Windows 7 Customizing and Copying Default user profile with Windows Enabler
In past Operating Systems, such as Windows XP, if you wanted to customize the default user profile’s settings, customizations, wallpaper, screen saver, etc that new users would have applied upon first logging into a machine, you’d simply:
[Log in as a local administrator] > Go into User Profiles > [select your customized user profile with the settings you want to be default] > click Copy To button > [choose the location of the Default User folder]
Presto! The next time a user logs in (who doesn’t already have a profile created) will have the customizations applied.
In Windows 7 however, Microsoft decided to disable the ability to copy profiles to the Default profile using this classic method. In fact, the only profile you can copy from is the “Default” profile itself! This prevents you from customizing a profile, and copying it anywhere.
I spoke with a Microsoft representative who specializes in imaging. She said the only supported method is to use sysprep with the <copyprofile> tag in the unattend.xml file, and running:
sysprep /generalize /unattend:unattend.xml
To make it easier, she suggested MDT2010.
I hope all is well with you! With respect to customizing the default user profile in Windows 7, the only supported option is to use the copyprofile setting in the unattend.xml. Are you using MDT to build your image? If so, enabling this functionality is very simple. Essentially, you would open up the task sequence you are using to create the image and edit the unattend.xml (associated w/ that task sequence) to enable the copyprofile setting. In your task sequence, you can then add a script (or scripts) to customize things like your corporate screen saver, desktop wallpaper, etc. Did I provide you with these scripts when you attended the deployment HOL? If not, let me know and I can stage them on a share for you to download. If you don’t have your customizations scripted you can insert the pause task into your task sequence so that after the OS and apps are installed you can manually make your customizations. After you complete this process, the task sequence will resume and it will automatically sysprep the image (with the copyprofile setting enabled) and capture it as a WIM image.
MDT 2010 scripts mentioned can be downloaded here. These scripts can be used inside and outside of MDT 2010 to automate customizations made to the profile. Download MDT 2010 here.
Sysprep? Well this is good and all if I were going to be implementing Microsoft’s deployment and imaging solutions, but all I wanted to do is customize the default profile. There should be no need go through these complexities for something so simple. Read on for the Solution!
Solution!
Rather than spending hours trying to create/generate an unattend.xml file, performing various reboots, and running into limit for the /generalize switch (you can only generalize 3 times, or up to 9 times with the <SkipRearm> tag), among other headaches, and limiations (such as only being able to copy the administrator profile, then dealing with the deletion of the profile), I decided to think outside of the box.
After browsing various forums, I remembered an OLD utility called “Windows Enabler”. I posted my solution to the Microsoft Technet online forums, and everyone was ecstatic. It worked!
(Click here to visit the post, do a find for my name “Imfusio”. Below that you can see everyone’s testing, and verification procedures.)
1. Download a little freeware program called “Windows Enabler 1.1” Download here.
(It’s a handy little portable utility I keep on my thumb drive and network utilities folder. All you need is the “Windows Enabler.exe” and “EnablerDLL.dll” together in a folder.)
2. Run Windows Enabler *as Administrator* on the Windows 7 machine, and a little blue & white icon will show up in your system tray.
3. Bring up the “Users Profile” window, and select the profile you wish to copy where the button is grayed out.
4. Click on the Windows Enabler icon in your system tray, and it should say “On”
5. Click once on the “Copy To” button, and it should un-gray the button. Click the Windows Enabler icon again to turn it off.
6. Now, you have your Copy To button working! Copy the user profiles as you normally would, and try logging in as a new user on the machine.
Potential Issues
I tested this method, and it appears functional with only minor issues, just as with XP (for example, the My Documents kept the name of the original profile, ie “temporaryuser’s Documents” while logged in as another user). The Windows 7 resource kit mentions DJs (Directory Junctions) that can become corrupt, and other registry data that is not copied when using this technique, or any other method than that which is supported (sysprep method). However, I was able to copy a profile, and log in with a new user, and everything looks good! I had saw no visible problem with the Directory Junctions, or anything else. I currently have plans to put an image with user profiles created from this method through QA in a corporate environment. I will make note of any issues we run into.
