Adding Domain Users is a hammer solution - there's no out for a one off. I'd create some AD groups for this even if you temporarily nest domain users in the AD group, you can change who is in scope later without reconfiguring any images, templates, etc.
Thanks, Brian Desmond br...@briandesmond.com<mailto:br...@briandesmond.com> w - 312.625.1438 | c - 312.731.3132 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of James Rankin Sent: Sunday, March 16, 2014 9:30 AM To: NTSysADM@lists.myitforum.com Subject: [NTSysADM] Making user accounts members of Guests We generally configure a lot of our implementations where we like to use a local profile (for reasons of certificates, and also to avoid storing template profiles on the network), but we like the profile to be discarded at logoff time as we use third-party software for saving profile settings. Previously we used to do this by "spoofing" a temporary profile - when the user logs off, we edit the Registry key that tells Windows what the profile type is, changing it to "temporary" so that the OS flushes the profile when the user logs off. However - I could just do this by making all users members of the Guests group, as Guest profiles are automatically flushed at logoff too (unless they're Administrators). So, my question is - are there any possible unforeseen side-effects from making all my Domain Users members of the local Guests group on all my XenApp servers? Cheers, -- James Rankin --------------------- RCL - Senior Technical Consultant (ACA, CCA, MCTS) | The Virtualization Practice Analyst - Desktop Virtualization http://appsensebigot.blogspot.co.uk
