Over 1 million tech questions and answers.

Can Windows 7 mandatory profiles be created with current tools in a Windows 2012 R2 domain environment?

Q: Can Windows 7 mandatory profiles be created with current tools in a Windows 2012 R2 domain environment?

I am working at a elementary school with a mixed environment of Windows 7 Pro and Windows 10 Pro workstations. We need a roaming mandatory profile for a generic login. The student often are changing settings even with a GPO limiting what is accessible
to the students.
The Windows 7 tools for creating profiles are apparently no longer available. The current tool sets (Windows 8 and Windows 10) have not produced a workable Windows 7 mandatory profile. We get one or another error message when we try them.
Is it still possible to create an usable Windows 7 mandatory profile with "today's" tool sets?
If it still is possible, would you please point me in the correct direction.
Thanks in advance.

Read other answers
Preferred Solution: Can Windows 7 mandatory profiles be created with current tools in a Windows 2012 R2 domain environment?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)


Okay so I've been trying to get this working for quite a while now. On Windows XP creating mandatory profiles is a lot easier! Windows 7 makes it very hard by always having duplicate files in %UserProfile%. I am using an Active Directory with Windows Server 2008 R2 for the domain controller, and Windows 7 for the clients.

So, initially I made a Profiles$ share whereby only the Administrators group had access to it. I then created a folder for every profile within the share (using Active Directory Users and Computers). That, along with Group Policy and Folder Redirection worked very nicely, except every time a user logged in it brought up an error stating "There was a problem trying to load your roaming profile".

So I then figured out that the profile folder itself was not readable by the user. I then went on to the Folder Redirection policies and revoked the exclusive access to their own folders, and then I gave 'Domain Users' full control of the entire share. I know this is quite a bad security flaw, but with Group Policy accessing Profiles$ can be totally disabled.

This did indeed remove the error message, but now there are more problems, such as me having to take ownership of each profile to be able to view the contents, and the profile creates another '.V2' folder, as well as it's original, and that the %UserProfile% folders are linked to the local profile on the C drive.

Could somebody advise me (or link me to a good tutorial) ... Read more

Read other answers

I have setup a new domain on a Windows Server 2008 system, and I'm using Windows 7 as the clients. I have setup working mandatory profiles, but there is 1 problem. The home directory and folder redirection is configured for the mandatory profiles, however, for the client, there is 2 of every folder type. They have 2 'My Documents', 2 'Music', 2 'Pictures', 2 'Downloads', etc, etc.

1 of each duplicate points to a local C drive folder, and the other points to the correct network share. How do I remove the folders pointing to the C drive?

Read other answers


I am an IT Technician/Teacher of a small school, and we are upgrading our systems to Windows 10 this summer but I have done some research and the best way for user profiles is to have one mandatory profile setup and everyone just uses the same one. I am using Win 10 Home. We have around 40 users on the network so far. I am looking to do this so we can easily standardize accounts and account settings.


Read other answers


IP settings 

Subnet mask




Windows 7

IP address automatically  





error code reads 


following error occored wen DNS was queried for the servise location (SRV)

record used to locate an Active Directory Domane Controller (AD DC) for Domain



error was: "This operation returned because the timeout period expired."

code 0x000005b4 ERROR_TIMEOUT)


query was for SRV record_ldap._tcp.dc._msdcs.dalek.local.

DNS server used  by this com... Read more

Read other answers


We are currently in the process of updating the Windows machines at the university that I work up to Windows 7 from XP. Recently we have been noticing issues when students log into the machines where it might randomly login to a TEMP profile over the Domain Profile.

Any ideas on why this might be?

A:Temp Profiles being created on Domain Users Accounts Win 7

I would check to see if you are using redirected folders on the server for the users in question. I have seen problems because of the different folder structure for the "?sers" folder in xp versus win 7.

Read other 1 answers

I'm currently running Windows Vista and Windows Xp in a 64 bit environment. I would like to add Windows 7. Is it as simple as installing Windows 7 in a separate partition? If not can someone give me some ideas or point me in right direction. I have not used Virtual Machine 2007 but would consider if this makes sense. Thanks for your help.

A:Adding Windows 7 to current XP Pro and Vista multiboot environment

Yes, a new partition would do it. Vista & W7 must be retail copies.

I had tri-boot 10 months ago, but ditched it because of space constraints. If you go virtual, be vigilant as BSODs may develop, especially with an x86/ x64 mixture.

