Separate User Profiles per Locations

[Guest lozza]

Guys,

 

A theoretical based question.

 

If I have a single global AD domain and I have a TS Server in London and NY,

can I split configure this so when a user logs onto the TS (london) his

profile will be on a NAS device in the London DC and the when the same user

logs onto the TS (NY) his profile will be located in the NY Datacentre.

 

If I put each TS into an OU of its own OU=London (for London TS) and OU=NY

(for NY TS) then:

 

I am thinking I could Apply a separate GPO to each TS OU for location and set:

 

CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming Profile

 

and for the London OU point it to \\London-NAS\TSProfiles and for NY OU

point it to \\NY-NAS\TSProfiles. Will this then achieve what I want it to

achieve?

 

I think the above will work....

 

My understanding however breaks down, when I want to also use folder

redirection for these profiles inorder to keep profiles sizes to a minimum.

How would I go about redirecting these folders for each DC location? and is

this typically how it is done?

 

Many Thanks

Lozza

[Guest Vera Noest [MVP]]

Re: Separate User Profiles per Locations

 

I've never tested this, but it should work, I believe.

Along the same lines, you can add the folder redirection settings

to the same 2 GPOs, redirecting them to the Londen and NY NAS

respectively:

 

User Configuration - Windows Settings - Folder Redirection

Application Data

Desktop

My Documents

Start Menu

 

But since these settings are User Configurations, you will also

need to use loopback processing of the GPO:

 

Computer Configuration - Administrative Templates - System - Group

Policy

"User Group Policy loopback processing mode" - "Replace"

 

which ensure that when a user logs on to a TS, the user settings

are taken from the GPO which is linked to the OU which contains the

TS account, not from the GPO which is linked to the OU containing

the user account. That should do what you want to achieve.

 

231287 - Loopback Processing of Group Policy

http://support.microsoft.com/?kbid=231287

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?bG96emE=?= <lozza@discussions.microsoft.com> wrote on 01

feb 2008 in microsoft.public.windows.terminal_services:

> Guys,

>

> A theoretical based question.

>

> If I have a single global AD domain and I have a TS Server in

> London and NY, can I split configure this so when a user logs

> onto the TS (london) his profile will be on a NAS device in the

> London DC and the when the same user logs onto the TS (NY) his

> profile will be located in the NY Datacentre.

>

> If I put each TS into an OU of its own OU=London (for London TS)

> and OU=NY (for NY TS) then:

>

> I am thinking I could Apply a separate GPO to each TS OU for

> location and set:

>

> CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming

> Profile

>

> and for the London OU point it to \\London-NAS\TSProfiles and

> for NY OU point it to \\NY-NAS\TSProfiles. Will this then

> achieve what I want it to achieve?

>

> I think the above will work....

>

> My understanding however breaks down, when I want to also use

> folder redirection for these profiles inorder to keep profiles

> sizes to a minimum. How would I go about redirecting these

> folders for each DC location? and is this typically how it is

> done?

>

> Many Thanks

> Lozza

[Guest Patrick Rouse]

RE: Separate User Profiles per Locations

 

All you need to do is put each terminal server in a different OU, and use

different loopback policies to determine where to store the profiles, and

where to redirect the folders.

 

directions are here:

 

http://www.msterminalservices.org/articles/Configure-Folder-Redirection.html

 

--

Patrick C. Rouse

Microsoft MVP - Terminal Server

SE, West Coast USA & Canada

Quest Software, Provision Networks Division

Virtual Client Solutions

http://www.provisionnetworks.com

 

 

"lozza" wrote:

> Guys,

>

> A theoretical based question.

>

> If I have a single global AD domain and I have a TS Server in London and NY,

> can I split configure this so when a user logs onto the TS (london) his

> profile will be on a NAS device in the London DC and the when the same user

> logs onto the TS (NY) his profile will be located in the NY Datacentre.

>

> If I put each TS into an OU of its own OU=London (for London TS) and OU=NY

> (for NY TS) then:

>

> I am thinking I could Apply a separate GPO to each TS OU for location and set:

>

> CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming Profile

>

> and for the London OU point it to \\London-NAS\TSProfiles and for NY OU

> point it to \\NY-NAS\TSProfiles. Will this then achieve what I want it to

> achieve?

