Profile Issues

[Guest teenzbutler]

I am fairly new to profiles and have been reading a lot of information to

educate myself. We run two terminal servers (Citrix Farm) on Windows Server

2003. UPHClean is installed. I've been seeing the following error:

 

Event ID 1525:

 

Windows has detected that Offline Caching is enabled on the Roaming Profile

share - to avoid potential profile corruption, Offline Caching must be

disabled on shares where roaming user profiles are stored.

 

Our profiles are stored on our Fileserver. Everytime a user logs on, it

also creates a local profile, which tends to take up a lot of disk space.

 

In addition to the error 1525, I received the following:

 

Windows was unable to load the registry. This is often caused by

insufficient memory or insufficient security rights.

 

DETAIL - Insufficient system resources exist to complete the requested

service. for M:\Documents and Settings\[username]\ntuser.dat

 

When this occurred, an error was on the screen stating the server was "Low

on registry space and any further requests would be denied." Does anyone

know how to increase the registry space?

 

And lastly, I am having a problem when a user tries to log on and they are

loaded onto a temporary profile.

 

Windows cannot load the locally stored profile. Possible causes of this

error include insufficient security rights or a corrupt local profile. If

this problem persists, contact your network administrator.

 

DETAIL - The process cannot access the file because it is being used by

another process.

 

Their ntuser.dat file appears to be in use, however, they are not logged on.

Does anyone know how to close this file?

[Guest Lanwench [MVP - Exchange]]

Re: Profile Issues

 

teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> I am fairly new to profiles and have been reading a lot of

> information to educate myself. We run two terminal servers (Citrix

> Farm) on Windows Server 2003. UPHClean is installed. I've been

> seeing the following error:

>

> Event ID 1525:

>

> Windows has detected that Offline Caching is enabled on the Roaming

> Profile share - to avoid potential profile corruption, Offline

> Caching must be disabled on shares where roaming user profiles are

> stored.

 

Yes - do this. Disable offline caching on the shared that store profiles.

I'm presuming you've got TS profile paths defined for each user either in

ADUC or via GPO (with loopback processing).

>

> Our profiles are stored on our Fileserver. Everytime a user logs on,

> it also creates a local profile, which tends to take up a lot of disk

> space.

 

You should be using folder redirection so that the profiles are kept

miniscule - do this for My Documents, Application Data, and Desktop, for

both TS users and regular users.

 

Also,you can set your policy to delete the cached profiles if you like.

>

> In addition to the error 1525, I received the following:

>

> Windows was unable to load the registry. This is often caused by

> insufficient memory or insufficient security rights.

>

> DETAIL - Insufficient system resources exist to complete the requested

> service. for M:\Documents and Settings\[username]\ntuser.dat

 

Hmmm. Why is this pointing to a drive called M, just out of curiosity?

>

> When this occurred, an error was on the screen stating the server was

> "Low on registry space and any further requests would be denied."

> Does anyone know how to increase the registry space?

>

> And lastly, I am having a problem when a user tries to log on and

> they are loaded onto a temporary profile.

>

> Windows cannot load the locally stored profile. Possible causes of

> this error include insufficient security rights or a corrupt local

> profile. If this problem persists, contact your network administrator.

>

> DETAIL - The process cannot access the file because it is being used

> by another process.

>

> Their ntuser.dat file appears to be in use, however, they are not

> logged on. Does anyone know how to close this file?

 

UPHClean *should* be taking care of this.....but do answer the

questions/stuff above.

[Guest teenzbutler]

Re: Profile Issues

 

Thanks for your reply. As for the answers to your questions:

>Yes - do this. Disable offline caching on the shared that store profiles.

 

The option to disable offline caching states "Files or programs from the

share will not be available offline." Are there any negative impacts if we

enable this? Can I disable this while users are currently logged on the

system, or should I wait until they are off?

> I'm presuming you've got TS profile paths defined for each user either in

> ADUC or via GPO (with loopback processing).

 

Yes. I use ADUC. My TS profile paths point to our fileserver, i.e.,

\\fileserver\profiles

> You should be using folder redirection so that the profiles are kept

> miniscule - do this for My Documents, Application Data, and Desktop, for

> both TS users and regular users.

 

I am not sure how to do folder redirection. Do you do this within ADUC?

> Also,you can set your policy to delete the cached profiles if you like.

 

Is this in mmc > Group Policy Editor > Administrative Templates > System >

User Profiles. If so, would I do this on both terminal servers?

> Hmmm. Why is this pointing to a drive called M, just out of curiosity?

 

Our C:\ has been mapped to M:\. I am not sure why they did that. In any

case, all our programs and documents and settings are stored on the M:\ drive.

> UPHClean *should* be taking care of this.....but do answer the

> questions/stuff above.

 

I don't know why UPHClean is not taking care of it. Do you know if there is

a new release?

 

 

 

 

 

 

"Lanwench [MVP - Exchange]" wrote:

> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> > I am fairly new to profiles and have been reading a lot of

> > information to educate myself. We run two terminal servers (Citrix

> > Farm) on Windows Server 2003. UPHClean is installed. I've been

> > seeing the following error:

> >

> > Event ID 1525:

> >

> > Windows has detected that Offline Caching is enabled on the Roaming

> > Profile share - to avoid potential profile corruption, Offline

> > Caching must be disabled on shares where roaming user profiles are

> > stored.

>

> Yes - do this. Disable offline caching on the shared that store profiles.

> I'm presuming you've got TS profile paths defined for each user either in

> ADUC or via GPO (with loopback processing).

> >

> > Our profiles are stored on our Fileserver. Everytime a user logs on,

> > it also creates a local profile, which tends to take up a lot of disk

> > space.

>

> You should be using folder redirection so that the profiles are kept

> miniscule - do this for My Documents, Application Data, and Desktop, for

> both TS users and regular users.

>

> Also,you can set your policy to delete the cached profiles if you like.

> >

> > In addition to the error 1525, I received the following:

> >

> > Windows was unable to load the registry. This is often caused by

> > insufficient memory or insufficient security rights.

> >

> > DETAIL - Insufficient system resources exist to complete the requested

> > service. for M:\Documents and Settings\[username]\ntuser.dat

>

> Hmmm. Why is this pointing to a drive called M, just out of curiosity?

> >

> > When this occurred, an error was on the screen stating the server was

> > "Low on registry space and any further requests would be denied."

> > Does anyone know how to increase the registry space?

> >

> > And lastly, I am having a problem when a user tries to log on and

> > they are loaded onto a temporary profile.

> >

> > Windows cannot load the locally stored profile. Possible causes of

> > this error include insufficient security rights or a corrupt local

> > profile. If this problem persists, contact your network administrator.

> >

> > DETAIL - The process cannot access the file because it is being used

> > by another process.

> >

> > Their ntuser.dat file appears to be in use, however, they are not

> > logged on. Does anyone know how to close this file?

>

> UPHClean *should* be taking care of this.....but do answer the

> questions/stuff above.

>

>

>

[Guest Lanwench [MVP - Exchange]]

Re: Profile Issues

 

teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> Thanks for your reply. As for the answers to your questions:

>

>> Yes - do this. Disable offline caching on the shared that store

>> profiles.

>

> The option to disable offline caching states "Files or programs from

> the share will not be available offline." Are there any negative

> impacts if we enable this?

 

Nope. You should never have it enabled on any folder that holds profiles.

> Can I disable this while users are

> currently logged on the system, or should I wait until they are off?

 

I'd do it ASAP. They will need to log out / back in before the message goes

away, tho.

>

>> I'm presuming you've got TS profile paths defined for each user

>> either in ADUC or via GPO (with loopback processing).

>

> Yes. I use ADUC. My TS profile paths point to our fileserver, i.e.,

> \\fileserver\profiles

 

OK - but you need separate profiles for your TS users - don't use the same

path you use for regular desktop users. And you can (should!) specify the TS

profile path in the GPO you use to manage your terminal servers, not in

ADUC, to make sure it gets applied to any user who happens to log into TS.

 

Also make sure you've set up your GPO here to grant the Administrators group

permission to the profiles.

>

>> You should be using folder redirection so that the profiles are kept

>> miniscule - do this for My Documents, Application Data, and Desktop,

>> for both TS users and regular users.

>

> I am not sure how to do folder redirection. Do you do this within

> ADUC?

 

No - it's via group policy. I'd set up a custom GPO that redirects My

Documents, Application Data, and Desktop, and link it to the appropriate

parent OU - so it affects *all* users regardless of where they log in, TS or

no (if you have multiple offices/locations you'll need to create separate

policies linked at the appropriate OUs).

 

I choose the option to redirect everyone to the same location, which creates

a folder under the parent. As the parent I tend to use something like

\\server\users - permissions on that folder are set up as per KB 274443

 

So, each user winds up with

 

\\server\users\%username%\My Documents

\\server\users\%username%\Application Data

\\server\users\%username%\Desktop

 

In the policy under each folder, I *untick* the option to grant users

exclusive permission. The root folder has the permissions set up properly

already so that the user, Administrators & System all have the access they

need- and other users don't have access to stuff they shouldn't.

 

Enabling the administrator to have access to redirected folders

http://support.microsoft.com/kb/288991

 

Roaming profile & folder redirection article -

http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

>

>> Also,you can set your policy to delete the cached profiles if you

>> like.

>

> Is this in mmc > Group Policy Editor

 

Easier to install the GPMC (group policy managment console) - makes managing

this SO much nicer. Put it on all your DCs.

> > Administrative Templates >

> System > User Profiles. If so, would I do this on both terminal

> servers?

 

Put both TS boxes in the same OU and create a custom GPO with loopback

processing applied- follow the steps in KB 278295

 

>

>> Hmmm. Why is this pointing to a drive called M, just out of

>> curiosity?

>

> Our C:\ has been mapped to M:\. I am not sure why they did that. In

> any case, all our programs and documents and settings are stored on

> the M:\ drive.

 

OK.....

>

>> UPHClean *should* be taking care of this.....but do answer the

>> questions/stuff above.

>

> I don't know why UPHClean is not taking care of it. Do you know if

> there is a new release?

 

1.6 is the latest AFAIK. But cleaning up the above may render this

irrelevant as it may just start working:-)

>

>

>

>

>

>

> "Lanwench [MVP - Exchange]" wrote:

>

>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>> I am fairly new to profiles and have been reading a lot of

>>> information to educate myself. We run two terminal servers (Citrix

>>> Farm) on Windows Server 2003. UPHClean is installed. I've been

>>> seeing the following error:

>>>

>>> Event ID 1525:

>>>

>>> Windows has detected that Offline Caching is enabled on the Roaming

>>> Profile share - to avoid potential profile corruption, Offline

>>> Caching must be disabled on shares where roaming user profiles are

>>> stored.