Read other 2 answers

I RIS'ed a machine for work use, Windows XP Pro, and noticed that it has duplicate profiles in Docs & Settings for Default User and All Users, but the second profiles contain a .WINDOWS extension. My personal profile and the administrator profile do not. I don't have dual boot nor did I install Windows on a second partition. As far as I know the image from our RIS server is not corrupted, I have used it many times before with no issues.

My service director recalls something about this, thinking that when this happens there somehow was a second version of Windows created somewhere, or something like that. What may wind up happening, he says, is that at some point the PC could arbitrarily decide to boot to the alternate Windows and screw me up completely. I'm not sure if he's right, but I worry that he may actually be! I wouldn't be so devastated since I haven't wiped out my old machine yet, but I have client's machines that I know this is occurring on, and that would be really bad if something catastrophic happened!!! (One of the clients is the County Finance Director and Assistant Administrator!!!)

Does anyone know what this is really all about? Is it potentially a risk for future booting up? Can I just delete the two ".WINDOWS" profiles and be done with it, or is there a way to resolve this issue?



A:Why would imaging my machine created ".WINDOWS" profiles

How many Windows folders...do you see on the C: partition?

How many users are reflected in User Accounts via Control Panel?


Read other 5 answers

   Dear Team
       I have windows 2012 R2 domain server. It is connected domain perfectly windows 7 pro .
      But if i connected domain windows 7 ultimate . It is showing DNS error. I am joining same process win7 pro.
      please help me how to join windows 7 ultimate in domain.

   Note. I give my client PC windows 7 ultimate network proper DNS.

Read other answers

Hey I need your guys' sugguestions on what to do to secure windows 7 in a domain environment

what we've done so far is set most people to a standard user, set UAC to the second notch from the top, have DEP enabled for third party programs, have the default policy set in windows firewall advanced (is this controlled by sysadmin?), disabled fast user switching, and have a daily scan antivirus with central console and biweekly reports emailed (symantec endpoint).

Of course we try to keep all software up to date with separate updaters (like flash and acrobat) and windows updates through WSUS. IE8 is also in protected mode. Is there anything else we can do?

A:securing windows 7 32/64 bit in a domain environment

Quote: Originally Posted by Firestrider

Hey I need your guys' sugguestions on what to do to secure windows 7 in a domain environment

what we've done so far is set most people to a standard user, set UAC to the second notch from the top, have DEP enabled for third party programs, have the default policy set in windows firewall advanced (is this controlled by sysadmin?), disabled fast user switching, and have a daily scan antivirus with central console and biweekly reports emailed (symantec endpoint).

Of course we try to keep all software up to date with separate updaters (like flash and acrobat) and windows updates through WSUS. IE8 is also in protected mode. Is there anything else we can do?

I would hope that you have someone MCSE certified handling the set up of this domain. That person should be able to handle it without a problem. If it is security you are worried about, find someone with a CISSP certification.

Read other 3 answers

How can I keep the users profiles as they are (icons, emails, backgrounds etc..) but change only the domain they are connected to????? At this branch we have about 40 XP PCs on a NT domain that'll soon change to Windows2003 as the old NT servers are about to fall to pieces. As far as I know, if you log people onto another domain, the XP PCs creates a new profile, this is what I want to avoid. The old NT server cannot be upgraded to Windows2003 as its just too old so we have to bought in a new server and will soon migrate the users account over. Any help would be appreciated.

A:Windows XP Profiles and domain changes.

Read other 6 answers

Hi guys,

We are currently testing Windows 7 RC (build 7100) within our domain environment, and we have stumbled across an issue with mapping the user's home directory.


Windows Server 2008 AD domain.
All member servers are also server 2008 boxes.
All domain members (clients) are running Windows Vista Enterprise with SP2

All users have home folders and roaming profiles


When the user logs into the Windows 7 client they cannot see their home directory, which is a network share on a 2008 file server. Instead, Windows creates a local profile under the C:\Users\%username% directory. Sometimes it completely fails with an error, creating a temporary profile for the user.

The user can see other network drive mappings created as part of the log on process, e.g. for public shares, etc, etc.

They can also browse via the UNC path to their network location \\servername\homedrive\%username%, etc, and read/write to their directories.

Users do have roaming profiles and it make no difference if we use them or not.

Things we have tried:
We have logged in with the same credentials on a Windows Vista client (same hardware, OU, GPOs, and username) this works without any issues.
Rebuilt the machine from scratch and placed in an OU with no policies applied to it.
Tried admin accounts and limited user accounts - same problems.
Created new user accounts for testing and used existing account

No joy.

Everything else has worked flawlessly

Anyone els... Read more

A:Windows 7 profile issues (domain environment).

