Windows 10 Profiles

[Olliesaurus]

In your experience, which of the setups works best? Mandatory/Roaming/Redirected etc.

 

After having a field day setting up redirected profiles I have now realised that my setup is far more complicated than it actually needs to be and I am sure there are betters way to skin this cat!

[synaesthesia]

Use a sharp single bladed chefs knife and cut along the nap of the cat's pelt.

Have you had a look at UEV for windows 10?

[3s-gtech]

IME, (super) mandatory for students and local for staff. Keeps disk usage down on student PCs, keeps logons quick and effective on staff PCs. Being able to roll out profile changes to 1000+ students in one go is also a bonus.

[Olliesaurus]

Use a sharp single bladed chefs knife and cut along the nap of the cat's pelt.

Have you had a look at UEV for windows 10?

 

I have been reading about UEV today, looks fairly indepth but if I am right, could replace all of the varieties of profile, are you using UEV at your school/schools?

 

- - - Updated - - -

 

IME, (super) mandatory for students and local for staff. Keeps disk usage down on student PCs, keeps logons quick and effective on staff PCs. Being able to roll out profile changes to 1000+ students in one go is also a bonus.

 

Currently looking at mandatory profiles as well, just got a VM deploying to give it a test.

 

Not sure I have come across IME though, googled it but nothings come up!

[synaesthesia]

We're not using it no, we're looking to get 10 across the board during this summer so currently testing. It looks like it'll tick a lot of boxes (UEV)

[mtillbrook]

my own opinion from my experience on this is that mandatory profiles are really old tech!

 

Personally, I would favour roaming profiles but then using group policies to re-direct as much as possible so the size of the profiles stay nice and small.

 

If you use a mandatory profiule for 1000 students and the profile gets corrupted, thats 1000 users that have problems. Use roaming profiles and a profile gets corrupted, its only one to deal with

[Olliesaurus]

We're not using it no, we're looking to get 10 across the board during this summer so currently testing. It looks like it'll tick a lot of boxes (UEV)

Ah right, same boat as myself then, I will definitely take a look at it! Cheers

[mavhc]

https://technet.microsoft.com/en-gb/itpro/windows/manage/uev-for-windows?f=255&MSPPError=-2147217396

 

Only for subscription versions of Win10

[synaesthesia]

my own opinion from my experience on this is that mandatory profiles are really old tech!

 

Personally, I would favour roaming profiles but then using group policies to re-direct as much as possible so the size of the profiles stay nice and small.

 

If you use a mandatory profiule for 1000 students and the profile gets corrupted, thats 1000 users that have problems. Use roaming profiles and a profile gets corrupted, its only one to deal with

 

No, no and hell no. That's not how it works at all. Firstly, how exactly do you suppose that mandatory profile gets corrupted? There are *far* more problems with roaming profiles for very obvious reasons - even with a lot of it redirected. Mandatory is quicker, safer and more reliable.

 

The amount of time we used to spend resetting profiles on the RM networks. We've been vanilla nearly 5 years and had exactly 0 profile issues.

[mtillbrook]

haha, thats why i started my post the way i did as I know this is topic which sparks some strong feelings!

 

I suppose the more sensible answer is to do as much testing as possible with different options and go for the one that best suits you situation!

[3s-gtech]

Mandatory profiles are read only. They copy temporarily to the PC while the user is logged on, then delete at log off. No way for a working one to get corrupted, and if it's backed up it's not an issue anyway. They don't feel old fashioned in use - they're quick, clean and easy to administer. Not the only way to do it of course, and don't suit everyone!

 

IME = In My Experience. My opinion is worth nothing, but I'm paid for my experience

[Asgard]

We have two mandatory profiles

 

Student - just under 2,000 users

Staff - just under 300

 

They work an absolute dream but we're now looking at UE-V, especially based on a post I shared a few weeks ago about Microsoft depreciating roaming Profiles;

 

Regarding Roaming User Profiles (RUP) support, RUP is supported on Windows 10 but we’re no longer investing in new features. We do plan to deprecate RUP in the future but the timing has not been

determined.

 

Our recommendation is to use our modern solutions for roaming user data:

 

* For settings and application data, use UE-V or Enterprise State Roaming (ESR)

 

* For user data, use Work Folders or OneDrive for Business

Edited March 6, 2017 by Asgard

[Olliesaurus]

It sounds like U-EV is going to be the way to move forward although its fairly poorly documented (from what I have managed to find).