>>

>> Yes - do this. Disable offline caching on the shared that store

>> profiles. I'm presuming you've got TS profile paths defined for each

>> user either in ADUC or via GPO (with loopback processing).

>>>

>>> Our profiles are stored on our Fileserver. Everytime a user logs

>>> on, it also creates a local profile, which tends to take up a lot

>>> of disk space.

>>

>> You should be using folder redirection so that the profiles are kept

>> miniscule - do this for My Documents, Application Data, and Desktop,

>> for both TS users and regular users.

>>

>> Also,you can set your policy to delete the cached profiles if you

>> like.

>>>

>>> In addition to the error 1525, I received the following:

>>>

>>> Windows was unable to load the registry. This is often caused by

>>> insufficient memory or insufficient security rights.

>>>

>>> DETAIL - Insufficient system resources exist to complete the

>>> requested service. for M:\Documents and

>>> Settings\[username]\ntuser.dat

>>

>> Hmmm. Why is this pointing to a drive called M, just out of

>> curiosity?

>>>

>>> When this occurred, an error was on the screen stating the server

>>> was "Low on registry space and any further requests would be

>>> denied." Does anyone know how to increase the registry space?

>>>

>>> And lastly, I am having a problem when a user tries to log on and

>>> they are loaded onto a temporary profile.

>>>

>>> Windows cannot load the locally stored profile. Possible causes of

>>> this error include insufficient security rights or a corrupt local

>>> profile. If this problem persists, contact your network

>>> administrator.

>>>

>>> DETAIL - The process cannot access the file because it is being used

>>> by another process.

>>>

>>> Their ntuser.dat file appears to be in use, however, they are not

>>> logged on. Does anyone know how to close this file?

>>

>> UPHClean *should* be taking care of this.....but do answer the

>> questions/stuff above.

[Guest teenzbutler]

Re: Profile Issues

 

Thanks so much for your reply. The caching error is gone. I have question

regarding the registry. Every day or so, I see a message stating "the

registry has exceeded the allowed limit. The system will not be able to

handle any further requests." I opened the registry and discovered over 50

old user profiles. Some of these user have been gone for years. Do you

have any information on how to "clean" up the registry safely? I don't

typically like to go in this area, however, we are experiencing an ongoing

issue that needs to be addressed.

 

Thanks again.

 

"Lanwench [MVP - Exchange]" wrote:

> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> > Thanks for your reply. As for the answers to your questions:

> >

> >> Yes - do this. Disable offline caching on the shared that store

> >> profiles.

> >

> > The option to disable offline caching states "Files or programs from

> > the share will not be available offline." Are there any negative

> > impacts if we enable this?

>

> Nope. You should never have it enabled on any folder that holds profiles.

>

> > Can I disable this while users are

> > currently logged on the system, or should I wait until they are off?

>

> I'd do it ASAP. They will need to log out / back in before the message goes

> away, tho.

>

> >

> >> I'm presuming you've got TS profile paths defined for each user

> >> either in ADUC or via GPO (with loopback processing).

> >

> > Yes. I use ADUC. My TS profile paths point to our fileserver, i.e.,

> > \\fileserver\profiles

>

> OK - but you need separate profiles for your TS users - don't use the same

> path you use for regular desktop users. And you can (should!) specify the TS

> profile path in the GPO you use to manage your terminal servers, not in

> ADUC, to make sure it gets applied to any user who happens to log into TS.

>

> Also make sure you've set up your GPO here to grant the Administrators group

> permission to the profiles.

> >

> >> You should be using folder redirection so that the profiles are kept

> >> miniscule - do this for My Documents, Application Data, and Desktop,

> >> for both TS users and regular users.

> >

> > I am not sure how to do folder redirection. Do you do this within

> > ADUC?

>

> No - it's via group policy. I'd set up a custom GPO that redirects My

> Documents, Application Data, and Desktop, and link it to the appropriate

> parent OU - so it affects *all* users regardless of where they log in, TS or

> no (if you have multiple offices/locations you'll need to create separate

> policies linked at the appropriate OUs).

>

> I choose the option to redirect everyone to the same location, which creates

> a folder under the parent. As the parent I tend to use something like

> \\server\users - permissions on that folder are set up as per KB 274443

>

> So, each user winds up with

>

> \\server\users\%username%\My Documents

> \\server\users\%username%\Application Data

> \\server\users\%username%\Desktop

>

> In the policy under each folder, I *untick* the option to grant users

> exclusive permission. The root folder has the permissions set up properly

> already so that the user, Administrators & System all have the access they

> need- and other users don't have access to stuff they shouldn't.

>

> Enabling the administrator to have access to redirected folders

> http://support.microsoft.com/kb/288991

>

> Roaming profile & folder redirection article -

> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

> >

>

> >> Also,you can set your policy to delete the cached profiles if you

> >> like.

> >

> > Is this in mmc > Group Policy Editor

>

> Easier to install the GPMC (group policy managment console) - makes managing

> this SO much nicer. Put it on all your DCs.

>

> > > Administrative Templates >

> > System > User Profiles. If so, would I do this on both terminal

> > servers?

>

> Put both TS boxes in the same OU and create a custom GPO with loopback

> processing applied- follow the steps in KB 278295

>

>

> >

> >> Hmmm. Why is this pointing to a drive called M, just out of

> >> curiosity?

> >

> > Our C:\ has been mapped to M:\. I am not sure why they did that. In

> > any case, all our programs and documents and settings are stored on

> > the M:\ drive.

>

> OK.....

> >

> >> UPHClean *should* be taking care of this.....but do answer the

> >> questions/stuff above.

> >

> > I don't know why UPHClean is not taking care of it. Do you know if

> > there is a new release?

>

> 1.6 is the latest AFAIK. But cleaning up the above may render this

> irrelevant as it may just start working:-)

> >

> >

> >

> >

> >

> >

> > "Lanwench [MVP - Exchange]" wrote:

> >

> >> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> >>> I am fairly new to profiles and have been reading a lot of

> >>> information to educate myself. We run two terminal servers (Citrix

> >>> Farm) on Windows Server 2003. UPHClean is installed. I've been

> >>> seeing the following error:

> >>>

> >>> Event ID 1525:

> >>>

> >>> Windows has detected that Offline Caching is enabled on the Roaming

> >>> Profile share - to avoid potential profile corruption, Offline

> >>> Caching must be disabled on shares where roaming user profiles are

> >>> stored.

> >>

> >> Yes - do this. Disable offline caching on the shared that store

> >> profiles. I'm presuming you've got TS profile paths defined for each

> >> user either in ADUC or via GPO (with loopback processing).

> >>>

> >>> Our profiles are stored on our Fileserver. Everytime a user logs

> >>> on, it also creates a local profile, which tends to take up a lot

> >>> of disk space.

> >>

> >> You should be using folder redirection so that the profiles are kept

> >> miniscule - do this for My Documents, Application Data, and Desktop,

> >> for both TS users and regular users.

> >>

> >> Also,you can set your policy to delete the cached profiles if you

> >> like.

> >>>

> >>> In addition to the error 1525, I received the following:

> >>>

> >>> Windows was unable to load the registry. This is often caused by

> >>> insufficient memory or insufficient security rights.

> >>>

> >>> DETAIL - Insufficient system resources exist to complete the

> >>> requested service. for M:\Documents and

> >>> Settings\[username]\ntuser.dat

> >>

> >> Hmmm. Why is this pointing to a drive called M, just out of

> >> curiosity?

> >>>

> >>> When this occurred, an error was on the screen stating the server

> >>> was "Low on registry space and any further requests would be

> >>> denied." Does anyone know how to increase the registry space?

> >>>

> >>> And lastly, I am having a problem when a user tries to log on and

> >>> they are loaded onto a temporary profile.

> >>>

> >>> Windows cannot load the locally stored profile. Possible causes of

> >>> this error include insufficient security rights or a corrupt local

> >>> profile. If this problem persists, contact your network

> >>> administrator.

> >>>

> >>> DETAIL - The process cannot access the file because it is being used

> >>> by another process.

> >>>

> >>> Their ntuser.dat file appears to be in use, however, they are not

> >>> logged on. Does anyone know how to close this file?

> >>

> >> UPHClean *should* be taking care of this.....but do answer the

> >> questions/stuff above.

>

>

>

>

[Guest Lanwench [MVP - Exchange]]

Re: Profile Issues

 

teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> Thanks so much for your reply. The caching error is gone. I have

> question regarding the registry. Every day or so, I see a message

> stating "the registry has exceeded the allowed limit. The system

> will not be able to handle any further requests." I opened the

> registry and discovered over 50 old user profiles. Some of these

> user have been gone for years. Do you have any information on how to

> "clean" up the registry safely? I don't typically like to go in this

> area, however, we are experiencing an ongoing issue that needs to be

> addressed.

 

Check out delprof from the resource kit - or change your policy to delete

cached profiles.

Don't muck around in the registry.

>

> Thanks again.

>

> "Lanwench [MVP - Exchange]" wrote:

>

>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>> Thanks for your reply. As for the answers to your questions:

>>>

>>>> Yes - do this. Disable offline caching on the shared that store

>>>> profiles.

>>>

>>> The option to disable offline caching states "Files or programs from

>>> the share will not be available offline." Are there any negative

>>> impacts if we enable this?

>>

>> Nope. You should never have it enabled on any folder that holds

>> profiles.

>>

>>> Can I disable this while users are

>>> currently logged on the system, or should I wait until they are off?

>>

>> I'd do it ASAP. They will need to log out / back in before the

>> message goes away, tho.

>>

>>>

>>>> I'm presuming you've got TS profile paths defined for each user

>>>> either in ADUC or via GPO (with loopback processing).

>>>

>>> Yes. I use ADUC. My TS profile paths point to our fileserver,

>>> i.e., \\fileserver\profiles

>>

>> OK - but you need separate profiles for your TS users - don't use

>> the same path you use for regular desktop users. And you can

>> (should!) specify the TS profile path in the GPO you use to manage

>> your terminal servers, not in ADUC, to make sure it gets applied to

>> any user who happens to log into TS.

>>

>> Also make sure you've set up your GPO here to grant the

>> Administrators group permission to the profiles.

>>>

>>>> You should be using folder redirection so that the profiles are

>>>> kept miniscule - do this for My Documents, Application Data, and

>>>> Desktop, for both TS users and regular users.

>>>

>>> I am not sure how to do folder redirection. Do you do this within

>>> ADUC?