The known issues are very subtle. We’ve been using this process with Windows XP, many of us not even knowing that using that function was not supported, and that issues existed when using this method. However, we never ran into many real problems with it. It is just now that the Copy To button is disabled that we are aware of the potential side effects.
Take a look at this technet artcile: Configuring Default User Profiles – Full update for Windows 7
Windows XP did not support manual copying of profiles either. Here are issues to look out for when using this method.
It is very old procedure from NT4, when the shell was much simpler. The shell is more complicated for Windows 2000 and higher. This process will copy settings that should not be copied to the default user profile. It may seem to work but you will find subtle problems. Windows XP and later have made those subtle problems more visible.The manual profile copy process can cause issues such as:
- Their list of most frequently run programs is not cleared
- Whether the user has been introduced to the Start menu (will be set to TRUE for the source account, but should be FALSE for new users). Windows Explorer does some special things the first time you log on to introduce you to the Start menu and other new features.
- Whether the user is an administrator (and should therefore see the Administrative Tools, etc).
- The personalized name for “My Documents” will be incorrect. All users documents folders will be called “Administrator’s Documents”. This is documented in the Knowledge Base article “The Desktop.ini File Does Not Work Correctly When You Create a Custom Default Profile” (http://support.microsoft.com/?id=321281).
- The default download directory for IE will be set to the Administrator’s Desktop folder.
- The default Save and Open locations for some application with point to the Administrator’s documents folder.
- Windows 7 Libraries are broken.
Because of these issues, this process is no longer supported in Windows XP and all later operating systems. Unfortunately, the ability to copy a profile over the Default User profile was not blocked in Windows XP, Windows Server 2003, Windows Vista, or Windows Server 2008. This allowed many administrators to continue using the process and putting their Windows installations into an unsupported state. To prevent this, Windows 7 and Windows Server 2008 R2 now block this scenario by having the Control Panel System applet gray out the option to overwrite the Default User profile.
So take that with a grain of salt, but know that Windows Enabler will be the quickest, most effective way to get the job done with how things currently stand. You will probably see the same negative side effects that you have seen with Windows XP. If copying the profile this method caused problems for you in XP, then you will have the same problems and possibly more with Windows 7. If you had no problem with “Copy To” in Windows XP, then give it a shot in Windows 7 using Windows Enabler – It just might save you a lot of headache in the long run!
Windows Enabler is a great little utility to add to your collection. You never know what you might need it!!
Hope that helps!
Print article | This entry was posted by Imfusio on May 24, 2010 at 12:42 PM, and is filed under Imaging, Software, Windows 7, Windows Fixes. Follow any responses to this post through RSS 2.0. You can leave a response or trackback from your own site. |
'컴퓨터관련' 카테고리의 다른 글
sysprep 3회이상, windows 7 sysprep error...펌 (0) | 2013.06.22 |
---|---|
hot swap, cold swap...펌 (0) | 2013.06.16 |
hp 복구솔루션 복원...펌 (0) | 2013.06.13 |
윈도우 7 시스템 예약 파티션 (System Reserved Partition)...펌 (0) | 2013.06.13 |
ccleaner mft 빈공간...펌 (0) | 2013.06.13 |
about 2 years ago
9fxx7D frbrfdwcvmxe, [url=http://umjbhcznrfra.com/]umjbhcznrfra[/url], [link=http://uhwsdezklclt.com/]uhwsdezklclt[/link], http://caekivecdmrg.com/
about 2 years ago
Is there anything that Microsoft can’t make needlessly complicated? This must be in every Administrator’s Top 10 list, especially in high turnover environments, and MS has simply failed to deliver a reliable, easy to use solution for administrators. Believe it or not, in the real world admins don’t have hours and hours of free time to scour for disparate tidbits of information to make MS’s half-baked software do what it’s supposed to do. It’s really telling of Microsoft as a company that when they see something that doesn’t work quite right (Copy Profiles option), their solution to the problem is to simply remove a very useful feature altogether instead of fix it.
about 2 years ago
It works great
Thanks !!!!!
about 2 years ago
THIS WORKS GREAT….
