1.) Create a local user on the server. In our example we will use user: mand1.
2.) Make the user a member of the local administrators group on the server.
3.) Login in with this user and customize the profile. (for example the start menu).
4.) Logoff and login again with an administrator account.
5.) Create a share on your file server. For our example we will use \\SRV-RDSDC-01\TSmandatory.
6.) For share permissions choose - Everyone - Full Control. For NTFS permissions choose - Authenticated Users - Read
7.) Turn off Caching on this share
8.) Copy the complete template folder from the C:\Users directory (C:\users\mand1 in our example) to the new TSmandatory share
9.) Rename the template folder from mand1 to TSmandatory.V2
Please be aware that you have to add the .V2 in the name of your folder, because it's the new profile type in Windows Server 2008 and 2008 R2.
10.) Delete the Local and LocalLow folders from the AppData folder
The next step is to add the right permissions on the mandatory profile
12.) Open REGEDIT and highlight the HKEY_USERS subfolder. Choose File -> Load Hive and load the NTUSER.DAT file from the profile. Give the key any name (eg: TSmandatory)
13.) Right-click on the TS Mandatory profile and choose permissions
14.) Delete the template user and add the Authenticated Users (Full Control)
15.) Unload the NTUSER.DAT from your registry. (File -> Unload Hive)
16.) Rename the NTUSER.DAT to NTUSER.MAN in the profile.
17.) You can configure the profile path under individual users on the Remote Desktop Services Profile tab. Simply enter \\SRV-RDSDC-01\TSmandatory\TSmandatory without the .V2.
Alternatively you can configure a GPO to specify the location of the Mandatory profile.