Question:

What is the best way to configure a windows account that automatically deletes any user data and restores a predefined state after each logout? I want the users to have local admin privileges and access to multiple applications, but I do not want them to leave any traces of their activities on the computer. I do not have a domain controller or a cloud service to manage the accounts, and I prefer a free or low-cost solution. I am not interested in Kiosk mode or software like DeepFreeze.

Answer:

How to create a self-cleaning windows account

If you want to set up a windows account that automatically deletes any user data and restores a predefined state after each logout, you might think that you need expensive software or complex configurations. However, there is a simple and free way to achieve this using a built-in feature of Windows 10 called Mandatory User Profiles.

A mandatory user profile is a type of user profile that is read-only and cannot be modified by the user. Any changes that the user makes to the profile are discarded when the user logs off. This means that the user always sees the same desktop environment and settings that were configured by the administrator. A mandatory user profile can be useful for scenarios where you want to provide a consistent and secure user experience, such as in public computers, kiosks, or shared workstations.

How to create a Mandatory User Profile?

To create a mandatory user profile, you need to follow these steps:

1. Create a standard user account that will serve as the template for the mandatory user profile. You can name it anything you want, such as `TemplateUser`.

2. Log on to the template user account and customize the desktop environment and settings as you wish. You can install applications, change wallpapers, adjust preferences, etc. These settings will be applied to the mandatory user profile.

3. Log off from the template user account and log on to an administrator account.

4. Open File Explorer and navigate to `C:\Users\TemplateUser`. This is the folder that contains the user profile data for the template user account.

5. Rename the file `NTUSER.DAT` to `NTUSER.MAN`. This will make the user profile mandatory and read-only.

6. Copy the entire `TemplateUser` folder to a shared location that is accessible by all the computers that will use the mandatory user profile. For example, you can copy it to a network drive or a USB flash drive. You can also rename the folder to something more descriptive, such as `MandatoryProfile`.

7. Open the Registry Editor and navigate to `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList`. This is the registry key that contains the information about the user profiles on the computer.

8. Find the subkey that corresponds to the template user account. You can identify it by looking at the `ProfileImagePath` value, which should point to `C:\Users\TemplateUser`.

9. Double-click on the `ProfileImagePath` value and change it to point to the shared location where you copied the `TemplateUser` folder. For example, if you copied it to a network drive with the path `\\Server\MandatoryProfile`, then change the value to `\\Server\MandatoryProfile`.

10. Repeat steps 7 to 9 on every computer that will use the mandatory user profile.

How to use a Mandatory User Profile?

To use a mandatory user profile, you need to assign it to a user account. You can do this by following these steps:

1. Log on to an administrator account and open the Control Panel.

2. Click on `User Accounts` and then click on `Manage another account`.

3. Select the user account that you want to assign the mandatory user profile to. You can create a new user account or use an existing one. You can also assign the same mandatory user profile to multiple user accounts.

4. Click on `Change the account type` and make sure that the user account has local admin privileges. This will allow the user to access and run multiple applications, but not to modify the user profile.

5. Click on `Change the account name` and rename the user account to something more generic, such as `Guest` or `User`. This will make it easier for the users to log on to the account.

6. Log off from the administrator account and log on to the user account that you assigned the mandatory user profile to. You should see the same desktop environment and settings that you configured in the template user account.

7. When you log off from the user account, any user data and changes that you made to the profile will be deleted and the profile will be restored to the predefined state.

Conclusion

Using mandatory user profiles is a simple and free way to configure a windows account that automatically deletes any user data and restores a predefined state after each logout. This can help you provide a consistent and secure user experience for scenarios where you do not want the users to leave any traces of their activities on the computer. You can also customize the user profile to suit your needs and preferences, and assign it to multiple user accounts with local admin privileges.