Jump to content

Problem with roaming profiles


Recommended Posts

Guest Gorge Lucas
Posted

Hi,

 

I have a customer who has a roaming profile. This is setup excatly like all

my other customers. What happens is the server goes offline for 1-3 seconds

for no apparent reason and syncing occurs. When this happens, they lose all

their icons on the desktop, quicklaunch etc. This is a SBS 2003 R2 server.

 

There is nothing wrong with the server from what I can see. It's not going

down at all.

 

Any ideas?

Guest Lanwench [MVP - Exchange]
Posted

Re: Problem with roaming profiles

 

Gorge Lucas <gorge192@hotmail.com> wrote:

> Hi,

>

> I have a customer who has a roaming profile. This is setup excatly

> like all my other customers. What happens is the server goes offline

> for 1-3 seconds for no apparent reason and syncing occurs. When this

> happens, they lose all their icons on the desktop, quicklaunch etc.

> This is a SBS 2003 R2 server.

> There is nothing wrong with the server from what I can see. It's not

> going down at all.

>

> Any ideas?

 

Does this happen to all users? Meaning, is the server itself actually having

problems?

 

Make sure the parent folder/share for the profiles does *not* have offline

caching enabled, or you will definitely have problems.

 

Also note that

roaming profiles really require folder redirection in order to work -and if

you turn on folder redirection by default it turns on offline file syncing

for my documents, etc. I always disable that as I am not a fan.

 

Note that future SBS questions are best posted in m.p.windows.server.sbs -

it does many things its own way.

 

My boilerplate on roaming profiles is below...

 

********************

General tips:

 

1. Set up a share on the server. For example - d:\profiles, shared as

profiles$ to make it hidden from browsing. Make sure this share is *not* set

to allow offline files/caching! (that's on by default - disable it)

 

2. Make sure the share permissions on profiles$ indicate everyone=full

control. Set the NTFS security to administrators, system, and users=full

control.

 

3. In the users' ADUC properties, specify \\server\profiles$\%username% in

the profiles field

 

4. Have each user log into the domain once - if this is an existing user

with a profile you wish to keep, have them log in at their usual

workstationand log out. The profile is now roaming.

 

5. If you want the administrators group to automatically have permissions to

the profiles folders, you'll need to make the appropriate change in group

policy. Look in computer configuration/administrative templates/system/user

profiles - there's an option to add administrators group to the roaming

profiles permissions. Do this *before* the users' roaming profile folders

are created - it isn't retroactive.

 

********************

Notes:

 

Make sure users understand that they should not log into multiple computers

at the same time when they have roaming profiles (unless you make the

profiles mandatory by renaming ntuser.dat to ntuser.man so they can't change

them, which has major disadvantages),. Explain that the 'last one out wins'

when it comes to uploading the final, changed copy of the profile. If you

want to restrict multiple simultaneous network logins, look at LimitLogon

(too much overhead for me), or this:

http://www.jsifaq.com/SF/Tips/Tip.aspx?id=8768

 

********************

Keep your profiles TINY. Via group policy, you should be redirecting My

Documents (at the very least) - to a subfolder of the user's home directory

or user folder. Also consider redirecting Desktop & Application Data

similarly..... so the user will end up with:

 

\\server\users\%username%\My Documents,

\\server\users\%username%\Desktop,

\\server\users\%username%\Application Data.

 

[Alternatively, just manually re-target My Documents to

\\server\users\%username% (this is not optimal, however!)]

 

You should use folder redirection even without roaming profiles, but it's

especially critical if you *are* using them.

 

If you aren't going to also redirect the desktop using policies, tell users

that they are not to store any files on the desktop or you will beat them

with a

stick. Big profile=slow login/logout, and possible profile corruption.

 

********************

Note that user profiles are not compatible between different OS versions,

even between W2k/XP. Keep all your computers. Keep your workstations as

identical as possible - meaning, OS version is the same, SP level is the

same, app load is (as much as possible) the same.

 

*********************

If you also have Terminal Services users, make sure you set up a different

TS profile path for them in their ADUC properties - e.g.,

\\server\tsprofiles$\%username%

 

********************

Do not let people store any data locally - all data belongs on the server.