>

> I think the above will work....

>

> My understanding however breaks down, when I want to also use folder

> redirection for these profiles inorder to keep profiles sizes to a minimum.

> How would I go about redirecting these folders for each DC location? and is

> this typically how it is done?

>

> Many Thanks

> Lozza

[Guest lozza]

RE: Separate User Profiles per Locations

 

yes, excellent... using loopback to redirect these folders to the same

location where profiles for each specific TS are stored makes sense. as these

are User settings in a GPO

 

but, how would I configure loopback for profile location depending on which

server a user logs onto?

 

Is this good practice to have different profiles for the same user to be

scattered about depending on which Global TS Server they log onto? even

though all TS servers will host same applications, if this goes ahead?

 

Happy Friday... working :(

 

"Patrick Rouse" wrote:

> All you need to do is put each terminal server in a different OU, and use

> different loopback policies to determine where to store the profiles, and

> where to redirect the folders.

>

> directions are here:

>

> http://www.msterminalservices.org/articles/Configure-Folder-Redirection.html

>

> --

> Patrick C. Rouse

> Microsoft MVP - Terminal Server

> SE, West Coast USA & Canada

> Quest Software, Provision Networks Division

> Virtual Client Solutions

> http://www.provisionnetworks.com

>

>

> "lozza" wrote:

>

> > Guys,

> >

> > A theoretical based question.

> >

> > If I have a single global AD domain and I have a TS Server in London and NY,

> > can I split configure this so when a user logs onto the TS (london) his

> > profile will be on a NAS device in the London DC and the when the same user

> > logs onto the TS (NY) his profile will be located in the NY Datacentre.

> >

> > If I put each TS into an OU of its own OU=London (for London TS) and OU=NY

> > (for NY TS) then:

> >

> > I am thinking I could Apply a separate GPO to each TS OU for location and set:

> >

> > CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming Profile

> >

> > and for the London OU point it to \\London-NAS\TSProfiles and for NY OU

> > point it to \\NY-NAS\TSProfiles. Will this then achieve what I want it to

> > achieve?

> >

> > I think the above will work....

> >

> > My understanding however breaks down, when I want to also use folder

> > redirection for these profiles inorder to keep profiles sizes to a minimum.

> > How would I go about redirecting these folders for each DC location? and is

> > this typically how it is done?

> >

> > Many Thanks

> > Lozza

[Guest Patrick Rouse]

RE: Separate User Profiles per Locations

 

Put the two different servers in two different OUs, i.e. London & New York.

If users will typically only use one server or the other, you shouldn't have

a problem.

 

Al alternative is to use a hybrid profile solution like our User Profile

Service, SepagoProfile or Login Consultants Flex Profile Kit.

 

--

Patrick C. Rouse

Microsoft MVP - Terminal Server

SE, West Coast USA & Canada

Quest Software, Provision Networks Division

Virtual Client Solutions

http://www.provisionnetworks.com

 

 

"lozza" wrote:

> yes, excellent... using loopback to redirect these folders to the same

> location where profiles for each specific TS are stored makes sense. as these

> are User settings in a GPO

>

> but, how would I configure loopback for profile location depending on which

> server a user logs onto?

>

> Is this good practice to have different profiles for the same user to be

> scattered about depending on which Global TS Server they log onto? even

> though all TS servers will host same applications, if this goes ahead?

>

> Happy Friday... working :(

>

> "Patrick Rouse" wrote:

>

> > All you need to do is put each terminal server in a different OU, and use

> > different loopback policies to determine where to store the profiles, and

> > where to redirect the folders.

> >

> > directions are here:

> >

> > http://www.msterminalservices.org/articles/Configure-Folder-Redirection.html

> >

> > --

> > Patrick C. Rouse

> > Microsoft MVP - Terminal Server

> > SE, West Coast USA & Canada

> > Quest Software, Provision Networks Division

> > Virtual Client Solutions

> > http://www.provisionnetworks.com

> >

> >

> > "lozza" wrote:

> >

> > > Guys,

> > >

> > > A theoretical based question.

