Brilliant....Took me 2 days to do, but works perfectly on 1703. Main trouble I had was with the newly built windows 10 vm on VMWare. I didnt have vmware tools installed which made the mouse unusable. I couldnt install the tools and reboot, as I needed the new install of Windows to go into audit mode. annoyingly, I may need to do it again, as I have spotted something I missed on the profile. Then I need to speed up the login time and get rid of the apps. :) Thanks..
@mattmustonen5663
5 жыл бұрын
All apps seem to work in the Mandatory profile I made except: Alarms & Clocks. Calculator and Voice recorder. I am trying this with Windows 10 1809. any ideas on why this is happening.
@Eddytheone2006
6 жыл бұрын
Great video! Your clock made me smile @22:50 though!
@ytdlder
5 жыл бұрын
Love the vid including your funny comments. Nice job!
@robsisk74
6 жыл бұрын
Thank you James for the great detail in your video. Unfortunately, I must have missed a piece somewhere in this process as when I logon, the mandatory profile is not used and I receive an error to the effect of: “We can’t sign in to your account” - “This problem can often be fixed by signing out of your account and then signing back in. If you don’t sign out now, any files you create or changes you make will be lost”. Do you or anyone out there know of where I might have gone wrong? I’d really like to use a mandatory profile to increase my logon times in my VMware JMP environment if at all possible. BTW…You were a pleasure to listen to. Very entertaining and much appreciated.
@JamesRankin1
6 жыл бұрын
Try this for latest updates james-rankin.com/articles/creating-a-mandatory-profile-on-windows-10-1803/ - video soon to follow. If it still doesn't work drop me a mail at kz20fl [at] googlemail [dot] com
@robsisk74
6 жыл бұрын
Many thanks James. It appears that the ntuser.ini file is not in the network share. So I went to copy it over manually from the C:\users\default but it fails to exist there too.
@JamesRankin1
6 жыл бұрын
Are you showing Hidden and System files?
@robsisk74
6 жыл бұрын
I am. I'm going to attempt this from the beginning tomorrow and see if I get better results. Will post back the results. The patching takes so long so I may not post back until Monday. Have a great weekend.
@robsisk74
6 жыл бұрын
So once again I have attempted this process. Today, I have done everything to the point of copying the profile to the network share. Before I attempted to copy the default profile, I paused and decided to take a look in c:\users\default to see if the ntuser.ini file existed in this directory. It does not. It was there before I applied all of the updates but it is now missing. No sense in going any further and copying the profile out as my problem has already shown it's ugly face. I have no idea what could be causing this.
@arshatmow4577
2 жыл бұрын
hallo james how to create One user - multiple language logging mandatory profiles
@ozrahman126
7 жыл бұрын
This has worked wonders.
@paulca55
5 жыл бұрын
Hi James, what do you need to do if you want to make some changes to the profile (e.g. maybe undoing a change you made to the taskbar), do you have to go through the whole process again?
@arjanv
6 жыл бұрын
hi James, Great video! love it. is it possible to create this mandatory profile on a freshly deployed windows 10 from MDT? so i can set some default settings for other programms used in the mandatory profile? but i don't have that ctrl-shitf f3 option, but is that nessacary? also i would like to know how to speed up the logon time, we don't use most windows 10 apps. at which stage is the best way to remove those apps? while customising the default profile or in a task withinn MDT? hope you read this and have time to give answers:)......it's thursday so you are in a pub right now;) thanks again for this video.
@psychotravis8488
7 жыл бұрын
how to cancel automatic update during update one of my driver is updatin automatically & that update is not working & I just remove the udate & it is updating that driver automatically & I cant disable update because I need widows Update Plzzz Help Me
@chriswiley3572
6 жыл бұрын
Can I use this to lock down system for use in a computer lab with out a domain controller?
@ascaridesign
6 жыл бұрын
Working on 1709 ?
@liamclarke9771
4 жыл бұрын
Can anyone confirm where the unattended file came from please
@tonycasas5602
4 жыл бұрын
Does this work for Windows 10 Pro 1903 ?
