| Author | Messages | |
ronniehamilton
Posts:38
 | | 02/18/2009 4:49 AM |
| Hey,
I come from a mainly Citrix background were we used roaming profiles
which were deleted on user logout as best practice for various reasons.
Not that we have been rolling out Vista PC's round the place I have been
replicating this process but have run into some issues, although I do
need the user to be able to roam and keep their settings I have had
difficulty with the following:
1. When a user selects to allow pop ups always for a web site - the
user logs out but the key that holds the settings does not get written
back to the users profile.
2. when a user makes changes to their Gadgets they do not hold the
next time they log in - this is because these settings do not roam (ie
in Appdata\local)
My question is really if I do not delete the user profile when these
users log outs to resolve my above issues are there any other issues or
is this normal practice.
Thanks
Ronnie
Visit our website : www.ltai.ie
__________________________________________
Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg. No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin.
Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole, Co.Dublin.
__________________________________________
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please advise by return email and delete all copies of the message.
| | | |
| jeremysaunders1
Posts:18
| | 02/18/2009 8:44 AM |
| Hi Ronnie,
I'm unsure about question 1, but for question 2 I would simply create a
logoff script that copies the gadgets to a folder under the users home
drive at logoff, and then a logon script that copies them back at logon.
Something similar to the Office 2007 Quick Access Toolbar issue as I
described here:
http://www.jhouseconsulting.com/index.php/blog/2008/08/04/managing-ms-of
fice-2007-quick-access-toolbars-with-roaming-profiles/. It's weird why
they would not automatically place this stuff in the "roaming" folders
to start with.
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:42 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] user profile question
Hey,
I come from a mainly Citrix background were we used roaming profiles
which were deleted on user logout as best practice for various reasons.
Not that we have been rolling out Vista PC's round the place I have been
replicating this process but have run into some issues, although I do
need the user to be able to roam and keep their settings I have had
difficulty with the following:
1. When a user selects to allow pop ups always for a web site - the
user logs out but the key that holds the settings does not get written
back to the users profile.
2. when a user makes changes to their Gadgets they do not hold the
next time they log in - this is because these settings do not roam (ie
in Appdata\local)
My question is really if I do not delete the user profile when these
users log outs to resolve my above issues are there any other issues or
is this normal practice.
Thanks
Ronnie
Visit our website : www.ltai.ie
__________________________________________
Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg.
No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin.
Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in
Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole,
Co.Dublin.
__________________________________________
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error, please advise by
return email and delete all copies of the message.
#####################################################################################
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.
#####################################################################################
| | | |
| ronniehamilton
Posts:38
| | 02/18/2009 9:50 AM |
| Hi Jeremy,
Sounds like a plan for issue 1 but the issue with Q 1 was that when I
allow users to allow their own pop ups it creates a list of web sites
under HKEY_Users..\Software\Microsoft\Internet Explorer\New
Windows\Allow but when the user logs off the list off these keys are not
written back to the users ntuser.dat. I wasn't sure if it was by design
in that MS doesn't want you to remember sites you allowed from day to
day but couldn't find anything on it. I suppose an export of the reg
keys out and back in again may work like the files for the gadgets.
Problem is we were trying to move away form login scripts and using
preferences instead as we are running quite a mixed environment at the
moment with Vista then the user has to logon to a Citrix desktop from XP
Metaframe as Citrix is in the progress of being upgraded.
>From what your saying its not recommended to leave a users profile
behind when they log out or so that the user will still have their
desktop if they go to a different machine?
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jeremy Saunders
Sent: 18 February 2009 13:37
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Ronnie,
I'm unsure about question 1, but for question 2 I would simply create a
logoff script that copies the gadgets to a folder under the users home
drive at logoff, and then a logon script that copies them back at logon.
Something similar to the Office 2007 Quick Access Toolbar issue as I
described here:
http://www.jhouseconsulting.com/index.php/blog/2008/08/04/managing-ms-of
fice-2007-quick-access-toolbars-with-roaming-profiles/. It's weird why
they would not automatically place this stuff in the "roaming" folders
to start with.
