profile won´t change back from mandatory ´style´.

[thor2002]

Hi,

we have a windows 2000 server running with a number of different profiles. After some mis-use by one of the users, we tried blocking the desktop by using a mandatory profile (I know, we should have opted for the policies-option) as a quick fix.

With more time we set up the right OU, placed the user in this OU and switched back de mandatory profile to a roaming profile. Sofar, everything worked as expected... (We thought).

Since we had to install a new program, we placed the user back into the user group, even added him to the administrators- group, but somehow we couldn´t install anymore.

Aparently the profile seems to be stuck into mandatory mode, even after altering the suffix to .dat, erasing all local copies of the profile and logging off and back on.

Is there a way to restore the profile to a regular dat - type? Can we simply delete de ntuser.dat (of ntuser.man for that matter...) in the profile as stored on the server?

Or is the only option to remove the entire profile?

Thanks!

Thor2002

Edited January 24, 2008 by thor2002

[cluberti]

I'm not sure if this is a documented bug, but I've reproduced this many times in a 2003 AD environment. Once you create a mandatory profile, there doesn't seem to be any way of going back.