Mandatory Profile – Citrix Method
Profile Management 5.0 and newer has a mandatory profile feature.
1. Create a file share (e.g. \\fs01\profile). Give Read permission to Users and Full Control to Administrators.
2. Login to the VDA machine as a template account. Do any desired customizations. Logoff.
3. Make sure you are viewing hidden files and system files.
4. CopyC:\Users\%username%to your fileshare. Name the folder Mandatory or something like that. Citrix Profile Management does not need .v2 on the end.
1. You can copyC:\Users\Defaultinstead of copying a template user. If so, remove the hidden attribute. If you use Default as your mandatory, be aware that Active Setup will run every time a user logs in.
5. Delete the NTUSER.DAT log files.
6. Open theAppDatafolder and delete theLocalandLocalLowfolders.
7. Java settings are stored in LocalLow so you might want to leave them in the mandatory profile. The only Java files you need are thedeployment.propertiesfile, theexception.sitesfileand thesecurity/trusted.certsfile. Delete the Java cache, tmp and logs.
8. Open regedit.exe.
9. Click HKEY_LOCAL_MACHINE to highlight it.
10. Open theFilemenu and clickLoad Hive.
11. Browse to the mandatory profile and open NTUSER.DAT. Note: Citrix Profile Management does not use NTUSER.MAN and instead the file must be NTUSER.DAT.
12. Name itaor similar.
13. Go toHKLM\a, right-click it and clickPermissions.
14. AddAuthenticated Usersand give itFull Control. ClickOK.
15. With the hive still loaded, you can do some cleanup in the registry keys. Seehttp://www.robinhobo.com/how-to-create-a-mandatory-profile-with-folder-redirections/andhttp://appsensebigot.blogspot.ru/2014/10/create-windows-mandatory-profiles-in.html?m=1for some suggestions.
16. HighlightHKLM\a.
17. Open theFilemenu and clickUnload Hive.
18. Go back to the file share and delete the NTUSER.DAT log files.
19. Create/Edit a GPO that appplies to the VDAs. Make sure the Citrix Profile Management policy template is loaded.
20. Go toComputer Configuration > Policies > Administrative Templates > Citrix > Profile Management > Profile handling. Edit the settingTemplate profile.
21. Enable the setting and enter the path to the Mandatory profile.
22. Check all three boxes. Then clickOK.