Improve company productivity with a Business Account.Sign Up

x
?
Solved

Profiles

Posted on 2011-02-18
24
Medium Priority
?
1,032 Views
Last Modified: 2012-05-11
Guys.
Need some help with profiles.   Here is my problem.
Can someone suggest the best way to setup roaming profiles or another suggestion on how to address profiles issues.  I don't want the profiles to grow so much that It start to affect performance. What's the best solution on how to configure and better control profiles.
Please help.
0
Comment
Question by:onebytesystem
  • 11
  • 9
  • 3
  • +1
24 Comments
 
LVL 48

Expert Comment

by:Don
ID: 34931020
I suggest to forget about roaming profiles and to configure Folder Redirection


http://www.virtualizationadmin.com/articles-tutorials/terminal-services/performance/configure-folder-redirection.html


You can also set Quotas on the folders so they dont exceed values you set
0
 
LVL 48

Expert Comment

by:Don
ID: 34931050
And for keeping them secure


How to dynamically create security-enhanced redirected folders by using folder redirection in Windows 2000 and in Windows Server 2003

http://support.microsoft.com/kb/274443



Implementing Access-Based Enumeration in Windows Server 2003 R2
http://www.windowsnetworking.com/articles_tutorials/Implementing-Access-Based-Enumeration-Windows-Server-2003.html
0
 

Author Comment

by:onebytesystem
ID: 34931053
Is folder redirection a better way to hand profiles that roaming profiles.
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
LVL 48

Expert Comment

by:Don
ID: 34931072
Yes, normally you only need to redirect users "My Documents" and their "Desktop" as these are the most common folders to bloat. I also redirect "Favorites"

0
 

Author Comment

by:onebytesystem
ID: 34931347
If I am going to redirect the following:
My Documents
Desktops
Application Data
Start Menu

Do I have to redirect them to on share for example 192.168.1.1\all
and point the all to it.
or
Do I have to redirect them to 4 different share for example

192.168.1.1\mydocuments
192.168.1.1\Desktops
192.168.1.1\Application Data
192.168.1.1\Start menu

Please help
0
 
LVL 3

Expert Comment

by:rxdeath
ID: 34931380
no its like this

usersshare/my documents
usersshare/desktop
usersshare/application data
usersshare/start menu

for each user...its definitely the way to go, then its easy to destroy mesesd up profiles by having the user logout, then add .bad to the folder, and they log in again...

however to dstewardjr....how do you move favorites...i've never found a good way so i just wrote a script to copy it and keep the directory structure, so i have a documents and settings folder i can just merge fully or users to get the favorites back.

this is done through group policy...i'd read up before doing it but don't be daunted..although you can do a lot of complicated thigns with gpos, there are lots of very simple things as well
0
 
LVL 3

Expert Comment

by:rxdeath
ID: 34931396
i felt ileft it incomplete or cloudy..for example have 3 shares, exec, mngr, user.  based on what a person is you apply a group policy to their OU in AD.  then you have that folder as the target for redirection... my entry looks like this

\\servername\sharefoldername

a practical example is

\\fileserver\managers$

0
 
LVL 1

Expert Comment

by:Mahi1983
ID: 34931408
Hi,

You can apply this setting through Group policy:

GPEditor-user configuration - administrative templates - user profiles - limit profile size. Configure the profile size accordingly.

Apart from that if you want to profile rediction you can do:

User configuration - Windows Settings - Folder redirection (configure the path here for profile redirection)
0
 
LVL 48

Expert Comment

by:Don
ID: 34931413
No, you should redirect to 1 share, lets say "Home"

so then

\\server\home\

When you select "Basic-redirect everyones folder to same location" and "Create a folder for each user under root path"

then folders with the "Users" name will be created automatically under the share \\server\home



@rxdeath

I use GP preferences

http://share.intelliem.com/cs/blogs/danholme/archive/2008/06/06/group-policy-preferences-rock.aspx
0
 
LVL 48

Expert Comment

by:Don
ID: 34931428
Also for me I found that redirecting application data was more trouble than it was worth(had problems with certain applications-adobe reader for one)
0
 
LVL 3

Expert Comment

by:rxdeath
ID: 34931475
yea i only do desktop and mydocuments


@dstewartjr
figures you'd have to summon a registry demon to do something simple like that, i'll check it out on a test system, i try not to evem think too hard about the registry too be honest
0
 
LVL 48

Expert Comment

by:Don
ID: 34931487
That's been one of the best new things with GPP, is the ability to make registry changes so easily.
0
 

Author Comment

by:onebytesystem
ID: 34931547
dstewartjr:
I don't quite understand this.

When you select "Basic-redirect everyones folder to same location" and "Create a folder for each user under root path"

then folders with the "Users" name will be created automatically under the share \\server\home
___________________________________________________________________________________

Can you be more specific
0
 

Author Comment

by:onebytesystem
ID: 34931562
As per your recommendation I will be redirecting Desktop and My documents.  Should the Root Path be the same for Desktop and My Documents

Thanks
0
 
LVL 48

Expert Comment

by:Don
ID: 34931631

"Basic-redirect everyones folder to same location"

\\server\share


"Create a folder for each user under root path"


You dont need to pre create the users folders.

\\server\share\%username% <<<will be automatically created


"Should the Root Path be the same for Desktop and My Documents"

Yes
0
 
LVL 48

Expert Comment

by:Don
ID: 34931648
Some more info here:


http://www.tech-faq.com/implementing-folder-redirection-using-group-policy.html


Note: My previous mention of "Home" for the share folder was only an example name for the folder, so dont get confused by the mention of "Only redirect the My Documents folder to the user' home folder if you have an existing home folder environment."
0
 

Author Comment

by:onebytesystem
ID: 34932748
Ok, now I am beginning to understand.  In users and computers, should I remove all the previous path defined in Profiles and Home folders, assuming the redirection will take care of that.
0
 
LVL 48

Expert Comment

by:Don
ID: 34932948
Yes
0
 

Author Comment

by:onebytesystem
ID: 34934151

Works like a charm.  I have 1 little problem; I wend ahead and redirected application data and so every time a user logs off, it synchronizes.  How can I address this issue.

Thanks
0
 
LVL 48

Expert Comment

by:Don
ID: 34934194
Dont redirect appdata :)


That was the other reason I dont do it


But on the share folder properties advanced there is a caching tab where you can disable.
0
 

Author Comment

by:onebytesystem
ID: 34934208
Is there any cons to disabling caching
0
 

Author Comment

by:onebytesystem
ID: 34934218
Do i select....

Files or programs from the share will not be available offline

to disable caching
0
 
LVL 48

Accepted Solution

by:
Don earned 1000 total points
ID: 34934271
"Files or programs from the share will not be available offline"

yes


cons, no...unless you truly need it
0
 

Author Closing Comment

by:onebytesystem
ID: 34944878
Excellent.  Right on the money
0

Featured Post

Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

This applies to Dell but may also apply to other manufacturers as well. We ran across a few machines that just dropped recently it trust relationship with the server. After doing the basic removing and joining the domain again, it changed to No logo…
Native ability to set a user account password via AD GPO was removed because the passwords can be easily decrypted by any authenticated user in the domain. Microsoft recommends LAPS as a replacement and I have written an article that does something …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

606 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question