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:42 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] user profile question
Hey,
I come from a mainly Citrix background were we used roaming profiles
which were deleted on user logout as best practice for various reasons.
Not that we have been rolling out Vista PC's round the place I have been
replicating this process but have run into some issues, although I do
need the user to be able to roam and keep their settings I have had
difficulty with the following:
1. When a user selects to allow pop ups always for a web site - the
user logs out but the key that holds the settings does not get written
back to the users profile.
2. when a user makes changes to their Gadgets they do not hold the
next time they log in - this is because these settings do not roam (ie
in Appdata\local)
My question is really if I do not delete the user profile when these
users log outs to resolve my above issues are there any other issues or
is this normal practice.
Thanks
Ronnie
Visit our website : www.ltai.ie
__________________________________________
Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg.
No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin.
Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in
Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole,
Co.Dublin.
__________________________________________
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error, please advise by
return email and delete all copies of the message.
________________________________
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The
information contained in the pages is confidential and contains legally
privileged information. If you are not the addressee indicated in this
message (or responsible for delivery of the message to such person), you
may not copy or deliver this message to anyone, and you should destroy
this message and kindly notify the sender by reply email.
Confidentiality and legal privilege are not waived or lost by reason of
mistaken delivery to you.
________________________________
| | | |
| Darren
Posts:103
| | 02/18/2009 10:22 AM |
| Well, I tried replying to this earlier and it rejected me as spam.hmmm.
Anyway, what I tried to say before was that I don't see a need to delete
roaming profiles on desktop machines the same way you might on TS boxes.
Unless you have a ton of folks moving from machine to machine I think you
can leave the profile alone. As for the issue with Popup Allow lists not
being saved, you list part of the key below-under HKEY_USERS, but its not
clear if its HKEY_USERS\.Default or HKEY_USERS\<SID>. If the latter, then
that IS ntuser.dat and it should be saving those.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Jeremy,
Sounds like a plan for issue 1 but the issue with Q 1 was that when I allow
users to allow their own pop ups it creates a list of web sites under
HKEY_Users..\Software\Microsoft\Internet Explorer\New Windows\Allow but when
the user logs off the list off these keys are not written back to the users
ntuser.dat. I wasn't sure if it was by design in that MS doesn't want you to
remember sites you allowed from day to day but couldn't find anything on it.
I suppose an export of the reg keys out and back in again may work like the
files for the gadgets. Problem is we were trying to move away form login
scripts and using preferences instead as we are running quite a mixed
environment at the moment with Vista then the user has to logon to a Citrix
desktop from XP Metaframe as Citrix is in the progress of being upgraded.
>From what your saying its not recommended to leave a users profile behind
when they log out or so that the user will still have their desktop if they
go to a different machine?
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Jeremy Saunders
Sent: 18 February 2009 13:37
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Ronnie,
I'm unsure about question 1, but for question 2 I would simply create a
logoff script that copies the gadgets to a folder under the users home drive
at logoff, and then a logon script that copies them back at logon. Something
similar to the Office 2007 Quick Access Toolbar issue as I described here:
http://www.jhouseconsulting.com/index.php/blog/2008/08/04/managing-ms-office
-2007-quick-access-toolbars-with-roaming-profiles/. It's weird why they
would not automatically place this stuff in the "roaming" folders to start
with.
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:42 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] user profile question
Hey,
I come from a mainly Citrix background were we used roaming profiles which
were deleted on user logout as best practice for various reasons.
Not that we have been rolling out Vista PC's round the place I have been
replicating this process but have run into some issues, although I do need
the user to be able to roam and keep their settings I have had difficulty
with the following:
1. When a user selects to allow pop ups always for a web site - the
user logs out but the key that holds the settings does not get written back
to the users profile.
2. when a user makes changes to their Gadgets they do not hold the next
time they log in - this is because these settings do not roam (ie in
Appdata\local)
My question is really if I do not delete the user profile when these users
log outs to resolve my above issues are there any other issues or is this
normal practice.
