Re: User V Computers

It might be me, but I don't really understand your question. The limit is you
harddrive, and yes there are limits in exchange, untill Exchange SP2 which is
huge!

"jd" wrote:

Hmmm, theres a problem here.

One of the limitations I have read about is the maximum file sizes on SBS,
can you just confirm that its only Exchange items that have a limit with
mailboxes and that I can up disk quota to cope with the doc redirection?

Which also begs the question regarding shared documents in Sharepoint, does
the SBS "18gb" file size limit apply also to this? ie is it all cumalitive??



"jd" <me@xxxxxxxxxxx> wrote in message
news:e4J$$pRJGHA.3064@xxxxxxxxxxxxxxxxxxxxxxx
Arhhh! Get IT!

So if I roam "mydocs 1gb" each time I login into a different "clientPC" it
has to access ALL mydocs.

But why is this so different from redirection? I mean either Im at the pc
with the HD or Im not...... What does roaming DO that redirection doesnt??
Does roaming create a CACHE copy on the roamed PC? Where is the additional
step/usage that occurs with Roaming V Redirection.

I have to confess that Ive only just realised that when I login to a
another ClientPC and open Outlook I get MY outlook! Which was actually one
of the items I wanted to "roam" with!!

Thanks for your help, I will have to read up so more.

"M. Hayes" <MHayes@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:23A9E3A8-F439-4DF8-84E9-345F959CA363@xxxxxxxxxxxxxxxx
JD, its not as complicated as it seems, just time consuming.

If you want the EZ (ya whimp ;-) ) goto Svr Mgt, click on User in the
left
side pane, in the right side pane (in blue) click Confiure My documnet
redirection. This will not do settings on apps (word, browsers) no pic's,
start menus

JD, what you are undersatnding to be as one is Roaming+Redirection, but
they
are different. You DO NOT want to roam the doc.s with the profile, really
you
dont. Why?

Redirect the Location of the My Documents Folder Outside of the Users
Roaming Profile.

To decrease initial logon time to a new computer, it is recommended that
you
redirect the location of the My Documents folder outside of the user's
roaming profile. The best way to do this is with Folder Redirection. If
you
don't have Active Directory enabled, you can do this with a logon script
or
instruct the user to do so manually.

And, a list of junk that could roam (and sssssslow
login)http://www.microsoft.com/mspress/books/sampchap/5566e.asp


See: http://www.microsoft.com/technet/community/newsgroups/upfrfaq.mspx

Step By Step
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpusrdat.mspx#EMAA


What I think the problem your have on you shares is the setting are not
correct.
Sould be:
Create security-enhanced redirected folders
To make sure that only the user and the domain administrators have
permissions to open a particular redirected folder, do the following: 1.
Select a central location in your environment where you would like to
store
Folder Redirection, and then share this folder. In this example, FLDREDIR
is
used.
2. Set Share Permissions for the Everyone group to Full Control.
3. Use the following settings for NTFS Permissions: . CREATOR OWNER -
Full
Control (Apply onto: Subfolders and Files Only)
. System - Full Control (Apply onto: This Folder, Subfolders and Files)
. Domain Admins - Full Control (Apply onto: This Folder, Subfolders and
Files)
. Everyone - Create Folder/Append Data (Apply onto: This Folder Only)
. Everyone - List Folder/Read Data (Apply onto: This Folder Only)
. Everyone - Read Attributes (Apply onto: This Folder Only)
. Everyone - Traverse Folder/Execute File (Apply onto: This Folder Only)

4. Configure Folder Redirection Policy as outlined in Windows Help. Use a
path similar to \\server\FLDREDIR\username to create a folder under the
shared folder, FLDREDIR.
Because the Everyone group has the Create Folder/Append Data right, the
group members have the proper permissions to create the folder; however,
the
members are not able to read the data afterwards. The Username group is
the
name of the user that was logged on when you created the folder. Because
the
folder is a child of the parent folder, it inherits the permissions that
you
assigned to FLDREDIR. Also, because the user is creating the folder, the
user
gains full control of the folder because of the Creator Owner Permission
setting.

SO Just remember this is a TWO part job. (1) Rediredtion (2) Roaming
"jd" wrote:

Thanks M,

Clearly spelt out, but a little complicated for me.

I did try pointing remote user profiles at \\server\\share\username
which
already existed on my sbs! The existing username folders were empty.
However
my test client is XP64bit and was told "access denied" at login and
another
window popped up "intermitantly" on the client XP64 stating that SBS
didnt
support XP64bit! (for clarity this XP64 cleint was previously added to
domain as a COMPUTER and the security setting set to allow "complete
ctrl"
for domain/users.

