Solved

Profiles

Posted on 2011-02-18
24
1,014 Views
Last Modified: 2012-05-11
Guys.
Need some help with profiles.   Here is my problem.
Can someone suggest the best way to setup roaming profiles or another suggestion on how to address profiles issues.  I don't want the profiles to grow so much that It start to affect performance. What's the best solution on how to configure and better control profiles.
Please help.
0
Comment
Question by:onebytesystem
  • 11
  • 9
  • 3
  • +1
24 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34931020
I suggest to forget about roaming profiles and to configure Folder Redirection


http://www.virtualizationadmin.com/articles-tutorials/terminal-services/performance/configure-folder-redirection.html


You can also set Quotas on the folders so they dont exceed values you set
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34931050
And for keeping them secure


How to dynamically create security-enhanced redirected folders by using folder redirection in Windows 2000 and in Windows Server 2003

http://support.microsoft.com/kb/274443



Implementing Access-Based Enumeration in Windows Server 2003 R2
http://www.windowsnetworking.com/articles_tutorials/Implementing-Access-Based-Enumeration-Windows-Server-2003.html
0
 

Author Comment

by:onebytesystem
ID: 34931053
Is folder redirection a better way to hand profiles that roaming profiles.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34931072
Yes, normally you only need to redirect users "My Documents" and their "Desktop" as these are the most common folders to bloat. I also redirect "Favorites"

0
 

Author Comment

by:onebytesystem
ID: 34931347
If I am going to redirect the following:
My Documents
Desktops
Application Data
Start Menu

Do I have to redirect them to on share for example 192.168.1.1\all
and point the all to it.
or
Do I have to redirect them to 4 different share for example

192.168.1.1\mydocuments
192.168.1.1\Desktops
192.168.1.1\Application Data
192.168.1.1\Start menu

Please help
0
 
LVL 3

Expert Comment

by:rxdeath
ID: 34931380
no its like this

usersshare/my documents
usersshare/desktop
usersshare/application data
usersshare/start menu

for each user...its definitely the way to go, then its easy to destroy mesesd up profiles by having the user logout, then add .bad to the folder, and they log in again...

however to dstewardjr....how do you move favorites...i've never found a good way so i just wrote a script to copy it and keep the directory structure, so i have a documents and settings folder i can just merge fully or users to get the favorites back.

this is done through group policy...i'd read up before doing it but don't be daunted..although you can do a lot of complicated thigns with gpos, there are lots of very simple things as well
0
 
LVL 3

Expert Comment

by:rxdeath
ID: 34931396
i felt ileft it incomplete or cloudy..for example have 3 shares, exec, mngr, user.  based on what a person is you apply a group policy to their OU in AD.  then you have that folder as the target for redirection... my entry looks like this

\\servername\sharefoldername

a practical example is

\\fileserver\managers$

0
 
LVL 1

Expert Comment

by:Mahi1983
ID: 34931408
Hi,

You can apply this setting through Group policy:

GPEditor-user configuration - administrative templates - user profiles - limit profile size. Configure the profile size accordingly.

Apart from that if you want to profile rediction you can do:

User configuration - Windows Settings - Folder redirection (configure the path here for profile redirection)
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34931413
No, you should redirect to 1 share, lets say "Home"

so then

\\server\home\

When you select "Basic-redirect everyones folder to same location" and "Create a folder for each user under root path"

then folders with the "Users" name will be created automatically under the share \\server\home



@rxdeath

I use GP preferences

http://share.intelliem.com/cs/blogs/danholme/archive/2008/06/06/group-policy-preferences-rock.aspx
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34931428
Also for me I found that redirecting application data was more trouble than it was worth(had problems with certain applications-adobe reader for one)
0
 
LVL 3

Expert Comment

by:rxdeath
ID: 34931475
yea i only do desktop and mydocuments


@dstewartjr
figures you'd have to summon a registry demon to do something simple like that, i'll check it out on a test system, i try not to evem think too hard about the registry too be honest
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34931487
That's been one of the best new things with GPP, is the ability to make registry changes so easily.
0
 

Author Comment

by:onebytesystem
ID: 34931547
dstewartjr:
I don't quite understand this.

When you select "Basic-redirect everyones folder to same location" and "Create a folder for each user under root path"

then folders with the "Users" name will be created automatically under the share \\server\home
___________________________________________________________________________________

Can you be more specific
0
 

Author Comment

by:onebytesystem
ID: 34931562
As per your recommendation I will be redirecting Desktop and My documents.  Should the Root Path be the same for Desktop and My Documents

Thanks
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34931631

"Basic-redirect everyones folder to same location"

\\server\share


"Create a folder for each user under root path"


You dont need to pre create the users folders.

\\server\share\%username% <<<will be automatically created


"Should the Root Path be the same for Desktop and My Documents"

Yes
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34931648
Some more info here:


http://www.tech-faq.com/implementing-folder-redirection-using-group-policy.html


Note: My previous mention of "Home" for the share folder was only an example name for the folder, so dont get confused by the mention of "Only redirect the My Documents folder to the user' home folder if you have an existing home folder environment."
0
 

Author Comment

by:onebytesystem
ID: 34932748
Ok, now I am beginning to understand.  In users and computers, should I remove all the previous path defined in Profiles and Home folders, assuming the redirection will take care of that.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34932948
Yes
0
 

Author Comment

by:onebytesystem
ID: 34934151

Works like a charm.  I have 1 little problem; I wend ahead and redirected application data and so every time a user logs off, it synchronizes.  How can I address this issue.

Thanks
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34934194
Dont redirect appdata :)


That was the other reason I dont do it


But on the share folder properties advanced there is a caching tab where you can disable.
0
 

Author Comment

by:onebytesystem
ID: 34934208
Is there any cons to disabling caching
0
 

Author Comment

by:onebytesystem
ID: 34934218
Do i select....

Files or programs from the share will not be available offline

to disable caching
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 250 total points
ID: 34934271
"Files or programs from the share will not be available offline"

yes


cons, no...unless you truly need it
0
 

Author Closing Comment

by:onebytesystem
ID: 34944878
Excellent.  Right on the money
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn about cloud computing and its benefits for small business owners.
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question