Hi Peter,
One of our internal experts provided this information. Let me know if this sends you in the right direction.
--- snip ---
The profile itself is READ-ONLY and the description of a Mandatory profile redirects AppData folders.
http://support.citrix.com/article/CTX114884:
"Mandatory User Profile/ Hybrid Profile
Mandatory user profiles are by definition user read-only profiles. Password Manager needs write permission to the profile directory under Application Data. With mandatory profiles, a user may make changes, but the changes are not saved back to the profile at logoff. For Password Manager to work correctly in a mandatory profiles environment, the Application Data Folder must be redirected.
With Password Manager, the registry changes will be written each time the user logs on, credential information will be synchronized with the synchronization point, but the changes will not be saved back to the profile.
Beginning with Windows 2000, Microsoft provides a mechanism for redirecting the Application Data folder; however using Windows NT4 domains will require login scripts capable of modifying the location of the Application Data folder. This can be achieved by using tools like Kix or VBScript to define a writeable location for the Application Data user folder. (Citrix content)"
Granted that we play better with Roaming Profiles now than we did in Acrobat 8 and 9, but this actually the first time I’ve heard the term “Mandatory Profile”. It seems quite restrictive permissions wise. It might be a mandatory profiles bug.
When they say “secured” file are these file “encrypted” with a password? Or are these files “Certified” documents?