Solved

How to keep from creating profiles on local workstation

Posted on 2009-03-29
3
220 Views
Last Modified: 2012-05-06
We are running AD on a Windows 2008 server.  We would like to have profiles created only on the server and not the local workstation.  Can this be done?
0
Comment
Question by:bpl5000
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 47

Assisted Solution

by:Donald Stewart
Donald Stewart earned 350 total points
ID: 24014320
0
 
LVL 31

Assisted Solution

by:Henrik Johansson
Henrik Johansson earned 150 total points
ID: 24014415
In ADUC, configure users' profile path to point the user profile to be a path on a server share \\server\profileshare$\%username% or similar. Profile will be created automatically on server during logon/logoff process if correct permissions has been configured on the file server.

See http://technet.microsoft.com/en-us/library/cc757013.aspx about roaming profile permissions.

Also enable the policy setting for deleting cached roaming profiles to keep the clients clean.
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 350 total points
ID: 24014434
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question