 

What I cant find out is whether U-EV can be locked down so that every student is using the same settings and cannot amend of change the settings at the source.

[MrKJLS]

We have been using UE-V at our place and it works like a dream. Staff what have been using Windows 10 with mandatory profiles haven noticed any difference. Edited March 7, 2017 by MrKJLS
Grammer

[jdell]

UE-V would be the way to go, in terms of set up it will require you to invest more time in the background configured to support UE-V in your environment. Its also worth noting that you need to check you have the licences for UE-V from Microsoft as its not included in the basic campus agreement.

 

I used UE-V in a large deployment 10,000 user deployment and it works really well if set up properly, we used in with Win 7 and 8.1

[Olliesaurus]

We have been using UE-V at our place and it works like a dream. Staff what have using Windows 10 with mandatory profiles haven noticed any difference.

Would it be OK for me to PM you a few questions?

[MrKJLS]

Would it be OK for me to PM you a few questions?

Yep, feel free to

[mattpant]

I know very little at present about UE-V so apologies if I am stating a ridiculous statement, but in order for this to work - wouldn't a user still need some sort of profile associated with their AD credential in order to access / login to a computer for the UE-V settings to apply to?

[MrKJLS]

I know very little at present about UE-V so apologies if I am stating a ridiculous statement, but in order for this to work - wouldn't a user still need some sort of profile associated with their AD credential in order to access / login to a computer for the UE-V settings to apply to?

 

You can use local profiles, roaming profiles or mandatory profiles with UE-V. For example here for PC's still running Windows 7 staff are using UE-V with a roaming profile (we are planning to switch these over to mandatory at some point) and staff what are primarily based on Windows 10 have a mandatory profile with UE-V.

 

Also by using UE-V on Windows 7 for staff with roaming profile, when we switch them over to mandatory they won't notice anything has changed as all their settings have been captured by UE-V and have carried on working.

[KevinB]

I have been reading about UEV today, looks fairly indepth but if I am right, could replace all of the varieties of profile, are you using UEV at your school/schools?

 

We've been using UEV for a term now and it has cured quite literally all of our profile related issues. Setup isn't difficult (apply and configure group policies, build application profiles, remove profile paths from user accounts; took a day from start to finish here) and it's already there as a core part of the OS in 1607 upward. If you're still using 1511 there is a download from MS which will add UEV to your 1511 machines (though I'd strongly recommend upgrading to 1607 as it handles startlayout xml files properly which 1511 doesn't, amongst a host of other general improvements.)

 

Couple UEV with folder and start menu redirection and it's a pretty easy to configure and manage setup.

[Olliesaurus]

We've been using UEV for a term now and it has cured quite literally all of our profile related issues. Setup isn't difficult (apply and configure group policies, build application profiles, remove profile paths from user accounts; took a day from start to finish here) and it's already there as a core part of the OS in 1607 upward. If you're still using 1511 there is a download from MS which will add UEV to your 1511 machines (though I'd strongly recommend upgrading to 1607 as it handles startlayout xml files properly which 1511 doesn't, amongst a host of other general improvements.)

Couple UEV with folder and start menu redirection and it's a pretty easy to configure and manage setup.

Are using UEV with both students and staff then?

[KevinB]

"sort of"

 

All students use UEV and we're gradually migrating staff users over at the same time we reimage their PC's and laptops to 1607. So far no staff have even noticed other than to remark that their profiles never corrupt any more and how much quicker logging on has become.

[mattpant]

If you remove profile paths from the User Accounts - what do the users use to login to the computers with before UE-V get's processed - there must be some sort of profile that's needed or used? If so, how or what do you use to create that initial profile - sorry if these sound dumb questions but the UE-V approach is all new to me, but sounds like a great move forward!

 

I've read a few things from the links provided on the postings, but still can't quite work out how or what is needed for the initial setup process of profiles required?!?

 

Thanks

 

Matt

[Olliesaurus]

Going to bump this as thats the same thing im failing to understand!

[dr_Wiley]

Hi this is how we use UE-V if it helps to clarify.

 

Our staff accounts in AD have the profile path empty.

 

When they logon windows creates them local profile using the default profile as a base template, then adding the settings set by the gpos assigned to them.

 

The home folder path is to their folder on the server.

 

We use 1607 which has UE-V baked in

 

By default UE-V stores user data in the home folder set in AD

 

In Group Policy under user configuration/policies/administrative templates/windows components/microsoft user experience virtualization we have 'Use User Experience Virtualization (UE-V)' enabled and 'Configure Sync Method' enabled and set to None