There are definitely some network issues yet in the 7100 build. You've probably noticed there's quite an internal push for Homegroup and Libraries as well so I'm wondering if the 7100s have formed a homegroup that's being prioritized at the moment over domain.
That's my guess at least, if they are in homegroup they may require a local profile. Otherwise I dunno, except its a beta build still.

Read other 2 answers

I'm trying to set up a new PC around the office, but as soon as I establish a connection to the domain, Windows Update keeps giving me ERROR: 8024402F. This may sound wacky, but I've narrowed the problem down to the clock (as in time). After checking the Event Viewer logs I found this...


Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 8/24/2011 1:02:36 PM
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LABPC1.******************.com
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.co...uthrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Event Xml:
<Event xmlns="Error">
<Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
<EventID Qualifiers="0">4107</EventID>
<TimeCreated SystemTime="2011-08-24T18:02:36.849214800Z" />
<Correlation />... Read more

A:Windows Update Doesn't Work in Domain Environment

Welcome eaturbrainz { like the user name BTW.}

Links below that should address your problem.
Note they are in a random order.

You may encounter temporary connection-related errors when you use Windows Update or Microsoft Update to install updates

Updating Windows Update Agent (Windows)

System Update Readiness Tool - CheckSur.log File Analyzis

Windows Update error 80244016, 8024402f, or c80003fa


How to troubleshoot problems connecting to Windows Update or to Microsoft Update

Read other 7 answers

Is there an Official Microsoft Guide to create Mandatory User Profile For windows 8.1 with latest update installed ? i still use My own Experience to create mandatory profile (Experience that Driven from windows Vista and 7) and still have Multiple issues
with it ?
Or is there a Official Microsoft recommendation to deploy windows 8.1 with latest update installed to educational  Labs on campus using Domain Credential for longing in (instead of using roaming profile and minimizing login time as well ) ?

Read other answers

I have not been able to find an answer that matches the issue I'm facing. I had recently setup a laptop for a user and soon after, he was experiencing issues that I thought might be profile related. So, I did what always worked for me on prior versions of
Windows without any fuss or side affects.
I logged in under the local Administrator account, I went into: System Properties>User Profiles>Settings and removed the user profile from there. When I do that, I get an error message:
Profile Error
Profile not deleted completely. Error - A required privilege is not held by the client
Ok, no problem I think. I just need to delete the user's profile directory under the users folder right? So I do this and figure when I try to log in again as the user that a new profile will be created. However, this is not what happens exactly. I login
with the user credentials and it logs in successfully. However, I get a pop saying:
You have been logged on with a temporary profile
You cannot access your files and files created in this profile will be deleted when you log off. To fix this, log off and try logging on later.
Please see the event log for details or contact your system administrator
So my question is; why did the profile not delete completely after both deleting the user profile under System Properties and after deleting the actual profile directory? What did I miss and what is the proper method of deleting a user profile completely
without running into these other i... Read more

A:How To Properly Delete a User Profile on Windows 7 in a Domain environment

Sorry for my dilatory reply. Obviously, you encounter a problem when removing a user from system. Generally speaking, we can delete a user profile in Control Panel:

While, for your operation, it just delete the User Profile, next time you login system, it would use Default Profile to login, then you would see a temporary profile login.

Roger Lu
TechNet Community Support

Read other 3 answers

Whenever I log in to windows 7 using my test AD account I only see 3 icons inside control panel.... When I log in to XP using the same AD account I see all the control panel icons that Im supposed to see according to my GP settings. So it looks like my GP is NOT working properly for windows 7 machines any ideas on what I can do to fix this issue?

A:Domain Group Policy 2003 environment & Windows 7 clients

Could it be the admin of Active Directory has set a group policy for Win 7 users that limits what is available in the Control Panel? They may not be administering XP the same way.

**EDIT** I just realized you are probably the network admin. Duh...

Read other 2 answers

A couple of days ago some of the domain users profile got temporary. I want to know what is the reason behind this that cause user profiles to get temporary? (of course other than infecting the client to virus and ransomware) 

Read other answers

This is for a school that I support that has a few Windows 8.1 tablets for each class room. The problem that I have found is that when a student logs in they do not get the 'Desktop' link on the Metro Start Menu. This turned out to be because the student's
have a redirect policy for their Start Menu so it can be centrally managed giving them quick access to what they need on the Windows 7 laptops they have.
Note: Desktops are also redirected to provide links and other material that the student needs.
I  have managed to copy and drop the desktop shortcut to the DFS Start Menu share but the user has to swipe to the right and then down, then search through the list of all programs before they see this link! Very long and messy.
Now I have found that the Start Menu 'pinned icons' (which apparently no longer honour the start menu redirection rules) are actually stored in the user's home area/application data folder which is also redirected.
original before redirection:
%AppData%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu
source: http://superuser.com/questions/171096/where-is-the-list-of-pinned-start-menu-and-taskbar-items-stored-in-windows-7
I need to be able to create this shortcut for every user and paste it into their app data folder as specified in GPO:

User SettingsPoliciesWindows SettingsFolder
RedirectionAppData(Roaming)Setting: Basic (Redirect everyone's folder to the same location)Path: \\SERVERNAME\StudentPRFO\%USERNAME%\Appli... Read more

Read other answers


I'm trying to create mandatory profiles for all of the users, that will be logging onto the system. I'm using windows xp Professional, and keep on getting this error message when I set the users profile from a network location.

"Your roaming profile (read only) is not available. You are logged on with the locally stored profile. This may be caused by incorrect file system permissions or network problems. Contact your network administrator."

When i set the profile up on a tempary account, i made sure that everyone has access to use it. But the profile only works from one account only.

Any ideas

A:mandatory profiles

Read other 9 answers

Hello There,

 I was working on making mandatory profiles using DFS. When I do mandatory profiles from the server it works just fine (log into user account, and make changes on the desktop, and when I log off the changes do not remain (how it should work). When I
put the same folder content for profiles into DFS and log off and log back in the profile does not give me a new desktop (it keeps the changes I made previously). If anyone could give me an idea why this happens, it would be greatly appreciated. Thanks in

Read other answers

30 xp users/workstations
2003 sbs
+ 1 I.T n00b

Hi guys,
I am feeling a little out of my depth here. I have a very limited knowledge of networking and setting up of profiles so I have been doing my homework over the last couple of weeks. Yesterday I implemented a mandatory profile for all users after some testing with a dummy user. All went fine and I sat back in my seat with a sense of acheivement! LOL It lasted all of around 15 minutes! Suddenly some of 'the women' started saying that they couldnt connect to their files on the server and some of them couldnt login (maximum connections reached). I have had enough of Mand Profs already and Ive only just reached the first hurdle! I want to tidy up the pcs in the office and create some kind of standard, all icons the same, wallpapers, and they must all be able to connect to the server.
Why is it that when they had their messy default profiles, everyone could connect and the 10 maximum connection issue wasnt an issue?
Dont be affraid to 'dumb it down'. lol

A:Mandatory Profiles help/alternative?

i hav just logged into the server and went into cmd promt. typed 'net config server'. it says that the maximum user connections is 'unlimited'!?!?! if I do the same from an xp workstation it says max is '10'!
Anybody here that can throw some light on this?

Read other 1 answers

Hiya, I recently started to set up a Server at my work place. Im familiar with Professionl/Server 2k and I am currently taking MCSE...anyhow..

I have created a domain, and I am trying to make roaming user profiles, First I go to Active Directory Users and Computers and create the user, pass etc...Then I go into that newly created user and edit the the profile to go to my server where I want the new profile to be stored eg: \\server\profile\%username%. I then go to my computer, user profiles and copy the settings I want imatated to the same directory as above \\server\profile\%username%. I then log the user on to make sure it is working, on a windows 2000 Professional workstation that is part of the domain...log on the user and it CREATES a new profile path on C:\Documents and Settings\user\ instead of refereing to the \\server\profile\user i previously created.

I can not figure out why it does not refere to the profile path I have created/specified and makes the new directory...any suggestions would be helpfull, Thanks


A:Roaming/Mandatory user profiles.

Read other 8 answers

I volunteer at a small catholic school to take care of their network. I am very good with the hardware portion and most of the administrative tasks but the thing that has me stumped right now is getting the user profiles set up properly.Our server runs Server 2003 and ALL of the clients are XP Pro. We want all Students to see the exactly the same thing when they logon each and every time. We want them to be able to make changes but we do not want those changes saved. I have been told by various experts to use roaming profiles, folder redirection, mandatory profiles etc. The thing is, so far nothing has worked. I am not an expert in gpo or aduc but I am trying to learn. Right now, though, I need the simplest method to accomplish our goal. I can get the local administrator account to look like we want it but that doesn't transfer to the users. I have deleted all the contents of the user profile folders on the server but when I log them in I can not get rid of unwanted desktop icons. I can make some of the other changes that we want and save them but the desktop icons always reappear. I have checked the default user profile on the local machine and there are no desktop icons present.

Please provide help asap since school starts next week.