>>

>> No - it's via group policy. I'd set up a custom GPO that redirects My

>> Documents, Application Data, and Desktop, and link it to the

>> appropriate parent OU - so it affects *all* users regardless of

>> where they log in, TS or no (if you have multiple offices/locations

>> you'll need to create separate policies linked at the appropriate

>> OUs).

>>

>> I choose the option to redirect everyone to the same location, which

>> creates a folder under the parent. As the parent I tend to use

>> something like \\server\users - permissions on that folder are set

>> up as per KB 274443

>>

>> So, each user winds up with

>>

>> \\server\users\%username%\My Documents

>> \\server\users\%username%\Application Data

>> \\server\users\%username%\Desktop

>>

>> In the policy under each folder, I *untick* the option to grant users

>> exclusive permission. The root folder has the permissions set up

>> properly already so that the user, Administrators & System all have

>> the access they need- and other users don't have access to stuff

>> they shouldn't.

>>

>> Enabling the administrator to have access to redirected folders

>> http://support.microsoft.com/kb/288991

>>

>> Roaming profile & folder redirection article -

>> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

>>>

>>

>>>> Also,you can set your policy to delete the cached profiles if you

>>>> like.

>>>

>>> Is this in mmc > Group Policy Editor

>>

>> Easier to install the GPMC (group policy managment console) - makes

>> managing this SO much nicer. Put it on all your DCs.

>>

>>>> Administrative Templates >

>>> System > User Profiles. If so, would I do this on both terminal

>>> servers?

>>

>> Put both TS boxes in the same OU and create a custom GPO with

>> loopback processing applied- follow the steps in KB 278295

>>

>>

>>>

>>>> Hmmm. Why is this pointing to a drive called M, just out of

>>>> curiosity?

>>>

>>> Our C:\ has been mapped to M:\. I am not sure why they did that.

>>> In any case, all our programs and documents and settings are stored

>>> on the M:\ drive.

>>

>> OK.....

>>>

>>>> UPHClean *should* be taking care of this.....but do answer the

>>>> questions/stuff above.

>>>

>>> I don't know why UPHClean is not taking care of it. Do you know if

>>> there is a new release?

>>

>> 1.6 is the latest AFAIK. But cleaning up the above may render this

>> irrelevant as it may just start working:-)

>>>

>>>

>>>

>>>

>>>

>>>

>>> "Lanwench [MVP - Exchange]" wrote:

>>>

>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>>>> I am fairly new to profiles and have been reading a lot of

>>>>> information to educate myself. We run two terminal servers

>>>>> (Citrix Farm) on Windows Server 2003. UPHClean is installed.

>>>>> I've been seeing the following error:

>>>>>

>>>>> Event ID 1525:

>>>>>

>>>>> Windows has detected that Offline Caching is enabled on the

>>>>> Roaming Profile share - to avoid potential profile corruption,

>>>>> Offline Caching must be disabled on shares where roaming user

>>>>> profiles are stored.

>>>>

>>>> Yes - do this. Disable offline caching on the shared that store

>>>> profiles. I'm presuming you've got TS profile paths defined for

>>>> each user either in ADUC or via GPO (with loopback processing).

>>>>>

>>>>> Our profiles are stored on our Fileserver. Everytime a user logs

>>>>> on, it also creates a local profile, which tends to take up a lot

>>>>> of disk space.

>>>>

>>>> You should be using folder redirection so that the profiles are

>>>> kept miniscule - do this for My Documents, Application Data, and

>>>> Desktop, for both TS users and regular users.

>>>>

>>>> Also,you can set your policy to delete the cached profiles if you

>>>> like.

>>>>>

>>>>> In addition to the error 1525, I received the following:

>>>>>

>>>>> Windows was unable to load the registry. This is often caused by

>>>>> insufficient memory or insufficient security rights.

>>>>>

>>>>> DETAIL - Insufficient system resources exist to complete the

>>>>> requested service. for M:\Documents and

>>>>> Settings\[username]\ntuser.dat

>>>>

>>>> Hmmm. Why is this pointing to a drive called M, just out of

>>>> curiosity?

>>>>>

>>>>> When this occurred, an error was on the screen stating the server

>>>>> was "Low on registry space and any further requests would be

>>>>> denied." Does anyone know how to increase the registry space?

>>>>>

>>>>> And lastly, I am having a problem when a user tries to log on and

>>>>> they are loaded onto a temporary profile.

>>>>>

>>>>> Windows cannot load the locally stored profile. Possible causes of

>>>>> this error include insufficient security rights or a corrupt local

>>>>> profile. If this problem persists, contact your network

>>>>> administrator.

>>>>>

>>>>> DETAIL - The process cannot access the file because it is being

>>>>> used by another process.

>>>>>

>>>>> Their ntuser.dat file appears to be in use, however, they are not

>>>>> logged on. Does anyone know how to close this file?

>>>>

>>>> UPHClean *should* be taking care of this.....but do answer the

>>>> questions/stuff above.

[Guest teenzbutler]

Re: Profile Issues

 

Thanks. I am going to download the resources kit.

 

"Lanwench [MVP - Exchange]" wrote:

> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> > Thanks so much for your reply. The caching error is gone. I have

> > question regarding the registry. Every day or so, I see a message

> > stating "the registry has exceeded the allowed limit. The system

> > will not be able to handle any further requests." I opened the

> > registry and discovered over 50 old user profiles. Some of these

> > user have been gone for years. Do you have any information on how to

> > "clean" up the registry safely? I don't typically like to go in this

> > area, however, we are experiencing an ongoing issue that needs to be

> > addressed.

>

> Check out delprof from the resource kit - or change your policy to delete

> cached profiles.

> Don't muck around in the registry.

> >

> > Thanks again.

> >

> > "Lanwench [MVP - Exchange]" wrote:

> >

> >> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> >>> Thanks for your reply. As for the answers to your questions:

> >>>

> >>>> Yes - do this. Disable offline caching on the shared that store

> >>>> profiles.

> >>>

> >>> The option to disable offline caching states "Files or programs from

> >>> the share will not be available offline." Are there any negative

> >>> impacts if we enable this?

> >>

> >> Nope. You should never have it enabled on any folder that holds

> >> profiles.

> >>

> >>> Can I disable this while users are

> >>> currently logged on the system, or should I wait until they are off?

> >>

> >> I'd do it ASAP. They will need to log out / back in before the

> >> message goes away, tho.

> >>

> >>>

> >>>> I'm presuming you've got TS profile paths defined for each user

> >>>> either in ADUC or via GPO (with loopback processing).

> >>>

> >>> Yes. I use ADUC. My TS profile paths point to our fileserver,

> >>> i.e., \\fileserver\profiles

> >>

> >> OK - but you need separate profiles for your TS users - don't use

> >> the same path you use for regular desktop users. And you can

> >> (should!) specify the TS profile path in the GPO you use to manage

> >> your terminal servers, not in ADUC, to make sure it gets applied to

> >> any user who happens to log into TS.

> >>

> >> Also make sure you've set up your GPO here to grant the

> >> Administrators group permission to the profiles.

> >>>

> >>>> You should be using folder redirection so that the profiles are

> >>>> kept miniscule - do this for My Documents, Application Data, and

> >>>> Desktop, for both TS users and regular users.

> >>>

> >>> I am not sure how to do folder redirection. Do you do this within

> >>> ADUC?

> >>

> >> No - it's via group policy. I'd set up a custom GPO that redirects My

> >> Documents, Application Data, and Desktop, and link it to the

> >> appropriate parent OU - so it affects *all* users regardless of

> >> where they log in, TS or no (if you have multiple offices/locations

> >> you'll need to create separate policies linked at the appropriate

> >> OUs).

> >>

> >> I choose the option to redirect everyone to the same location, which

> >> creates a folder under the parent. As the parent I tend to use

> >> something like \\server\users - permissions on that folder are set

> >> up as per KB 274443

> >>

> >> So, each user winds up with

> >>

> >> \\server\users\%username%\My Documents

> >> \\server\users\%username%\Application Data

> >> \\server\users\%username%\Desktop

> >>

> >> In the policy under each folder, I *untick* the option to grant users

> >> exclusive permission. The root folder has the permissions set up

> >> properly already so that the user, Administrators & System all have

> >> the access they need- and other users don't have access to stuff

> >> they shouldn't.

> >>

> >> Enabling the administrator to have access to redirected folders

> >> http://support.microsoft.com/kb/288991

> >>

> >> Roaming profile & folder redirection article -

> >> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

> >>>

> >>

> >>>> Also,you can set your policy to delete the cached profiles if you

> >>>> like.

> >>>

> >>> Is this in mmc > Group Policy Editor

> >>

> >> Easier to install the GPMC (group policy managment console) - makes

> >> managing this SO much nicer. Put it on all your DCs.

> >>

> >>>> Administrative Templates >

> >>> System > User Profiles. If so, would I do this on both terminal

> >>> servers?

> >>

> >> Put both TS boxes in the same OU and create a custom GPO with

> >> loopback processing applied- follow the steps in KB 278295

> >>

> >>

> >>>

> >>>> Hmmm. Why is this pointing to a drive called M, just out of

> >>>> curiosity?

> >>>

> >>> Our C:\ has been mapped to M:\. I am not sure why they did that.

> >>> In any case, all our programs and documents and settings are stored

> >>> on the M:\ drive.

> >>

> >> OK.....

> >>>

> >>>> UPHClean *should* be taking care of this.....but do answer the

> >>>> questions/stuff above.

> >>>

> >>> I don't know why UPHClean is not taking care of it. Do you know if

> >>> there is a new release?

> >>

> >> 1.6 is the latest AFAIK. But cleaning up the above may render this

> >> irrelevant as it may just start working:-)

> >>>

> >>>

> >>>

> >>>

> >>>

> >>>

> >>> "Lanwench [MVP - Exchange]" wrote:

> >>>

> >>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> >>>>> I am fairly new to profiles and have been reading a lot of

> >>>>> information to educate myself. We run two terminal servers

> >>>>> (Citrix Farm) on Windows Server 2003. UPHClean is installed.

> >>>>> I've been seeing the following error:

> >>>>>

> >>>>> Event ID 1525:

> >>>>>

> >>>>> Windows has detected that Offline Caching is enabled on the

> >>>>> Roaming Profile share - to avoid potential profile corruption,

> >>>>> Offline Caching must be disabled on shares where roaming user

> >>>>> profiles are stored.

> >>>>

> >>>> Yes - do this. Disable offline caching on the shared that store

> >>>> profiles. I'm presuming you've got TS profile paths defined for

> >>>> each user either in ADUC or via GPO (with loopback processing).

