There should already be a default profile called user for AD. Look into the actual profile, you can use it as a template if you wish. Now, that is for a generic setup, as each person has his account created, just assign him the permissions that the user/power user/admin or whatever you need and then set this person to a roaming profile.
If you argue with an idiot he will drag you down to his level and beat you with experience.
I am not a fast writer.
I am not a slow writer.
I am a half-fast writer.