Read other answers

I have a Windows Server 2012 R2 domain in the dmz. I have a Windows Server 2012 R2 domain in the network. I can access the one in the network to the dmz without a problem, but I cannot access the one in the dmz to the network. The ip addresses in the network are different than the ip address in the dmz. I fowarded the ports but the dmz box still gets blocked. I tried to do it by VPN after setting the router to accept VPN. The connection still gets blocked. I set all the firewall settings.

I'm not sure where to go from here, any help would be appreciated.

Thank you

A:Windows Server 2012 R2 connecting 1 domain to another through 2 routers

Read other 6 answers

Hello Experts,

I have single AD Forest, 1 root domain and 4 child domain which having parent child trust with each other

Windows 2012 Functional Level

We find in some security tool that SID Filtering is not enabled on 4 child domain.

Please suggest is there any risk of enabling SID Filtering on domain level and how to do that from Root domain to child domain
Early response will be really appreciated

Thanks, NG

Read other answers

When imaging HP EliteOne 800 G1 All-in-One  (Intel I217-LM NIC) by Windows 10 task Sequence, Domain Join stage fails every time. It was imaged with Windows 8.1 without any issue.  Same task Sequence works on HP 800 Mini (Intel I217-LM NIC) and other system from different vendor. Could I get some help please? Regards

A:windows 10 Task Sequence Not Join Domain (SCCM 2012 R2 SP1)

Hi,  I'm having the same problem for both the g1 800 and G2 800 EliteDesk Mini 35w.  Did you have any luck resolving this?  Thanks.

Read other 1 answers

I am having a problem when trying to use a mandatory profile with new user accounts that I have created in active directory. I set up a model profile on a client machine then moved it over to the server to apply to the user accounts. However everytime I apply the profile it seems to ignore all of the group policy settings, except with the account I have created it with. I do have another OU in the Active Directory setup in this way where many users share the same mandatory profile but I have never had any problems with group policy setting with that OU.
I have only been managing this network (or any network for that matter) for a few months now so it could be some rookie mistake, so don't be hesitent to mention the obvious. Please help. Thanks

Read other answers


At my company, we're currently operating in a workgroup environment. We would like to switch to a domain environment. We have two servers running linux, one server running Windows Server 2003, and roughly 20 workstations. The workstations are all XP Pro except for 2 laptops running Vista.

The Windows server is used as a terminal server, and really does nothing else. The original intent was to utilize thin clients, but this has not happened. Currently, the Windows server is very much underutilized, with 0-1 connections being the norm. (Yes, it does get used, just not much.)

One linux server is our file server. It also runs openldap, subversion, and a few other tools. We want to use ldap as a central location for credentials to various services. (logons, vpn, file shares, email, subversion, etc.)


Is it advisable to use the Windows server as a terminal server and primary domain controller using Active Directory? (We're considering using samba to be the PDC, but then we lose some of the capability that AD offers, most notably group policy editing.)

Does Active Directory work well with OpenLDAP to synchronize passwords?

Is there a better solution I'm missing?

Read other answers

Windows 2012 Verification of prerequisites for Domain Controller promotion failed and gave the below error(In computer management local group and user option is not there as suggested by a solution!)

"Verification of prerequisites for Domain Controller promotion failed. The local Administrator account becomes the domain Administrator account when you create a new domain. The new domain cannot be created because the local Administrator account password
does not meet requirements.

Currently, the local Administrator password is blank, which might lead to security issues. We recommend that you press Ctrl+Alt+Delete, use the net user command-line tool, or use Local Users and Groups to set a strong password for the local Administrator
account before you create the new domain."

A:Windows 2012 Verification of prerequisites for Domain Controller promotion failed

You need to have a password before you begin. Arnav Sharma | http://arnavsharma.net/ Please remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Read other 6 answers

This was originally posted in the Server 2012 forum, but perhaps it's more applicable to Windows 7.


I've joined the Windows 7 Pro workstations to the Domain using the SERVER2012/Connect app and that seemed to work fine.  I made the Users all Standard, not Admin, and access to the Shared folders is working fine too.  Users appear to be in the
Administrators group on the local machine, which is what I need.
However, a number of our applications aren't working correctly ... one writes changes to HKey Current User and those changes will not stick.  Some IE sites that require changes have to be made each time; those changes don't save.  Some
of the ODBC connections to SQL databases are behaving strangly as well.  I tried checking permissions on the Windows Registry keys, and they looked OK.  Turning off User Access Control did not help either.
If I log on to the workstation not using the Domain Account I don't have this problem.  And, one of the workstations which had performed the Windows 10 Upgrade while connected to the previous Domain Controllder works fine.
Any direction would be greatly appreciated!   Thx DMiller

Read other answers

I have tried to look online for an answer to this but have not found anything.