> >>>>>

> >>>>> Our profiles are stored on our Fileserver. Everytime a user logs

> >>>>> on, it also creates a local profile, which tends to take up a lot

> >>>>> of disk space.

> >>>>

> >>>> You should be using folder redirection so that the profiles are

> >>>> kept miniscule - do this for My Documents, Application Data, and

> >>>> Desktop, for both TS users and regular users.

> >>>>

> >>>> Also,you can set your policy to delete the cached profiles if you

> >>>> like.

> >>>>>

> >>>>> In addition to the error 1525, I received the following:

> >>>>>

> >>>>> Windows was unable to load the registry. This is often caused by

> >>>>> insufficient memory or insufficient security rights.

> >>>>>

> >>>>> DETAIL - Insufficient system resources exist to complete the

> >>>>> requested service. for M:\Documents and

> >>>>> Settings\[username]\ntuser.dat

> >>>>

> >>>> Hmmm. Why is this pointing to a drive called M, just out of

> >>>> curiosity?

> >>>>>

> >>>>> When this occurred, an error was on the screen stating the server

> >>>>> was "Low on registry space and any further requests would be

> >>>>> denied." Does anyone know how to increase the registry space?

> >>>>>

> >>>>> And lastly, I am having a problem when a user tries to log on and

> >>>>> they are loaded onto a temporary profile.

> >>>>>

> >>>>> Windows cannot load the locally stored profile. Possible causes of

> >>>>> this error include insufficient security rights or a corrupt local

> >>>>> profile. If this problem persists, contact your network

> >>>>> administrator.

> >>>>>

> >>>>> DETAIL - The process cannot access the file because it is being

> >>>>> used by another process.

> >>>>>

> >>>>> Their ntuser.dat file appears to be in use, however, they are not

> >>>>> logged on. Does anyone know how to close this file?

> >>>>

> >>>> UPHClean *should* be taking care of this.....but do answer the

> >>>> questions/stuff above.

>

>

>

>

[Guest Lanwench [MVP - Exchange]]

Re: Profile Issues

 

teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> Thanks. I am going to download the resources kit.

 

You're welcome. You can set up a batch file to run delprof regularly to

delete profiles that are older than X days - google for more help with that.

 

>

> "Lanwench [MVP - Exchange]" wrote:

>

>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>> Thanks so much for your reply. The caching error is gone. I have

>>> question regarding the registry. Every day or so, I see a message

>>> stating "the registry has exceeded the allowed limit. The system

>>> will not be able to handle any further requests." I opened the

>>> registry and discovered over 50 old user profiles. Some of these

>>> user have been gone for years. Do you have any information on how

>>> to "clean" up the registry safely? I don't typically like to go in

>>> this area, however, we are experiencing an ongoing issue that needs

>>> to be addressed.

>>

>> Check out delprof from the resource kit - or change your policy to

>> delete cached profiles.

>> Don't muck around in the registry.

>>>

>>> Thanks again.

>>>

>>> "Lanwench [MVP - Exchange]" wrote:

>>>

>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>>>> Thanks for your reply. As for the answers to your questions:

>>>>>

>>>>>> Yes - do this. Disable offline caching on the shared that store

>>>>>> profiles.

>>>>>

>>>>> The option to disable offline caching states "Files or programs

>>>>> from the share will not be available offline." Are there any

>>>>> negative impacts if we enable this?

>>>>

>>>> Nope. You should never have it enabled on any folder that holds

>>>> profiles.

>>>>

>>>>> Can I disable this while users are

>>>>> currently logged on the system, or should I wait until they are

>>>>> off?

>>>>

>>>> I'd do it ASAP. They will need to log out / back in before the

>>>> message goes away, tho.

>>>>

>>>>>

>>>>>> I'm presuming you've got TS profile paths defined for each user

>>>>>> either in ADUC or via GPO (with loopback processing).

>>>>>

>>>>> Yes. I use ADUC. My TS profile paths point to our fileserver,

>>>>> i.e., \\fileserver\profiles

>>>>

>>>> OK - but you need separate profiles for your TS users - don't use

>>>> the same path you use for regular desktop users. And you can

>>>> (should!) specify the TS profile path in the GPO you use to manage

>>>> your terminal servers, not in ADUC, to make sure it gets applied to

>>>> any user who happens to log into TS.

>>>>

>>>> Also make sure you've set up your GPO here to grant the

>>>> Administrators group permission to the profiles.

>>>>>

>>>>>> You should be using folder redirection so that the profiles are

>>>>>> kept miniscule - do this for My Documents, Application Data, and

>>>>>> Desktop, for both TS users and regular users.

>>>>>

>>>>> I am not sure how to do folder redirection. Do you do this within

>>>>> ADUC?

>>>>

>>>> No - it's via group policy. I'd set up a custom GPO that redirects

>>>> My Documents, Application Data, and Desktop, and link it to the

>>>> appropriate parent OU - so it affects *all* users regardless of

>>>> where they log in, TS or no (if you have multiple offices/locations

>>>> you'll need to create separate policies linked at the appropriate

>>>> OUs).

>>>>

>>>> I choose the option to redirect everyone to the same location,

>>>> which creates a folder under the parent. As the parent I tend to

>>>> use something like \\server\users - permissions on that folder are

>>>> set up as per KB 274443

>>>>

>>>> So, each user winds up with

>>>>

>>>> \\server\users\%username%\My Documents

>>>> \\server\users\%username%\Application Data

>>>> \\server\users\%username%\Desktop

>>>>

>>>> In the policy under each folder, I *untick* the option to grant

>>>> users exclusive permission. The root folder has the permissions

>>>> set up properly already so that the user, Administrators & System

>>>> all have the access they need- and other users don't have access

>>>> to stuff they shouldn't.

>>>>

>>>> Enabling the administrator to have access to redirected folders

>>>> http://support.microsoft.com/kb/288991

>>>>

>>>> Roaming profile & folder redirection article -

>>>> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

>>>>>

>>>>

>>>>>> Also,you can set your policy to delete the cached profiles if you

>>>>>> like.

>>>>>

>>>>> Is this in mmc > Group Policy Editor

>>>>

>>>> Easier to install the GPMC (group policy managment console) - makes

>>>> managing this SO much nicer. Put it on all your DCs.

>>>>

>>>>>> Administrative Templates >

>>>>> System > User Profiles. If so, would I do this on both terminal

>>>>> servers?

>>>>

>>>> Put both TS boxes in the same OU and create a custom GPO with

>>>> loopback processing applied- follow the steps in KB 278295

>>>>

>>>>

>>>>>

>>>>>> Hmmm. Why is this pointing to a drive called M, just out of

>>>>>> curiosity?

>>>>>

>>>>> Our C:\ has been mapped to M:\. I am not sure why they did that.

>>>>> In any case, all our programs and documents and settings are

>>>>> stored on the M:\ drive.

>>>>

>>>> OK.....

>>>>>

>>>>>> UPHClean *should* be taking care of this.....but do answer the

>>>>>> questions/stuff above.

>>>>>

>>>>> I don't know why UPHClean is not taking care of it. Do you know

>>>>> if there is a new release?

>>>>

>>>> 1.6 is the latest AFAIK. But cleaning up the above may render this

>>>> irrelevant as it may just start working:-)

>>>>>

>>>>>

>>>>>

>>>>>

>>>>>

>>>>>

>>>>> "Lanwench [MVP - Exchange]" wrote:

>>>>>

>>>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>>>>>> I am fairly new to profiles and have been reading a lot of

>>>>>>> information to educate myself. We run two terminal servers

>>>>>>> (Citrix Farm) on Windows Server 2003. UPHClean is installed.

>>>>>>> I've been seeing the following error:

>>>>>>>

>>>>>>> Event ID 1525:

>>>>>>>

>>>>>>> Windows has detected that Offline Caching is enabled on the

>>>>>>> Roaming Profile share - to avoid potential profile corruption,

>>>>>>> Offline Caching must be disabled on shares where roaming user

>>>>>>> profiles are stored.

>>>>>>

>>>>>> Yes - do this. Disable offline caching on the shared that store

>>>>>> profiles. I'm presuming you've got TS profile paths defined for

>>>>>> each user either in ADUC or via GPO (with loopback processing).

>>>>>>>

>>>>>>> Our profiles are stored on our Fileserver. Everytime a user

>>>>>>> logs on, it also creates a local profile, which tends to take

>>>>>>> up a lot of disk space.

>>>>>>

>>>>>> You should be using folder redirection so that the profiles are

>>>>>> kept miniscule - do this for My Documents, Application Data, and

>>>>>> Desktop, for both TS users and regular users.

>>>>>>

>>>>>> Also,you can set your policy to delete the cached profiles if you

>>>>>> like.

>>>>>>>

>>>>>>> In addition to the error 1525, I received the following:

>>>>>>>

>>>>>>> Windows was unable to load the registry. This is often caused by

>>>>>>> insufficient memory or insufficient security rights.

>>>>>>>

>>>>>>> DETAIL - Insufficient system resources exist to complete the

>>>>>>> requested service. for M:\Documents and

>>>>>>> Settings\[username]\ntuser.dat

>>>>>>

>>>>>> Hmmm. Why is this pointing to a drive called M, just out of

>>>>>> curiosity?

>>>>>>>

>>>>>>> When this occurred, an error was on the screen stating the

>>>>>>> server was "Low on registry space and any further requests

>>>>>>> would be denied." Does anyone know how to increase the registry

>>>>>>> space?

>>>>>>>

>>>>>>> And lastly, I am having a problem when a user tries to log on

>>>>>>> and they are loaded onto a temporary profile.

>>>>>>>

>>>>>>> Windows cannot load the locally stored profile. Possible causes

>>>>>>> of this error include insufficient security rights or a corrupt

>>>>>>> local profile. If this problem persists, contact your network

>>>>>>> administrator.

>>>>>>>

>>>>>>> DETAIL - The process cannot access the file because it is being

>>>>>>> used by another process.

>>>>>>>

>>>>>>> Their ntuser.dat file appears to be in use, however, they are

>>>>>>> not logged on. Does anyone know how to close this file?

>>>>>>

>>>>>> UPHClean *should* be taking care of this.....but do answer the

>>>>>> questions/stuff above.

[Guest teenzbutler]

Re: Profile Issues

 

Hi again. I ran the delprof.exe program and it only finds profiles within

the My Documents and Settings. I always clean out old profiles from that

folder manually, so there wasn't much to clean out. However, the registry

still has a lot of profiles that need to be removed. Can you suggest a tool

that cleans the registry of old profiles?