Copied myProfile (DOUG) to the folder C:\USERS\DEFAULT
Logged in as a new user and the internet settings(tab groups and custom security settings) were picked up; printers and desktop icons. The actual wallpaper was left behind..but that was the least of my worries.
THANKS A WHOLE BUNCH!!!!
Doug Lubey of Louisiana
about 2 years ago
Wow! I’ve been pulling my hair out. Thanks so much for helping the rest of us network admins get our jobs done. You’re a life-saver!
about 2 years ago
Thank you Microsoft for creating upteen hours of headache for my net admins. What person(s) at Micrsoft decided that this was a good thing? We have used the enabler and worked ith the exception of the “administrator” now being the default email profile and requiring us to edit the profile once the PC is deployed to the customer. We have over 300 desktops that we are gearing up for deployment. Gotta love Microsoft for breaking things that worked.
Thank you for creating this little tool, great help to us here.
about 1 year ago
We’ve been using this method since switching our teaching labs from XP to 7 64-bit a year ago. Works pretty well, but an artifact I can’t seem to shake is the appearance on all domain users’ desktops of the normally hidden $RECYCLE.BIN folder, even if the Recycle Bin itself is hidden. The users’ desktops are stored on their network drives through folder redirection, if this makes a difference, though that hasn’t changed since the XP days.
about 1 year ago
I am using Windows Enabler 1.1. I turn it on and copy the profile. The profile is getting deleted and appears to copy however, the profile is completely empty and I can not log on with the user I copied to. Has anyone else seen this problem?
about 1 year ago
Does this work with domain accounts or 7 with sp1? Copy button never ungrays for me. Is there another easy way to do this-that actually works? Thansk.
about 1 year ago
Windows Enabler did not work on my Windows 7 Enterprise 64bit test machine. I ran the program as administrator and the Copy To command remained greyed out when attempting to copy a configured profile over to the default user profile. Any ideas?….Steve
about 1 year ago
This no longer works on Win7 SP1. My system is Win7 Enterprise x32 with SP1 on WORKGROUP.
Program shows “On” but Copy buttons are still unavailable.
Perhaps removing SP!, using the Copy utility, then re-applying SP1 will work but my copy of SP1 includes SP1 pre-installed so it cannot be removed to try this.
Good luck and plan on manually copying files from now on.
http://windows.microsoft.com/uninstallwindows7sp1
about 1 year ago
You can still get around it by running explorer as administrator. Type explorer in ’start menu’ then on the Windows Explorer and select ‘Run as administrator’. Then start Enabler as Administrator (may not be required) and proceed as above.
If I have to start using Sysprep for each minor change in default profiles, I’ll move to some other vendor. The guys doing the design just don’t get that in the field, defaults may be changed on each PC just to support the local printer. We also run Deepfreeze so each user is ‘new’ every day.
about 1 year ago
The methods listed below have been verified in a non AD domain, so if you use Domain level GPOs you may need to do further testing to make sure that the local gpo settings listed below are not over written by the domain policies. Also, if there is a Default User.v2 share in your netlogon shares you may need to set the permissions to that folder to “deny all” so that the windows 7 client won’t pull whatever profile is there.