We have many users logging in with a single mandatory roaming profile.  We have a new dictation program which saves temporary data to the AppData/local folder before uploading it.  If there are any problems with the upload the data sits in that folder
until it can be uploaded.

The problem occurs when a user of a mandatory profile (who is unaware of any upload problems) logs out, causing the appdata/local folder to be deleted.  (The folder is not actually deleted until the user next logs in overwriting the local profile.)

My two questions are:

1. Is it normal for the appdata/local folder to be deleted when the user logs off if they have a mandatory profile? (I haven't got any kind of profile cleanup, or the "delete cached copies of roaming profiles" GP turned on.)

2. Is there a way to prevent this folder, or a specific folder within it, from being deleted?

The AD controller is Windows Server 2008 R2 and the workstations are all Windows 7.

Thanks in advance!

Read other answers

Windows Server 2012 R2

Domain Join User Not Able To Access Internet Need Solution.


Server Attach 2 Networks Card.
Private Network

Public Network
Default Getway:
Internet Working On Domain Controller

Client User:
Now I Want To Access Internet on Client User without Proxy Server
Kindly Guide Me Complete Procedure.
Guide You In Depth.
Server Attach Two 2 Network Card
1st Network Card Attach Internet Wire
Ip Subnet: Default Getway:
2nd Network Card Configure Private Ip
Ip: Subnet: Dns:

Now Private Network Card Wire Attach In Cisco Switch 2950
And One Wire From Cisco Switch 2590 Connect To Local User System
Client Ip Subnet: Dns:
Client System Join Domain Successfully
Now My Question Is I Want To Access Internet On Client PC Without Proxy Server.
Waiting For Good Reply...

Read other answers

I would like to give software Installation restriction for Domain Admin users but he can have all of remain admin rights.
If he want to install any software it should be ask for password.please suggest to me is there any Group Policy for that one.
Server : windows 2012 R2
Clients : windows 10 

Read other answers

Here is the scoop ... Two networks connected via frame relay line. Two different PDCs and domain names. Can ping internal IP address, but can not browse through Network Neighborhood. Set up WINS on both and when trying to get them to share info I get Connection was aborted by the remote WINS in the event log. I can see the IP addresses for the remote network through the DHCP manager. Any ideas on what I should do to be able to browse the remote network and also set it up so that I can administer it remotely, would be greatly appreciated.

A:{Advice Offered} - Domain Browsing in a Multi-Domain Environment

Read other 6 answers

So we are unable to display and manage domain user profile when we are logged in as anything other than the default administrator (domain\administrator).  I'm talking about this particular dialog window:

The screenshot above was taken when domain\administrator was logged in.  Everything is shown on the list and manageable (can change type, delete).
With anybody else logged in, the dialog showing only his/herself, even though they are member of the Domain Admins group:

This user logged in on this scenario is a member of the "Domain Admins" group.  I have also tried adding this same user (admin_domain) to the local computer's administrator group, and that didn't help.
We would like to have service personnel (no access to the default administrator) manage the user profiles if possible.

Thanks for your help

Read other answers

Couldn't quite find the right thread for this so stuck it in General and figured it would be moved if need be.

I'm wanting some more information on Environment Variables such as %userprofile%. Lets say software will install to %appdata% which relates to C:\Users\(CurrentUser)\appdata, that's fine, but what if this is a standard user profile and the installer gives a UAC prompt for Admin Privileges which are then provided, surely the software installer is now running in the admin user profile so %appdata% would relate to C:\Users\Admin\appdata?

Or is this not possible because you are still in the (Standard) user account therefore the "Environment" is still technically in the standard user rather than the admin.

A:Environment Variables and different user profiles

You're correct in that the path would be deviated when elevating. The "environment" is per-user account, indeed. When elevating though UAC (or by using "run as another user), the launched program will run in the same desktop as everything else (that's why you see it alongside your other programs), but will still be running under different credentials, which means another user account, which means getting its own set of environment variables, security permissions and other things, so it will see the paths for the admin profile, not the standard that launched it.

Within the installer itself, it could be one of two things. The whole process is elevated, so effectively the user will see, within it, the environment of the admin account used to pass UAC, and that will get the buggy behavior you describe. It can also ask for options, folders and everything before elevating, in which case the user will see its own familiar environment, which is in turn passed to the elevated worker process afterwards. Which of those approaches it taken depends entirely on how the installer was made.

