[Shark007]

NTUSER.DAT ...

what is it? how can i install my own?

<-begin quote->
All user-specific configuration information (which is displayed in Registry
Editor as HKEY_CURRENT_USER) is stored in
the NTUSER.DAT file in the \Documents and Settings\<username> folder.

Bill Peele
Microsoft Enterprise Support
<-end quote->

personal observations concerning NTUSER.DAT

- the home page for IE is stored here.
- IE and Explorer toolbar configurations are stored here
- quick launch enable and taskbar configs are stored here

EDIT - - - - - -
- specific window(s) positions and views are stored here
eg. control panel view by icons etc. or a user desktop folder etc.
EDIT - - - - - -
The above statement is untrue. sorry for the false information
by Shark007 - March 11, 2004

-I'm sure there is alot more to this file.. but the above covers specific
modifications unattended users may be looking for.

your current NTUSER.DAT can only be copied if you are logged into a different
accnt than the accnt you are trying to copy it from.

To install an existing NTUSER.DAT file to an unattended installation
(this also can install Desktop and Start Menu folders and icons including IE Favorites as Default items to new users)
I've placed all of the above into \$OEM$\$1\NTUSER

1) in WINNT.SIF set the following to enable innitial logon to admin accnt.

[GuiUnattended]
AdminPassword=*
EncryptedAdminPassword=NO
AutoLogon=Yes
AutoLogonCount=1

2) call a batchfile from RunOnceEX.cmd containing the following:

-this will copy your NTUSER.DAT and any other files to the .\Default User\ accnt
-it will delete the ASP.NET accnt allowing logon without choosing user if only 1 user
-it will creat a NEWUSER accnt, set it to admin, and log it in next boot with the
supplied NTUSER.DAT file.

-----start batchfile-----
attrib -h -s "%systemdrive%\Documents and Settings\Default User\ntuser.dat"
ren "%systemdrive%\Documents and Settings\Default User\ntuser.dat" "ntuser.old"
xcopy "%systemdrive%\ntuser\*.*" "%systemdrive%\Documents and Settings\Default User\" /s /h /y
attrib -r +h +s "%systemdrive%\Documents and Settings\Default User\ntuser.dat"
net user ASPNET /del
REM NEWUSER in the next line can be any username you prefer
set _USER=NEWUSER
net user %_USER% "" /add
net localgroup administrators "%_USER%" /add
%SystemRoot%\system32\reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DefaultUserName" /d "%_USER%" /f
%SystemRoot%\system32\reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DefaultUserPassword" /d "" /f
%SystemRoot%\system32\reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "AutoAdminLogon" /d "1" /f
-----end batchfile-----

of coarse.. there will be line wrapping in the above batchfile
but a copy/paste to notepad should come out correctly

This works for me .. installing Desktop folders, Start Menu items and of coarse
my personal NTUSER.DAT file containg the configs i prefer.

Shark007

[MSNwar]

Ref:
1) in WINNT.SIF set the following to enable innitial logon to admin accnt.

[GuiUnattended]
AdminPassword=*
EncryptedAdminPassword=NO
AutoLogon=Yes
AutoLogonCount=1

Question. If a PC is configured to run the password before logon and I change the (AdminPassword=*) to (AdminPassword=) will that cause the PC to boot straight to the desktop?

Thanks

[Shark007]

To boot straight to the desktop run this in a batchfile or from the cmd prompt

net user ASPNET /del


Deleting the ASP.NET accnt will allow you to boot directly to the desktop as long as there arent any other users configured

ps: next time start a new topic . this topic obviously concerns the file NTUSER.DAT


Shark007

[SKiTLz]

How does having a pre confifured NTUSER.DAT Help when the SID always differs?

I was under the impression the user SID was also stored in the file and therefor cause problems on a clean install when the users SID changed.

[Alanoll]

there is just one thing I don't like about the NTUSER.DAT idea (and it's been addressed before, and on how to copy/move it to a new computer), is that the WHOLE tree is stored in the file.

That would also include the entries for any programs you've installed, and any misc. entries that you know nothing about that were entered as a result of a program.

That's my only beef with it.
Also, i think the CLASSES_ROOT pertaining to the user is also stored there as well.

[Shark007]

To preconfigure an NTUSER.DAT file .. do a clean install .. set up all pertinant settings as you wish .. reboot to another user.. and copy the file.
(or just use your current in use file)

your impression of 'SID' whatever that means is possibly incorrect because i have copied and reused NTUSER.DAT near 100 times now without a single error.


Shark007

[SKiTLz]

Yea good point... Thats why I think its best to just mount the new NTUSER.DAT, make the changes, then save it... No harder really..

EDIT: Alanoll... Do you know if Im right on the SID topic?

[Alanoll]

not a clue on the SID, but I do know people have been using it before...
and if you think about it Shark's method, it could be that it uses the SID in the new DAT file, as the old one gets deleted, and it's stored in the file.....but ya never know.

[Spaceboy]

SKiTLz, on Mar 9 2004, 03:14 PM, said:

How does having a pre confifured NTUSER.DAT Help when the SID always differs?

I was under the impression the user SID was also stored in the file and therefor cause problems on a clean install when the users SID changed.

Edit the NTUSER.DAT file which you want to use. I use replenent registrar, but you can use regedit. Go to the key Identities and remove all subfolders, and all values inside the identities folder, except the keys default, Identity Ordinal, Last User ID, Last Username, and Migrated5.

Make sure binary values are set to the following:

Identity Ordinal: 0000000000000000000000000000001 (Decimal 1 in regedit)
Last User ID: {00000000-0000-0000-0000-000000000000}
Last Username: (Leave Blank)
Migrated5: 00000000000000000000000000000001 (Decimal 1 in regedit)

Then save NTUSER.DAT.

[gosh]

When windows starts it finds the user profiles by looking at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList. As you can see, it sees accounts by there SID not by there name. Built-in accounts have the same sid. I'll copy this from defltwk.inf

;----------------------------------------------------------------------
; Privileges & Rights
;----------------------------------------------------------------------
;
;World S-1-1-0
;
;NT Authority S-1-5
;LOCAL_SERVICE 19
;NETWORK_SERVICE 20
;
;Built-In Domain SubAuthority = S-1-5-32
;ADMINISTRATORS 544
;USERS 545
;GUESTS 546
;POWER_USERS 547
;ACCOUNT_OPS 548
;SYSTEM_OPS 549
;PRINT_OPS 550
;BACKUP_OPS 551
;REPLICATOR 552
;RAS_SERVERS 553
;PREW2KCOMPACCESS 554
;REMOTE_DESKTOP_USERS 555
;NETWORK_CONFIGURATION_OPS 556

As mentioned the HKCU registry is mapped to the current ntuser.dat, which i believe is a hidden file in use when you are logged in. A good idea is to log into a profile, configure it like you want, then deploy that ntuser.dat. But be careful, anytime you click on something a MRU might be created.

One idea not mentioned is using setupreg.hiv. On upgrades XP will basically split the old registry and merge it with the hivexxx.inf files. On clean installs the registry starts as setupreg.hiv, then later it's merged with the hivexxx.inf files at the end of text mode. You could load setupreg.hiv as a hive in regedit, add custom settings then unload it. Then you wouldn't need to mess with hives during the install. Of course this method would be more complex.

-gosh

[DarkBringer]

Of course.

[SKiTLz]

DarkBringer, on Mar 10 2004, 04:16 AM, said:

Of course.

This contributes how?? Of course what??

[ccc]

I realize this is an old thread.
But if any of the experts here are still around, could you please help out on this thread:
http://www.msfn.org/...showtopic=86965
Thanks.