PREVENT LOGON IF A ROAMING PROFILE FAILS
Users who have roaming profiles can log on from any location in the
network, and their profile follows them to their logon location. Roaming
profiles help these users access the same desktop and working environment
regardless of logon location.
If Windows 2000 is unable to download the roaming profile because
it is unavailable or contains errors that prevent it from loading,
Windows attempts to load the user's profile from the local computer,
if available. Failing that, Windows loads the local default user profile
If you prefer that roaming users can't log on unless the computer
can download their roaming profile, enable the following policy: Computer
Configuration\Administrative Templates\System\Logon\Log Users Off
When Roaming Profile Fails. Then, if Windows can't obtain the user's
roaming profile, it will log off the user.
In addition to setting a policy to prevent logon if the roaming profile
fails, you might also want to prevent Windows from caching the roaming
profile on the local computer when a roaming user does log on. To
prevent local caching of the profile, enable the following policy:
Computer Configuration\Administrative Templates\System\Logon\Delete
Cached Copies Of Roaming Profiles.