 

"Lanwench [MVP - Exchange]" wrote:

> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> > Thanks. I am going to download the resources kit.

>

> You're welcome. You can set up a batch file to run delprof regularly to

> delete profiles that are older than X days - google for more help with that.

>

>

> >

> > "Lanwench [MVP - Exchange]" wrote:

> >

> >> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> >>> Thanks so much for your reply. The caching error is gone. I have

> >>> question regarding the registry. Every day or so, I see a message

> >>> stating "the registry has exceeded the allowed limit. The system

> >>> will not be able to handle any further requests." I opened the

> >>> registry and discovered over 50 old user profiles. Some of these

> >>> user have been gone for years. Do you have any information on how

> >>> to "clean" up the registry safely? I don't typically like to go in

> >>> this area, however, we are experiencing an ongoing issue that needs

> >>> to be addressed.

> >>

> >> Check out delprof from the resource kit - or change your policy to

> >> delete cached profiles.

> >> Don't muck around in the registry.

> >>>

> >>> Thanks again.

> >>>

> >>> "Lanwench [MVP - Exchange]" wrote:

> >>>

> >>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> >>>>> Thanks for your reply. As for the answers to your questions:

> >>>>>

> >>>>>> Yes - do this. Disable offline caching on the shared that store

> >>>>>> profiles.

> >>>>>

> >>>>> The option to disable offline caching states "Files or programs

> >>>>> from the share will not be available offline." Are there any

> >>>>> negative impacts if we enable this?

> >>>>

> >>>> Nope. You should never have it enabled on any folder that holds

> >>>> profiles.

> >>>>

> >>>>> Can I disable this while users are

> >>>>> currently logged on the system, or should I wait until they are

> >>>>> off?

> >>>>

> >>>> I'd do it ASAP. They will need to log out / back in before the

> >>>> message goes away, tho.

> >>>>

> >>>>>

> >>>>>> I'm presuming you've got TS profile paths defined for each user

> >>>>>> either in ADUC or via GPO (with loopback processing).

> >>>>>

> >>>>> Yes. I use ADUC. My TS profile paths point to our fileserver,

> >>>>> i.e., \\fileserver\profiles

> >>>>

> >>>> OK - but you need separate profiles for your TS users - don't use

> >>>> the same path you use for regular desktop users. And you can

> >>>> (should!) specify the TS profile path in the GPO you use to manage

> >>>> your terminal servers, not in ADUC, to make sure it gets applied to

> >>>> any user who happens to log into TS.

> >>>>

> >>>> Also make sure you've set up your GPO here to grant the

> >>>> Administrators group permission to the profiles.

> >>>>>

> >>>>>> You should be using folder redirection so that the profiles are

> >>>>>> kept miniscule - do this for My Documents, Application Data, and

> >>>>>> Desktop, for both TS users and regular users.

> >>>>>

> >>>>> I am not sure how to do folder redirection. Do you do this within

> >>>>> ADUC?

> >>>>

> >>>> No - it's via group policy. I'd set up a custom GPO that redirects

> >>>> My Documents, Application Data, and Desktop, and link it to the

> >>>> appropriate parent OU - so it affects *all* users regardless of

> >>>> where they log in, TS or no (if you have multiple offices/locations

> >>>> you'll need to create separate policies linked at the appropriate

> >>>> OUs).

> >>>>

> >>>> I choose the option to redirect everyone to the same location,

> >>>> which creates a folder under the parent. As the parent I tend to

> >>>> use something like \\server\users - permissions on that folder are

> >>>> set up as per KB 274443

> >>>>

> >>>> So, each user winds up with

> >>>>

> >>>> \\server\users\%username%\My Documents

> >>>> \\server\users\%username%\Application Data

> >>>> \\server\users\%username%\Desktop

> >>>>

> >>>> In the policy under each folder, I *untick* the option to grant

> >>>> users exclusive permission. The root folder has the permissions

> >>>> set up properly already so that the user, Administrators & System

> >>>> all have the access they need- and other users don't have access

> >>>> to stuff they shouldn't.

> >>>>

> >>>> Enabling the administrator to have access to redirected folders

> >>>> http://support.microsoft.com/kb/288991

> >>>>

> >>>> Roaming profile & folder redirection article -

> >>>> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

> >>>>>

> >>>>

> >>>>>> Also,you can set your policy to delete the cached profiles if you

> >>>>>> like.

> >>>>>

> >>>>> Is this in mmc > Group Policy Editor

> >>>>

> >>>> Easier to install the GPMC (group policy managment console) - makes

> >>>> managing this SO much nicer. Put it on all your DCs.

> >>>>

> >>>>>> Administrative Templates >

> >>>>> System > User Profiles. If so, would I do this on both terminal

> >>>>> servers?

> >>>>

> >>>> Put both TS boxes in the same OU and create a custom GPO with

> >>>> loopback processing applied- follow the steps in KB 278295

> >>>>

> >>>>

> >>>>>

> >>>>>> Hmmm. Why is this pointing to a drive called M, just out of

> >>>>>> curiosity?

> >>>>>

> >>>>> Our C:\ has been mapped to M:\. I am not sure why they did that.

> >>>>> In any case, all our programs and documents and settings are

> >>>>> stored on the M:\ drive.

> >>>>

> >>>> OK.....

> >>>>>

> >>>>>> UPHClean *should* be taking care of this.....but do answer the

> >>>>>> questions/stuff above.

> >>>>>

> >>>>> I don't know why UPHClean is not taking care of it. Do you know

> >>>>> if there is a new release?

> >>>>

> >>>> 1.6 is the latest AFAIK. But cleaning up the above may render this

> >>>> irrelevant as it may just start working:-)

> >>>>>

> >>>>>

> >>>>>

> >>>>>

> >>>>>

> >>>>>

> >>>>> "Lanwench [MVP - Exchange]" wrote:

> >>>>>

> >>>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> >>>>>>> I am fairly new to profiles and have been reading a lot of

> >>>>>>> information to educate myself. We run two terminal servers

> >>>>>>> (Citrix Farm) on Windows Server 2003. UPHClean is installed.

> >>>>>>> I've been seeing the following error:

> >>>>>>>

> >>>>>>> Event ID 1525:

> >>>>>>>

> >>>>>>> Windows has detected that Offline Caching is enabled on the

> >>>>>>> Roaming Profile share - to avoid potential profile corruption,

> >>>>>>> Offline Caching must be disabled on shares where roaming user

> >>>>>>> profiles are stored.

> >>>>>>

> >>>>>> Yes - do this. Disable offline caching on the shared that store

> >>>>>> profiles. I'm presuming you've got TS profile paths defined for

> >>>>>> each user either in ADUC or via GPO (with loopback processing).

> >>>>>>>

> >>>>>>> Our profiles are stored on our Fileserver. Everytime a user

> >>>>>>> logs on, it also creates a local profile, which tends to take

> >>>>>>> up a lot of disk space.

> >>>>>>

> >>>>>> You should be using folder redirection so that the profiles are

> >>>>>> kept miniscule - do this for My Documents, Application Data, and

> >>>>>> Desktop, for both TS users and regular users.

> >>>>>>

> >>>>>> Also,you can set your policy to delete the cached profiles if you

> >>>>>> like.

> >>>>>>>

> >>>>>>> In addition to the error 1525, I received the following:

> >>>>>>>

> >>>>>>> Windows was unable to load the registry. This is often caused by

> >>>>>>> insufficient memory or insufficient security rights.

> >>>>>>>

> >>>>>>> DETAIL - Insufficient system resources exist to complete the

> >>>>>>> requested service. for M:\Documents and

> >>>>>>> Settings\[username]\ntuser.dat

> >>>>>>

> >>>>>> Hmmm. Why is this pointing to a drive called M, just out of

> >>>>>> curiosity?

> >>>>>>>

> >>>>>>> When this occurred, an error was on the screen stating the

> >>>>>>> server was "Low on registry space and any further requests

> >>>>>>> would be denied." Does anyone know how to increase the registry

> >>>>>>> space?

> >>>>>>>

> >>>>>>> And lastly, I am having a problem when a user tries to log on

> >>>>>>> and they are loaded onto a temporary profile.

> >>>>>>>

> >>>>>>> Windows cannot load the locally stored profile. Possible causes

> >>>>>>> of this error include insufficient security rights or a corrupt

> >>>>>>> local profile. If this problem persists, contact your network

> >>>>>>> administrator.

> >>>>>>>

> >>>>>>> DETAIL - The process cannot access the file because it is being

> >>>>>>> used by another process.

> >>>>>>>

> >>>>>>> Their ntuser.dat file appears to be in use, however, they are

> >>>>>>> not logged on. Does anyone know how to close this file?

> >>>>>>

> >>>>>> UPHClean *should* be taking care of this.....but do answer the

> >>>>>> questions/stuff above.

>

>

>

>

[Guest Lanwench [MVP - Exchange]]

Re: Profile Issues

 

teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> Hi again. I ran the delprof.exe program and it only finds profiles

> within the My Documents and Settings. I always clean out old

> profiles from that folder manually,

 

Ah. Never do that. Always do it from control panel | system, or using

delprof.

> so there wasn't much to clean

> out. However, the registry still has a lot of profiles that need to

> be removed. Can you suggest a tool that cleans the registry of old

> profiles?

 

There shouldn't be anything important that's related to this, left in the

registry if you delete the profiles properly - as it is, I would leave the

registry alone. Don't use registry cleaning tools in general (not even on

workstations, let alone your TS box).

 

>

> "Lanwench [MVP - Exchange]" wrote:

>

>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>> Thanks. I am going to download the resources kit.

>>

>> You're welcome. You can set up a batch file to run delprof regularly

>> to delete profiles that are older than X days - google for more help

>> with that.

>>

>>

>>>

>>> "Lanwench [MVP - Exchange]" wrote:

>>>

>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>>>> Thanks so much for your reply. The caching error is gone. I have

>>>>> question regarding the registry. Every day or so, I see a message

>>>>> stating "the registry has exceeded the allowed limit. The system

>>>>> will not be able to handle any further requests." I opened the

>>>>> registry and discovered over 50 old user profiles. Some of these

>>>>> user have been gone for years. Do you have any information on how

>>>>> to "clean" up the registry safely? I don't typically like to go

>>>>> in this area, however, we are experiencing an ongoing issue that

>>>>> needs to be addressed.

>>>>

>>>> Check out delprof from the resource kit - or change your policy to

>>>> delete cached profiles.

>>>> Don't muck around in the registry.

>>>>>

>>>>> Thanks again.