The fist behavior I describe is a typical case of a broken installer. Actually, many programs exhibit similar bugs due to assuming that Windows is left at its defaults, and simply fail when those assumptions are not meet (the default being here using an admin account by default and elevation don't requiring an extra password). It's a common flaw of many programs, including some from Micro... Read more

Read other 1 answers

To Whom it May Concern,
I am attempting to write a batch file and I have run into several issues with the WIN7 command interpreter. But this one has me completely baffled. In testing my batch file, I typed the command at the cmd line. This is my command:

Start /wait /b Robocopy "%USERPROFILE%\My Documents" C:\% COMPUTERNAME% /S /E /M /COPYALL /ZB

When I run this command from the prompt it appears that it worked. But the created folder does not appear in the WIN7 explorer environment. If I try to manually create this folder again, it tells me the folder already exists. If I do a dir of the root of C:\, it shows the folder.... but ony in the DOS environment. Yes, I have changed the folder/file views and allowed system and hidden files to be shown. I have searched the other forums and I have seen nothing posted regarding this type of problem. Any suggestions of fixes would be appreciated.


A:Created folder only showing up in DOS environment

Change "My Documents" to "Documents"

Read other 2 answers

Does Windows 2012 Standard (and R2 standard edition) provide log collector facility? If so, could you please provide aq link for that. I understand that 2012 and R2 essential provides that feature - looking
for Standard edition support.

Read other answers

Just wondering where to retrieve the update/'s MS said that we must have or we will no longer be receiving anymore Security updates? I was always under the impression when my computer received automatic updates that would include any major updates. Just did a History search of my computer and even though I check it daily (system says found updates will install automatically) it looks as though nothing may be going in. The following are the latest dates that appear in my update History.
Would appreciate any thoughts. Does it look as though nothing is being added especially "Major" updates?
Just wanted to add. My PC (desktop) is fairly new, came with W8 pre-installed.
When I check for updates my system says they will be done automatically. Here are what I am seeing. 11-25-2013 ... Intel Corp Driver Update (Graphics) every time this updated attempted it comes up FAILED.
Definition update for Windows Defender - KB2267602 Definition 1.163.487.0 Successfully (11-24-2013)
Someone must have tried to install these required updates. Where can they be found if they are not automatically installed?

A:Windows 8.1 mandatory updates

Hey there,
Where did Microsoft post about this?
Also the update that failed is an Intel graphics update not a Windows update, this may be a driver update or I might be wrong.
Usually on Windows 8/8.1 if there's an update it'll download them automatically and install them during shut down or over a period of 3 days.
So when you go to shut down it will say "Shut down and update". If you are getting this then your updates are fine.

Read other 15 answers

Hi guys
I already posted my question on Microsoft answers (http://answers.microsoft.com/en-us/ie/forum/ie11-windows_7/choose-your-homepage-and-search-settings/2966bcb3-3ddb-4a26-8c51-07b5aa40e4ef), it was suggested there that I post it here as well:
Since the latest update to Microsoft Internet Explorer 11 (KB3148198), my users experience the following message (on Win7, Win 8.1 and Win 10):


Of course, this is disturbing for many of my users, and, what's worse, since we use dynamic local profiles in our company (i.e. the user profile is created from the DEFAULT profile on each and every login), this message shows up after each and every login
which normally happens once a day.

My colleagues (and my boss!) have asked me to get rid of this message.

I have monitored what happens in the registry when you choose "Your current settings", it writes quite some strange registry entries (HEX-values) which all have something to do with "SyncHomePage Protected - It is a violation of Windows Policy
to modify. See aka.ms/browserpolicy". Windows insiders will know which registry settings I mean.
Specifically, I'm talking about what's written in
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\EUPP Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
and the respective subkeys. Those contain binary values, and I suppose those are ... Read more

Read other answers

Hi there,
We have a strange issue with some computers.
User Profiles of people who never logged on the machine are being created under C:\Users\
We don't use roaming profile in our environment.

Users whose profile is created never used RDP connection or Run As computer on the afflicted computers.
I did some research and the only clue I got says that it can be related to EFS, but we do not use it either in our environment.
Computers afflicted were not refurbished, the current user is the first and only one using it.
OS is Win 7 Professional x64.
Does anyone knows how to solve that problem or were it comes from ? 

A:User Profiles being created on machines without logging in

Some scripts executed against remote computers will cause a user
profile to be created.
Check the user profile and see if it's a recognizable id for someone
that may run scripts against a bunch of computers....
mygwl wrote:
>Hi ,
>When were the User Profiles created?
>Did they appear at the same time?
>Are those User Profiles which were created on these machines same or not?
>Tracy Cai
>TechNet Community Support
>I found different profiles created, one of them is the same on several computers and created almost at the same time on each computers (1 min delay).