@NovaAzK
5 жыл бұрын
After did this, Now I can fast login windows?
@rikeshsheth89
6 жыл бұрын
Hi, for VDI Gold images, do we set mandatory profile on the Gold image or separately?
@johnwood366
7 жыл бұрын
So what then is the recommended way to get rid of the apps? Also when mine logged in the first time, it still did the whole "Hi, welcome to windows" bit, but it only took a couple of seconds. All else seems to work okay.
@JamesRankin1
7 жыл бұрын
Sorry, I have done that ahead of time :-) I remove the apps (if you want to remove them) by using PowerShell in Audit Mode on your base image. So run the PS removal in Audit Mode but then obviously use the device to create the base image you are deploying. To get rid of the Welcome screen, just configure a GPO that stops it from running.
@johnwood366
7 жыл бұрын
So are the apps tied to the image and not the profile? Is there a way to prevent them from provisioning?
@JamesRankin1
7 жыл бұрын
The apps sit in the image and are then provisioned into the local user profile at first logon. You can't stop them from provisioning (I've tried to do this, stopping the AppX Deployment Service does stop it, but there are a few other things that seem to go wrong unfortunately). Best way is to remove them from the image via PowerShell - you can then reinstate them via PS as well if you want. My articles on Windows 10 have a guide to doing this (although it's a little old)
@mattisdabomb19
6 жыл бұрын
Working on 1803! :)
@horians
7 жыл бұрын
Thank you for the video. What a hell to make a roaming profile. I've got to do that for 8 groups of elementary schools. How do i go into audit mode on a PC that has been fully installed with Office, Chrome etc. and where the Windows and Office activation keys are installed and activated?
@JamesRankin1
7 жыл бұрын
Jef Horians you can do it on a fresh install, as long as it is the same version. There's no need to do it on a specific image. Simply build a new machine from the same version of Windows and enter audit mode there. You can throw the source machine away when finished.
@horians
7 жыл бұрын
Maybe it's VirtualBox i'm using that doesn't respond to CTRL+SHIFT+F3. I will look into it. I was always used to let a user create a profile automagically and rename ntuser.dat to ntuser.man. Now they log into Office 365 and with mandatory profiles you get something like: "Your account is corrupted, try to restore it" loosely translated from Dutch. Maybe creating a mandatory profile the way you discribe will work.
@JamesRankin1
7 жыл бұрын
Jef Horians I'm not having problems with hyper v, I've never tried Office 365 though, something for me to try when I get home
@chrismadej8361
6 жыл бұрын
you can access safe mode by using CMD(admin) and CD to c:\windows\system32\sysprep and then type sysprep.exe a window box will open and you can choose audit mode
@darkside2329
7 жыл бұрын
Great vid! Thanks! The result I achieved was a Type=ReadOnly profile rather than a Mandatory. Is this expected? I found this by looking at the profiles screen.
@JamesRankin1
7 жыл бұрын
Er, no, I've never seen that happen before, it should say Mandatory AFAIK
@k4rd1
6 жыл бұрын
The "all application packages" and "system" permissions are only needed for a mandatory profile to work, or should be set on non-mandatory roaming profile as well?
@JamesRankin1
6 жыл бұрын
Only on a non-mandatory if you're using it as a base profile, such as a profile in the netlogon share
@alfitoromero
5 жыл бұрын
Hi James, I followed your latest documentation for Creating a mandatory profile on Windows 10 1803 that you have on your website. Pasting it just in case somebody needs it. james-rankin.com/articles/creating-a-mandatory-profile-on-windows-10-1803/ Great documentation! I successfully created and deployed the mandatory.v6 profile and it works like a charm. Anyway, the environment we have here from time to time needs some changes on the mand profile such as adding new bookmarks to IE or adding desktop shortcuts. In the past with mand.v2 (Windows7) you could rename the ntuser.MAN to ntuser.DAT make sure the Authenticated Users had full rights, then make the proper changes to the profile while logged in. Then you would reboot the PC and these changes would stick to the profile. Finally, once you were satisfied with the changes you would change ntuser.DAT back to ntuser.MAN, give read&execute rights to Authenticated Users, log in to the mand profile and see the changes you made. I tried to do this with the mand.v6 but after I set the profile back to ntuser.MAN it would not let me log in to the PC. I get "The User profile Service service failed the sign-in. User profile cannot be loaded". Any thoughts on this?