>>>>>

>>>>> "Lanwench [MVP - Exchange]" wrote:

>>>>>

>>>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>>>>>> Thanks for your reply. As for the answers to your questions:

>>>>>>>

>>>>>>>> Yes - do this. Disable offline caching on the shared that store

>>>>>>>> profiles.

>>>>>>>

>>>>>>> The option to disable offline caching states "Files or programs

>>>>>>> from the share will not be available offline." Are there any

>>>>>>> negative impacts if we enable this?

>>>>>>

>>>>>> Nope. You should never have it enabled on any folder that holds

>>>>>> profiles.

>>>>>>

>>>>>>> Can I disable this while users are

>>>>>>> currently logged on the system, or should I wait until they are

>>>>>>> off?

>>>>>>

>>>>>> I'd do it ASAP. They will need to log out / back in before the

>>>>>> message goes away, tho.

>>>>>>

>>>>>>>

>>>>>>>> I'm presuming you've got TS profile paths defined for each user

>>>>>>>> either in ADUC or via GPO (with loopback processing).

>>>>>>>

>>>>>>> Yes. I use ADUC. My TS profile paths point to our fileserver,

>>>>>>> i.e., \\fileserver\profiles

>>>>>>

>>>>>> OK - but you need separate profiles for your TS users - don't use

>>>>>> the same path you use for regular desktop users. And you can

>>>>>> (should!) specify the TS profile path in the GPO you use to

>>>>>> manage your terminal servers, not in ADUC, to make sure it gets

>>>>>> applied to any user who happens to log into TS.

>>>>>>

>>>>>> Also make sure you've set up your GPO here to grant the

>>>>>> Administrators group permission to the profiles.

>>>>>>>

>>>>>>>> You should be using folder redirection so that the profiles are

>>>>>>>> kept miniscule - do this for My Documents, Application Data,

>>>>>>>> and Desktop, for both TS users and regular users.

>>>>>>>

>>>>>>> I am not sure how to do folder redirection. Do you do this

>>>>>>> within ADUC?

>>>>>>

>>>>>> No - it's via group policy. I'd set up a custom GPO that

>>>>>> redirects My Documents, Application Data, and Desktop, and link

>>>>>> it to the appropriate parent OU - so it affects *all* users

>>>>>> regardless of where they log in, TS or no (if you have multiple

>>>>>> offices/locations you'll need to create separate policies linked

>>>>>> at the appropriate OUs).

>>>>>>

>>>>>> I choose the option to redirect everyone to the same location,

>>>>>> which creates a folder under the parent. As the parent I tend to

>>>>>> use something like \\server\users - permissions on that folder

>>>>>> are set up as per KB 274443

>>>>>>

>>>>>> So, each user winds up with

>>>>>>

>>>>>> \\server\users\%username%\My Documents

>>>>>> \\server\users\%username%\Application Data

>>>>>> \\server\users\%username%\Desktop

>>>>>>

>>>>>> In the policy under each folder, I *untick* the option to grant

>>>>>> users exclusive permission. The root folder has the permissions

>>>>>> set up properly already so that the user, Administrators & System

>>>>>> all have the access they need- and other users don't have access

>>>>>> to stuff they shouldn't.

>>>>>>

>>>>>> Enabling the administrator to have access to redirected folders

>>>>>> http://support.microsoft.com/kb/288991

>>>>>>

>>>>>> Roaming profile & folder redirection article -

>>>>>> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

>>>>>>>

>>>>>>

>>>>>>>> Also,you can set your policy to delete the cached profiles if

>>>>>>>> you like.

>>>>>>>

>>>>>>> Is this in mmc > Group Policy Editor

>>>>>>

>>>>>> Easier to install the GPMC (group policy managment console) -

>>>>>> makes managing this SO much nicer. Put it on all your DCs.

>>>>>>

>>>>>>>> Administrative Templates >

>>>>>>> System > User Profiles. If so, would I do this on both terminal

>>>>>>> servers?

>>>>>>

>>>>>> Put both TS boxes in the same OU and create a custom GPO with

>>>>>> loopback processing applied- follow the steps in KB 278295

>>>>>>

>>>>>>

>>>>>>>

>>>>>>>> Hmmm. Why is this pointing to a drive called M, just out of

>>>>>>>> curiosity?

>>>>>>>

>>>>>>> Our C:\ has been mapped to M:\. I am not sure why they did

>>>>>>> that. In any case, all our programs and documents and settings

>>>>>>> are stored on the M:\ drive.

>>>>>>

>>>>>> OK.....

>>>>>>>

>>>>>>>> UPHClean *should* be taking care of this.....but do answer the

>>>>>>>> questions/stuff above.

>>>>>>>

>>>>>>> I don't know why UPHClean is not taking care of it. Do you know

>>>>>>> if there is a new release?

>>>>>>

>>>>>> 1.6 is the latest AFAIK. But cleaning up the above may render

>>>>>> this irrelevant as it may just start working:-)

>>>>>>>

>>>>>>>

>>>>>>>

>>>>>>>

>>>>>>>

>>>>>>>

>>>>>>> "Lanwench [MVP - Exchange]" wrote:

>>>>>>>

>>>>>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>>>>>>>> I am fairly new to profiles and have been reading a lot of

>>>>>>>>> information to educate myself. We run two terminal servers

>>>>>>>>> (Citrix Farm) on Windows Server 2003. UPHClean is installed.

>>>>>>>>> I've been seeing the following error:

>>>>>>>>>

>>>>>>>>> Event ID 1525:

>>>>>>>>>

>>>>>>>>> Windows has detected that Offline Caching is enabled on the

>>>>>>>>> Roaming Profile share - to avoid potential profile corruption,

>>>>>>>>> Offline Caching must be disabled on shares where roaming user

>>>>>>>>> profiles are stored.

>>>>>>>>

>>>>>>>> Yes - do this. Disable offline caching on the shared that store

>>>>>>>> profiles. I'm presuming you've got TS profile paths defined for

>>>>>>>> each user either in ADUC or via GPO (with loopback processing).

>>>>>>>>>

>>>>>>>>> Our profiles are stored on our Fileserver. Everytime a user

>>>>>>>>> logs on, it also creates a local profile, which tends to take

>>>>>>>>> up a lot of disk space.

>>>>>>>>

>>>>>>>> You should be using folder redirection so that the profiles are

>>>>>>>> kept miniscule - do this for My Documents, Application Data,

>>>>>>>> and Desktop, for both TS users and regular users.

>>>>>>>>

>>>>>>>> Also,you can set your policy to delete the cached profiles if

>>>>>>>> you like.

>>>>>>>>>

>>>>>>>>> In addition to the error 1525, I received the following:

>>>>>>>>>

>>>>>>>>> Windows was unable to load the registry. This is often caused

>>>>>>>>> by insufficient memory or insufficient security rights.

>>>>>>>>>

>>>>>>>>> DETAIL - Insufficient system resources exist to complete the

>>>>>>>>> requested service. for M:\Documents and

>>>>>>>>> Settings\[username]\ntuser.dat

>>>>>>>>

>>>>>>>> Hmmm. Why is this pointing to a drive called M, just out of

>>>>>>>> curiosity?

>>>>>>>>>

>>>>>>>>> When this occurred, an error was on the screen stating the

>>>>>>>>> server was "Low on registry space and any further requests

>>>>>>>>> would be denied." Does anyone know how to increase the

>>>>>>>>> registry space?

>>>>>>>>>

>>>>>>>>> And lastly, I am having a problem when a user tries to log on

>>>>>>>>> and they are loaded onto a temporary profile.

>>>>>>>>>

>>>>>>>>> Windows cannot load the locally stored profile. Possible

>>>>>>>>> causes of this error include insufficient security rights or

>>>>>>>>> a corrupt local profile. If this problem persists, contact

>>>>>>>>> your network administrator.

>>>>>>>>>

>>>>>>>>> DETAIL - The process cannot access the file because it is

>>>>>>>>> being used by another process.

>>>>>>>>>

>>>>>>>>> Their ntuser.dat file appears to be in use, however, they are

>>>>>>>>> not logged on. Does anyone know how to close this file?

>>>>>>>>

>>>>>>>> UPHClean *should* be taking care of this.....but do answer the

>>>>>>>> questions/stuff above.

[Guest teenzbutler]

Re: Profile Issues

 

I was never shown to delete the profiles from Control Panel | System. I will

start doing it that way from now on! I will take your advice and leave the

registry alone.

Thanks again.

 

"Lanwench [MVP - Exchange]" wrote:

> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> > Hi again. I ran the delprof.exe program and it only finds profiles

> > within the My Documents and Settings. I always clean out old

> > profiles from that folder manually,

>

> Ah. Never do that. Always do it from control panel | system, or using

> delprof.

>

> > so there wasn't much to clean

> > out. However, the registry still has a lot of profiles that need to

> > be removed. Can you suggest a tool that cleans the registry of old

> > profiles?

>

> There shouldn't be anything important that's related to this, left in the

> registry if you delete the profiles properly - as it is, I would leave the

> registry alone. Don't use registry cleaning tools in general (not even on

> workstations, let alone your TS box).

>

>

> >

> > "Lanwench [MVP - Exchange]" wrote:

> >

> >> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> >>> Thanks. I am going to download the resources kit.

> >>

> >> You're welcome. You can set up a batch file to run delprof regularly

> >> to delete profiles that are older than X days - google for more help

> >> with that.

> >>

> >>

> >>>

> >>> "Lanwench [MVP - Exchange]" wrote:

> >>>

> >>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> >>>>> Thanks so much for your reply. The caching error is gone. I have

> >>>>> question regarding the registry. Every day or so, I see a message

> >>>>> stating "the registry has exceeded the allowed limit. The system

> >>>>> will not be able to handle any further requests." I opened the

> >>>>> registry and discovered over 50 old user profiles. Some of these

> >>>>> user have been gone for years. Do you have any information on how

> >>>>> to "clean" up the registry safely? I don't typically like to go

> >>>>> in this area, however, we are experiencing an ongoing issue that

> >>>>> needs to be addressed.

> >>>>

> >>>> Check out delprof from the resource kit - or change your policy to

> >>>> delete cached profiles.

> >>>> Don't muck around in the registry.

> >>>>>

> >>>>> Thanks again.

> >>>>>

> >>>>> "Lanwench [MVP - Exchange]" wrote:

> >>>>>

> >>>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> >>>>>>> Thanks for your reply. As for the answers to your questions:

> >>>>>>>

> >>>>>>>> Yes - do this. Disable offline caching on the shared that store

> >>>>>>>> profiles.