Thanks
Ronnie
Visit our website : www.ltai.ie
__________________________________________
Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg. No.
45999. Registered Office: Naas Road, Rathcoole, Co.Dublin.
Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in Ireland.
Reg. No. 140891. Registered Office: Naas Road, Rathcoole, Co.Dublin.
__________________________________________
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error, please advise by return email and
delete all copies of the message.
_____
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The information
contained in the pages is confidential and contains legally privileged
information. If you are not the addressee indicated in this message (or
responsible for delivery of the message to such person), you may not copy or
deliver this message to anyone, and you should destroy this message and
kindly notify the sender by reply email. Confidentiality and legal privilege
are not waived or lost by reason of mistaken delivery to you.
_____
| | | |
| ronniehamilton
Posts:38
| | 02/18/2009 10:30 AM |
| Hi Darren,
That's what I thought it wouldn't do any harm but wanted some
confirmation as its only a few cases were the users will actually need
to roam.
The key is:
and the list of sites build up not sure why it doesn't write this back
as I have tried with various users, the only way I see it working is
leaving the profile on the machines.
Otherwise I am going to be managing tons of these sites for all the
users.
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: 18 February 2009 15:15
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Well, I tried replying to this earlier and it rejected me as
spam...hmmm. Anyway, what I tried to say before was that I don't see a
need to delete roaming profiles on desktop machines the same way you
might on TS boxes. Unless you have a ton of folks moving from machine to
machine I think you can leave the profile alone. As for the issue with
Popup Allow lists not being saved, you list part of the key below-under
HKEY_USERS, but its not clear if its HKEY_USERS\.Default or
HKEY_USERS\<SID>. If the latter, then that IS ntuser.dat and it should
be saving those.
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Jeremy,
Sounds like a plan for issue 1 but the issue with Q 1 was that when I
allow users to allow their own pop ups it creates a list of web sites
under HKEY_Users..\Software\Microsoft\Internet Explorer\New
Windows\Allow but when the user logs off the list off these keys are not
written back to the users ntuser.dat. I wasn't sure if it was by design
in that MS doesn't want you to remember sites you allowed from day to
day but couldn't find anything on it. I suppose an export of the reg
keys out and back in again may work like the files for the gadgets.
Problem is we were trying to move away form login scripts and using
preferences instead as we are running quite a mixed environment at the
moment with Vista then the user has to logon to a Citrix desktop from XP
Metaframe as Citrix is in the progress of being upgraded.
>From what your saying its not recommended to leave a users profile
behind when they log out or so that the user will still have their
desktop if they go to a different machine?
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jeremy Saunders
Sent: 18 February 2009 13:37
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Ronnie,
I'm unsure about question 1, but for question 2 I would simply create a
logoff script that copies the gadgets to a folder under the users home
drive at logoff, and then a logon script that copies them back at logon.
Something similar to the Office 2007 Quick Access Toolbar issue as I
described here:
http://www.jhouseconsulting.com/index.php/blog/2008/08/04/managing-ms-of
fice-2007-quick-access-toolbars-with-roaming-profiles/. It's weird why
they would not automatically place this stuff in the "roaming" folders
to start with.
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:42 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] user profile question
Hey,
I come from a mainly Citrix background were we used roaming profiles
which were deleted on user logout as best practice for various reasons.
Not that we have been rolling out Vista PC's round the place I have been
replicating this process but have run into some issues, although I do
need the user to be able to roam and keep their settings I have had
difficulty with the following:
1. When a user selects to allow pop ups always for a web site - the
user logs out but the key that holds the settings does not get written
back to the users profile.
2. when a user makes changes to their Gadgets they do not hold the
next time they log in - this is because these settings do not roam (ie
in Appdata\local)
My question is really if I do not delete the user profile when these
users log outs to resolve my above issues are there any other issues or
is this normal practice.
Thanks
Ronnie
Visit our website : www.ltai.ie
__________________________________________
Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg.
No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin.
Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in
Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole,
Co.Dublin.
__________________________________________
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error, please advise by
return email and delete all copies of the message.
________________________________
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The
information contained in the pages is confidential and contains legally
privileged information. If you are not the addressee indicated in this
message (or responsible for delivery of the message to such person), you
may not copy or deliver this message to anyone, and you should destroy
this message and kindly notify the sender by reply email.
Confidentiality and legal privilege are not waived or lost by reason of
mistaken delivery to you.
________________________________
| | | |
| jeromelcruz
Posts:123
| | 02/18/2009 10:30 AM |
| Ronnie,
Intrinsically speaking, it is neither recommended, nor discouraged as a 'best practice'. The administrator must choose whether it is appropriate to allow synchronization back to the roaming profile server based upon the customer's requirements. There are many factors that can be involved in the decision and these may vary from machine type to machine type (and user to user as well). I'll give you some examples.
* Let's say you have an End User population which logs onto their own assigned device most of the time-could be laptop or desktop. Your 'facts and data' from the help center indicates that the currently deployed equipment has a monthly failure rate high enough (mgmt must determine this) to justify a significant effort to optimize restoration processes. Part of that effort indicates that use of roaming profiles for restoration results in significant reduction in the 'time-to-restore' a system and significantly reduces 'lost workstation hours'. So, you turn on full synchronization from their devices. [Note: Essentially, you are turning on 'roaming' NOT for the sake of roaming, but for optimization of restoration.]
* Let's say you have an End User population which logs onto their own assigned device-could be laptop or desktop-most of the time and yet also logs onto devices which are dedicated for use in conference rooms. End Users have shortcuts and mapped drives in their profile settings that they want easy access to... however, the devices in the conference rooms may have unique applications and/or hardware whose settings are inappropriate for their normal devices (or would just bloat their normal profile size). In this case, you may decide to allow the profile to roam down, but NOT sync back to the server when they log off. If you do not want their profile synced every time they logon to these kinds of devices (takes time and meeting time is always of the essence), you may choose to use a logoff script that sets their profile to 'local' mode...or not. You need to choose depending upon your requirements. You may also need to decide whether you want their profile 'Deleted' as they logoff.
* Let's say that 'some' of your End Users are also Server Administrators. On these devices, it 'is' an industry and security "best practice" to have these folks use a separate (secondary privileged) account for working on those devices. Some companies will choose to use a mandatory profile for their Server Admins or choose to just let them logon with their 'secondary privileged' account. That said, mistakes can and do happen. For this reason, if a mandatory profile is not used, then I would suggest that you draw a line and say that no roaming of settings is allowed for accounts logging onto servers.
Gather data, determine your requirements, make the decision with management buy-in, document it, and then train and implement.
Good luck,
Jerry Cruz | Group Policies Product Manager | Windows Infrastructure Architecture | CNO | Boeing IT
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Jeremy,
Sounds like a plan for issue 1 but the issue with Q 1 was that when I allow users to allow their own pop ups it creates a list of web sites under HKEY_Users..\Software\Microsoft\Internet Explorer\New Windows\Allow but when the user logs off the list off these keys are not written back to the users ntuser.dat. I wasn't sure if it was by design in that MS doesn't want you to remember sites you allowed from day to day but couldn't find anything on it. I suppose an export of the reg keys out and back in again may work like the files for the gadgets. Problem is we were trying to move away form login scripts and using preferences instead as we are running quite a mixed environment at the moment with Vista then the user has to logon to a Citrix desktop from XP Metaframe as Citrix is in the progress of being upgraded.
>From what your saying its not recommended to leave a users profile behind when they log out or so that the user will still have their desktop if they go to a different machine?
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jeremy Saunders
Sent: 18 February 2009 13:37
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Ronnie,
I'm unsure about question 1, but for question 2 I would simply create a logoff script that copies the gadgets to a folder under the users home drive at logoff, and then a logon script that copies them back at logon. Something similar to the Office 2007 Quick Access Toolbar issue as I described here: http://www.jhouseconsulting.com/index.php/blog/2008/08/04/managing-ms-office-2007-quick-access-toolbars-with-roaming-profiles/. It's weird why they would not automatically place this stuff in the "roaming" folders to start with.