Non sysprep method (sysprep method follows)
Make group policy changes (these are what causes win 7 to not look toward the server for a default profile)
• Computer Config > Administrative Templates > System > User Profiles >
o only Allow User Profiles = Enabled
o Set Roaming Profile Path for all users logging onto this computer = Disabled
o Prevent Roaming Profile changes from propagating to the server = Enabled
• Customize the Test or Setup account
• Enable built-in Administrator account
• Log on as Administrator
• Install RichCopy from Technet
• Use Explorer to unhide system files and folders
• Use RichCopy to copy the profile from the account used to implement customizations to “Default User”
• Join machine to the domain
• Reboot
• Log on domain user and all customizations that can be transferred should be applied to the users’ profile
•
Sysprep Method – You may want to use this method because this method should be fully supported by MS
• Login as the setup account
• Enable Administrator Account – log off
• Log on as Administrator
• Go to Manage Users
• Delete Setup account and any other accounts that have a profile folder and choose “delete files”
• Make group policy changes
• Computer Config > Administrative Templates > System > User Profiles >
• only Allow User Profiles = Enabled
• Set Roaming Profile Path for all users logging onto this computer = Disabled
• Prevent Roaming Profile changes from propagating to the server = Enabled
• Complete all customizations
• Copy validated answer file to C: root
• Go to windows\system32\sysprep
• Right click while holding shift and choose “open command window here”
• run “sysprep.exe /oobe /generalize /unattend:c:\yourunattendfile.xml
• once the system reboots go through whatever portion of mini-setup your answer file dictates
• Join machine to the domain
• Log on as a domain user
• Basic look and feel customizations should have been applied from the local Defaul User profile
And as long as the local policies that we set above remain intact, any domain user that logs onto the machine will receive the look and feel that you want for your organization.
Because MS has not published a comprehensive list of items/settings that cannot be applied to a default profile, you will have to experiment with that. I did find a doc that made it clear that the quick launch as well as the area of the start menu where you “pin” shortcuts do not persist when copying customizations to the default profile.
about 1 year ago
2.IT features: comprehending of what systems can and cannot do.
about 1 year ago
Also had trouble getting Enabler to work, but tried the above suggestion of starting Explorer as admin and stating Enabler as admin.
It worked this time!
Sooooo happy!
about 1 year ago
hello, good foro
about 1 year ago
igirecmvfnppoqdsfqbjs, Life Insurance, tlIEuug, [url=http://lifeinsurancebible.com/]Rate life insurance[/url], YudxpHs, http://lifeinsurancebible.com/ Life Insurance, OTPIRTs.
about 1 year ago
When the ‘Copy to’ is still greyed out, I have noticed that sometimes you may have to keep clicking on it a few times before it is ungreyed out. Also try performing the steps outlined above in ‘Safe Mode with Networking’ this also works where everything else has failed.
about 11 months ago
Excess fatty deposits
about 10 months ago
Hi there, this weekend is nice for me, for the reason that this point in time i am reading this enormous informative article
here at my residence.
about 10 months ago
Hello, i read your blog from time to time and i own a similar one and i was just curious if you get a lot of spam remarks?
If so how do you prevent it, any plugin or anything you can advise?
I get so much lately it’s driving me mad so any help is very much appreciated.
about 8 months ago
Great tip! I use this one to make a mandatory profile. Using this method log in times speed up 30 seconds!
Thanx for sharing
about 8 months ago
it worked for one user, but when I tried to do it for a newly created 2nd administrator, it failed. Can I only have one adminstrator per PC? I was creating a normal user for that 2nd administrator.
about 7 months ago
If you want to get a great deal from this article then you have to apply these strategies to your won weblog.
about 7 months ago
Hi there just wanted to give you a quick heads up.
The text in your content seem to be running off the screen in Chrome.
