Roaming Profiles in 08R2 and blocking
Hello. Read over some of the posts here, and am still a little confused. Looking at implementing this in "some" areas. Domain at 2008 level.
Currently already have folder redirection in place for My Documents and will expand that to cover all the other folders. (Appdata, Desktop, Favorites etc) Currently have an XP, Win7 mixed environment. Have a share setup on an 08R2 server which is storing
on our SAN. Am utilizing DFS for links.
OK, I'm a little confused about when I need and
when I don't need to create a "Default User.V2" profile and copy it to the NETLOGON folder? I did try this already, but when a new user logged on that had never done so before it used the NETLOGON profile
as opposed to a local one. I will have some users that hit Win 7 running in VM and others locally.
Whats the best way:
1- User logs on local XP and I do not want roaming profile working here, BUT when they VM in to their Win 7 machine I do, (GPO I'm guessing applied to the OU that the user resides in. Problem is, the user uses the same account for both XP and Win
7) Would I use the following on the OU containing the XP machine "Only allow local user profiles setting in
Computer Configuration\Administrative Templates\System\User Profiles"
That way when they use the local XP machine its blocked but not when they VM in to the 7 machine?
2- Ok so now what about a user that will roam all the time and may also use an XP machine and a Win 7 machine??? I will already have everything redirected like I said above, so what's the best avenue for this? Basically, think of a user that uses an XP station
in one office, but then goes to another office and logs in to a Win 7 machine.
Hoping what I said in #1 I sorta already answered, but I'm lost on #2
Thanks
Chris
October 31st, 2011 5:40pm
Hi Carito,
#1:
If you don't want users to user roaming profile on some specific computers, we could configure "Only allow local user profiles" policy to those computers. But for folder redirect, the policy has no impact.
If you don't want users to use redirected folders on some clients, I suggest you use loopback processing, for details, please refer to the thread as below:
Block redirected folders on certains pc's/labtops
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/a585f664-a551-4b18-87f4-7820da0da27b/#35351e1c-db5d-488e-93d1-4022ae98ce8b
#2:
As far as you configured "Only allow local user profiles" policy and applied to Windows XP, users will be able use local profiles in Windows XP and use roaming profiles in Windows 7.
Hope this helps.
Best Regards,
Yan Li
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
November 1st, 2011 2:36am
Hi Carito,
#1:
If you don't want users to user roaming profile on some specific computers, we could configure "Only allow local user profiles" policy to those computers. But for folder redirect, the policy has no impact.
If you don't want users to use redirected folders on some clients, I suggest you use loopback processing, for details, please refer to the thread as below:
Block redirected folders on certains pc's/labtops
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/a585f664-a551-4b18-87f4-7820da0da27b/#35351e1c-db5d-488e-93d1-4022ae98ce8b
#2:
As far as you configured "Only allow local user profiles" policy and applied to Windows XP, users will be able use local profiles in Windows XP and use roaming profiles in Windows 7.
Hope this helps.
Best Regards,
Yan Li
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
November 1st, 2011 9:29am
Thanks Yan. I will look into the loopback processing. I know we've had to use it in the past.
So am I understanding that I do not need to do a Defualt User.Vs profile? I read a few other posts where it was indicated to them, not to worry about that. Soooo, when do I set that up and use it vs not worrying about it.
Free Windows Admin Tool Kit Click here and download it now
November 1st, 2011 10:06am
If you want to use both roaming profile and folder redirection, it's ok.
Roaming profile could make the network bandwidth be used effectively, because only changes made to the user profile will be passed to the server. And no matter where user log on to, users will have the same profile(as long as the "Only allow local user profiles"
not set on the computer). Folder redirection could easy the disk burden of computer, the combination of them seems like really meaningful.
Please also refer to the article as below:
Best Practices for User Profiles
http://technet.microsoft.com/en-us/library/cc784484(WS.10).aspx
Hope this helps.
Best Regards,
Yan LiPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
November 1st, 2011 10:20pm
If you want to use both roaming profile and folder redirection, it's ok.
Roaming profile could make the network bandwidth be used effectively, because only changes made to the user profile will be passed to the server. And no matter where user log on to, users will have the same profile(as long as the "Only allow local user profiles"
not set on the computer). Folder redirection could easy the disk burden of computer, the combination of them seems like really meaningful.
Please also refer to the article as below:
Best Practices for User Profiles
http://technet.microsoft.com/en-us/library/cc784484(WS.10).aspx
Hope this helps.
Best Regards,
Yan LiPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
November 2nd, 2011 5:19am