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:42 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] user profile question
Hey,
I come from a mainly Citrix background were we used roaming profiles which were deleted on user logout as best practice for various reasons.
Not that we have been rolling out Vista PC's round the place I have been replicating this process but have run into some issues, although I do need the user to be able to roam and keep their settings I have had difficulty with the following:
1. When a user selects to allow pop ups always for a web site - the user logs out but the key that holds the settings does not get written back to the users profile.
2. when a user makes changes to their Gadgets they do not hold the next time they log in - this is because these settings do not roam (ie in Appdata\local)
My question is really if I do not delete the user profile when these users log outs to resolve my above issues are there any other issues or is this normal practice.
Thanks
Ronnie
Visit our website : www.ltai.ie
__________________________________________
Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg. No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin.
Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole, Co.Dublin.
__________________________________________
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please advise by return email and delete all copies of the message.
________________________________
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.
________________________________
| | | |
| jeremysaunders1
Posts:18
| | 02/18/2009 11:05 AM |
| Maybe the profile is not fully unloading, so the ntuser.dat is not being
copied across the network. Is the timestamp on it changing? What if you
manually load the hive and have a look?
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Thursday, February 19, 2009 12:24 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Darren,
That's what I thought it wouldn't do any harm but wanted some
confirmation as its only a few cases were the users will actually need
to roam.
The key is:
and the list of sites build up not sure why it doesn't write this back
as I have tried with various users, the only way I see it working is
leaving the profile on the machines.
Otherwise I am going to be managing tons of these sites for all the
users.
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: 18 February 2009 15:15
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Well, I tried replying to this earlier and it rejected me as
spam...hmmm. Anyway, what I tried to say before was that I don't see a
need to delete roaming profiles on desktop machines the same way you
might on TS boxes. Unless you have a ton of folks moving from machine to
machine I think you can leave the profile alone. As for the issue with
Popup Allow lists not being saved, you list part of the key below-under
HKEY_USERS, but its not clear if its HKEY_USERS\.Default or
HKEY_USERS\<SID>. If the latter, then that IS ntuser.dat and it should
be saving those.
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Jeremy,
Sounds like a plan for issue 1 but the issue with Q 1 was that when I
allow users to allow their own pop ups it creates a list of web sites
under HKEY_Users..\Software\Microsoft\Internet Explorer\New
Windows\Allow but when the user logs off the list off these keys are not
written back to the users ntuser.dat. I wasn't sure if it was by design
in that MS doesn't want you to remember sites you allowed from day to
day but couldn't find anything on it. I suppose an export of the reg
keys out and back in again may work like the files for the gadgets.
Problem is we were trying to move away form login scripts and using
preferences instead as we are running quite a mixed environment at the
moment with Vista then the user has to logon to a Citrix desktop from XP
Metaframe as Citrix is in the progress of being upgraded.
>From what your saying its not recommended to leave a users profile
behind when they log out or so that the user will still have their
desktop if they go to a different machine?
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jeremy Saunders
Sent: 18 February 2009 13:37
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Ronnie,
I'm unsure about question 1, but for question 2 I would simply create a
logoff script that copies the gadgets to a folder under the users home
drive at logoff, and then a logon script that copies them back at logon.
Something similar to the Office 2007 Quick Access Toolbar issue as I
described here:
http://www.jhouseconsulting.com/index.php/blog/2008/08/04/managing-ms-of
fice-2007-quick-access-toolbars-with-roaming-profiles/. It's weird why
they would not automatically place this stuff in the "roaming" folders
to start with.
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:42 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] user profile question
Hey,
I come from a mainly Citrix background were we used roaming profiles
which were deleted on user logout as best practice for various reasons.
