Do you want to make your files and folders private? question

Glad to hear from you Torgeir!

For the full reason of this question please checkout my post titled "good
question for a good xp guru!" in the
microsoft.public.windowsxp.setup_deployment newsgroup.

I would greatly appreciated your input on that... especially with regard to
the process described for preparing a machine to be imaged.. more
specifically, 'copying' a user profile over the 'Default User Profile'. I
got a reply that that will cause many problems.

Thank you!

"Torgeir Bakken (MVP)" <Torgeir.Bakken-spam RemoveThis @hydro.com> wrote in message
news:eM%23rGEyqEHA.2580@TK2MSFTNGP15.phx.gbl...
> djc wrote:
>
> > xp pro sp2. When you set a password for an account this question is
asked of
> > you: "Do you want to make your files and folders private?".
> >
> > I have a different, much longer post, that I am not getting any feedback
on
> > so I am breaking this up into several more straight forward questions.
> >
> > 1) what exactly happens if you say 'yes'?
>
> The folder/file rights under
> C:\Documents and Settings\<some user>
> is changed so only <some user> have access to that folder.
>
>
> > 1b) and more specifically, are any registry permissions changed?
>
> No.
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx

djc wrote on 06-Oct-2004 6:18 AM:
>
> I would greatly appreciated your input on that... especially with regard to
> the process described for preparing a machine to be imaged.. more
> specifically, 'copying' a user profile over the 'Default User Profile'. I
> got a reply that that will cause many problems.
>
Copying a configured user profile over the Default Profile will cause
any processes that normally run at first logon to fail to run. It would
be better to export specific registry keys from a configured user
profile and import those to the Default User hive.

It can be a lot of work to find the right registry keys for each tweak.
www.winguides.com has a lot of registry keys to tweak the user
interface, but finding each and every key you want can be impossible.

--
Kent W. England, Microsoft MVP for Windows Security

Thanks Kent!
ok.. I am assuming then that the once reccomended method of preparing a
machine for imaging has changed... please correct me if I'm wrong on that.
The main part that is not recomended any longer is copying the user profile
used to configure the machine over the Default User profile.

this was the recomended process that I was taught:
1) install OS and create a regular user account and add it to the local
administrators group.
2) install all applications while logged in as that user.
3) COPY THAT USER PROFILE OVER THE DEFAULT USER PROFILE
4) create your sysprep.inf file using setupmgr.exe (setup manager) if you
want an unattended mini-setup.
5) run sysprep and shut down
6) image the machine.

please confirm for me that I should NOT do step 3 any more.

Thank you!

"Kent W. England [MVP]" <kwe.DeleteThis@mvps.org> wrote in message
news:OwKs5LCrEHA.596@TK2MSFTNGP11.phx.gbl...
> djc wrote on 06-Oct-2004 6:18 AM:
> >
> > I would greatly appreciated your input on that... especially with regard
to
> > the process described for preparing a machine to be imaged.. more
> > specifically, 'copying' a user profile over the 'Default User Profile'.
I
> > got a reply that that will cause many problems.
> >
> Copying a configured user profile over the Default Profile will cause
> any processes that normally run at first logon to fail to run. It would
> be better to export specific registry keys from a configured user
> profile and import those to the Default User hive.
>
> It can be a lot of work to find the right registry keys for each tweak.
> www.winguides.com has a lot of registry keys to tweak the user
> interface, but finding each and every key you want can be impossible.
>
> --
> Kent W. England, Microsoft MVP for Windows Security

djc wrote on 07-Oct-2004 6:32 AM:
> Thanks Kent!
> ok.. I am assuming then that the once reccomended method of preparing a
> machine for imaging has changed... please correct me if I'm wrong on that.
> The main part that is not recomended any longer is copying the user profile
> used to configure the machine over the Default User profile.
>
> this was the recomended process that I was taught:
> 1) install OS and create a regular user account and add it to the local
> administrators group.
> 2) install all applications while logged in as that user.
> 3) COPY THAT USER PROFILE OVER THE DEFAULT USER PROFILE
> 4) create your sysprep.inf file using setupmgr.exe (setup manager) if you
> want an unattended mini-setup.
> 5) run sysprep and shut down
> 6) image the machine.
>
> please confirm for me that I should NOT do step 3 any more.
>

Microsoft has published conflicting KB articles on copying over the
default profile. I and other MVPs have discussed deficiencies with this
process with Microsoft people and they agree, although I think you can
still find KB articles that recommend copying over the default profile,
but I have received communications from knowledgeable Microsoft staff
that recommend against this practice. However, this is MY recommendation
based on their input. There may be others in Microsoft and other experts
who see no problem with copying over the default profile.

--
Kent W. England, Microsoft MVP for Windows Security

Thanks Kent. I also got good feedback from Darrell Gorter under this post
"general steps to prepare a machine for imaging yes/no?" in the
setup_deployment newsgroup in case you want to check it out. His resonse is
in line with yours as well.

thanks again for your input.
djc


"Kent W. England [MVP]" <kwe.TakeThisOut@mvps.org> wrote in message
news:esrtp7OrEHA.2340@TK2MSFTNGP11.phx.gbl...
> djc wrote on 07-Oct-2004 6:32 AM:
> > Thanks Kent!
> > ok.. I am assuming then that the once reccomended method of preparing a
> > machine for imaging has changed... please correct me if I'm wrong on
that.
> > The main part that is not recomended any longer is copying the user
profile
> > used to configure the machine over the Default User profile.
> >
> > this was the recomended process that I was taught:
> > 1) install OS and create a regular user account and add it to the local
> > administrators group.
> > 2) install all applications while logged in as that user.
> > 3) COPY THAT USER PROFILE OVER THE DEFAULT USER PROFILE
> > 4) create your sysprep.inf file using setupmgr.exe (setup manager) if
you
> > want an unattended mini-setup.
> > 5) run sysprep and shut down
> > 6) image the machine.
> >
> > please confirm for me that I should NOT do step 3 any more.
> >
>
> Microsoft has published conflicting KB articles on copying over the
> default profile. I and other MVPs have discussed deficiencies with this
> process with Microsoft people and they agree, although I think you can
> still find KB articles that recommend copying over the default profile,
> but I have received communications from knowledgeable Microsoft staff
> that recommend against this practice. However, this is MY recommendation
> based on their input. There may be others in Microsoft and other experts
> who see no problem with copying over the default profile.
>
> --
> Kent W. England, Microsoft MVP for Windows Security