> >>>>>>>

> >>>>>>> The option to disable offline caching states "Files or programs

> >>>>>>> from the share will not be available offline." Are there any

> >>>>>>> negative impacts if we enable this?

> >>>>>>

> >>>>>> Nope. You should never have it enabled on any folder that holds

> >>>>>> profiles.

> >>>>>>

> >>>>>>> Can I disable this while users are

> >>>>>>> currently logged on the system, or should I wait until they are

> >>>>>>> off?

> >>>>>>

> >>>>>> I'd do it ASAP. They will need to log out / back in before the

> >>>>>> message goes away, tho.

> >>>>>>

> >>>>>>>

> >>>>>>>> I'm presuming you've got TS profile paths defined for each user

> >>>>>>>> either in ADUC or via GPO (with loopback processing).

> >>>>>>>

> >>>>>>> Yes. I use ADUC. My TS profile paths point to our fileserver,

> >>>>>>> i.e., \\fileserver\profiles

> >>>>>>

> >>>>>> OK - but you need separate profiles for your TS users - don't use

> >>>>>> the same path you use for regular desktop users. And you can

> >>>>>> (should!) specify the TS profile path in the GPO you use to

> >>>>>> manage your terminal servers, not in ADUC, to make sure it gets

> >>>>>> applied to any user who happens to log into TS.

> >>>>>>

> >>>>>> Also make sure you've set up your GPO here to grant the

> >>>>>> Administrators group permission to the profiles.

> >>>>>>>

> >>>>>>>> You should be using folder redirection so that the profiles are

> >>>>>>>> kept miniscule - do this for My Documents, Application Data,

> >>>>>>>> and Desktop, for both TS users and regular users.

> >>>>>>>

> >>>>>>> I am not sure how to do folder redirection. Do you do this

> >>>>>>> within ADUC?

> >>>>>>

> >>>>>> No - it's via group policy. I'd set up a custom GPO that

> >>>>>> redirects My Documents, Application Data, and Desktop, and link

> >>>>>> it to the appropriate parent OU - so it affects *all* users

> >>>>>> regardless of where they log in, TS or no (if you have multiple

> >>>>>> offices/locations you'll need to create separate policies linked

> >>>>>> at the appropriate OUs).

> >>>>>>

> >>>>>> I choose the option to redirect everyone to the same location,

> >>>>>> which creates a folder under the parent. As the parent I tend to

> >>>>>> use something like \\server\users - permissions on that folder

> >>>>>> are set up as per KB 274443

> >>>>>>

> >>>>>> So, each user winds up with

> >>>>>>

> >>>>>> \\server\users\%username%\My Documents

> >>>>>> \\server\users\%username%\Application Data

> >>>>>> \\server\users\%username%\Desktop

> >>>>>>

> >>>>>> In the policy under each folder, I *untick* the option to grant

> >>>>>> users exclusive permission. The root folder has the permissions

> >>>>>> set up properly already so that the user, Administrators & System

> >>>>>> all have the access they need- and other users don't have access

> >>>>>> to stuff they shouldn't.

> >>>>>>

> >>>>>> Enabling the administrator to have access to redirected folders

> >>>>>> http://support.microsoft.com/kb/288991

> >>>>>>

> >>>>>> Roaming profile & folder redirection article -

> >>>>>> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

> >>>>>>>

> >>>>>>

> >>>>>>>> Also,you can set your policy to delete the cached profiles if

> >>>>>>>> you like.

> >>>>>>>

> >>>>>>> Is this in mmc > Group Policy Editor

> >>>>>>

> >>>>>> Easier to install the GPMC (group policy managment console) -

> >>>>>> makes managing this SO much nicer. Put it on all your DCs.

> >>>>>>

> >>>>>>>> Administrative Templates >

> >>>>>>> System > User Profiles. If so, would I do this on both terminal

> >>>>>>> servers?

> >>>>>>

> >>>>>> Put both TS boxes in the same OU and create a custom GPO with

> >>>>>> loopback processing applied- follow the steps in KB 278295

> >>>>>>

> >>>>>>

> >>>>>>>

> >>>>>>>> Hmmm. Why is this pointing to a drive called M, just out of

> >>>>>>>> curiosity?

> >>>>>>>

> >>>>>>> Our C:\ has been mapped to M:\. I am not sure why they did

> >>>>>>> that. In any case, all our programs and documents and settings

> >>>>>>> are stored on the M:\ drive.

> >>>>>>

> >>>>>> OK.....

> >>>>>>>

> >>>>>>>> UPHClean *should* be taking care of this.....but do answer the

> >>>>>>>> questions/stuff above.

> >>>>>>>

> >>>>>>> I don't know why UPHClean is not taking care of it. Do you know

> >>>>>>> if there is a new release?

> >>>>>>

> >>>>>> 1.6 is the latest AFAIK. But cleaning up the above may render

> >>>>>> this irrelevant as it may just start working:-)

> >>>>>>>

> >>>>>>>

> >>>>>>>

> >>>>>>>

> >>>>>>>

> >>>>>>>

> >>>>>>> "Lanwench [MVP - Exchange]" wrote:

> >>>>>>>

> >>>>>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> >>>>>>>>> I am fairly new to profiles and have been reading a lot of

> >>>>>>>>> information to educate myself. We run two terminal servers

> >>>>>>>>> (Citrix Farm) on Windows Server 2003. UPHClean is installed.

> >>>>>>>>> I've been seeing the following error:

> >>>>>>>>>

> >>>>>>>>> Event ID 1525:

> >>>>>>>>>

> >>>>>>>>> Windows has detected that Offline Caching is enabled on the

> >>>>>>>>> Roaming Profile share - to avoid potential profile corruption,

> >>>>>>>>> Offline Caching must be disabled on shares where roaming user

> >>>>>>>>> profiles are stored.

> >>>>>>>>

> >>>>>>>> Yes - do this. Disable offline caching on the shared that store

> >>>>>>>> profiles. I'm presuming you've got TS profile paths defined for

> >>>>>>>> each user either in ADUC or via GPO (with loopback processing).

> >>>>>>>>>

> >>>>>>>>> Our profiles are stored on our Fileserver. Everytime a user

> >>>>>>>>> logs on, it also creates a local profile, which tends to take

> >>>>>>>>> up a lot of disk space.

> >>>>>>>>

> >>>>>>>> You should be using folder redirection so that the profiles are

> >>>>>>>> kept miniscule - do this for My Documents, Application Data,

> >>>>>>>> and Desktop, for both TS users and regular users.

> >>>>>>>>

> >>>>>>>> Also,you can set your policy to delete the cached profiles if

> >>>>>>>> you like.

> >>>>>>>>>

> >>>>>>>>> In addition to the error 1525, I received the following:

> >>>>>>>>>

> >>>>>>>>> Windows was unable to load the registry. This is often caused

> >>>>>>>>> by insufficient memory or insufficient security rights.

> >>>>>>>>>

> >>>>>>>>> DETAIL - Insufficient system resources exist to complete the

> >>>>>>>>> requested service. for M:\Documents and

> >>>>>>>>> Settings\[username]\ntuser.dat

> >>>>>>>>

> >>>>>>>> Hmmm. Why is this pointing to a drive called M, just out of

> >>>>>>>> curiosity?

> >>>>>>>>>

> >>>>>>>>> When this occurred, an error was on the screen stating the

> >>>>>>>>> server was "Low on registry space and any further requests

> >>>>>>>>> would be denied." Does anyone know how to increase the

> >>>>>>>>> registry space?

> >>>>>>>>>

> >>>>>>>>> And lastly, I am having a problem when a user tries to log on

> >>>>>>>>> and they are loaded onto a temporary profile.

> >>>>>>>>>

> >>>>>>>>> Windows cannot load the locally stored profile. Possible

> >>>>>>>>> causes of this error include insufficient security rights or

> >>>>>>>>> a corrupt local profile. If this problem persists, contact

> >>>>>>>>> your network administrator.

> >>>>>>>>>

> >>>>>>>>> DETAIL - The process cannot access the file because it is

> >>>>>>>>> being used by another process.

> >>>>>>>>>

> >>>>>>>>> Their ntuser.dat file appears to be in use, however, they are

> >>>>>>>>> not logged on. Does anyone know how to close this file?

> >>>>>>>>

> >>>>>>>> UPHClean *should* be taking care of this.....but do answer the

> >>>>>>>> questions/stuff above.

>

>

>

>

[Guest Lanwench [MVP - Exchange]]

Re: Profile Issues

 

teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

> I was never shown to delete the profiles from Control Panel | System.

> I will start doing it that way from now on!

 

I'd set up delprof in a batch file & schedule it to run monthly, deleting

roaming profiles older than X days.

> I will take your advice

> and leave the registry alone.

 

Cool - that is usually a good plan.

> Thanks again.

>

> "Lanwench [MVP - Exchange]" wrote:

>

>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>> Hi again. I ran the delprof.exe program and it only finds profiles

>>> within the My Documents and Settings. I always clean out old

>>> profiles from that folder manually,

>>

>> Ah. Never do that. Always do it from control panel | system, or using

>> delprof.

>>

>>> so there wasn't much to clean

>>> out. However, the registry still has a lot of profiles that need to

>>> be removed. Can you suggest a tool that cleans the registry of old

>>> profiles?

>>

>> There shouldn't be anything important that's related to this, left

>> in the registry if you delete the profiles properly - as it is, I

>> would leave the registry alone. Don't use registry cleaning tools in

>> general (not even on workstations, let alone your TS box).

>>

>>

>>>

>>> "Lanwench [MVP - Exchange]" wrote:

>>>

>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>>>> Thanks. I am going to download the resources kit.

>>>>

>>>> You're welcome. You can set up a batch file to run delprof

>>>> regularly to delete profiles that are older than X days - google

>>>> for more help with that.

>>>>

>>>>

>>>>>

>>>>> "Lanwench [MVP - Exchange]" wrote:

>>>>>

>>>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>>>>>> Thanks so much for your reply. The caching error is gone. I

>>>>>>> have question regarding the registry. Every day or so, I see a

>>>>>>> message stating "the registry has exceeded the allowed limit.

>>>>>>> The system will not be able to handle any further requests." I

>>>>>>> opened the registry and discovered over 50 old user profiles.

>>>>>>> Some of these user have been gone for years. Do you have any

>>>>>>> information on how to "clean" up the registry safely? I don't

>>>>>>> typically like to go in this area, however, we are experiencing

>>>>>>> an ongoing issue that needs to be addressed.

>>>>>>

>>>>>> Check out delprof from the resource kit - or change your policy

>>>>>> to delete cached profiles.

>>>>>> Don't muck around in the registry.

