Microsoft Windows NT 4.0 User Manual

Server Operating System®White PaperGuide to Microsoft® Windows NT® 4.0 Profiles and Policies

2 Microsoft Windows NT Server White Paperbilities of Windows NT 4.0, and as such these techniques can readily beadapted to accommodate a corporation’s

92 Microsoft Windows NT Server White Paperthe extension .man. For example, use \\myserver\myshare\myuser.man.Then manually create the myuser.man folde

Microsoft Windows NT Server White Paper 93Important Information for AdministratorsRegarding User Logons and User Logoffs• Changes that you make to se

94 Microsoft Windows NT Server White PaperRecent Updates to Policies Since Retail ReleaseThe following changes have been made to System Policies suppo

Microsoft Windows NT Server White Paper 95The articles below can be referenced either on TechNet or by using theMicrosoft Knowledge Base on Microsoft’

96 Microsoft Windows NT Server White PaperQ156432 Windows NT 4.0 Policy Restriction Error at LogonQ155956 Cannot Restore Default Setting for Shutdown

Microsoft Windows NT Server White Paper 3Key TerminologyDirectory ReplicationThe copying of a master set of directories from a server (called theexpor

4 Microsoft Windows NT Server White Paperfrom any computer. A user who has a roaming profile can log on toany computer for which that profile is valid

Microsoft Windows NT Server White Paper 5A Microsoft Windows NT 4.0 User Profile describes the Windows NT configu-ration for a specific user, includin

6 Microsoft Windows NT Server White Papersettings, and portions of the registry can be saved as files, called hives. Thesehives can then be reloaded f

Microsoft Windows NT Server White Paper 7Windows NT 4.0 and Windows 95User Profile DifferencesWindows 95 Profiles are very similar in behavior to Wind

8 Microsoft Windows NT Server White Paperhome directory (or other specified directory if the location has been modified)on the server for the User Pro

Microsoft Windows NT Server White Paper 9NOTE: Directories containing roaming User Profiles need at least Add and Read permissions for profilesto be r

10 Microsoft Windows NT Server White Paperclient needs is the correct path. Note that storing profiles on a Windows NT 4.0Server makes it easier for t

Microsoft Windows NT Server White Paper 113. Delete the network connection and reconnect.Working Around Slow Network LinksSlow Net (which is configur

© 1997 Microsoft Corporation. All rights reserved.The information contained in this document represents the current view of Microsoft Corporation on t

12 Microsoft Windows NT Server White PaperCreating a New Roaming User Profile forWindows NT 4.0To create a new roaming User Profile, you must first de

Microsoft Windows NT Server White Paper 138. Place the template profile in the appropriate location for the type of profiledistribution that will be

14 Microsoft Windows NT Server White Paper10. Copy the profile appropriate to your implementation.• To copy an existing user’s profile to another us

Microsoft Windows NT Server White Paper 15Once the above steps are completed, the user receives the appropriateprofile as follows:• If the user is to

16 Microsoft Windows NT Server White Papercalled TemplateUser.6. Using the template account (TemplateUser), log on to the local machine ordomain. A n

Microsoft Windows NT Server White Paper 17NOTES:• When entering the path to the target directory, you can use universal naming convention (UNC)names.

18 Microsoft Windows NT Server White PaperBe cautious if you use the Explorer interface to make these changes. Ifyou have the “Hide file extensions fo

Microsoft Windows NT Server White Paper 19Creating a New Roaming User Profile for aWindows 95 UserIf you have Windows 95 users in your domain, you can

20 Microsoft Windows NT Server White PaperCreating a New Mandatory User Profilefor Windows 95If you have Windows 95 users in your domain, you can crea

Microsoft Windows NT Server White Paper 21System Policy Editor, provides even greater functionality than Windows NT3.5x delivered. Some of the feature

This guide provides information and procedures for implementing Microsoft®Windows NT® 4.0 Profiles and Policies on client workstations and servers. AM

22 Microsoft Windows NT Server White Paperbutton. This deletes the User Profile on the local machine, but it does not de-lete the associated User Acco

Microsoft Windows NT Server White Paper 23the User Profile (local or roaming) is read when he or she logs on. (Note thatthe user can do this interacti

24 Microsoft Windows NT Server White Paperwill open to the profile directory used by that account.3. If you don’t know when the user last logged on,

Microsoft Windows NT Server White Paper 25Viewing the Contents of the Profiles Directoryon a Local ComputerAll locally cached versions of User Profile

26 Microsoft Windows NT Server White PaperYou may notice that in a given user’s profile directory, there are more filesand directories than those list

Microsoft Windows NT Server White Paper 27at remote workstations. The All Users profile is workstation-specific and con-tains the common groups for ju

28 Microsoft Windows NT Server White Papermultiple users with the account name John Smith log on to the computer, thefirst John Smith is assigned a fo

Microsoft Windows NT Server White Paper 29process. For this reason, we recommend that you use the user name.6. Click Enter. This adds the profile reg

