PREVENT LOGON IF A ROAMING PROFILE FAILS

Users who have roaming profiles can log on from any location in the network, and their profile follows them to their logon location. Roaming profiles help these users access the same desktop and working environment regardless of logon location.

If Windows 2000 is unable to download the roaming profile because it is unavailable or contains errors that prevent it from loading, Windows attempts to load the user's profile from the local computer, if available. Failing that, Windows loads the local default user profile instead.

If you prefer that roaming users can't log on unless the computer can download their roaming profile, enable the following policy: Computer Configuration\Administrative Templates\System\Logon\Log Users Off When Roaming Profile Fails. Then, if Windows can't obtain the user's roaming profile, it will log off the user.

In addition to setting a policy to prevent logon if the roaming profile fails, you might also want to prevent Windows from caching the roaming profile on the local computer when a roaming user does log on. To prevent local caching of the profile, enable the following policy: Computer Configuration\Administrative Templates\System\Logon\Delete Cached Copies Of Roaming Profiles.