Define which groups’ profiles are processed 编辑

You can define the users whose profiles are processed and profiles that are not. You can use both computer local groups and domain groups (local, global, and universal). Specify domain groups in the format <DOMAIN NAME>\<GROUP NAME>. Specify local groups in the format GROUP NAME.

Note: Computer local groups must be newly created local groups and the members must be domain users.

1. Under Profile Management, double-click the Processed groups policy.

2. Select Enabled.

3. Click Show.

4. Add the groups containing the users whose profiles you want Profile Management to process. Use Enter to separate multiple entries.

   If this setting is not configured here, the value from the .ini file is used. If this setting is not configured here or in the .ini file, members of all user groups are processed unless you exclude them using the Excluded groups policy.

5. Under Profile Management, double-click the Excluded groups policy.

6. Select Enabled.

7. Click Show.

8. Add the groups containing the users you do not want Profile Management to process. Use Enter to separate multiple entries.

   If this setting is not configured here, the value from the .ini file is used. If this setting is not configured here or in the .ini file, no members of any groups are excluded.

9. To manage the profiles of local administrators, under Profile Management, double-click the Process logons of local administrators policy and click Enabled.

   Important: By default, Profile Management recognizes which operating system is in use, and processes the accounts of local administrators on desktop, not server, operating systems. The reason is that users are typically members of the Local Administrators group only on desktops, and excluding local administrators from processing in server environments assists with troubleshooting. Therefore only enable this policy if you want to modify the default behavior.

   The Excluded groups policy takes precedence over the Process logons of local administrators policy. If an account appears in both policies, it is not processed by Profile Management.

   If this setting is not configured here, the value from the .ini file is used. If this setting is not configured here or in the .ini file, the profiles of local administrators are not processed.

For your changes to take effect, run the gpupdate /force command from the command prompt as documented at https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/gpupdate.