 

********************

The User Profile Hive Cleanup Utility should be running on all your

computers. You can download it here:

http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en

 

********************

Roaming profile & folder redirection article -

http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

Guest Gorge Lucas
Posted

Re: Problem with roaming profiles

 

Thanks for the reply.

 

I pretty much do everything you suggest. I do one thing differently however

and that's having the folder redirection out of their profile. I just

noticed and offline files was *off* for the profile but *on* for the

redirected folders, which probably makes sense to why I am having these

problems.

 

Would you agree?

 

I have changed it now. The users have gone home so I will not know until

tomorrow if this has worked or not.

 

Thanks

 

"Lanwench [MVP - Exchange]"

<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message

news:OIObLBW5IHA.3784@TK2MSFTNGP06.phx.gbl...

> Gorge Lucas <gorge192@hotmail.com> wrote:

>> Hi,

>>

>> I have a customer who has a roaming profile. This is setup excatly

>> like all my other customers. What happens is the server goes offline

>> for 1-3 seconds for no apparent reason and syncing occurs. When this

>> happens, they lose all their icons on the desktop, quicklaunch etc.

>> This is a SBS 2003 R2 server.

>> There is nothing wrong with the server from what I can see. It's not

>> going down at all.

>>

>> Any ideas?

>

> Does this happen to all users? Meaning, is the server itself actually

> having

> problems?

>

> Make sure the parent folder/share for the profiles does *not* have offline

> caching enabled, or you will definitely have problems.

>

> Also note that

> roaming profiles really require folder redirection in order to work -and

> if

> you turn on folder redirection by default it turns on offline file syncing

> for my documents, etc. I always disable that as I am not a fan.

>

> Note that future SBS questions are best posted in m.p.windows.server.sbs -

> it does many things its own way.

>

> My boilerplate on roaming profiles is below...

>

> ********************

> General tips:

>

> 1. Set up a share on the server. For example - d:\profiles, shared as

> profiles$ to make it hidden from browsing. Make sure this share is *not*

> set

> to allow offline files/caching! (that's on by default - disable it)

>

> 2. Make sure the share permissions on profiles$ indicate everyone=full

> control. Set the NTFS security to administrators, system, and users=full

> control.

>

> 3. In the users' ADUC properties, specify \\server\profiles$\%username% in

> the profiles field

>

> 4. Have each user log into the domain once - if this is an existing user

> with a profile you wish to keep, have them log in at their usual

> workstationand log out. The profile is now roaming.

>

> 5. If you want the administrators group to automatically have permissions

> to

> the profiles folders, you'll need to make the appropriate change in group

> policy. Look in computer configuration/administrative

> templates/system/user

> profiles - there's an option to add administrators group to the roaming

> profiles permissions. Do this *before* the users' roaming profile folders

> are created - it isn't retroactive.

>

> ********************

> Notes:

>

> Make sure users understand that they should not log into multiple

> computers

> at the same time when they have roaming profiles (unless you make the

> profiles mandatory by renaming ntuser.dat to ntuser.man so they can't

> change

> them, which has major disadvantages),. Explain that the 'last one out

> wins'

> when it comes to uploading the final, changed copy of the profile. If you

> want to restrict multiple simultaneous network logins, look at LimitLogon

> (too much overhead for me), or this:

> http://www.jsifaq.com/SF/Tips/Tip.aspx?id=8768

>

> ********************

> Keep your profiles TINY. Via group policy, you should be redirecting My

> Documents (at the very least) - to a subfolder of the user's home

> directory

> or user folder. Also consider redirecting Desktop & Application Data

> similarly..... so the user will end up with:

>

> \\server\users\%username%\My Documents,

> \\server\users\%username%\Desktop,

> \\server\users\%username%\Application Data.

>

> [Alternatively, just manually re-target My Documents to

> \\server\users\%username% (this is not optimal, however!)]

>

> You should use folder redirection even without roaming profiles, but it's

> especially critical if you *are* using them.

