16 Microsoft Windows NT Server White Paper
called TemplateUser.
6. Using the template account (TemplateUser), log on to the local machine or
domain. A new directory with the same name as the user name created in
Step 2 will be created in the %systemroot%\Profiles directory when you
first log on. For example, if the user name is TemplateUser, the resulting
directory name will be %systemroot%\Profiles\TemplateUser.
7. Modify any items that need to differ from the current default (for example,
you may choose to modify the background color or bitmap, shortcuts on
the desktop, and View options in My Computer).
8. Log off, and then log back on to the same computer using an account with
administrative privileges.
9. In the \\server\share from Step 1, create the directory structure you speci-
fied as the path in Step 3. For example, you would need to create the
directory mydomainuser under \\myserver\myshare. Or, if the profile is
stored in the user’s home directory, you would need to create the directory
structure \mydomainuser\profile under \\myserver\myshare.
If you appended the .man extension to the User Profile path in Step 4,
append the .man suffix to the directory name for the folder where the pro-
file will be stored. The .man extension identifies a Windows NT 4.0
mandatory profile that must be accessible for the user to logon. For exam-
ple, if the user name is mydomainuser, the path to the mandatory profile
would be \\myserver\myshare\mydomainuser.man.
If you also have a mandatory Windows NT 3.5x profile for the user, use
the .pdm extension in place of the .man extension (for example,
\\myserver\myshare\mydomainuser.pdm). The .pdm extension is required
because the profile folder cannot have the same name as the
Windows NT 3.5x User Profile located in the same parent folder.
10. From the Windows NT-based machine hosting the template profile to be
used, log on as an administrator.
11. From the Control Panel, click System. From the User Profiles page, select
the profile to be copied and use the Copy To option to enter the path of
the directory you created in Step 9.
12. Modify the permissions to allow the user or group to use the profile. To do
this, click the Change button, select the account, and click OK. You can
select any group or specific user when setting the permissions; however
only the user or group specified will be able to use the profile.
The profile—including the folder trees and the NTuser.xxx file originally
included with the profile—is written to the location you designated. The
permissions are also encoded into the binary NTuser.xxx file.
13. In the directory that the profile was copied to in Step 3, check the
NTUSER.xxx file for the .man extension. If the extension is .dat, the profile
will still be modifiable. Change the extension to .man if necessary.
