talksr Posted November 12, 2015 Posted November 12, 2015 Hi, really not sure what is going wrong here. We have Server 2012 R2, and Windows 7 client computers. Teaching staff have a roaming profile each. We are getting a high volume of staff members complaining that they can't access the internet. I have taken a look and whilst their computer is able to access the network and internet, the internet browser; Chrome refuses to open when they click on it. Going to windows explorer and typing a web address in the address bar does nothing. The only way I have managed to resolve the issue is to delete their profile and recreate a new one when they re-log in. This resolves the issue. What could be causing this odd problem? Everything else works fine (printing, file shares, word etc), it is just the internet icons.
cpjitservices Posted November 12, 2015 Posted November 12, 2015 how is Chrome rolled out ? Can you redeploy it through GP ? 1
talksr Posted November 12, 2015 Author Posted November 12, 2015 (edited) how is Chrome rolled out ? Can you redeploy it through GP ? It seems that Chrome was installed on each model of computer and then imaged via CloneZilla and deployed from said image. It doesn't seem to have been deployed via a GPO. But the fact of the matter is that it works and continues to work fine for users who use their profile responsibly and log off at the end of the day. Those who leave their account logged in for prolonged hours or log onto multiple stations under the same username are the ones with problems. The issue is not restricted to a single computer. Once they get the problem, it will be evident on any networked computer. Edited November 12, 2015 by talksr
cpjitservices Posted November 12, 2015 Posted November 12, 2015 Try reinstalling Chrome ? Do you go through a Proxy server ?
talksr Posted November 12, 2015 Author Posted November 12, 2015 Try reinstalling Chrome ? Do you go through a Proxy server ? No proxy server. Ok will try a chrome reinstall one one of the offender's computers and see what happens
mikkydoos Posted November 17, 2015 Posted November 17, 2015 If imaged with Clonezilla were they sysprepped. I've had problems with conflicting SID's and users before with badly imaged machines.
talksr Posted November 26, 2015 Author Posted November 26, 2015 If imaged with Clonezilla were they sysprepped. I've had problems with conflicting SID's and users before with badly imaged machines. No I don't think they were. I am sure someone said that you don't need to sysprep anything after Windows XP. Seems odd that it is only Chrome which is misbehaving.
talksr Posted December 3, 2015 Author Posted December 3, 2015 I have attempted to reinstall Chrome, but it has made no difference. Logged in as affected user - chrome did not work. Logged out Logged in as another user - chrome worked well Logged out Logged in as administrator - chrome worked well, removed Chrome Logged out Restarted Computer Logged in as administrator - reinstalled chrome Logged out Restarted Computer Logged in as affected user -chrome did not work exactly as before. What can I do to resolve this. This is happening across the network, we have a large number of systems, so not enough time to re-image every single system.
mikkydoos Posted December 3, 2015 Posted December 3, 2015 I'd double check there isn't a proxy specified in the advanced chrome settings. Did u say if IE worked on those machines ?
talksr Posted December 3, 2015 Author Posted December 3, 2015 I'd double check there isn't a proxy specified in the advanced chrome settings. Did u say if IE worked on those machines ? Hello, No proxy in advanced settings and yes IE works perfectly well. Chrome also works perfectly well on any machine on the network, but not if you use an account which has gone wrong. Only way to resolve this seems to be to recreate the roaming profile. The problem just follows the user from computer to computer, but if I log in as any other user, Chrome works with no issues - so it can't be a machine issue.
DavetheITguy Posted December 3, 2015 Posted December 3, 2015 when you re-create a users profile, are you deleting it completely from the computer. Go into regedit > find (F3) > type "profilelist" - no spaces. In there look for the profile name and delete the folder. In C:\ delete the profile folder from there and delete from the recycling bin. The roaming profile itself, how has this been configured ? Have you checked that the roaming profile doesn't contain settings for chrome in the app data folder ?
talksr Posted December 3, 2015 Author Posted December 3, 2015 when you re-create a users profile, are you deleting it completely from the computer. Go into regedit > find (F3) > type "profilelist" - no spaces. In there look for the profile name and delete the folder. In C:\ delete the profile folder from there and delete from the recycling bin. The roaming profile itself, how has this been configured ? Have you checked that the roaming profile doesn't contain settings for chrome in the app data folder ? I make sure the user is not logged in anywhere. I take ownership of the profile (which is located in the server share) and then rename it by adding "_old" to the end. Then I log back in as the user in question, the profile is re-created and Chrome works. Here is a screenshot of the profile folder and a user you can see has had Chrome problems a number of times:
HC_Netman Posted December 3, 2015 Posted December 3, 2015 We had this issue for a while and the only way round it was to open task manager and kill all instances of Chrome that were running and then the user could open it without issue. This had to be done everytime they logged in. The long term fix was to exclude the Chrome folder from the roaming profile using GPO. We haven't had the issue since. 1
DavetheITguy Posted December 3, 2015 Posted December 3, 2015 (edited) When a profile is used on a computer it saves information back to that profile, are you sure it's not an underlying problem with a computer writing data back to the profile causing the issue. Would it not be better to use Mandatory profiles and set all permissions etc via GPO, redirection.... Also, are you sure it's not the user causing the issue ? Edited December 3, 2015 by DavetheITguy
talksr Posted December 3, 2015 Author Posted December 3, 2015 When a profile is used on a computer it saves information back to that profile, are you sure it's not an underlying problem with a computer writing data back to the profile causing the issue. Would it not be better to use Mandatory profiles and set all permissions etc via GPO, redirection.... Also, are you sure it's not the user causing the issue ? If it was, it would be every computer (different makes and models) in the whole school as anywhere they go, this issue is following them. Can't be the user as it has happened to a couple of staff members now - tends to be the ones who log in to multiple stations and tend not to log off when they are finished on a computer.