>

> If you aren't going to also redirect the desktop using policies, tell

> users

> that they are not to store any files on the desktop or you will beat them

> with a

> stick. Big profile=slow login/logout, and possible profile corruption.

>

> ********************

> Note that user profiles are not compatible between different OS versions,

> even between W2k/XP. Keep all your computers. Keep your workstations as

> identical as possible - meaning, OS version is the same, SP level is the

> same, app load is (as much as possible) the same.

>

> *********************

> If you also have Terminal Services users, make sure you set up a different

> TS profile path for them in their ADUC properties - e.g.,

> \\server\tsprofiles$\%username%

>

> ********************

> Do not let people store any data locally - all data belongs on the server.

>

> ********************

> The User Profile Hive Cleanup Utility should be running on all your

> computers. You can download it here:

> http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en

>

> ********************

> Roaming profile & folder redirection article -

> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

>

>

>

Guest Lanwench [MVP - Exchange]
Posted

Re: Problem with roaming profiles

 

Gorge Lucas <gorge192@hotmail.com> wrote:

> Thanks for the reply.

>

> I pretty much do everything you suggest. I do one thing differently

> however and that's having the folder redirection out of their

> profile.

 

Not sure what you mean...I don't redirect folders *into* a profile folder!

> I just noticed and offline files was *off* for the profile

> but *on* for the redirected folders, which probably makes sense to

> why I am having these problems.

 

Yes, could be.

>

> Would you agree?

 

I disable offline files via GPO so I'm not sure, but yeah, why not!

>

> I have changed it now. The users have gone home so I will not know

> until tomorrow if this has worked or not.

>

> Thanks

 

You're welcome - keep us posted.

>

> "Lanwench [MVP - Exchange]"

> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

> message news:OIObLBW5IHA.3784@TK2MSFTNGP06.phx.gbl...

>> Gorge Lucas <gorge192@hotmail.com> wrote:

>>> Hi,

>>>

>>> I have a customer who has a roaming profile. This is setup excatly

>>> like all my other customers. What happens is the server goes offline

>>> for 1-3 seconds for no apparent reason and syncing occurs. When this

>>> happens, they lose all their icons on the desktop, quicklaunch etc.

>>> This is a SBS 2003 R2 server.

>>> There is nothing wrong with the server from what I can see. It's not

>>> going down at all.

>>>

>>> Any ideas?

>>

>> Does this happen to all users? Meaning, is the server itself actually

>> having

>> problems?

>>

>> Make sure the parent folder/share for the profiles does *not* have

>> offline caching enabled, or you will definitely have problems.

>>

>> Also note that

>> roaming profiles really require folder redirection in order to work

>> -and if

>> you turn on folder redirection by default it turns on offline file

>> syncing for my documents, etc. I always disable that as I am not a

>> fan. Note that future SBS questions are best posted in

>> m.p.windows.server.sbs - it does many things its own way.

>>

>> My boilerplate on roaming profiles is below...

>>

>> ********************

>> General tips:

>>

>> 1. Set up a share on the server. For example - d:\profiles, shared as

>> profiles$ to make it hidden from browsing. Make sure this share is

>> *not* set

>> to allow offline files/caching! (that's on by default - disable it)

>>

>> 2. Make sure the share permissions on profiles$ indicate

>> everyone=full control. Set the NTFS security to administrators,

>> system, and users=full control.

>>

>> 3. In the users' ADUC properties, specify

>> \\server\profiles$\%username% in the profiles field

>>

>> 4. Have each user log into the domain once - if this is an existing

>> user with a profile you wish to keep, have them log in at their usual

>> workstationand log out. The profile is now roaming.

>>

>> 5. If you want the administrators group to automatically have

>> permissions to

>> the profiles folders, you'll need to make the appropriate change in

>> group policy. Look in computer configuration/administrative

>> templates/system/user

>> profiles - there's an option to add administrators group to the

>> roaming profiles permissions. Do this *before* the users' roaming

>> profile folders are created - it isn't retroactive.

