none
Problem with unlocking profile RRS feed

  • Question

  • Hi. 

    Im using SS 2.5 with win XP SP3. There are 2 user profiles on computer: Administrator and user. User profile is locked down with high level restrictions + some small custom changes. recently i had do add some shortcuts on desktop.  So i logged as administrator turned of all restrictions and unchecked profile lock option. All the restrictions got turned off, but the profile remains locked. I temporarily bypassed the problem by putting and shortcut to user.orig/desktop directory but the icon is not on its place. There are more computers configured in same way and its important to set icons in same  order on desktop. i configured 34 computers (with same hardware and software setup) and the problem appeared on 8 of them. Any ideas how to unlock the profile or what is causing the problem?

    regards

    Friday, April 16, 2010 5:05 PM

Answers

All replies

  • I have had this happen a couple of times to me.  Now that I think about it, the problem actually happened on some machines that on't use the HD protection, so my first thought was to ask you if you had HD on or not.  The only way I got around this was to delete the profile and remake it.  I know not the answer you wanted to hear.

     

    Sorry,

     

    James Ghiorzi

    Library Assistant II

    San Benito County Free Library

    Friday, April 16, 2010 6:16 PM
  • Make sure you have WDP turned off. If it is, and you have unchecked the Lock Profile feature, then something is wrong with the profile.

         I don't like the way you set up your shortcuts because its better practice to install what programs you want in your Admin account, then log into the User account and launch the program (with all restrictions/ WDP off) to make sure it operates properly. When you're satisfied, make a shortcut by through Start Programs, and navigate to the program and right-click to create a shortcut. Launch the program AGAIN, through the shortcut on the desktop. Place the shortcut where you want it on the desktop and DELETE any program created icons. Go back and reapply all your restrictions and lock the desktop, Log back into the User account and test it.

    The only rare instance where you have to install a program from the shared account is Google's Chrome. You have to temporarily give the User account admin rights, install and setup Chrome, then take rights away - even then sometimes (I think if you Lock the Profile), SteadyState removes the Chrome shortcut and the program won't launch. You MUST leave Lock user Profile unchecked. It's a pain but if you use WDP or Deep Freeze, at least a reboot will bring your desktop back to its original state with your icons all back to normal.

    Try that and see if that works,

    Philip


    Complexity is the enemy of Security -- Steve Gibson
    Friday, April 16, 2010 6:59 PM
  • yes all the drives are hidden. remaking profiles is a bit painfull.. coz i dont have direct acces to that computers. only trough LogMeIn aplication.

    i can do it now... but in 2 months there will be 400 computers instead of 34 that operate now. imagine remaking profile on 100 of them. 

    Friday, April 16, 2010 8:38 PM
  • Hi, you can check the following link:

    Showing Desktop Icons in wss

    http://social.technet.microsoft.com/Forums/en-us/windowssteadystate/thread/efa4ad68-4419-4f11-807c-6539741210e1


    Sean Zhu - MSFT
    Monday, April 19, 2010 6:09 AM
    Moderator