customize the default user profile by ntuser.dat

[lotsill]

I was tasked to automate the settings for our default user profile.

Here is a little about our company background. We have 20 plus images for dell machines. We are moving away from several images to a hardware independed image.

These settings are made in the ntuser.dat file of the defaut user. I choose to make the changes in the ntuser.dat file because you can use it an existing machine with the file and it is easy to update and/or remove keys.

I do not like the idea of create a tmp user and making changes to tmp profile. Then coping the tmp user profile to the default user in documents and settings. under "system properties, advanced, user profile settings."

This was you can't go backwards and it's hard to update.

I found these key's by googling, using msfn forums. Thanks a bunch. Another way I found the keys was by using wise setup caputre to monitor registry changes when i customized the profile. This helped me ALOT when determining where settings are stored. I'm sure there are other tools that will monitor changes made to your system. If you have any questions, feel free to ask. I will try to respond.

These are the settings that we set for our user profiles. I tried this on desktops and laptops and it worked. I was suprised the power settings worked on laptops.

folderview options " basically show everything"

Power options "always on" This is the presentation setting under power options.

turn quicklaunch on

disable xp tour

remove language toolbar

Note: This document was created assuming you have knowledge of editing the registry. This is not a complete step by step document but more of a guidelines.

Start with a clean “Base” machine only the OS and updates

Create a backup of the ntuser.dat in c:\documents and settings\default user

Note: If you get an error message that the file is in use. Restart the computer try to copy and paste.

On the “Base” machine, open regedit

In Regedit. Navigate to HKU

Load the ntuser.dat in c:\documents and settings\default user

When prompted for a key name enter tmpuser

The following settings need to be set in tmpuser hive

FOLDER OPTIONS

Add the following keys in their locations.

Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

"Hidden"=dword:1

"HideFileExt"=dword:0

"SeparateProcess"=dword:1

"TaskbarSizeMove"=dword:0

"TaskbarGlomming"=dword:0

"NoNetCrawling"=dword:0

"FolderContentsInfoTip"=dword:1

"FriendlyTree"=dword:1

"WebViewBarricade"=dword:1

"DisableThumbnailCache"=dword:1

"ShowSuperHidden"=dword:0

"ClassicViewState"=dword:0

"PersistBrowsers"=dword:1

Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState

"Settings"=hex:0c,00,02,00,0b,01,f8,75,60,00,00,00

"FullPath"=dword:1

"FullPathAddress"=dword:1

Power Settings

Control Panel\PowerCfg]

"CurrentPowerPolicy"="2"

Disable XP Tour icon

Software\Microsoft\Windows\CurrentVersion\Applets\Tour]

"RunCount"=dword:00000000

REMOVE Language toolbar

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoSaveSettings"=dword:00000000

This key is not a user setting!!

Add the following key in the registry of the machine you are imaging.

[-HKEY_CLASSES_ROOT\CLSID\{540D8A8B-1C3F-4E32-8132-530F6A502090}]

@="Language bar"

"MenuTextPUI"="@%SystemRoot%\\System32\\msutb.dll,-325"

Unload the tmpuser hive.

Make a backup. Go to c:\documents and settings\default user\

create a copy of ntuser.dat.

ENABLE quicklaunch

"I really don't recall how i added this key. This part was a pain i tried several ways. I wrote a cmd file of what i can recall.

If the CMD file doesn't work, then try this.

I beleive I exported the key from my personal machine then copied it to my BASE machine and loaded it into the tmpuser. Note you need quicklaunch enabled on your machine for the key to exist.

ECHO.

ECHO Quick Launch

ECHO Please wait...

reg load HKU\TempUser "c:\documents and settins\default user\ntuser.dat"

reg add HKU\Tempuser\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop /V TaskbarWinXP /t REG_BINARY /d 0c000000080000000200000000000000b0e22bd86457d011a96e00c04fd705a222001c000a0100001a000000010000000000

000000000000000000004c0000000114020000000000c0000000000000468300000010000000a0b0485e898dbd0100d89ee4

2a8dbd010045fe5e898dbd01000000000000000001000000000000000000000000000000130114001f0fe04fd020ea3a6910

a2d808002b30309d190023443a5c0000000000000000000000000000000000cd971500310000000000af245cb9108057696e

6e7400002000310000000000af24a3b9100050726f66696c65730050524f46494c4553001900310000000000c12408921000

69653530302e30303000002800310000000000c124089210004170706c69636174696f6e2044617461004150504c49437e31

002100310000000000c5229d9110004d6963726f736f6674004d4943524f537e31002900310000000000d32232a61000496e

7465726e6574204578706c6f72657200494e5445524e7e31002400310000000000db2276ba1000517569636b204c61756e63

6800515549434b4c7e310000008d0000001c000000010000001c000000360000000df0adba8c0000001a00000003000000e7

182d231000000049453530305f58314300433a5c57494e4e545c50726f66696c65735c49453530302e3030305c4170706c69

636174696f6e20446174615c4d6963726f736f66745c496e7465726e6574204578706c6f7265725c517569636b204c61756e

6368000010000000050000a01a000000a3000000000000000800000002000000cc00000001000000030000004a0000000100

000040003200e6010000c424159f20004c61756e636820496e7465726e6574204578706c6f7265722042726f777365722e6c

6e6b004c41554e43487e322e4c4e4b00000040000000020000003600320048020000c424159f20004c61756e6368204f7574

6c6f6f6b20457870726573732e6c6e6b004c41554e43487e312e4c4e4b00000036000000000000002c00320051000000ec22

4639200053686f77204465736b746f702e7363660053484f5744457e312e53434600000052000000e0000000000000001600

0000000000000000000016000000000000000100000001000000aa4f2868486ad0118c7800c04fd918b437020000e0000000

00000000160000000000000000000000160000000000000001000000 /f

reg unload HKU\TempUser

[Arie]

I don't quite understand the purpose of your posting...?