>>

>> ********************

>> Notes:

>>

>> Make sure users understand that they should not log into multiple

>> computers

>> at the same time when they have roaming profiles (unless you make the

>> profiles mandatory by renaming ntuser.dat to ntuser.man so they can't

>> change

>> them, which has major disadvantages),. Explain that the 'last one out

>> wins'

>> when it comes to uploading the final, changed copy of the profile.

>> If you want to restrict multiple simultaneous network logins, look

>> at LimitLogon (too much overhead for me), or this:

>> http://www.jsifaq.com/SF/Tips/Tip.aspx?id=8768

>>

>> ********************

>> Keep your profiles TINY. Via group policy, you should be redirecting

>> My Documents (at the very least) - to a subfolder of the user's home

>> directory

>> or user folder. Also consider redirecting Desktop & Application Data

>> similarly..... so the user will end up with:

>>

>> \\server\users\%username%\My Documents,

>> \\server\users\%username%\Desktop,

>> \\server\users\%username%\Application Data.

>>

>> [Alternatively, just manually re-target My Documents to

>> \\server\users\%username% (this is not optimal, however!)]

>>

>> You should use folder redirection even without roaming profiles, but

>> it's especially critical if you *are* using them.

>>

>> If you aren't going to also redirect the desktop using policies, tell

>> users

>> that they are not to store any files on the desktop or you will beat

>> them with a

>> stick. Big profile=slow login/logout, and possible profile

>> corruption. ********************

>> Note that user profiles are not compatible between different OS

>> versions, even between W2k/XP. Keep all your computers. Keep your

>> workstations as identical as possible - meaning, OS version is the

>> same, SP level is the same, app load is (as much as possible) the

>> same. *********************

>> If you also have Terminal Services users, make sure you set up a

>> different TS profile path for them in their ADUC properties - e.g.,

>> \\server\tsprofiles$\%username%

>>

>> ********************

>> Do not let people store any data locally - all data belongs on the

>> server. ********************

>> The User Profile Hive Cleanup Utility should be running on all your

>> computers. You can download it here:

>> http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en

>>

>> ********************

>> Roaming profile & folder redirection article -

>> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

Guest Gorge Lucas
Posted

Re: Problem with roaming profiles

 

Hi Lanwench,

 

Some good and bad news... it's kind of fixed syncing. However, these users

are on laptops. The client wants to be able to unplug the computer, turn on

wireless and walk around the office. At the moment, if you unplug the lan

cable, all the desktop icons disapear as they are located on the server and

there is no offline files enabled. When the wireless connects, the user has

to hit F5 to get the desktop icons back on the desktop. Quicklaunch icons

are still missing.

 

Any tips for a situation like this? I have another user with a laptop and

they are not having any of these problems. I am wondering if it is a profile

problem.

 

Thanks

 

"Lanwench [MVP - Exchange]"

<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message

news:%23POj1ab5IHA.4908@TK2MSFTNGP04.phx.gbl...

> Gorge Lucas <gorge192@hotmail.com> wrote:

>> Thanks for the reply.

>>

>> I pretty much do everything you suggest. I do one thing differently

>> however and that's having the folder redirection out of their

>> profile.

>

> Not sure what you mean...I don't redirect folders *into* a profile folder!

>

>> I just noticed and offline files was *off* for the profile

>> but *on* for the redirected folders, which probably makes sense to

>> why I am having these problems.

>

> Yes, could be.

>>

>> Would you agree?

>

> I disable offline files via GPO so I'm not sure, but yeah, why not!

>>

>> I have changed it now. The users have gone home so I will not know

>> until tomorrow if this has worked or not.

>>

>> Thanks

>

> You're welcome - keep us posted.

>>

>> "Lanwench [MVP - Exchange]"

>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

>> message news:OIObLBW5IHA.3784@TK2MSFTNGP06.phx.gbl...

>>> Gorge Lucas <gorge192@hotmail.com> wrote:

>>>> Hi,

>>>>

>>>> I have a customer who has a roaming profile. This is setup excatly

>>>> like all my other customers. What happens is the server goes offline

>>>> for 1-3 seconds for no apparent reason and syncing occurs. When this

>>>> happens, they lose all their icons on the desktop, quicklaunch etc.

>>>> This is a SBS 2003 R2 server.

>>>> There is nothing wrong with the server from what I can see. It's not

>>>> going down at all.

>>>>

>>>> Any ideas?

>>>

>>> Does this happen to all users? Meaning, is the server itself actually

>>> having

>>> problems?

>>>

>>> Make sure the parent folder/share for the profiles does *not* have

>>> offline caching enabled, or you will definitely have problems.

>>>

>>> Also note that

>>> roaming profiles really require folder redirection in order to work

>>> -and if

>>> you turn on folder redirection by default it turns on offline file

>>> syncing for my documents, etc. I always disable that as I am not a

>>> fan. Note that future SBS questions are best posted in

>>> m.p.windows.server.sbs - it does many things its own way.

>>>

>>> My boilerplate on roaming profiles is below...

>>>

>>> ********************

>>> General tips:

>>>

>>> 1. Set up a share on the server. For example - d:\profiles, shared as

>>> profiles$ to make it hidden from browsing. Make sure this share is

>>> *not* set

>>> to allow offline files/caching! (that's on by default - disable it)

>>>

>>> 2. Make sure the share permissions on profiles$ indicate

>>> everyone=full control. Set the NTFS security to administrators,

>>> system, and users=full control.

>>>

>>> 3. In the users' ADUC properties, specify

>>> \\server\profiles$\%username% in the profiles field

>>>

>>> 4. Have each user log into the domain once - if this is an existing

>>> user with a profile you wish to keep, have them log in at their usual

>>> workstationand log out. The profile is now roaming.

>>>

>>> 5. If you want the administrators group to automatically have

>>> permissions to

>>> the profiles folders, you'll need to make the appropriate change in

>>> group policy. Look in computer configuration/administrative

>>> templates/system/user

>>> profiles - there's an option to add administrators group to the

>>> roaming profiles permissions. Do this *before* the users' roaming

>>> profile folders are created - it isn't retroactive.

>>>

>>> ********************

>>> Notes:

>>>

>>> Make sure users understand that they should not log into multiple

>>> computers

>>> at the same time when they have roaming profiles (unless you make the

>>> profiles mandatory by renaming ntuser.dat to ntuser.man so they can't

>>> change

>>> them, which has major disadvantages),. Explain that the 'last one out

>>> wins'

>>> when it comes to uploading the final, changed copy of the profile.

>>> If you want to restrict multiple simultaneous network logins, look

>>> at LimitLogon (too much overhead for me), or this:

>>> http://www.jsifaq.com/SF/Tips/Tip.aspx?id=8768

>>>

>>> ********************

>>> Keep your profiles TINY. Via group policy, you should be redirecting

>>> My Documents (at the very least) - to a subfolder of the user's home

>>> directory

>>> or user folder. Also consider redirecting Desktop & Application Data

>>> similarly..... so the user will end up with:

>>>

>>> \\server\users\%username%\My Documents,

>>> \\server\users\%username%\Desktop,

>>> \\server\users\%username%\Application Data.

>>>

>>> [Alternatively, just manually re-target My Documents to

>>> \\server\users\%username% (this is not optimal, however!)]

>>>

>>> You should use folder redirection even without roaming profiles, but

>>> it's especially critical if you *are* using them.

>>>

>>> If you aren't going to also redirect the desktop using policies, tell

>>> users

>>> that they are not to store any files on the desktop or you will beat

>>> them with a

>>> stick. Big profile=slow login/logout, and possible profile

>>> corruption. ********************

>>> Note that user profiles are not compatible between different OS

>>> versions, even between W2k/XP. Keep all your computers. Keep your

>>> workstations as identical as possible - meaning, OS version is the

>>> same, SP level is the same, app load is (as much as possible) the

>>> same. *********************

>>> If you also have Terminal Services users, make sure you set up a

>>> different TS profile path for them in their ADUC properties - e.g.,

>>> \\server\tsprofiles$\%username%

>>>

>>> ********************

>>> Do not let people store any data locally - all data belongs on the

>>> server. ********************

>>> The User Profile Hive Cleanup Utility should be running on all your

>>> computers. You can download it here:

>>> http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en

>>>

>>> ********************

>>> Roaming profile & folder redirection article -

>>> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

>

>

>

Guest Lanwench [MVP - Exchange]
Posted

Re: Problem with roaming profiles

 

Gorge Lucas <gorge192@hotmail.com> wrote:

> Hi Lanwench,

>

> Some good and bad news... it's kind of fixed syncing. However, these

> users are on laptops. The client wants to be able to unplug the

> computer, turn on wireless and walk around the office. At the moment,

> if you unplug the lan cable, all the desktop icons disapear as they

> are located on the server and there is no offline files enabled. When

> the wireless connects, the user has to hit F5 to get the desktop

> icons back on the desktop. Quicklaunch icons are still missing.

>

> Any tips for a situation like this? I have another user with a laptop

> and they are not having any of these problems. I am wondering if it

> is a profile problem.

>

> Thanks

 

Honestly, I train my users not to pull the plug to switch to wireless. But

you can use offline files if you like to see if this helps. I've had

problems with it, so I don't ..I use a third party app (http://www.centered.com) to

sync My Documents to a local folder. But depending on your skill with group

policy & where the laptops are in your OUs, you may be able to make this

work fine.

>

> "Lanwench [MVP - Exchange]"

> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

> message news:%23POj1ab5IHA.4908@TK2MSFTNGP04.phx.gbl...

>> Gorge Lucas <gorge192@hotmail.com> wrote:

>>> Thanks for the reply.

>>>

>>> I pretty much do everything you suggest. I do one thing differently

>>> however and that's having the folder redirection out of their

>>> profile.

>>

>> Not sure what you mean...I don't redirect folders *into* a profile

>> folder!

>>> I just noticed and offline files was *off* for the profile

>>> but *on* for the redirected folders, which probably makes sense to

>>> why I am having these problems.

>>

>> Yes, could be.

>>>

>>> Would you agree?

>>

>> I disable offline files via GPO so I'm not sure, but yeah, why not!

>>>

>>> I have changed it now. The users have gone home so I will not know

>>> until tomorrow if this has worked or not.

>>>

>>> Thanks

>>

>> You're welcome - keep us posted.

>>>

>>> "Lanwench [MVP - Exchange]"

>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

>>> message news:OIObLBW5IHA.3784@TK2MSFTNGP06.phx.gbl...

>>>> Gorge Lucas <gorge192@hotmail.com> wrote:

>>>>> Hi,

>>>>>

>>>>> I have a customer who has a roaming profile. This is setup excatly

>>>>> like all my other customers. What happens is the server goes

>>>>> offline for 1-3 seconds for no apparent reason and syncing

>>>>> occurs. When this happens, they lose all their icons on the

>>>>> desktop, quicklaunch etc. This is a SBS 2003 R2 server.

>>>>> There is nothing wrong with the server from what I can see. It's

>>>>> not going down at all.

>>>>>

>>>>> Any ideas?

>>>>

>>>> Does this happen to all users? Meaning, is the server itself

>>>> actually having

>>>> problems?

>>>>

>>>> Make sure the parent folder/share for the profiles does *not* have

>>>> offline caching enabled, or you will definitely have problems.

>>>>

>>>> Also note that

>>>> roaming profiles really require folder redirection in order to work

>>>> -and if

>>>> you turn on folder redirection by default it turns on offline file

>>>> syncing for my documents, etc. I always disable that as I am not a

>>>> fan. Note that future SBS questions are best posted in

>>>> m.p.windows.server.sbs - it does many things its own way.

>>>>

>>>> My boilerplate on roaming profiles is below...

>>>>

>>>> ********************

>>>> General tips:

>>>>

>>>> 1. Set up a share on the server. For example - d:\profiles, shared

>>>> as profiles$ to make it hidden from browsing. Make sure this share

>>>> is *not* set

>>>> to allow offline files/caching! (that's on by default - disable it)

>>>>

>>>> 2. Make sure the share permissions on profiles$ indicate

>>>> everyone=full control. Set the NTFS security to administrators,

>>>> system, and users=full control.