30 Microsoft Windows NT Server White PaperUpgrading Windows NT 3.5x Server-based Profiles toWindows NT 4.0 Roaming ProfilesWhen you upgrade Windows NT

Microsoft Windows NT Server White Paper 31When you upgrade a Windows NT 3.5x mandatory profile, the profile pathdoes not need to be modified. However,

32 Microsoft Windows NT Server White PaperIf a profile has permissions that differ from those needed by the user (forexample, if the profile was creat

Microsoft Windows NT Server White Paper 33nection, those credentials are also stored here. Note that this includes only thedomain and user account nam

34 Microsoft Windows NT Server White PaperSample Log=========================================================LoadUserProfile. : Entering, hToken = <

Microsoft Windows NT Server White Paper 35A System Policy is a set of registry settings that defines the computer re-sources available to an individua

36 Microsoft Windows NT Server White Paperthis change must be made individually to each workstation.When a user of a Windows NT 4.0-based workstation

Microsoft Windows NT Server White Paper 37e applied to the HKEY_CURRENT_USER key in the registry.NOTE: If a setting is ignored (gray) in the group set

38 Microsoft Windows NT Server White Paper• What type of restrictions do you want to impose on users?• Will users be allowed to access locally insta

Microsoft Windows NT Server White Paper 39The System Policy Editor is a graphical tool that allows you to easily updatethe registry settings to implem

40 Microsoft Windows NT Server White Paper4. Browse to locate the directory x:\Admin\Apptools\Poledit\ (where x is driveA through Z) on the Windows 9

Microsoft Windows NT Server White Paper 41Your Own Custom .Adm File,” later in this document.NOTE: The option to Add or Remove will be grayed out if t

Introduction ...TCO and the UserProfiles, Policies, and the Zero

42 Microsoft Windows NT Server White Paper• If the box is cleared, the policy is not implemented, and if the settingswere previously implemented, the

Microsoft Windows NT Server White Paper 43tem Policy Editor.2. From the File menu, click New Policy.3. The Default Computer and Default User icons w

44 Microsoft Windows NT Server White PaperCreating Alternate Folder PathsYou may need to create shared folders for groups of users who need a com-mon

Microsoft Windows NT Server White Paper 45 \Policies \Explorer3. Add the following DWORD value by clicking Edit, New, DWORDvalue:

46 Microsoft Windows NT Server White Paper3. In the Update mode box, select Manual (use specific path).4. In the Path for manual update box, type th

Microsoft Windows NT Server White Paper 47Modifying Policy Settings on Stand-Alone WorkstationsIf you need to modify settings of a Windows NT 4.0-base

48 Microsoft Windows NT Server White Paperuser for whom the changes will apply. If the user is not currently logged on,click Cancel. (The user must be

Microsoft Windows NT Server White Paper 49These are the only two classes that are valid within the System PolicyEditor. The System Policy Editor check

50 Microsoft Windows NT Server White Paperoption is selected within the lower pane of the System Policy Editor(see the discussion of PART and the code

Microsoft Windows NT Server White Paper 51type REG_EXPAND_SZ, for example:PART !!MyPolicy EDITTEXT EXPANDABLETEXTVALUENAME ValueToBeChangedEND PART•

Upgrading Windows NT 3.5x Mandatory Profiles to Windows NT 4.0Mandatory Profiles 30Extracting a User Profile for Use on Another Domain or Machine 31

52 Microsoft Windows NT Server White Papereach time the System Policy Editor starts.)Configuring System Policies Based onGeographic LocationYou may ch

Microsoft Windows NT Server White Paper 53will refer the client to multiple servers for the same path. For example, on a Dfsserver, the administrator

54 Microsoft Windows NT Server White PaperThe following outlines the locations and values for registry entries that arewritten to a Windows NT-based w

Microsoft Windows NT Server White Paper 55Color SchemeCategory: DesktopSelection: Color schemeKey: HKEY_CURRENT_USER \Control Panel \App

56 Microsoft Windows NT Server White Paper \Windows \CurrentVersion \Policies \ExplorerRegistry Value Registry Data

Microsoft Windows NT Server White Paper 57My Computer Drive IconsCategory: Windows NT ShellSubcategory: RestrictionsSelection: Hide drives in My Co

58 Microsoft Windows NT Server White Paper \Windows \CurrentVersion \Policies \NetworkRegistry Value Registry Data D

Microsoft Windows NT Server White Paper 59Subcategory: RestrictionsSelection: Disable Shut Down commandDescription: Disables the Shut Down option o

60 Microsoft Windows NT Server White Paper \Windows \CurrentVersion \Policies \SystemRegistry Value Registry Data De

Microsoft Windows NT Server White Paper 61Custom ProgramsCategory: Windows NT ShellSubcategory: Custom FoldersSelection: Custom Program folderDescr