talksr Posted December 3, 2015 Author Posted December 3, 2015 We had this issue for a while and the only way round it was to open task manager and kill all instances of Chrome that were running and then the user could open it without issue. This had to be done everytime they logged in. The long term fix was to exclude the Chrome folder from the roaming profile using GPO. We haven't had the issue since. hmmm ok, that could be troublesome as taskmanager is disabled via policy for everyone but administrator. I will look into this. Do you have any copies of the GPO settings you used? I would like to give it a go.
HC_Netman Posted December 3, 2015 Posted December 3, 2015 Apologies looking back into it and I remembered I didn't need to exclude the folder in the end (think that caused more trouble than it was worth). The only one I had to change was this one... This stops the Chrome process starting when the user logs on. Unfortunately I still had to recreate the profiles for the affected staff - I caught it early so wasn't too much of a problem but if you have a lot of staff with the problem it might take a while. The good news is the problem has not come back (touch wood) and I made the change during the summer. Hope it helps... 1
talksr Posted December 10, 2015 Author Posted December 10, 2015 Apologies looking back into it and I remembered I didn't need to exclude the folder in the end (think that caused more trouble than it was worth). The only one I had to change was this one... [ATTACH=CONFIG]33614[/ATTACH] This stops the Chrome process starting when the user logs on. Unfortunately I still had to recreate the profiles for the affected staff - I caught it early so wasn't too much of a problem but if you have a lot of staff with the problem it might take a while. The good news is the problem has not come back (touch wood) and I made the change during the summer. Hope it helps... Ok, thanks, I note that is under an ADMX, did you have to import an ADMX file into your Group Policy to allow you to configure that option as I am not sure that would be listed on mine.
HC_Netman Posted December 10, 2015 Posted December 10, 2015 Yes I had to add the Chrome ADMX file. You can grab them from here https://support.google.com/chrome/a/answer/187202?hl=en
mikkydoos Posted December 10, 2015 Posted December 10, 2015 I make sure the user is not logged in anywhere. I take ownership of the profile (which is located in the server share) and then rename it by adding "_old" to the end. Then I log back in as the user in question, the profile is re-created and Chrome works. Here is a screenshot of the profile folder and a user you can see has had Chrome problems a number of times: [ATTACH=CONFIG]33609[/ATTACH] You should do this too on the local machine... How to reset a Roaming Profile in Windows 7 as not doing so will not create a new profile. You will get a fail message stating that the profile cannot be found and a temporary one is being used. The registry contains the path to the original profile for each user. If you rename it, it won't find it, although it will create a new one
daneil16 Posted December 10, 2015 Posted December 10, 2015 We installed Chrome on our image a few years ago and had a problems with it running and crashing (Think this was version 22, they are on 46 now) Anyway we downloaded the ADMX templates and rolled it out via Group Policy it it worked a treat. Maybe give this a try. Also check the permissions on the profile folder, had a similar problem with Adobe CC6 a year ago where the Profile folder needed special permissions.
talksr Posted December 10, 2015 Author Posted December 10, 2015 We installed Chrome on our image a few years ago and had a problems with it running and crashing (Think this was version 22, they are on 46 now) Anyway we downloaded the ADMX templates and rolled it out via Group Policy it it worked a treat. Maybe give this a try. Also check the permissions on the profile folder, had a similar problem with Adobe CC6 a year ago where the Profile folder needed special permissions. Ok, not sure what permissions I should have for the profiles. I did download the ADMX templates from the link you suggested, however I am finding that the file is "chrome.adml". Group Policy will not accept this as it does not have the ADMX template.
mikkydoos Posted December 10, 2015 Posted December 10, 2015 Ok, not sure what permissions I should have for the profiles. Let it handle it's own permissions. You might want to add 'domain admins' on the folder that contains the profiles (and inherited below) so you can access them.
HC_Netman Posted December 10, 2015 Posted December 10, 2015 Ok, not sure what permissions I should have for the profiles. I did download the ADMX templates from the link you suggested, however I am finding that the file is "chrome.adml". Group Policy will not accept this as it does not have the ADMX template. The admx file is located in the root of the admx folder.
talksr Posted December 10, 2015 Author Posted December 10, 2015 Let it handle it's own permissions. You might want to add 'domain admins' on the folder that contains the profiles (and inherited below) so you can access them. Ok, I have added domain admins, but not sure on exactly what permissions. It currently has: Read & Execute, List folder contents and read. - - - Updated - - - The admx file is located in the root of the admx folder. Ahah, thank you! I presume I need to copy that to: %systemroom%\policyDefinitions?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now