Sign in to follow this  
Followers 0
oshaker

Roaming profile Question

6 posts in this topic

#1 ·  Posted (edited)

Hello,

I have one user for which I set up a roaming profile, this user is used to log on to 300 PCs, I noticed that at log off PCs update the roaming profile. I need a quick method to prevent local machines from updating roaming profile on server when they log off, this will make life easier.

I also found good practices to include in a script:

Hive: HKEY_LOCAL_MACHINE

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Name: DeleteRoamingCache

Type: REG_DWORD

Value: 1

To prevent logging to EventLog:

Hive: HKEY_LOCAL_MACHINE

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Name: EventLog

Type: REG_DWORD

Value: 0

You will have to stop and restart the spooler from services in the Control Panel but you may wish to reboot.

If you want roaming profiles to not include certain folders, you can exclude them. Excluding internet temporary files, cookies, and outlook files can keep the roaming profile small. To exclude folders:

Hive: HKEY_CURRENT_USER

Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Name: ExcludeProfileDirs

Type: REG_SZ

Value: Temporary Internet Files;Cookies;Recent;History;Local Settings\Application Data\Microsoft\Outlook

But I don't think they solve the roaming profile updating problem when PCs log off.

I don't know if there are other solutions to this problem, or if this behavior for roaming profiles can be changed. The funny thing is that I am using a mandatory profile, I don't understand why PCs update the roaming profile after all.

Thanks

Edited by oshaker

Share this post


Link to post
Share on other sites



Try making the profile folder on the server readonly.

Share this post


Link to post
Share on other sites

The machine will show a message at log off that it can't write to templates folder.

Share this post


Link to post
Share on other sites

(I don't know if months-old "Necro-posting" is acceptable on this forum, but this question was never answered.)

The way to stop a roaming profile from updating the server profile on logout is to use a Microsoft feature referred to as a "Mandatory" profile. On logoff the profile is simply deleted.

http://msdn.microsoft.com/en-us/library/windows/desktop/bb776895%28v=vs.85%29.aspx

Quick answer:

Make a new user, with a new roaming profile path, logon, set up the account preferences the way you want, then logoff, and in the profile directory change the hidden/system file NTUSER.DAT to NTUSER.MAN. Changes now will not write back to the server profile on logoff, and you can set the profile directory permissions to read only so people can't manually edit it. If you need to make more changes to the profile you can make it writable again and rename back to NTUSER.DAT.

It helps to keep old / backup copies of this profile when making changes, in case you screw something up. Also people should not be logging on while editing the profile config, another good reason for backup/offline mandatory profile copies.

Note by default documents and the desktop are stored in the profile, so on logoff all that is deleted too. Should warn people about this, rather letting them "discover" it themselves. You can retain documents and the desktop by using folder redirection group policy in combination with roaming, so that certain specific profile folders are stored elsewhere such as in the user's home directory path.

More details.... most of which I wrote... :)

http://en.wikipedia.org/wiki/Roaming_user_profile

Share this post


Link to post
Share on other sites

Javik,

I don't know if months-old "Necro-posting" is acceptable on this forum

If you provide an answer than it most certainly is! :)

It is the reviving of posts dating back several years that we try to discourage - mostly because the language has evolved so much that the code in the original posts is often no longer valid or the functionality requested is now available as a native function or within a UDF. ;)

M23


Any of my own code posted anywhere on the forum is available for use by others without any restriction of any kind._______My UDFs:

Spoiler

ArrayMultiColSort ---- Sort arrays on multiple columns
ChooseFileFolder ---- Single and multiple selections from specified path treeview listing
Date_Time_Convert -- Easily convert date/time formats, including the language used
ExtMsgBox --------- A highly customisable replacement for MsgBox
GUIExtender -------- Extend and retract multiple sections within a GUI
GUIFrame ---------- Subdivide GUIs into many adjustable frames
GUIListViewEx ------- Insert, delete, move, drag, sort, edit and colour ListView items
GUITreeViewEx ------ Check/clear parent and child checkboxes in a TreeView
Marquee ----------- Scrolling tickertape GUIs
NoFocusLines ------- Remove the dotted focus lines from buttons, sliders, radios and checkboxes
Notify ------------- Small notifications on the edge of the display
Scrollbars ----------Automatically sized scrollbars with a single command
StringSize ---------- Automatically size controls to fit text
Toast -------------- Small GUIs which pop out of the notification area

 

Share this post


Link to post
Share on other sites

#6 ·  Posted (edited)

While a Mandatory Profile is a good solution for all users, it appears from the OP that he has just one user that has a roaming profile, and he does not want that profile to update on the network when the user logs out. For this, I would suggest setting a Group Policy, under Computer Config>>Administrative Templates>>System>>User Profiles. The policy is "Prevent Roaming Profile changes from propagating to the server".

This is especially useful if, as the OP states, the roaming profile is being used on a large number of systems. You would set one machine to be excluded from this policy, so the user can update when he wants, but won't update every time he logs out of a machine.

Edit: Fixed horrible spelling

Edited by JLogan3o13

√-1 2^3 ∑ π, and it was delicious!

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0