Start Menu Shut Down CommandSaved SettingsRegistry Editing ToolsWindows Applications RestrictionsCustom ProgramsCustom Desktop IconsStart Menu Subfold

62 Microsoft Windows NT Server White PaperSubcategory: Custom FoldersSelection: Hide Start menu subfoldersDescription: Hides subfolders, such as th

Microsoft Windows NT Server White Paper 63 \CurrentVersion \Explorer \User Shell FoldersRegistry Value Registry Data Descri

64 Microsoft Windows NT Server White PaperExplorer File MenuCategory: Windows NT ShellSubcategory: RestrictionsSelection: Remove File menu from Exp

Microsoft Windows NT Server White Paper 65 \Microsoft \Windows \CurrentVersion \Policies \ExplorerRegistry Val

66 Microsoft Windows NT Server White Paper \ExplorerRegistry Value Registry Data DescriptionNoNetConnectDisconnect REG_DWORD Off = 0 or valu

Microsoft Windows NT Server White Paper 67complete or not. If the value is 0, the logon script is runduring the startup of the shell and allows items

68 Microsoft Windows NT Server White Paper \Explorer \TipsRegistry Value Registry Data DescriptionShow REG_DWORD Off = 0; On = 1Def

Microsoft Windows NT Server White Paper 69 \CurrentControlSet \Services \SNMP \Parameters \ValidCommunitiesReg

70 Microsoft Windows NT Server White PaperRegistry Value Registry Data DescriptionIncrement numbersbeginning with 1REG_SZ On = text of Trap Configurat

Microsoft Windows NT Server White Paper 71Drive Shares – ServerCategory: Windows NT NetworkSubcategory: SharingSelection: Create hidden drive share

Extended Characters in 8.3 File Names 77Read Only Files – Last Access Time 78Cached Roaming Profiles 78Slow Network Detection 79Slow Network Timeout 7

72 Microsoft Windows NT Server White Paper \PrintRegistry Value Registry Data DescriptionSchedulerThreadPriority REG_DWORD Above normal = 1; N

Microsoft Windows NT Server White Paper 73 \System \CurrentControlSet \Services \RemoteAccess \ParametersRegistry V

74 Microsoft Windows NT Server White PaperShared Programs Folder PathCategory: Windows NT ShellSubcategory: Custom shared foldersSelection: Custom

Microsoft Windows NT Server White Paper 75Subcategory: Custom shared foldersSelection: Custom shared Start menuDescription: Specifies the UNC path

76 Microsoft Windows NT Server White PaperDescription: Before the user logs on, displays a custom dialog boxwith text.Key: HKEY_LOCAL_MACHINE \

Microsoft Windows NT Server White Paper 77Registry Value Registry Data DescriptionDontDisplayLastUserName REG_SZ Off = 0; On = 1Logon ScriptsCategory:

78 Microsoft Windows NT Server White PaperKey: HKEY_LOCAL_MACHINE \System \CurrentControlSet \Control \FileSystemRegistry V

Microsoft Windows NT Server White Paper 79Slow Network DetectionCategory: Windows NT User ProfilesSelection: Automatically detect slow network conne

80 Microsoft Windows NT Server White PaperRegistry Value Registry Data DescriptionShow REG_DWORD Off = 0 or value is removed; On = time in sec-onds in

Microsoft Windows NT Server White Paper 81The following section describes the locations and values for useful registryentries that are available in th

Microsoft Windows NT Server White Paper 1Not too many years ago, information technology professionals faced a seriouschallenge in controlling the moun

82 Microsoft Windows NT Server White PaperRegistry Value Registry Data DescriptionNoStartBanner REG_DWORD 0 = enabled; 1= disabled.

Microsoft Windows NT Server White Paper 83For more information when configuring your network, refer to the following:• Windows NT Server Concepts and

84 Microsoft Windows NT Server White PaperUser Profile FlowchartsThese flowcharts illustrate how User Profiles operate within the Windows NT4.0 operat

Microsoft Windows NT Server White Paper 85Begin Profile Process: Does theuser already have a profile fromWindows NT 3.5x?NoYesIs the profile.usr or .

86 Microsoft Windows NT Server White PaperWorkstation boots,computer account is validated, anduser enters logon credentialsReceive data from DomainCon

Microsoft Windows NT Server White Paper 87(Continued) fromCommand to Load ProfileSet USERPROFILE environment variableCheck build number for versionLoa

88 Microsoft Windows NT Server White PaperCall made to checkserver profileCheck for .man extension inprofile pathFlag as mandatoryStart timer, check t

Microsoft Windows NT Server White Paper 89System Policy FlowchartThis flowchart illustrates how System Policy is applied in the Windows NT 4.0operatin

90 Microsoft Windows NT Server White PaperThe following are typical user profile scenarios that you may encounter in thefuture or may have already enc

Microsoft Windows NT Server White Paper 91• Administrator action: Create a folder with the name myuser.pdm in theexisting folder \\myserver\myshare,