Given the complexity of "full" roaming, would you please be good enough
to
list out the steps to simply allow roaming of Mydocuments and Outlook.
As
the admin I always setup the clients with "Classic" settings in any
event.

Also if you have the time, how do CALs work, I know the principles, but
having added a selection of COMPUTERS and USERS the "license" tab still
shows only 1 of 5 license's used!

Many thanks

"M. Hayes" <MHayes@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D229E592-0D2F-4C97-A267-73AC49229B9D@xxxxxxxxxxxxxxxx
Let me try becuase I dont think they really answered your questions.

1.You can safely ignore add computer when creating a new user. esp, if
you've alreay setup the client machines, and know the machine names.
Add
thoes names instead.

2. The changes (can) roam with her but you MUST set up raoming WITH
folder
redirection (More latter).

3. SBS "encourage you to do this beacuse it assumes (insert laugh) the
you
just bought all new machines and will do remote install of XP.

4. The diff between Computer/ User is to say this machiine is
authorized
to
the domain, while a user (distribution account realted) may not be
able to
join rouge machine to the domain.

5. On the whole "messy" client Admin account thing, what I do, is
create a
GPO the changes the Administrator Account Name (Look in SBS Help in
Srv
Mgt)
somethin close or indipendant but known 'I'm at the darn clinent
machine
account. Add this to your SBS Users don't surf the web with it. Why? I
go
out
to client and do what I ned to do by rebooting, but mostly log off
Type
Administrator, nothing for password, I'm in, there like whaaa?

6.The names are not realivant for remote ppl. per se, because there
using
a
TS like enviromet.

ROAMING PROFILES
Perform the following steps to configure roaming profiles:
Create roaming profiles shared folder:
1. Create a folder on the Small Business Server, or if available, on
the
Windows Storage Server, to store the user profiles.
2. Open the folder properties and ensure that the domain Users group
has
Read & Execute, List Folder Contents, and Read permissions.
3. Share the folder. Grant the Everyone group Change and Read
permissions.
4. Click the Sharing tab and click the Offline Settings button.
5. Select the Files or programs from the share will not be available
offline
option.
6. Click Ok.

Create the DFS link:
1. Open the Distributed File System management console and open the
DFS
root
created in the "Distributed File System" section in this chapter.
2. Right-click the DFS root and select the New Link... option.
3. Enter the following link properties and then click Ok:

. Link Name: "RoamingProfiles"
. Path to Target: Shared folder for roaming profiles

Create a Group Policy object to represent the Group Policy settings
recommended for roaming profiles:
1. Expand the Advanced Management container in the Server Management
console.
2. Select the Group Policy Management container and expand the Forest
and
Domains containers. Right-click the domain and select the Create and
Link
a
GPO here option.
3. Name the GPO "Small Business Server Roaming Profiles Policy."
4. Right-click the policy and click the Edit option.
5. Close and save the policy when you have completed the
configurations
listed

(1st GPO Setting) Folders added in this setting are excluded from the
roaming profiles.

User Configuration\Administrative Templates\System\User Profiles
Exclude
directories in roaming profile

State: Enabled
Enter the following semicolon separated list of folders:
My Documents; Desktop; Application Data

(2nd GPO)
Limit the size of the user's roaming profile and specify the action to
be
taken when the profile size exceeds the threshold.

User Configuration\Administrative Templates\System\User Profiles Limit
profile size

State: Enabled
You can set the following:
.Maximum user profile size (the default is adequate for most
environments).
.Include registry in file list should be checked.
.Notify user when profile storage space is exceeded should be checked.
.Remind user every X minutes should not be set lower than 15 minutes.

Configure user profiles to roam by performing the following steps:
1.Open the Server Management console and select the Users container.
2.Open the user properties and click the Profile tab.
3.Type the DFS path of the folder where the user's profile is to be
stored.
For example, \\YOURSERVERNAME.local\public\RoamingProfiles\%username%.


Folder Redirection (Required)

.My Documents
.Application Data
.Desktop
.Start Menu


The first option is completely automated and requires little
administrative
effort to configure. This option is available through the Configure My
Documents Redirection link in the Users container of the Server
Management
console. This option configures the redirection of the My Document
folder
only.


To configure My Documents folder redirection, use the following steps:
1. Open the Server Management console, and select the Users container.
2. Click the Configure My Documents Redirection link.
3. Select the Redirect all My Documents folders to the default shared
folder
for users on the Small Business Server option.
4. Click Ok





"jd" wrote:

Ok,

Lets say I have a new install on a laptop. I can connect to the
domain
from
the laptop itself using my admin credentials, (this does however
.

Loading