How to Prevent a User from Changing the User Profile Type

Article translations Article translations
Article ID: 150919 - View products that this article applies to.
This article was previously published under Q150919
Expand all | Collapse all


If roaming user profiles are used with Windows NT 4.0 systems, system administrators may wish to not allow users to change the profile type to local. To do this, remove the read permission from the %systemroot%\System32\Sysdm.cpl file for the users or groups that should not be able to modify profile settings. This removes the System icon from Control Panel. As a result, those users cannot change system settings.

NOTE: The Windows NT 4.0 system has to be installed on an NTFS partition to be able to set file permissions.


User profile settings are stored in the registry under the following registry key:


For every user ever logged on to a Windows NT 4.0 system there is a subkey named after the security ID (SID) of that user where the actual values are stored. The user profile type is stored in the State value under the users subkey. Setting this value using system policies is possible but it does not prevent the System icon from Control Panel from appearing and therefore the user can change the profile type once logged on. Another disadvantage of changing the profile type in the registry is that you must ensure that you change the value in the subkey associated with the user. This implies that you must find the appropriate SID for the user.


Article ID: 150919 - Last Review: February 21, 2007 - Revision: 2.2
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows NT Workstation 4.0 Developer Edition
  • Microsoft Windows NT Server 4.0 Standard Edition
kbinfo kbui KB150919

Give Feedback


Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from