Re: DNS configuration

Lanwench, thank you for your roaming profiles guidelines; I'm trying
to follow them, I also installed the uphc program I never heard
before. my network big problem is the continuously reconfigurating
programs after every reboot for every users: autocad, winzip, itunes,
etc. after first tests, the impression is that some programs still
continue to reconfigurate, and others not. Now I've written here my
most important sbs customized configurations, if you'll have time to
take a look.

1. Profiles directory: I created it in C:\, since It seemed to me a
less problematic position for user profiles

2. I didn't use the $ to hide Profile directory (need to setup a new
series of profiles with \\Profiles$\...\%username% in profiles tab, or
is it possible to modify the existing one?), because I found sometimes
users need to access their folders

3. I redirected via GPO in "D:\Redirected" folder both Docs and
Desktop

4. Permissions:

Profiles and Redirected folders differ from yours:

-"domain users", 3th and 7th authorization, "this folder only"
-"creator owner", full, "subdir and files"
-"system", full, "this folder, subdir, files"

Profiles\single domain user folders: the same as yours:

-"system", full, "this folder, subdir, files"
-"administrators", full, "this folder, subdir, files"
-single domain user, full, "this folder, subdir, files"

Redirected\single domain user folders:

-"system", full, "this folder, subdir, files"
-"creator owner", full, "subdir and files"
-"administrators", full, "this folder, subdir, files"
-single domain user, full, "this folder only"

Redirected\single domain user folders\Desktop-Documents: the same as
yours:

-"system", full, "this folder, subdir, files"
-"administrators", full, "this folder, subdir, files"
-single domain user, full, "this folder, subdir, files"

5. GPOs:

I created two GPO, one for computers policies and one for users
policies, and I linked them to the domain. They appear in the first
two places in the link order list for the domain, and in the third and
fourth places in the link order list for the domain controller (after
2 default policies for the DC).

computers GPO:

-disable offline files
-prohibite offline files user configuration
-disable shutdown event
-always wait for at startup&login
-add administrators group to roaming profiles
-delete from cache roaming profiles copies
-don't detect slow connections
-password policies

users GPO:

-redirect Documents and Desktop
-IE security:

internet area: run activeX controls and plugins, download files, run
active script, run java applet script, enable metadata updates
intranet area: sites: added \\SERVERNAME

-disable automatic autocomplete for explorer modules
-prohibite password saving for automatic autocomplete
-enable screensaver
-protect screensaver with password
-timeout screensaver

thanks a lot.

.

Relevant Pages

  • Re: Moving Roaming Profile
    ... There is a GPO setting to add domain admins to the roaming folder. ... is under computer config, admin templates, system,user profiles and ... it is a move all users folders at ...
    (microsoft.public.windows.terminal_services)
  • Re: DNS configuration
    ... That's a good reason to use folder redirection. ... Application Data, and Desktop, in a custom GPO, linked at the MyBusiness ... Keep your profiles tinytinytiny! ... Profiles\single domain user folders: the same as yours: ...
    (microsoft.public.windows.server.sbs)
  • Re: Need help restoring after failed hard drive
    ... they have were failed backups according to the log. ... existing profiles so the users don't lose their MyDocs, Desktop, etc. ... the domain user Joe whose credentials/profile is cached on that workstation. ... Log into the local machine as TempJoe once ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Task Scheduler looses account credentials data
    ... If an domain user belongs to both Domain Guests group and a client's local ... Now if you would like to prevent users from leaving behind profiles on ... When logging on them on clients, ... Microsoft Online Community Support ...
    (microsoft.public.windowsxp.general)
  • RE: Administrators profiles deleted when having Guest status
    ... If an domain user belongs to both Domain Guests group and a client's local ... Now if you would like to prevent users from leaving behind profiles on ... When logging on them on clients, ... Microsoft Online Community Support ...
    (microsoft.public.windows.vista.administration_accounts_passwords)
Loading