Your company has an Active Directory Domain Services (AD DS) domain. All servers run Windows
Server 2008 R2. You use a virtual desktop infrastructure (VDI) environment to provide access to
applications. All virtual desktop computer objects are located in an organizational unit (OU) named
VirtualDesktops. All client computer objects are located in an OU named Desktops. You need to
ensure that all existing users receive the same desktop shortcuts, and that they are not able to
modify the shortcuts from virtual desktops. Which two actions should you perform? (Each correct
answer presents part of the solution. Choose two.)
A.
Create a mandatory user profile.
B.
Create a new default user profile.
C.
Create a Group Policy object (GPO) that configures the user profile. Link the GPO to the Desktops
OU.
D.
Create a Group Policy object (GPO) that configures the user profile. Link the GPO to the
VirtualDesktops OU.
Explanation:
A mandatory user profile is a special type of pre-configured roaming user profile that Administrators
can use to specify settings for users. With mandatory user profiles, a user can modify his or her
desktop, but the changes are not saved when the user logs off. The next time the user logs on, the
mandatory user profile created by the administrator is downloaded. There are two types of
mandatory profiles: normal mandatory profiles and supermandatory profiles. User profiles become
mandatory profiles when the administrator renames the NTuser.dat file (the registry hive) on the
server to NTuser.man. The .man extension causes the user profile to be a read-only profile. User
profiles become super-mandatory when the folder name of the profile path ends in .man; for
example, \ \server\share\mandatoryprofile.man\. Super-mandatory user profiles are similar to
normal mandatory profiles, with the exception that users who have super-mandatory profiles cannot
log on when the server that stores the mandatory profile is unavailable. Users with normal
mandatory profiles can log on with the locally cached copy of the mandatory profile. Only system
administrators can make changes to mandatory user profiles. http://msdn.microsoft.com/enus/library/windows/desktop/bb776895(v=vs.85).aspx
To create a roaming user profile
1. Open Active Directory Users and Computers.
2. Click the domain and the OU where the user account resides.3. Right-click the user account for which to set a roaming profile, and then click Properties.
4. Click the Profile tab, and then type the profile path information in Profile path. (Use the full path
in each user account. For example, type \\Server\ShareName\UserName.)To create a roaming user
profile for a user that has a local profile Open Active Directory Users and Computers.
1. Click the domain and the OU where the user account resides.
2. Right-click the appropriate user account for which to set a roaming profile, and then click
Properties.
3. Click the Profile tab, and type the profile path information in Profile path (for example, type
\\Server\ShareName\UserName). Additional Policy Settings That Are Related to User Profiles
Prevent roaming profile changes from propagating to the server This policy determines if the
changes a user makes to their roaming profile are merged with the server copy of their profile. If this
policy is set, at logon users receive their roaming profile, but any changes users make to their profile
are not merged to the users’ roaming profile at logoff. Then create a dummy account as described
earlier, log on to a desktop machine using this account, preconfigure the desktop, and log off. Log on
to the desktop as Administrator and open the User Profiles dialog box as before, using System in
Control Panel. Select the local profile for your template account and click on Copy To as before. But
this time, in the Copy To box above, type \\<dcname>\NETLOGON\Default User, where <dcname> is
the name of your domain controller. Then click on Change and specify Everyone so that any user can
use this new profile. Now when you click on OK, your preconfigured profile is copied to the
NETLOGON share on your domain controller as a folder named Default User. When a user logs on to
the network for the first time, her machine will access this share and use this preconfigured profile
as the basis for creating her roaming profile, which is saved in \\<servername>\<sharename> as
before.http://windowsdevcenter.com/pub/a/windows/2004/08/17/roaming_profiles.html