nerdexam
Microsoft

70-669 · Question #15

Your company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. You use a virtual desktop infrastructure (VDI) environment to provide access to…

The correct answer is A. Create a mandatory user profile. D. Create a Group Policy object (GPO) that configures the user profile. A mandatory user profile is a special type of pre-configured roaming user profile that administrators can use to specify settings for users. With mandatory user profiles, a user can modify his or her desktop, but the changes are not saved when the user logs off. The next time…

Planning and Designing a Logical and Physical Architecture

Question

Your company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. You use a virtual desktop infrastructure (VDI) environment to provide access to applications. All virtual desktop computer objects are located in an organizational unit (OU) named VirtualDesktops. All client computer objects are located in an OU named Desktops. You need to ensure that all existing users receive the same desktop shortcuts, and that they are not able to modify the shortcuts from virtual desktops. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Options

  • ACreate a mandatory user profile.
  • BCreate a new default user profile.
  • CCreate a Group Policy object (GPO) that configures the user profile.
  • DCreate a Group Policy object (GPO) that configures the user profile.

How the community answered

(33 responses)
  • A
    70% (23)
  • B
    9% (3)
  • C
    21% (7)

Explanation

A mandatory user profile is a special type of pre-configured roaming user profile that administrators can use to specify settings for users. With mandatory user profiles, a user can modify his or her desktop, but the changes are not saved when the user logs off. The next time the user logs on, the mandatory user profile created by the administrator is downloaded. There are two types of mandatory profiles: normal mandatory profiles and supermandatory profiles. User profiles become mandatory profiles when the administrator renames the NTuser.dat file (the registry hive) on the server to NTuser.man. The .man extension causes the user profile to be a read-only profile. User profiles become super-mandatory when the folder name of the profile path ends in .man; for \server\share\mandatoryprofile.man. Super-mandatory user profiles are similar to normal mandatory profiles, with the exception that users who have super-mandatory profiles cannot log on when the server that stores the mandatory profile is unavailable. Users with normal mandatory profiles can log on with the locally cached copy of the mandatory profile. Only system administrators can make changes to us/library/windows/desktop/bb776895(v=vs.85).aspx To create a roaming user profile 1. Open Active Directory Users and Computers. 2. Click the domain and the OU where the user account resides. 3. Right-click the user account for which to set a roaming profile, and then click Properties. 4. Click the Profile tab, and then type the profile path information in Profile path. (Use the full path in each user account. For example, type \Server\ShareName\UserName.) To create a roaming user profile for a user that has a local profile Open Active Directory Users and Computers. 1. Click the domain and the OU where the user account resides. 2. Right-click the appropriate user account for which to set a roaming profile, and then click 3. Click the Profile tab, and type the profile path information in Profile path (for example, type \Server\ShareName\UserName). Additional Policy Settings That Are Related to User Profiles Prevent roaming profile changes from propagating to the server This policy determines if the changes a user makes to their roaming profile are merged with the server copy of their profile. If this policy is set, at logon users receive their roaming profile, but any changes users make to their profile are not merged to the users' roaming profile at logoff. Then create a dummy account as described earlier, log on to a desktop machine using this account, preconfigure the desktop, and log off. Log on to the desktop as Administrator and open the User Profiles dialog box as before, using System in Control Panel. Select the local profile for your template account and click on Copy To as before. But this time, in the Copy To box above, type \<dcname>\NETLOGON\Default User, where <dcname> is the name of your domain controller. Then click on Change and specify Everyone so that any user can use this new profile. Now when you click on OK, your preconfigured profile is copied to the NETLOGON share on your domain controller as a folder named Default User. When a user logs on to the network for the first time, her machine will access this share and use this preconfigured profile as the basis for creating her roaming profile, which is saved in \<servername><sharename> as before.

Topics

#mandatory user profile#GPO#VDI desktop shortcuts#user profile management

Community Discussion

No community discussion yet for this question.

Full 70-669 Practice