@baghla1
6 жыл бұрын
After following this i am losing permission on c:/users folder after logging by administrator
@mooreatom
6 жыл бұрын
Can a make domain users login to one local profile or usersl? I would like for them all to login to same local account so the settings all match and it does not create a new local profile. Great video.
@JamesRankin1
6 жыл бұрын
In that case you should use a mandatory profile, which you can store locally if you wish, yes. You simply need to point each user's AD profile path at the local path
@mooreatom
6 жыл бұрын
James Rankin no luck on my end. Im still running server 2008 R2 so not sure if that's the problem or a rights issues. Pointed to a local profile and still does not work.
@killswitch1978
4 жыл бұрын
Im having a problem with the powershell when I run it, it says "a fatel error occurred while trying to sysprep the machine".pls help
@killswitch1978
4 жыл бұрын
yo my windows didn't activate is that gona be a problem
@JamesRankin1
4 жыл бұрын
Not sure, often Windows shows as non-activated in Audit Mode. Are you running PowerShell as admin?
@fbifido2
7 жыл бұрын
can you modify the default Start Menu, Start Tiles and FTAs, and make that part of the mandatory profile? Also How to speed-up logon time with all these modification?
@traciebritton759
7 жыл бұрын
No. What you would need to do in that case is replace the DefaultLayouts.xml on the machine to provide a custom Start Menu/Tiles that you have saved, and use the GPO for Default File Type Associations to provide the FTAs you have selected.However if you set some FTAs in your mandatory profile they might persist - Start Menu and Tiles is a definite no as the LOCALAPPDATA folder does not get copied, and copying it manually breaks the Start Menu.
@JamesRankin1
7 жыл бұрын
Sorry, I must stop replying in IE as it is logged in under my wife's account :-) The comment stands though ;-)
@fbifido2
7 жыл бұрын
Is it possible to go into audit mode, do modification, reboot, and go back into audit mode? Can we modify the Excludedir, reboot, audit mode, then do the sysprep with copyprofile. (just wanted to see if the copy-profile settings use excludedir when sysprep runs).
@JamesRankin1
7 жыл бұрын
As far as I know, Audit Mode is only accessible at build time. It uses the built-in Administrator account which is then disabled. The Copy Profile settings might well use the ExcludeProfileDirs, because it only takes roaming and a mandatory profile is really a read-only roaming profile. I might give that a test next week if I can find time. You could certainly change the Registry after Audit Mode and before you run the Copy Profile command to see if it makes a difference.
@fbifido2
7 жыл бұрын
or maybe when you do a manual default profile copy, within windows it only copy a static set of files & folders.
@J1nxMC
6 жыл бұрын
Hi James, I've followed everything in your guide but unfortunately the Start Menu doesn't appear. Any ideas? Thanks
@JamesRankin1
6 жыл бұрын
Matthew Clark what version of Windows are you using? I really need to update this video for the new versions but time is proving hard to find
@J1nxMC
6 жыл бұрын
Hi James, I'm using Edu on 1703
@JamesRankin1
6 жыл бұрын
Let me see if I can test on Education, I did my original video on Enterprise. Hopefully can get it done today or tomorrow
@J1nxMC
6 жыл бұрын
Thanks, that would be great! Just fyi we use group policies but I've tested with and without these, and also recreated the profile a few times.
@fbifido2
7 жыл бұрын
on the video notes at kzitem.info/news/bejne/s2qImoWifqp9poo "UPDATE FOR 1703 - you may need to edit the Registry value to the following - " This updated Exclude, is for Windows 10 1703 Ent. only ? or can be used with Pro/Edu ? Thanks.
@JamesRankin1
7 жыл бұрын
Never tried it with Pro/Edu but would assume it would work exactly the same. Sorry, your comment got flagged as possible spam by KZitem, so was delayed in approval.
@duncanmcclean
6 жыл бұрын
Where can we get a copy of your unattend.xml file?
@JamesRankin1
6 жыл бұрын
Hi Duncan, the text for the unattend.xml file is in this article - james-rankin.com/articles/creating-a-custom-default-profile-on-windows-10-v1803/
@duncanmcclean
6 жыл бұрын
Thanks, I've just tryed to type it out myself and I failed. Hoepfully it will work this time
@JamesRankin1
6 жыл бұрын
Check the formatting if you copy and paste it. Sometimes quotes, dashes and the like come out wrong and may need replacing
@erikhoenderdos
7 жыл бұрын
Hey thanks for this video. i've got one question. Does anybody has edge working following the procedure of this video? Profiles build this way are not able to work with edge. When i log on everything works as expected. except for edge. it starts, tries to load the first run page, and then crashed. Edge crashed, i got back to the desktop. anybody a solution for this one?
@erikhoenderdos
7 жыл бұрын
i use windows 10 1703 educational
@JamesRankin1
7 жыл бұрын
Have you set the Registry value for "allow deployment operations in special profiles"? This was introduced in 1703
@erikhoenderdos
7 жыл бұрын
Hi, Yeah i did this trough a GPO. i've double checked if these computer settings were actually applied. (the gpo was applied ;( ) Still looking for a reasonable solution. But i think i will end in demolisch edge on the school computers and offer Internet Explorer and Google Chrome to the mandatory profile users (mostly students). So many people looking for a solution on the internet for different profile errors. I think it's kind of embarassing how windows 10 works with roaming profiles... if i find a solution i will post it here.
@JamesRankin1
7 жыл бұрын
It works fine for me on Enterprise, should be exactly the same on Education. Unfortunately I don't have an Education ISO. However I have seen this problem happening before on Enterprise, and it turned out to be related to my GPOs. Add the machine to an OU with no GPOs applied, delete any locally stored profiles, and it works. After some updates, it stopped happening.
@erikhoenderdos
7 жыл бұрын
Hi James, I tried this. no Computer GPO;s applied. I will try a fully patched windows 10 and no user GPO applied later today.
@andrescott9756
7 жыл бұрын
Firstly, great video. Seccondly after following I still can't get edge to work! everything else like calulator and store working, but edge not! Very frustrating. On the education package 1703. Seems this doesn't help either. social.technet.microsoft.com/Forums/windows/en-US/9aa31760-d675-42ca-b020-6c6aec93487f/copyprofile-in-sysprep-breaks-the-start-menu-in-creators-update-v1703?forum=win10itprosetup Any suggestions?
@JamesRankin1
7 жыл бұрын
What happens with Edge?
@andrescott9756
7 жыл бұрын
Crashes, insantly.
@JamesRankin1
7 жыл бұрын
Have you got value set in Registry for special profile deployment?
@andrescott9756
7 жыл бұрын
Yes that's set to true and it is being applied.
@JamesRankin1
7 жыл бұрын
Do you get the same behaviour on Enterprise?
@MkoEC
6 жыл бұрын
What about 1803? :(
@anthonyphippen2230
6 жыл бұрын
Did you find a 1803 setup?
@MkoEC
6 жыл бұрын
No :(
@fbifido2
7 жыл бұрын
Why does it say Windows 10 1607?
@JamesRankin1
7 жыл бұрын
Where does it say that?
@fbifido2
7 жыл бұрын
@25:27 on start title: "Welcome to Windows 10 1607"
@JamesRankin1
7 жыл бұрын
Oh that. That's because I use a GPP to deploy a custom DefaultLayouts.xml file, and I haven't updated it to a new one since Windows 10 1703 came out. The version number is correctly shown in the bottom right of the screen.
Пікірлер: 102