> > >

> > > If I have a single global AD domain and I have a TS Server in London and NY,

> > > can I split configure this so when a user logs onto the TS (london) his

> > > profile will be on a NAS device in the London DC and the when the same user

> > > logs onto the TS (NY) his profile will be located in the NY Datacentre.

> > >

> > > If I put each TS into an OU of its own OU=London (for London TS) and OU=NY

> > > (for NY TS) then:

> > >

> > > I am thinking I could Apply a separate GPO to each TS OU for location and set:

> > >

> > > CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming Profile

> > >

> > > and for the London OU point it to \\London-NAS\TSProfiles and for NY OU

> > > point it to \\NY-NAS\TSProfiles. Will this then achieve what I want it to

> > > achieve?

> > >

> > > I think the above will work....

> > >

> > > My understanding however breaks down, when I want to also use folder

> > > redirection for these profiles inorder to keep profiles sizes to a minimum.

> > > How would I go about redirecting these folders for each DC location? and is

> > > this typically how it is done?

> > >

> > > Many Thanks

> > > Lozza

[Guest lozza]

Re: Separate User Profiles per Locations

 

Guys,

 

Thanks for the explanations... As soon as I have the test kit and

confirmation that this is the direction that needs to be followed, I'll get

testing.

 

The important thing for me is to keep profiles of the Global TS Servers in

the same DC to each TS Server... so effectivley the same user account will

have different profiles depending on the location TS they log into. I dont

like this maintenance of many profiles for the same user, but this is the way

it may have to go. People are worried about what will happen if profiles are

stored in a single location for all TS servers and then problem of whether

this location goes down or even possible slowness of loading profiles of

users in NY that may have profiles stored in London.

 

The way its looking each TS user will have 6 different TS profiles and home

directories in each global DC. I hope this doesnt cause confusion.

 

Thanks for your expert help.

loz

"Vera Noest [MVP]" wrote:

> I've never tested this, but it should work, I believe.

> Along the same lines, you can add the folder redirection settings

> to the same 2 GPOs, redirecting them to the Londen and NY NAS

> respectively:

>

> User Configuration - Windows Settings - Folder Redirection

> Application Data

> Desktop

> My Documents

> Start Menu

>

> But since these settings are User Configurations, you will also

> need to use loopback processing of the GPO:

>

> Computer Configuration - Administrative Templates - System - Group

> Policy

> "User Group Policy loopback processing mode" - "Replace"

>

> which ensure that when a user logs on to a TS, the user settings

> are taken from the GPO which is linked to the OU which contains the

> TS account, not from the GPO which is linked to the OU containing

> the user account. That should do what you want to achieve.

>

> 231287 - Loopback Processing of Group Policy

> http://support.microsoft.com/?kbid=231287

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?bG96emE=?= <lozza@discussions.microsoft.com> wrote on 01

> feb 2008 in microsoft.public.windows.terminal_services:

>

> > Guys,

> >

> > A theoretical based question.

> >

> > If I have a single global AD domain and I have a TS Server in

> > London and NY, can I split configure this so when a user logs

> > onto the TS (london) his profile will be on a NAS device in the

> > London DC and the when the same user logs onto the TS (NY) his

> > profile will be located in the NY Datacentre.

> >

> > If I put each TS into an OU of its own OU=London (for London TS)

> > and OU=NY (for NY TS) then:

> >

> > I am thinking I could Apply a separate GPO to each TS OU for

> > location and set:

> >

> > CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming

> > Profile

> >

> > and for the London OU point it to \\London-NAS\TSProfiles and

> > for NY OU point it to \\NY-NAS\TSProfiles. Will this then

> > achieve what I want it to achieve?

> >

> > I think the above will work....

> >

> > My understanding however breaks down, when I want to also use

> > folder redirection for these profiles inorder to keep profiles

> > sizes to a minimum. How would I go about redirecting these

> > folders for each DC location? and is this typically how it is

> > done?

> >

> > Many Thanks

> > Lozza

>