Profile Management 2106

Define which groups’ profiles are processed

September 23, 2021

Contributed by:

You can define the users whose profiles are processed and profiles that are not. You can use both computer local groups and domain groups (local, global, and universal). Specify domain groups in the format <DOMAIN NAME>\<GROUP NAME>. Specify local groups in the format GROUP NAME.

Note： Computer local groups must be newly created local groups and the members must be domain users.

Under Profile Management, double-click the Processed groups policy.
Select Enabled.
Click Show.
Add the groups containing the users whose profiles you want Profile Management to process. Use Enter to separate multiple entries.

If this setting is not configured here, the value from the .ini file is used. If this setting is not configured here or in the .ini file, members of all user groups are processed unless you exclude them using the Excluded groups policy.
Under Profile Management, double-click the Excluded groups policy.
Select Enabled.
Click Show.
Add the groups containing the users you do not want Profile Management to process. Use Enter to separate multiple entries.

If this setting is not configured here, the value from the .ini file is used. If this setting is not configured here or in the .ini file, no members of any groups are excluded.
To manage the profiles of local administrators, under Profile Management, double-click the Process logons of local administrators policy and click Enabled.

Important: By default, Profile Management recognizes which operating system is in use, and processes the accounts of local administrators on desktop, not server, operating systems. The reason is that users are typically members of the Local Administrators group only on desktops, and excluding local administrators from processing in server environments assists with troubleshooting. Therefore only enable this policy if you want to modify the default behavior.

The Excluded groups policy takes precedence over the Process logons of local administrators policy. If an account appears in both policies, Profile Management does not process it.

If this setting is not configured here, the value from the .ini file is used. If this setting is not configured here or in the .ini file, the profiles of local administrators are not processed.

For your changes to take effect, run the gpupdate /force command from the command prompt as documented at https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/gpupdate.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Define which groups’ profiles are processed

September 23, 2021

Contributed by:

September 23, 2021

Contributed by:

Define which groups’ profiles are processed

In this article