Results 1 to 2 of 2

Thread: Server 2003/ Roaming Profiles

  1. #1
    Joe Guest

    Server 2003/ Roaming Profiles

    I setup roaming profiles by setting up user folders on the server, then I
    mapped the workstation to the folder and set up the profile path under active
    directory but yet when I log in and out of a computer, I still see the user
    folder as empty. Please advise what I did wrong?

  2. #2
    Lanwench [MVP - Exchange] Guest

    Re: Server 2003/ Roaming Profiles

    Joe <[email protected]> wrote:
    > I setup roaming profiles by setting up user folders on the server,
    > then I mapped the workstation to the folder and set up the profile
    > path under active directory but yet when I log in and out of a
    > computer, I still see the user folder as empty. Please advise what I
    > did wrong?


    You don't map anything....here's my boilerplate.

    ********************
    General tips:

    1. Set up a share on the server. For example - d:\profiles, shared as
    profiles$ to make it hidden from browsing. Make sure this share is *not* set
    to allow offline files/caching! (that's on by default - disable it)

    2. Make sure the share permissions on profiles$ indicate everyone=full
    control. Set the NTFS security to administrators, system, and users=full
    control.

    3. In the users' ADUC properties, specify \\server\profiles$\%username% in
    the profiles field

    4. Have each user log into the domain once - if this is an existing user
    with a profile you wish to keep, have them log in at their usual
    workstationand log out. The profile is now roaming.

    5. If you want the administrators group to automatically have permissions to
    the profiles folders, you'll need to make the appropriate change in group
    policy. Look in computer configuration/administrative templates/system/user
    profiles - there's an option to add administrators group to the roaming
    profiles permissions. Do this *before* the users' roaming profile folders
    are created - it isn't retroactive.

    ********************
    Notes:

    Make sure users understand that they should not log into multiple computers
    at the same time when they have roaming profiles (unless you make the
    profiles mandatory by renaming ntuser.dat to ntuser.man so they can't change
    them, which has major disadvantages),. Explain that the 'last one out wins'
    when it comes to uploading the final, changed copy of the profile. If you
    want to restrict multiple simultaneous network logins, look at LimitLogon
    (too much overhead for me), or this:
    http://www.jsifaq.com/SF/Tips/Tip.aspx?id=8768

    ********************
    Keep your profiles TINY. Via group policy, you should be redirecting My
    Documents (at the very least) - to a subfolder of the user's home directory
    or user folder. Also consider redirecting Desktop & Application Data
    similarly..... so the user will end up with:

    \\server\users\%username%\My Documents,
    \\server\users\%username%\Desktop,
    \\server\users\%username%\Application Data.

    [Alternatively, just manually re-target My Documents to
    \\server\users\%username% (this is not optimal, however!)]

    You should use folder redirection even without roaming profiles, but it's
    especially critical if you *are* using them.

    If you aren't going to also redirect the desktop using policies, tell users
    that they are not to store any files on the desktop or you will beat them
    with a
    stick. Big profile=slow login/logout, and possible profile corruption.

    ********************
    Note that user profiles are not compatible between different OS versions,
    even between W2k/XP. Keep all your computers. Keep your workstations as
    identical as possible - meaning, OS version is the same, SP level is the
    same, app load is (as much as possible) the same.

    *********************
    If you also have Terminal Services users, make sure you set up a different
    TS profile path for them in their ADUC properties - e.g.,
    \\server\tsprofiles$\%username%

    ********************
    Do not let people store any data locally - all data belongs on the server.

    ********************
    The User Profile Hive Cleanup Utility should be running on all your
    computers. You can download it here:
    http://www.microsoft.com/downloads/d...displaylang=en

    ********************
    Roaming profile & folder redirection article -
    http://www.windowsnetworking.com/art...rver-2003.html



Similar Threads

  1. Roaming profiles issue, changing server name on its own
    By neverwhere10 in forum Networking & Security
    Replies: 1
    Last Post: 01-10-2011, 03:49 PM
  2. SBS 2003 roaming profiles
    By Victor Kam in forum Small Business Server
    Replies: 5
    Last Post: 04-06-2009, 08:14 AM
  3. Migrate SBS 2003 to SBS 2008 w/ Roaming Profiles & Folder Redirec
    By - Empty Shell - in forum Small Business Server
    Replies: 1
    Last Post: 24-01-2009, 07:40 PM
  4. Replies: 3
    Last Post: 16-01-2009, 03:58 PM
  5. Roaming Profiles Windows Server 2008
    By Drewski in forum Active Directory
    Replies: 2
    Last Post: 11-09-2008, 12:10 PM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,751,820,802.87852 seconds with 16 queries