Solved

User with Roaming profile from AD 2003 cannot open application on Remote Desktop Server 2008

Posted on 2011-02-16
23
840 Views
Last Modified: 2012-05-11
I am having an issue running applications for users with roaming profiles on a new server running remote desktop 2008 R2 (formally Terminal Services). I get an error that says it is unable to create a specific folder in the 'C:\\Users\auser\appdata\roaming\new folder name''
I have looked and many forums have issues with users using Active Directory from 2003 and TS of 2008. However I could not find any fixes.

I can take that same user and remove the roaming profile path in AD and the application on RDP 2008 run fine. I do not understand what is causing this?
0
Comment
Question by:GMSMRM
  • 12
  • 10
23 Comments
 
LVL 11

Accepted Solution

by:
yelbaglf earned 500 total points
ID: 34910519
Firstly, you'll need the 2008 schema updates.
http://technet.microsoft.com/en-us/library/cc753437(WS.10).aspx

Once you've updated your schema, you can install the group policy mgmt console onto the 2008 RDSH, to configure folder redirection, or you can do this from a Windows 7 box as well.  This is the only way to properly configure folder redirection for 2008 RDSH without a 2008 DC.

Your other option would be to add a 2008 DC to your domain, after performing the schema updates, and then create your folder redirection policy from the new DC.  Currently, in our environment, we are using the first of these 2 options, since we haven't deployed any '08 DC's to date.
0
 
LVL 2

Expert Comment

by:Mattrw
ID: 34910568
Hi,

The appdata folder is different in Windows 7 and Server 2008 than XP and 2003.  You need to implement a group policy on the 2008 server which will redirect the application data folder for the user profile and legacy application.

Review this technet article:  http://technet.microsoft.com/en-us/library/cc766489%28WS.10%29.aspx
0
 
LVL 11

Expert Comment

by:yelbaglf
ID: 34910633
Exactly, which is why the schema updates are needed to support the group policy in the 2003 domain, as stated in my previous post.
0
 

Author Comment

by:GMSMRM
ID: 34910699
yelbaglf,

I am attempting to install the adprep as suggrested on my Windows 2003 32bit domain and I get an error message that reads that it is not a vaild Win 32 application.
0
 
LVL 11

Expert Comment

by:yelbaglf
ID: 34910740
Even though there should be no issues, I would recommend doing this during non-production hours, and insure you have backups in place beforehand.  As for the 32-bit version of adprep, that's found at:
DriveLetter:\support\adprep\adprep32.exe

The 64-bit version is just adprep.exe, which can only be run on 64-bit systems.
0
 

Author Comment

by:GMSMRM
ID: 34910788
I will take your suggestion and run it after hours, however I am getting the same error running adprep32.exe
0
 
LVL 11

Expert Comment

by:yelbaglf
ID: 34910889
Are you using 2008 or 2008 R2?
0
 

Author Comment

by:GMSMRM
ID: 34911074
2008 R2
0
 

Author Comment

by:GMSMRM
ID: 34911107
I am downloading my license of 2008 SP2 32bit and try it. It will take a while to download from Microsoft.
0
 
LVL 11

Expert Comment

by:yelbaglf
ID: 34911148
Sounds good!  I should be around tonight if you run into any issues.
0
 

Author Comment

by:GMSMRM
ID: 34912632
yelbaglf,

I am attempting to run the adprep.exe that is with the Windows server 2008 x86 edtion in the cmd propmt but I get an error that say the program is too big to fit into memory. any Ideas?
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 11

Expert Comment

by:yelbaglf
ID: 34912667
It sounds like you have a bad download of adprep.  Do you have another copy of 2008 x86 or 2008 R2 or ?  

Did you download the trial, or did you download from somewhere like eopen?
0
 

Author Comment

by:GMSMRM
ID: 34916085
I downloaded the software from eopen.
0
 
LVL 11

Expert Comment

by:yelbaglf
ID: 34916671
Were you able to download it again?  I would try a different version, because I too have sometimes had troubles with the downloads from there.  

You could also try downloading the trial from here:
http://technet.microsoft.com/en-us/evalcenter/ff183870.aspx

0
 

Author Comment

by:GMSMRM
ID: 34916738
I am currently downloading the 2008 enterprise  trial from Microsoft. Still have about 1hr left to DL.
0
 
LVL 11

Expert Comment

by:yelbaglf
ID: 34916849
Awesome!  I'll stay tuned!
0
 

Author Comment

by:GMSMRM
ID: 34918217
I am currently running adprep.exe /forestprep

It seems to be loading normally. Are there any other commands I need to run after that?
0
 

Author Comment

by:GMSMRM
ID: 34918315
The install ran for a while and then ended on an error. I attached the log.
ADPrep.log
0
 

Author Comment

by:GMSMRM
ID: 34918444
Also after further testing, my remote desktop for app error does work for some users and not for others. As far as I can see the users are all setup the same in AD. Wierd.
0
 

Author Comment

by:GMSMRM
ID: 34918496
Ah HA. I noticed in the users' file on the domain, the login that is working properly has a ".v2" file folder in it. How did it get there, and how can I get it to work for the other users?
0
 
LVL 11

Expert Comment

by:yelbaglf
ID: 34920136
You should be logging on to the schema master as a member of the Enterprise Admins, Schema Admins, and Domain Admins groups.  Are you using an account that has all of these privileges?

Also, after running forestprep, you'll need to run adprep /domainprep.  This should be done AFTER replication of the previous changes has taken place.

One last thing to note is that these NEED to be ran from your domain's schema master.  Is this where you ran it from?  You can verify with this:
netdom query FSMO

Now, this FAILED issue looks to be caused by the LDIF.log being in use.  You could use something like Process Explorer to determine this.
http://technet.microsoft.com/en-us/sysinternals/bb896653

OR

Are you running AV?  If so, UNINSTALL it and reboot.  Also, you may want to disable any startup items not needed in msconfig.


BEFORE and AFTER running adprep, it's a good idea to verify AD functionality.
repadmin /replsum /bysrc /bydest /sort:delta (all DC's should show 0 in the error fields)

And verify inbound replication:
repadmin /showrepl


Once all this is in order, we can double-check your gpo's.  The .V2 is a good sign, since this is the new version of profiles used with Win 7/2008.
0
 
LVL 11

Expert Comment

by:yelbaglf
ID: 34920302
Just as some extra reading material, here is some info about the .V2 profiles and redirection to share data between V1 and V2.
http://technet.microsoft.com/en-us/library/cc766489(WS.10).aspx
http://support.microsoft.com/kb/947025

Also, are you using your roaming profiles for Terminal Services only?  If so, you may look into lookback policy processing, depending on where and how your policy is applied in your structure.
http://www.virtualizationadmin.com/articles-tutorials/terminal-services/general/managing-terminal-services-group-policy.html
0
 

Author Closing Comment

by:GMSMRM
ID: 34945547
After properly updating the DC on windows 2003 server to the schema from windows 2008 install I was able to use folder redirection for my roaming profiles.
0

Featured Post

Do email signature updates give you a headache?

Do you feel like all of your time is spent managing email signatures? Too busy to visit every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

Join & Write a Comment

Suggested Solutions

Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
To effectively work with Diskpart on a Server Core, it is necessary to write some small batch script's, because you can't execute diskpart in a remote powershell session. To get startet, place the Diskpart batch script's into a share on your loca…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now