Technologies that help to manage profiles
- 1 Folder Redirection
- 2 Group Policy Settings
- 2.1 Machine Settings
- 2.1.1 Do not check for user ownership of Roaming Profile Folders
- 2.1.2 Delete cached copies of roaming profiles
- 2.1.3 Add the Administrators security group to roaming user profiles
- 2.1.4 Do not detect slow network connections
- 2.1.5 Slow network connection timeout for user profiles
- 2.1.6 Wait for remote user profile
- 2.1.7 Prompt user when slow link is detected
- 2.1.8 Timeout for dialog boxes
- 2.1.9 Log users off when roaming profile fails
- 2.1.10 Maximum retries to unload and update user profile
- 2.1.11 Prevent Roaming Profile changes from propagating to the server
- 2.1.12 Only allow local user profiles
- 2.1.13 Leave Windows Installer and Group Policy Software Installation Data
- 2.2 User Settings
- 2.1 Machine Settings
- 3 User Profile Hive Cleanup Service (UPHClean)
Folder redirection allows certain User Profile folders to be automatically 'redirected' to a network location. The following components of the user profile can be redirected by 'user windows setttings' in group policy.
- The 'My Documents' folder is a prime candidate for redirection as it makes no sense for users in a networked environment to store files on individual PCs
- The 'Application Data' folder is another good candidate for redirection as it can grow quite large.
- It's worth redirecting the desktop in case your users are in the habit of leaving large files there.
Group Policy Settings
There are a number of Group Policy settings which help with the management of the various types of user profile
Do not check for user ownership of Roaming Profile Folders
- By default, Windows XP will prevent the use of a roaming profile folder that is not 'owned' by the user who is logging on and attempting to use it. This setting will override the bahaviour. Useful where profiles have been pre-created or migrated.
Delete cached copies of roaming profiles
- When a user with a roaming profile logs off, the 'local copy' remains on the PC. This setting will cause the local copy of the profile to be deleted.
Add the Administrators security group to roaming user profiles
- The first time a user with a roaming profile logs on, their roaming profile will not exist. Windows will create the profile and assign the user full control and exclusive use of the roaming profile folder. This locks out administrators. Enabling this setting will force Windows to add the Administrators group to the profile folder.
Do not detect slow network connections
Slow network connection timeout for user profiles
Wait for remote user profile
Timeout for dialog boxes
Log users off when roaming profile fails
Maximum retries to unload and update user profile
Prevent Roaming Profile changes from propagating to the server
Only allow local user profiles
Leave Windows Installer and Group Policy Software Installation Data
Limit profile size
- It is useful to be able to set a limit on user profile sizes, especially when roaming. This can help stop users saving huge files on their desktops!
Exclude directories in roaming profile
- Useful if you want to exclude certain directories from roaming, e.g. Cookies or Recent.
User Profile Hive Cleanup Service (UPHClean)
- A service which makes sure the User Profile Hive is unloaded when a user logs off. Useful where 'cached copies of roaming profiles' are not being deleted, despite the group policy setting having been set to say that they should be! Download UPHClean from MS