Anyone using Win10 and Roaming Profiles?

[snagrat]

We have around 300 mobile devices and all users use roaming profiles due to the fact they run full Outlook on the clients

 

Firstly, Edge and roaming profiles seems bad. Often Edge just opens and closes and a registry fix is required to resolve it. Anyone get this?

 

Secondly, the profiles can get very big and so at logoff takes an age. At the end of the day the data server seems to grind to a halt. We redirect desktop, favs and AppData so that doesn't live in the profile.

 

Anyone experiencing the same problems?

[Mistert89]

What wireless solution do you have? We have Cisco 5508 controller based, but poorly implemented!! (By a very professional company!!) our initial problems are wireless. We also had to delete browsing history (Very specifically at logIN) as some users history was excessive.... We also redirected downloads as many downloaded and didn't realise this was still in their profiles. We also stopped using roaming profiles for students altogether. Just didn't work lesson to lesson, room to room.

[snagrat]

We have Ruckus which is working well.

 

I am redirecting Downloads as well so the profile should be small but sometimes isnt

[free780]

I think m$ want to depreciate roaming profiles. Folder redirection and ue-v seem the way they want you to roam settings.

[snagrat]

Yes might need to look into ue-v and have a play

[cadams10]

We have exactly the same problem with Edge, it loads correctly the first time a user logs into a machine, subsequent logins result in Edge just opening and closing, unless the local copy of the roaming profile is removed from the machine and then it will work again for the first login. Does the registry fix resolve this issue permanently?

[Michael]

I use roaming profiles for Staff, but then use a locally/mandatory profile for Pupils. I can't see how Microsoft can or would depreciate Roaming Profiles, otherwise the end user would be subjected to profile creation each time they logon which isn't ideal.

 

All folder structures are redirected using Folder Redirection, excluding AppData.

 

Again in all my networks, Edge is disabled on purpose via App Locker, with desktop shortcuts specified to either use IE or Chrome, depending on the website requirement. Edge for example doesn't support redirected Favourites, but instead saves them within an obscure location in the roaming profile. It just isn't Enterprise ready in 2016.

[snagrat]

Reg fix works for a bit but sometimes it just closes.

 

I find it affects IE as well so the only option is to use Chrome.

 

I'm looking at UE-V now but Outlook seems to store the profile but not the data so it re-downloads if the user signs into a different machine, whereas with RP it's already there

[cadams10]

I assume the registry fix you mentioned is the following:

 

Set:

HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe

to Full control on ALL APPLICATION PACKAGES

 

If so have you found a way to roll this change out through group policy?

[snagrat]

That's the one, but also to apply it to Cortana as well.

 

I have a batch file which I run on login

[cadams10]

Would you be happy to share the part of the batch file that sets the permissions on the registry key?

[SuperduperPackager]

Roaming/mandatory profiles will supposedly be fixed in the next big update at the end of april.

[snagrat]

Would you be happy to share the part of the batch file that sets the permissions on the registry key?

 

Its PS actually, but I call it with a batch file at logon

 

#!PowerShell. De pilo pendet.

 

 

function MakeACE() {

 

 

# S-1-15-2-1 is WELL_KNOWN_SID_TYPE::WinBuiltinAnyPackageSid, "APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES".

# The self-documenting NTAccount type results in an object that "cannot be translated".

$id = New-Object System.Security.Principal.SecurityIdentifier("S-1-15-2-1")

New-Object System.Security.AccessControl.RegistryAccessRule($id,

[system.Security.AccessControl.RegistryRights]::FullControl,

[system.Security.AccessControl.InheritanceFlags]::ContainerInherit,

[system.Security.AccessControl.PropagationFlags]::None,

[system.Security.AccessControl.AccessControlType]::Allow)

 

 

}

 

 

function GrantRequiredAccess($key) {

 

 

$acl = Get-Acl $key

$acl.AddAccessRule((MakeACE))

Set-Acl $key $acl

 

 

}

 

 

# All Windows 10, since Microsoft apparently managed to break build 10240 as well in December 2015, after having shipped 10586 broken from the start.

if ([Environment]::OSVersion.Version.Major -eq 10) {

 

 

GrantRequiredAccess "HKCU:\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe"

GrantRequiredAccess "HKCU:\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.cortana_cw5n1h2txyewy"

 

 

}

[JamboD]

Not sure if this is old news now but I saw a post on Microsoft Connect which said that the issue with Edge and Cortana crashing with roaming profiles has been addressed in the April 16 Cumulative Update. I've just done a couple of quick tests with a fully patched copy of Windows 10 Education 1511 and it does appear to have finally been fixed. This bug was introduced in November and it took them 5 months to get round to squashing it!