>>>>>>>

>>>>>>> Thanks again.

>>>>>>>

>>>>>>> "Lanwench [MVP - Exchange]" wrote:

>>>>>>>

>>>>>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>>>>>>>> Thanks for your reply. As for the answers to your questions:

>>>>>>>>>

>>>>>>>>>> Yes - do this. Disable offline caching on the shared that

>>>>>>>>>> store profiles.

>>>>>>>>>

>>>>>>>>> The option to disable offline caching states "Files or

>>>>>>>>> programs from the share will not be available offline." Are

>>>>>>>>> there any negative impacts if we enable this?

>>>>>>>>

>>>>>>>> Nope. You should never have it enabled on any folder that holds

>>>>>>>> profiles.

>>>>>>>>

>>>>>>>>> Can I disable this while users are

>>>>>>>>> currently logged on the system, or should I wait until they

>>>>>>>>> are off?

>>>>>>>>

>>>>>>>> I'd do it ASAP. They will need to log out / back in before the

>>>>>>>> message goes away, tho.

>>>>>>>>

>>>>>>>>>

>>>>>>>>>> I'm presuming you've got TS profile paths defined for each

>>>>>>>>>> user either in ADUC or via GPO (with loopback processing).

>>>>>>>>>

>>>>>>>>> Yes. I use ADUC. My TS profile paths point to our

>>>>>>>>> fileserver, i.e., \\fileserver\profiles

>>>>>>>>

>>>>>>>> OK - but you need separate profiles for your TS users - don't

>>>>>>>> use the same path you use for regular desktop users. And you

>>>>>>>> can (should!) specify the TS profile path in the GPO you use to

>>>>>>>> manage your terminal servers, not in ADUC, to make sure it gets

>>>>>>>> applied to any user who happens to log into TS.

>>>>>>>>

>>>>>>>> Also make sure you've set up your GPO here to grant the

>>>>>>>> Administrators group permission to the profiles.

>>>>>>>>>

>>>>>>>>>> You should be using folder redirection so that the profiles

>>>>>>>>>> are kept miniscule - do this for My Documents, Application

>>>>>>>>>> Data, and Desktop, for both TS users and regular users.

>>>>>>>>>

>>>>>>>>> I am not sure how to do folder redirection. Do you do this

>>>>>>>>> within ADUC?

>>>>>>>>

>>>>>>>> No - it's via group policy. I'd set up a custom GPO that

>>>>>>>> redirects My Documents, Application Data, and Desktop, and link

>>>>>>>> it to the appropriate parent OU - so it affects *all* users

>>>>>>>> regardless of where they log in, TS or no (if you have multiple

>>>>>>>> offices/locations you'll need to create separate policies

>>>>>>>> linked at the appropriate OUs).

>>>>>>>>

>>>>>>>> I choose the option to redirect everyone to the same location,

>>>>>>>> which creates a folder under the parent. As the parent I tend

>>>>>>>> to use something like \\server\users - permissions on that

>>>>>>>> folder are set up as per KB 274443

>>>>>>>>

>>>>>>>> So, each user winds up with

>>>>>>>>

>>>>>>>> \\server\users\%username%\My Documents

>>>>>>>> \\server\users\%username%\Application Data

>>>>>>>> \\server\users\%username%\Desktop

>>>>>>>>

>>>>>>>> In the policy under each folder, I *untick* the option to grant

>>>>>>>> users exclusive permission. The root folder has the permissions

>>>>>>>> set up properly already so that the user, Administrators &

>>>>>>>> System all have the access they need- and other users don't

>>>>>>>> have access to stuff they shouldn't.

>>>>>>>>

>>>>>>>> Enabling the administrator to have access to redirected folders

>>>>>>>> http://support.microsoft.com/kb/288991

>>>>>>>>

>>>>>>>> Roaming profile & folder redirection article -

>>>>>>>> http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html

>>>>>>>>>

>>>>>>>>

>>>>>>>>>> Also,you can set your policy to delete the cached profiles if

>>>>>>>>>> you like.

>>>>>>>>>

>>>>>>>>> Is this in mmc > Group Policy Editor

>>>>>>>>

>>>>>>>> Easier to install the GPMC (group policy managment console) -

>>>>>>>> makes managing this SO much nicer. Put it on all your DCs.

>>>>>>>>

>>>>>>>>>> Administrative Templates >

>>>>>>>>> System > User Profiles. If so, would I do this on both

>>>>>>>>> terminal servers?

>>>>>>>>

>>>>>>>> Put both TS boxes in the same OU and create a custom GPO with

>>>>>>>> loopback processing applied- follow the steps in KB 278295

>>>>>>>>

>>>>>>>>

>>>>>>>>>

>>>>>>>>>> Hmmm. Why is this pointing to a drive called M, just out of

>>>>>>>>>> curiosity?

>>>>>>>>>

>>>>>>>>> Our C:\ has been mapped to M:\. I am not sure why they did

>>>>>>>>> that. In any case, all our programs and documents and settings

>>>>>>>>> are stored on the M:\ drive.

>>>>>>>>

>>>>>>>> OK.....

>>>>>>>>>

>>>>>>>>>> UPHClean *should* be taking care of this.....but do answer

>>>>>>>>>> the questions/stuff above.

>>>>>>>>>

>>>>>>>>> I don't know why UPHClean is not taking care of it. Do you

>>>>>>>>> know if there is a new release?

>>>>>>>>

>>>>>>>> 1.6 is the latest AFAIK. But cleaning up the above may render

>>>>>>>> this irrelevant as it may just start working:-)

>>>>>>>>>

>>>>>>>>>

>>>>>>>>>

>>>>>>>>>

>>>>>>>>>

>>>>>>>>>

>>>>>>>>> "Lanwench [MVP - Exchange]" wrote:

>>>>>>>>>

>>>>>>>>>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>>>>>>>>>> I am fairly new to profiles and have been reading a lot of

>>>>>>>>>>> information to educate myself. We run two terminal servers

>>>>>>>>>>> (Citrix Farm) on Windows Server 2003. UPHClean is

>>>>>>>>>>> installed. I've been seeing the following error:

>>>>>>>>>>>

>>>>>>>>>>> Event ID 1525:

>>>>>>>>>>>

>>>>>>>>>>> Windows has detected that Offline Caching is enabled on the

>>>>>>>>>>> Roaming Profile share - to avoid potential profile

>>>>>>>>>>> corruption, Offline Caching must be disabled on shares

>>>>>>>>>>> where roaming user profiles are stored.

>>>>>>>>>>

>>>>>>>>>> Yes - do this. Disable offline caching on the shared that

>>>>>>>>>> store profiles. I'm presuming you've got TS profile paths

>>>>>>>>>> defined for each user either in ADUC or via GPO (with

>>>>>>>>>> loopback processing).

>>>>>>>>>>>

>>>>>>>>>>> Our profiles are stored on our Fileserver. Everytime a user

>>>>>>>>>>> logs on, it also creates a local profile, which tends to

>>>>>>>>>>> take up a lot of disk space.

>>>>>>>>>>

>>>>>>>>>> You should be using folder redirection so that the profiles

>>>>>>>>>> are kept miniscule - do this for My Documents, Application

>>>>>>>>>> Data, and Desktop, for both TS users and regular users.

>>>>>>>>>>

>>>>>>>>>> Also,you can set your policy to delete the cached profiles if

>>>>>>>>>> you like.

>>>>>>>>>>>

>>>>>>>>>>> In addition to the error 1525, I received the following:

>>>>>>>>>>>

>>>>>>>>>>> Windows was unable to load the registry. This is often

>>>>>>>>>>> caused by insufficient memory or insufficient security

>>>>>>>>>>> rights.

>>>>>>>>>>>

>>>>>>>>>>> DETAIL - Insufficient system resources exist to complete the

>>>>>>>>>>> requested service. for M:\Documents and

>>>>>>>>>>> Settings\[username]\ntuser.dat

>>>>>>>>>>

>>>>>>>>>> Hmmm. Why is this pointing to a drive called M, just out of

>>>>>>>>>> curiosity?

>>>>>>>>>>>

>>>>>>>>>>> When this occurred, an error was on the screen stating the

>>>>>>>>>>> server was "Low on registry space and any further requests

>>>>>>>>>>> would be denied." Does anyone know how to increase the

>>>>>>>>>>> registry space?

>>>>>>>>>>>

>>>>>>>>>>> And lastly, I am having a problem when a user tries to log

>>>>>>>>>>> on and they are loaded onto a temporary profile.

>>>>>>>>>>>

>>>>>>>>>>> Windows cannot load the locally stored profile. Possible

>>>>>>>>>>> causes of this error include insufficient security rights or

>>>>>>>>>>> a corrupt local profile. If this problem persists, contact

>>>>>>>>>>> your network administrator.

>>>>>>>>>>>

>>>>>>>>>>> DETAIL - The process cannot access the file because it is

>>>>>>>>>>> being used by another process.

>>>>>>>>>>>

>>>>>>>>>>> Their ntuser.dat file appears to be in use, however, they

>>>>>>>>>>> are not logged on. Does anyone know how to close this file?

>>>>>>>>>>

>>>>>>>>>> UPHClean *should* be taking care of this.....but do answer

>>>>>>>>>> the questions/stuff above.

[Guest Hank Arnold (MVP)]

Re: Profile Issues

 

Lanwench [MVP - Exchange] wrote:

> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>> Hi again. I ran the delprof.exe program and it only finds profiles

>> within the My Documents and Settings. I always clean out old

>> profiles from that folder manually,

>

> Ah. Never do that. Always do it from control panel | system, or using

> delprof.

>

 

I usually delete profiles by right clicking on "My Computer" and

selecting "Properties". Then click on the "Profiles" tab. Select teh

profile and "Delete"...

 

--

 

Regards,

Hank Arnold

Microsoft MVP

Windows Server - Directory Services

[Guest Lanwench [MVP - Exchange]]

Re: Profile Issues

 

Hank Arnold (MVP) <rasilon@aol.com> wrote:

> Lanwench [MVP - Exchange] wrote:

>> teenzbutler <teenzbutler@discussions.microsoft.com> wrote:

>>> Hi again. I ran the delprof.exe program and it only finds profiles

>>> within the My Documents and Settings. I always clean out old

>>> profiles from that folder manually,

>>

>> Ah. Never do that. Always do it from control panel | system, or using

>> delprof.

>>

>

> I usually delete profiles by right clicking on "My Computer" and

> selecting "Properties". Then click on the "Profiles" tab. Select teh

> profile and "Delete"...

 

Yep. Same thing as control panel | system...

Delprof is way faster, though.