I’m not sure if this is a formatting issue or something to do with browser compatibility but I figured I’d post to let you
know. The style and design look great though! Hope you
get the issue solved soon. Kudos|
about 6 months ago
Great post but I was wondering if you could write a
litte more on this subject? I’d be very grateful if you could elaborate a little bit more. Thanks!
about 3 months ago
lzhmkcmvfnppoqdsfqbjs, Online casino fun, GuGsTGW, [url=http://festicinevilladeleyva.org/]Online Casino[/url], zTwXxfk, http://festicinevilladeleyva.org/ online Casino, QDkCufj.
about 2 months ago
This is not working for me for some reason
about 2 months ago
I used the Windows Enabler feature and when logging in with ANY newly created local account or a domain account that has not been used to login to this computer, I receive an error stating, “User Profile Service service failed the logon. User profile cannot be loaded.”
I looked into this and it turns out the security settings are ALSO copied with the “Copy to…” method while running Enabler. To fix this:
- Restart.
- Login as THE administrator.
- Unhide system files and folder and all that junk through the Folder Options panel.
- Browse to “C:\Users\”, right-click the “Default” folder, go to Properties.
- Add the missing security groups on THIS machine (not your domain). The missing groups are “Everyone” and “Users”. Both groups should have the basic “Read & execute, List folder contents, and Read” permissions; nothing else.
- Click “Apply” and “OK”.
- Go back to the Properties panel for the Default folder.
- on the General tab, the “Read-only…” checkbox should be a solid block, but the “Hidden” option needs to be checked.
- Click Apply.
- When prompted how to apply the settings, choose “This folder only”.
- Click OK.
- Log off, then login as the user for whom an account folder does not exist yet on this computer. The profile loads with an error.
about 2 months ago
You are truly a good webmaster. The website loading pace is incredible. It sort of feels that you’re doing any distinctive trick. Also, The contents are masterwork. you’ve done a fantastic process on this subject!
about 2 months ago
yafpmcmvfnppoqdsfqbjs, Raspberry Ketones, LQiudoL, [url=http://ssdfslzzx.org/]Raspberry ketones fat[/url], qPUgqJw, http://ssdfslzzx.org/ Raspberry ketone synthesis, XwquEqY.
about 1 month ago
Absolutely Fantastic! Worked like a charm.
Was a real life saver when we needed to transfer a domain profile to a local user profile due to security concerns, before we removed the domain profile.
Fantastic little tool, keen to see where else i can use it to “set button.enabled=true”
about 1 month ago
Hello everyone, it’s my first visit at this web site, and piece of writing is genuinely fruitful for me, keep up posting these types of articles.
about 1 month ago
We are actually amazed along with your writing ability plus while using the format inside your weblog. Are these claims some sort of paid out subject material or maybe does one customize them by yourself? In any case sustain the nice top quality writing, it is strange to see an awesome website such as this one today.
about 1 month ago
Excellent whip! I’m going to apprentice at the same time while you fix your site, precisely how could possibly my spouse and i sign up to for a weblog web page? The particular profile made it simpler for me a proper package. I’m a little bit well known with this a person’s send out supplied lively crystal clear concept
about 1 month ago
You have made some really good points there. I looked on the
web to learn more about the issue and found most people will go along with
your views on this site.
about 1 month ago
This is a great tip particularly to those fresh
to the blogosphere. Short but very precise info… Thanks for sharing this one.
A must read post!
about 4 weeks ago
This blog was… how do you say it? Relevant!!
Finally I have found something that helped me. Thanks a lot!
about 3 weeks ago
I have already been exploring on line greater than Three hours today, still Irrrve never observed just about any appealing post just like yours. It is attractive benefit adequate for me. In my opinion, when many world wide web entrepreneurs plus people manufactured just right material while you have, the net will likely be a lot more handy than any other time.
about 4 days ago
The only thing that did not work for me is a shortcut to the My Documents on the Desktop. It shows up but 2 problems 1)It doesn’t show the normal Folder icon, just white. 2)When you double click on it nothing happens, doesn’t take you to “My Documents”. Any suggestions?
about 23 hours ago
I was able to fix the My documents. What I did on my reference images was create shortcut with explorer.exe shell\My Documents.
However another thing I noticed is that all my images have a black background. For some reason its not copying the background I select on the reference image.