+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 28
Windows Thread, changing from roaming profiles to gpo in Technical; Finally got new server installed and hopefully end of roaming and mandatory profiles! But ... the only way I can ...
  1. #1
    chrbb's Avatar
    Join Date
    Oct 2005
    Location
    Midlands
    Posts
    1,506
    Thank Post
    141
    Thanked 66 Times in 61 Posts
    Rep Power
    46

    changing from roaming profiles to gpo

    Finally got new server installed and hopefully end of roaming and mandatory profiles! But ... the only way I can get gpo to work is to deny all access to the local default profile. Is there any other way of getting gpo to overide this profile?

  2. #2

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,236
    Thank Post
    1,057
    Thanked 1,067 Times in 624 Posts
    Rep Power
    740

    Re: changing from roaming profiles to gpo

    and hopefully end of roaming and mandatory profiles!
    :?: I'm confused.

  3. #3
    chrbb's Avatar
    Join Date
    Oct 2005
    Location
    Midlands
    Posts
    1,506
    Thank Post
    141
    Thanked 66 Times in 61 Posts
    Rep Power
    46

    Re: changing from roaming profiles to gpo

    I'm permanently confused!
    We had a server set up with mandatory (for pupils) and roaming profiles for staff - got messy with laptops going home and long logons so when new server installed decided to go for gpo, use this at my other school much prefer it.
    Each computer on the network was orginally set up with a base profile that was then copied across to the default user profile on each computer so that everyone that logged on got the same profile. I'm now finding that this default profile is still overiding the gpo from the server, done gpupdate to no avail, only way to get gpo to work is to deny access to local default profile, and wondered it there was a better way of doing it.

  4. #4

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Re: changing from roaming profiles to gpo

    Does it work on a newly installed machine that hasn't had this default profile loaded onto it??

    Mike.

  5. #5
    chrbb's Avatar
    Join Date
    Oct 2005
    Location
    Midlands
    Posts
    1,506
    Thank Post
    141
    Thanked 66 Times in 61 Posts
    Rep Power
    46

    Re: changing from roaming profiles to gpo

    Yes recently formatted and reinstalled xp - gpo picked up straight away.

  6. #6

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Re: changing from roaming profiles to gpo

    Try this command.

    secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

    it resets all the security settings on a machine back to their origenal default settings. Can take a while to complete, but solves a fair few 'mystery' problems for us. Do use with caution, as I have heard of this causing problems on machines before, but if there's no other suggestions, it may be worth a go.

    Mike.

  7. #7
    richard.thomas's Avatar
    Join Date
    Sep 2007
    Posts
    491
    Thank Post
    5
    Thanked 11 Times in 10 Posts
    Rep Power
    16

    Re: changing from roaming profiles to gpo

    Also try this in a command prompt:

    gpupdate /force

    This has solved alot of issues here in terms of pulling GPOs

  8. #8
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: changing from roaming profiles to gpo

    Sounds like permissions on the profile. Was the profile originally copied using the GUI copy function and permissions changed to allow access to Everyone?

    See the wiki guide on mandatory profiles for more details.

  9. #9
    chrbb's Avatar
    Join Date
    Oct 2005
    Location
    Midlands
    Posts
    1,506
    Thank Post
    141
    Thanked 66 Times in 61 Posts
    Rep Power
    46

    Re: changing from roaming profiles to gpo

    AJBritton - yes the computer was set up then the profile was copied across to the default with permissions reset. I've managed to get the gp to be picked up but only by denying everyone access to said default profile, this works but I was wondering if there was a better way to achieve the same result.

  10. #10
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: changing from roaming profiles to gpo

    Quote Originally Posted by chrbb
    AJBritton - yes the computer was set up then the profile was copied across to the default with permissions reset. I've managed to get the gp to be picked up but only by denying everyone access to said default profile, this works but I was wondering if there was a better way to achieve the same result.
    Hi chrbb

    You should certainly never have to deny access to the local default profile.

