I'm a K-12 institution and we are trying to move away from generic user accounts toward individual accounts for our students. Bulk creating the accounts, no issue, but what I'm wanting to know is if mandatory raoming profiles is still the way to go or is there something easier/better to do? I want the mandatory profile functionality of users logging into a common desktop, and any changes made be gone on logout. I will handle Document space needs via their SkyDrive at Live@EDU

Hello, the easiest way is to configure and manage profiles is using mandatory profiles. If your computers are not members in a domain, you can use Deep Freeze so that any changes will be gone after restarting PCs. The problem with using Deep Freeze and AD domains is secure channels that will be broken. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator

Another alternative to Deep Freeze is the Microsoft Shared Computer Tool kit for xp (presuming you are using xp and not on a domain) but im not sure if MS is still supporting this product or even offering it for download, its been a while since i have used it.

I would also suggest mandatory profiles. For the purpose you are mentioning it's the best.Microsoft: MCP, MCTS, MCITP: SA, MCITP: EA || CIW: Associate, Security Professional || CompTIA: A+, Server+, Linux+ || Citrix: CCA on XenApp || HP: ASP, ASP:SMB || Astaro: ACA, ACE

Hi, I would also recommend mandatory profile in domain. For the detailed information regarding how to use mandatory profile, please refer to the following Microsoft TechNet articles: Create a mandatory user profile http://technet.microsoft.com/en-us/library/cc786301(WS.10).aspx Creating a Mandatory User Profile http://technet.microsoft.com/en-us/library/gg241183(WS.10).aspx Regards, Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thanks guys... I was kinda thinking that would be the way to go, but just wanted to get a second opinion in case there was something else better or newer to look at. The machines in question would be domain joined, so that's not an issue. "Mr X", we actually use to have DeepFreeze when we were on a Novell system a few years ago and was still trying to use it when I shifted us over to Microsoft. It was more pain in the butt that it was worth with stuff trying to update and would cause more issues than it seemed it stopped. The Microsoft updates were easy enough to handle, but all of the other software we needed as pre-requisite software for our curriculum applications like Flash, Reader, Java, Quicktime, etc... was too much to try to control updates in a given windows of time that the machine would be "thawed". Thanks again.

There are number of solutions from MS and 3rd party vendors. I would recommend this article to your attention. It make use of WSUS and free software: http://www.windowsitpro.com/article/patch-management/Secure-non-Microsoft-applications-by-publishing-3rd-party-updates-to-WSUS-129241 If your budget allows for enterprise solution, then use System Center Configuration Manager (SCCM): http://www.microsoft.com/systemcenter/en/us/configuration-manager.aspx There is indirect path with image preparation and "sending" full image on user computers (Symantec Ghost, Acronis, ...),or repack software with InstallShield and install by GPO, etc. PS: It is better to ask a new question instead of chaining additional questions with different topics that have nothing to do with the original question on user profiles.