Read other 6 answers

In a long explanation of the Windows Logo Program, Microsoft spelled out the new requirement. "Beginning with the release of the first beta of the next operating system, all Windows Vista client and Windows Server 2008 submissions must include a complete [set of] test logs for the new beta OS," the company said in the document.

Read more at the source.

Later Ted

A:Windows 7 Driver Testing Mandatory

Sounds like they're trying to make sure those who have Vista will have no problems upgrading to Seven. That would be nice. Vista gave me more problems than any when I first started using it. Most of my own doing, I must admit.


Read other 7 answers

Dear all,

Sattelite Z series laptops cannot install OS (win 8.1) from our SCCM 2012 R2 environment.

Either no installation is starting, or pxe boot aborted error is showed.
The environment is used to successfully install OS (win 8.1) on different other vendor computers (dell) and virtual machines (hyper-v and vmware).

I've tried both UEFI and CMS boot options and tried to switch off the secure boot. Please advice.

Also, i've read about the "SCCM installation package for Toshiba". Will it help in my situation or is it just driver packages for SCCM?

Best Regards, Evgeny.

A:Satellite Z930-14F - cannot install Win 8.1 from SCCM 2012 R2 environment

I guess you are speaking about this Toshiba package:

I don?t have much experience using such SCCM drive package but it definitely compatible with the Toshiba business notebooks. The Satellite / Portege Z930 belong to the business range and I think the package should be compatible.
This package seems to be for all IT administrators who manage devices on the corporate network with SCCM 2012 R2. Toshiba offers with the new Toshiba SCCM package a solution to integrate other notebook into an existing IT infrastructure quickly and smoothly and all Toshiba Driver and application packages and a demonstration task sequence are integrated.

However, it seems that you could get more details about this package directly from Toshiba [email protected]

By the way: The Win 8.1 installation requires the UEFI mode (in case the UEFI BIOS is available). But booting from another, external source requires the disabled secure boot option.
So maybe you should use the UEFI mode but should disable the secure boot option in order to boot from LAN.

Read other 1 answers

I am using windows server 2012 R2 as a domain server. I made a domain user in it. When trying to start an application in client system with the domain user it asks for the Administrator password. when logged in as the local user it does not asks for
a password.

Read other answers

From Windows 10 updates to be automatic and mandatory for Home users | Ars Technica


Windows Update can't be readily disabled in Windows 10 Home, and the license terms that all users must agree to allow Microsoft to install updates automatically.

The Insider Preview releases of Windows 10 didn't include any way to prevent Windows Update from downloading and installing updates, but it wasn't clear if this was just some quirk of the previews, or the long-term plan; Microsoft's previews often have special rules for things like providing automated feedback and hooking up online services, and so this could have been part of that.

Build 10240, released to insiders on Wednesday, changes that. This build is believed to be the release-to-manufacturing build that OEMs will preinstall on hardware, and as such, it contains the finalized settings, license text, and so on.

..... This has immediately raised concerns. Today, if a Windows user finds that an update breaks something that they need, they can generally refuse that update for an extended period. This is particularly apparent with Service Packs; these are both the most likely updates to break things, and the easiest to reject. Microsoft continues to deliver security fixes to the operating system both with and without the Service Pack for many months or years after the Service Pack's release.

For Windows 10 Home users, this isn't going to be an option. If a future update breaks something ess... Read more

Read other answers

I am working in a development company and we are a software product based company. Due to this reason it is highly required to protect our source code form alteration as well as stealing because this is the intellectual property of our company. We have defined Access right on the main Source Code databases folder which is a Visual Source Safe database and has given rights on the need only basis (In VSS Application).

1. But I also want to protect our source code form collusion attack. I want that how can I monitor and detect if any user share a folder on his/her system? Is there any tool that can be deployed for this?

2. Can we monitor the contents of any file which is being downloaded or uploaded?

I am sure there will many ppl who are working in the same environment as I am i.e. a software development company so I would like to ask you how you guys have protected your source code specially form copying and taking it outside. It will be helpful for me if you can share your security structure.

A:How to Monitor the Shared Folders in a Domain Environment

To protect against sensitive info leaving your company, you can deploy an intrusion detection system like Snort, and define your own rules like detecting the string 'modification date' or 'change log' or some such string likely to be found in source code. This will mean that you need a switch which has a SPAN/mirror port which can see all traffic, and you need a machine to run Snort connecting to that port.

Read other 1 answers