    Just to confirm (as it's not 100% clear from your post), how did you copy the profile from the source computer. If you dragged/dropped from 'C:\Documents and Settings\username' to the network and then modified the file system ACLs, then this is not sufficient. You must use the 'Copy To...' function from the user profile list in the System Properties dialog box.

    Have you checked the event logs on the PCs after logging on as a test user?

  11. #11
    chrbb's Avatar
    Join Date
    Oct 2005
    Location
    Midlands
    Posts
    1,506
    Thank Post
    141
    Thanked 66 Times in 61 Posts
    Rep Power
    46

    Re: changing from roaming profiles to gpo

    I didn't set it up - from what I can remember watching the company that set it up (I'd only just started in the job!) logged on to local pc as new user set up pc as required logged off, logged back on as admin, went to docs and settings copied that users profile to default profile on that computer, set permissions to everyone. They then ghosted that image to all the rest of the computers in the suite.
    Then to ensure users were set up from the start with a roaming profile that we wanted ie background, printers, proxy etc, they had to log on a computer in the suite their profile was then stored on the server, in a location designated from their user properties.
    Now on those computers the default profile seems to 'rule the roost' taken priority over the gpo from the server.

  12. #12

    Join Date
    Mar 2007
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: changing from roaming profiles to gpo

    So, if you use (or going to use) local profiles on each machine - does it drag a new profile down from the server each login?

    If it does not some programs such as office (if deployed over Lan) install on each user run (it installs some user parts in the profile), where as on one profile for all students you can run this once only. The end result making office products open very quick!

    Also would you not have thousands of local profiles on each machine?

    Any work arounds for this?

    I am on central mand profile for all profiles, login time is about 40 seconds!!

  13. #13
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: changing from roaming profiles to gpo

    @chrbb,

    The permissions in a profile cannot simply be changed my modifying the file system ACLs as per your example. When the profile is copied from the source PC to the network, it MUST be copied using the 'Copy To...' function and the permissions modified at that point. This modifies not only the ACLs on the files, but also the ACLs within the registry (within the NTUSER.DAT file). If this is not done, then GP settings cannot be applied because the user trying to load the profile does not have the necessary permissions to write to the registry.

  14. #14
    chrbb's Avatar
    Join Date
    Oct 2005
    Location
    Midlands
    Posts
    1,506
    Thank Post
    141
    Thanked 66 Times in 61 Posts
    Rep Power
    46

    Re: changing from roaming profiles to gpo

    In my other school gpo only, -we only use class logons not pupils so not huge amount of local stored profiles (primary school) first time class logon office installs then ok. Logon time almost instant, printer installs by logon script and then on subsequent logons just connects to printer.
    In the school with roaming and mandatory profiles logon time much longer. To be honest the pupil mandatory profiles haven't been a problem it's the roaming ones that have caused issues and now we have wireless in some areas of school the teacher's laptops take forever to logon.

  15. #15

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Re: changing from roaming profiles to gpo

    Still sounds to me like a local security setting of some sort is telling the machines to ignore the mandatory profile, and apply the default one on the machine in it's place. When you deny access to the default profile, it has no choise but to use the mandatory profile.

    Have you tried running the command I suggested above on a machine yet? It may be worth a go if you havn't.

    Mike.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Roaming / MAN Profiles..
    By Grommit in forum Windows
    Replies: 10
    Last Post: 5th September 2007, 08:23 AM
  2. Changing from roaming profiles to gpo
    By chrbb in forum Windows
    Replies: 5
    Last Post: 30th March 2007, 06:01 PM
  3. Roaming Profiles - help please
    By robbied69 in forum Windows
    Replies: 2
    Last Post: 25th September 2006, 05:13 PM
  4. Roaming Profiles Problem
    By Gordie in forum General Chat
    Replies: 4
    Last Post: 22nd June 2006, 08:55 AM
  5. Roaming Profiles
    By ChrisH in forum Windows
    Replies: 60
    Last Post: 21st November 2005, 10:14 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •