Question : Alternative to Roaming Profiles

Our school presently uses roaming profiles. When a student uses any computer in the lab, they log in to the Domain, which has roaming profiles and active directories. I have noticed that each computer now has ever students my documents on the local machine. I would like to get rid of the saving of each students documents to the local machine. I am also wanting to be able to control what they can and cannot do to the desktop, change wall paper, screen saver, etc.

I am assuming that currently when the student logs in to the domain through the local machine that the student is actually working on the files that are on the server and not on the local machine. What is the best and safest way to configure this. I want to save as little information as possible on the local machines. I would also like to speed up the network somehow without having to purchase more hardware.

Thanks

Answer : Alternative to Roaming Profiles

The best way to control any AD is by using Group Policy (GPO).

GPO can be used to secure Desktops, Applications and set Restrictions. It can be deployed on a per user/group/computer basis.

Take a look at http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx

I would also advise you stay away from roaming profiles. Each user should have his/her own profile on each workstations. The only item i would redirect would be the My Documents folder, this should be pointed to the file server.

Have a look at

http://technet2.microsoft.com/windowsserver/en/library/60b2157c-aa5b-44f2-b045-b74d2fd1bf701033.mspx?mfr=true