Re: SBS 2003 roaming profiles

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

all that has been done, except i cannot keep the users my documents and their
desktop small. the workers are working with 50 to 60 pdfs daily, and they
have of media (pictures, and small videos)

"Lanwench [MVP - Exchange]" wrote:

John <John@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Hello, I setup my SBS 2003 and joined all my computers to the domain
with the connectomputer wizard. I also setup folder redirection in
the GPO but there are insane login times.
Also I followed the advice from someone on here sorry i forgot your
name, to allow administrator to see the users files on the server but
it still doesn't work.
The profiles are saved on the D under a folder called User Profiles
and it is shared as Profiles$
The folders are redirected to a folder on the D called Users Shared
Folders and this is shared as Users$

Am I just blind on how to fix this.

I'll include my boilerplate on roaming profiles below, but you'll probably
need to provide more detail (what you redirected, whether you have UPHClean
installed, what you see in the event logs, etc) if the steps below were
followed & you're still having problems. Re the admin rights - this won't
work on existing folders; just on ones created after you enabled that in the
policy



********************
General tips:

1. Set up a share on the server. For example - d:\profiles, shared as
profiles$ to make it hidden from browsing. Make sure this share is *not* set
to allow offline files/caching! (that's on by default - disable it)

2. Make sure the share permissions on profiles$ indicate everyone=full
control. Set the NTFS security to administrators, system, and users=full
control.

3. In the users' ADUC properties, specify \\server\profiles$\%username% in
the profiles field

4. Have each user log into the domain once - if this is an existing user
with a profile you wish to keep, have them log in at their usual
workstationand log out. The profile is now roaming.

5. If you want the administrators group to automatically have permissions to
the profiles folders, you'll need to make the appropriate change in group
policy. Look in computer configuration/administrative templates/system/user
profiles - there's an option to add administrators group to the roaming
profiles permissions. Do this *before* the users' roaming profile folders
are created - it isn't retroactive.

********************
Notes:

Make sure users understand that they should not log into multiple computers
at the same time when they have roaming profiles (unless you make the
profiles mandatory by renaming ntuser.dat to ntuser.man so they can't change
them, which has major disadvantages),. Explain that the 'last one out wins'
when it comes to uploading the final, changed copy of the profile. If you
want to restrict multiple simultaneous network logins, look at LimitLogon
(too much overhead for me), or this:
http://www.jsifaq.com/SF/Tips/Tip.aspx?id=8768

********************
Keep your profiles TINY. Via group policy, you should be redirecting My
Documents (at the very least) - to a subfolder of the user's home directory
or user folder. Also consider redirecting Desktop & Application Data
similarly..... so the user will end up with:

\\server\users\%username%\My Documents,
\\server\users\%username%\Desktop,
\\server\users\%username%\Application Data.

You should use folder redirection even without roaming profiles, but it's
especially critical if you *are* using them.

If you aren't going to also redirect the desktop using policies, tell users
that they are not to store any files on the desktop or you will beat them
with a
stick. Big profile=slow login/logout, and possible profile corruption.

********************
Note that user profiles are not compatible between different OS versions,
even between W2k/XP. Keep all your computers. Keep your workstations as
identical as possible - meaning, OS version is the same, SP level is the
same, app load is (as much as possible) the same.

*********************
If you also have Terminal Services users, make sure you set up a different
TS profile path for them in their ADUC properties - e.g.,
\\server\tsprofiles$\%username%

********************
Do not let people store any data locally - all data belongs on the server.

********************
The User Profile Hive Cleanup Utility should be running on all your
computers. You can download it here:
http://www.microsoft.com/downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en

********************
Roaming profile & folder redirection article -
http://www.windowsnetworking.com/articles_tutorials/Profile-Folder-Redirection-Windows-Server-2003.html



.

Relevant Pages

  • Re: User V Computers
    ... You ROAM profiles, and REDIRECT doc's, start menu, app ... The redirection is only bad the first time, ... What does roaming DO that redirection doesnt?? ... Redirect the Location of the My Documents Folder Outside of the Users ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 roaming profiles
    ... The profiles are saved on the D under a folder called User Profiles ... I'll include my boilerplate on roaming profiles below, ... You should use folder redirection even without roaming profiles, ...
    (microsoft.public.windows.server.sbs)
  • Re: Using redirected My Documents
    ... the case if the My Docs folder has been redirected to the server? ... humongous profiles are a problem. ... Here's my boilerplate on roaming profiles (which you aren't using but could ... You should use folder redirection even without roaming profiles, ...
    (microsoft.public.windows.server.general)
  • Re: Roaming Profiles Issue - Windows Server 2003
    ... their profiles remain small. ... Check the options in the folder redirection settings to make sure you know what will happen if you change/revert this. ... And My Documents redirection to the server ...
    (microsoft.public.windows.server.general)
  • Re: Roaming Profiles Issue - Windows Server 2003
    ... their profiles remain small. ... Check the options in the folder redirection settings to make sure you know ... And My Documents redirection to the server ...
    (microsoft.public.windows.server.general)