Not that we have been rolling out Vista PC's round the place I have been
replicating this process but have run into some issues, although I do
need the user to be able to roam and keep their settings I have had
difficulty with the following:
1. When a user selects to allow pop ups always for a web site - the
user logs out but the key that holds the settings does not get written
back to the users profile.
2. when a user makes changes to their Gadgets they do not hold the
next time they log in - this is because these settings do not roam (ie
in Appdata\local)
My question is really if I do not delete the user profile when these
users log outs to resolve my above issues are there any other issues or
is this normal practice.
Thanks
Ronnie
Visit our website : www.ltai.ie
__________________________________________
Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg.
No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin.
Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in
Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole,
Co.Dublin.
__________________________________________
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error, please advise by
return email and delete all copies of the message.
________________________________
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The
information contained in the pages is confidential and contains legally
privileged information. If you are not the addressee indicated in this
message (or responsible for delivery of the message to such person), you
may not copy or deliver this message to anyone, and you should destroy
this message and kindly notify the sender by reply email.
Confidentiality and legal privilege are not waived or lost by reason of
mistaken delivery to you.
________________________________
#####################################################################################
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.
#####################################################################################
| | | |
| ronniehamilton
Posts:38
| | 02/18/2009 11:22 AM |
| I have manually loaded the hive after logoff from the file server were
the profile is stored and there's nothing in the key.
As far as I'm aware the profile unloaded as nothing is left behind on
the Vista machine and when the user loges back in I do not get it
creating the profile with a number after it which would indicate that
the profile didn't unload.
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jeremy Saunders
Sent: 18 February 2009 16:00
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Maybe the profile is not fully unloading, so the ntuser.dat is not being
copied across the network. Is the timestamp on it changing? What if you
manually load the hive and have a look?
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Thursday, February 19, 2009 12:24 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Darren,
That's what I thought it wouldn't do any harm but wanted some
confirmation as its only a few cases were the users will actually need
to roam.
The key is:
and the list of sites build up not sure why it doesn't write this back
as I have tried with various users, the only way I see it working is
leaving the profile on the machines.
Otherwise I am going to be managing tons of these sites for all the
users.
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: 18 February 2009 15:15
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Well, I tried replying to this earlier and it rejected me as
spam...hmmm. Anyway, what I tried to say before was that I don't see a
need to delete roaming profiles on desktop machines the same way you
might on TS boxes. Unless you have a ton of folks moving from machine to
machine I think you can leave the profile alone. As for the issue with
Popup Allow lists not being saved, you list part of the key below-under
HKEY_USERS, but its not clear if its HKEY_USERS\.Default or
HKEY_USERS\<SID>. If the latter, then that IS ntuser.dat and it should
be saving those.
Darren
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Jeremy,
Sounds like a plan for issue 1 but the issue with Q 1 was that when I
allow users to allow their own pop ups it creates a list of web sites
under HKEY_Users..\Software\Microsoft\Internet Explorer\New
Windows\Allow but when the user logs off the list off these keys are not
written back to the users ntuser.dat. I wasn't sure if it was by design
in that MS doesn't want you to remember sites you allowed from day to
day but couldn't find anything on it. I suppose an export of the reg
keys out and back in again may work like the files for the gadgets.
Problem is we were trying to move away form login scripts and using
preferences instead as we are running quite a mixed environment at the
moment with Vista then the user has to logon to a Citrix desktop from XP
Metaframe as Citrix is in the progress of being upgraded.
>From what your saying its not recommended to leave a users profile
behind when they log out or so that the user will still have their
desktop if they go to a different machine?
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jeremy Saunders
Sent: 18 February 2009 13:37
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Ronnie,
I'm unsure about question 1, but for question 2 I would simply create a
logoff script that copies the gadgets to a folder under the users home
drive at logoff, and then a logon script that copies them back at logon.
Something similar to the Office 2007 Quick Access Toolbar issue as I
described here:
http://www.jhouseconsulting.com/index.php/blog/2008/08/04/managing-ms-of
fice-2007-quick-access-toolbars-with-roaming-profiles/. It's weird why
they would not automatically place this stuff in the "roaming" folders
to start with.