>>>>

>>>> 3. In the users' ADUC properties, specify

>>>> \\server\profiles$\%username% in the profiles field

>>>>

>>>> 4. Have each user log into the domain once - if this is an existing

>>>> user with a profile you wish to keep, have them log in at their

>>>> usual workstationand log out. The profile is now roaming.

>>>>

>>>> 5. If you want the administrators group to automatically have

>>>> permissions to

>>>> the profiles folders, you'll need to make the appropriate change in

>>>> group policy. Look in computer configuration/administrative

>>>> templates/system/user

>>>> profiles - there's an option to add administrators group to the

>>>> roaming profiles permissions. Do this *before* the users' roaming

>>>> profile folders are created - it isn't retroactive.

>>>>

>>>> ********************

>>>> Notes:

>>>>

>>>> Make sure users understand that they should not log into multiple

>>>> computers

>>>> at the same time when they have roaming profiles (unless you make

>>>> the profiles mandatory by renaming ntuser.dat to ntuser.man so

>>>> they can't change

>>>> them, which has major disadvantages),. Explain that the 'last one

>>>> out wins'

>>>> when it comes to uploading the final, changed copy of the profile.

>>>> If you want to restrict multiple simultaneous network logins, look

>>>> at LimitLogon (too much overhead for me), or this:

>>>> http://www.jsifaq.com/SF/Tips/Tip.aspx?id=8768

>>>>

>>>> ********************

>>>> Keep your profiles TINY. Via group policy, you should be

>>>> redirecting My Documents (at the very least) - to a subfolder of

>>>> the user's home directory

>>>> or user folder. Also consider redirecting Desktop & Application

>>>> Data similarly..... so the user will end up with:

>>>>

>>>> \\server\users\%username%\My Documents,

>>>> \\server\users\%username%\Desktop,

>>>> \\server\users\%username%\Application Data.

>>>>

>>>> [Alternatively, just manually re-target My Documents to

>>>> \\server\users\%username% (this is not optimal, however!)]

>>>>

>>>> You should use folder redirection even without roaming profiles,

>>>> but it's especially critical if you *are* using them.

>>>>

>>>> If you aren't going to also redirect the desktop using policies,

>>>> tell users

>>>> that they are not to store any files on the desktop or you will

>>>> beat them with a

>>>> stick. Big profile=slow login/logout, and possible profile

>>>> corruption. ********************

>>>> Note that user profiles are not compatible between different OS

>>>> versions, even between W2k/XP. Keep all your computers. Keep your

>>>> workstations as identical as possible - meaning, OS version is the

>>>> same, SP level is the same, app load is (as much as possible) the

>>>> same. *********************

>>>> If you also have Terminal Services users, make sure you set up a

>>>> different TS profile path for them in their ADUC properties - e.g.,

>>>> \\server\tsprofiles$\%username%

>>>>

>>>> ********************

>>>> Do not let people store any data locally - all data belongs on the

>>>> server. ********************

>>>> The User Profile Hive Cleanup Utility should be running on all your

>>>> computers. You can download it here:

>>>> http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en

>>>>

>>>> ********************

>>>> Roaming profile & folder redirection article -

>>>> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

  • 1 month later...
Guest Bug Menot
Posted

Me too :(

 

Me too :(

 

I have the same issues as you. Offline files are on and the missing icons are slightly sporradic.

 

Worth knowing that in the same way you refresh the desktop to restore the desktop icons, you can reload the quick launch tool bar by right clicking the task bar going to tool bars and unticking "Quick Launch", then re-ticking it.

Guest Meinolf Weber
Posted

Re: Me too :(

 

Re: Me too :(

 

Hello Bug,

 

What issues? To what posting do you reply? Please create your own posting

with OS, all errors you have and what you are ttrying to achive.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

> I have the same issues as you. Offline files are on and the missing

> icons are slightly sporradic.

>

> Worth knowing that in the same way you refresh the desktop to restore

> the desktop icons, you can reload the quick launch tool bar by right

> clicking the task bar going to tool bars and unticking "Quick Launch",

> then re-ticking it.

>

×
×
  • Create New...