rename the Ntuser.dat file in the nightadmin profile as Ntuser.man, and mark the file as
Read-only.
6. Configure the profile path in the nightadmin user account's Properties dialog box.
You can also use these steps to have multiple user accounts use a single mandatory profile.
In Step 4, after you copy the profile, click the Change button and select the users who should