I noticed that it is possible to disable roaming profiles by enabling the computer GPO "Only allow local user profiles". However, we would like for roaming profiles to be disabled by simply making a user a member of a security group. I have found no user configuration related GPO's that would make that possible. Is there still any way that this can be done?

No such options or policies. And I just want to know why you would like this. Whether the user is a roaming or local profile is completely determined by domain administrators. If you change any settings on it, the administrators can still change them back if they want. Arthur Xie TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

We have such bad experiences with slow link detection and a domain DFS Root domain (it won't work by design we were recently told), that we decided to stop using roaming profiles all together. We still want to be able to give users their roaming profiles back, if they would really need it. The thing is, that if we want to keep that option open, that we will need to remove the roaming user profile path from AD for every user in our domain. That is quite a bit of work. If there would be simple security group available that we could make users a member of, so that only those users will get a roaming profiles, that would be much easier, wouldn't you agree?

We have such bad experiences with slow link detection and a domain DFS Root domain (it won't work by design we were recently told), that we decided to stop using roaming profiles all together. We still want to be able to give users their roaming profiles back, if they would really need it. The thing is, that if we want to keep that option open, that we will need to remove the roaming user profile path from AD for every user in our domain. That is quite a bit of work. If there would be a simple security group available that we could make users a member of, so that only those users will get a roaming profile, that would be much easier, wouldn't you agree?

Generally speaking, you need a way to change the category of a batch of user accounts. I believe that this thread will be noticed by our developers. Also I will report this feedback to proper department.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.