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:42 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] user profile question
Hey,
I come from a mainly Citrix background were we used roaming profiles
which were deleted on user logout as best practice for various reasons.
Not that we have been rolling out Vista PC's round the place I have been
replicating this process but have run into some issues, although I do
need the user to be able to roam and keep their settings I have had
difficulty with the following:
1. When a user selects to allow pop ups always for a web site - the
user logs out but the key that holds the settings does not get written
back to the users profile.
2. when a user makes changes to their Gadgets they do not hold the
next time they log in - this is because these settings do not roam (ie
in Appdata\local)
My question is really if I do not delete the user profile when these
users log outs to resolve my above issues are there any other issues or
is this normal practice.
Thanks
Ronnie
Visit our website : www.ltai.ie
__________________________________________
Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg.
No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin.
Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in
Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole,
Co.Dublin.
__________________________________________
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error, please advise by
return email and delete all copies of the message.
________________________________
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The
information contained in the pages is confidential and contains legally
privileged information. If you are not the addressee indicated in this
message (or responsible for delivery of the message to such person), you
may not copy or deliver this message to anyone, and you should destroy
this message and kindly notify the sender by reply email.
Confidentiality and legal privilege are not waived or lost by reason of
mistaken delivery to you.
________________________________
________________________________
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The
information contained in the pages is confidential and contains legally
privileged information. If you are not the addressee indicated in this
message (or responsible for delivery of the message to such person), you
may not copy or deliver this message to anyone, and you should destroy
this message and kindly notify the sender by reply email.
Confidentiality and legal privilege are not waived or lost by reason of
mistaken delivery to you.
________________________________
| | | |
| tconnell
Posts:16
| | 02/18/2009 11:25 AM |
| Ronnie- Do you have this computer policy enabled?
"Prevent Roaming Profile changes from propagating to the server"
________________________________
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 11:16 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
I have manually loaded the hive after logoff from the file server were the profile is stored and there's nothing in the key.
As far as I'm aware the profile unloaded as nothing is left behind on the Vista machine and when the user loges back in I do not get it creating the profile with a number after it which would indicate that the profile didn't unload.
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jeremy Saunders
Sent: 18 February 2009 16:00
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Maybe the profile is not fully unloading, so the ntuser.dat is not being copied across the network. Is the timestamp on it changing? What if you manually load the hive and have a look?
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Thursday, February 19, 2009 12:24 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Darren,
That's what I thought it wouldn't do any harm but wanted some confirmation as its only a few cases were the users will actually need to roam.
The key is:
[cid:598051816@18022009-2009]
and the list of sites build up not sure why it doesn't write this back as I have tried with various users, the only way I see it working is leaving the profile on the machines.
Otherwise I am going to be managing tons of these sites for all the users.
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: 18 February 2009 15:15
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Well, I tried replying to this earlier and it rejected me as spam...hmmm. Anyway, what I tried to say before was that I don't see a need to delete roaming profiles on desktop machines the same way you might on TS boxes. Unless you have a ton of folks moving from machine to machine I think you can leave the profile alone. As for the issue with Popup Allow lists not being saved, you list part of the key below-under HKEY_USERS, but its not clear if its HKEY_USERS\.Default or HKEY_USERS\<SID>. If the latter, then that IS ntuser.dat and it should be saving those.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:44 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Jeremy,
Sounds like a plan for issue 1 but the issue with Q 1 was that when I allow users to allow their own pop ups it creates a list of web sites under HKEY_Users..\Software\Microsoft\Internet Explorer\New Windows\Allow but when the user logs off the list off these keys are not written back to the users ntuser.dat. I wasn't sure if it was by design in that MS doesn't want you to remember sites you allowed from day to day but couldn't find anything on it. I suppose an export of the reg keys out and back in again may work like the files for the gadgets. Problem is we were trying to move away form login scripts and using preferences instead as we are running quite a mixed environment at the moment with Vista then the user has to logon to a Citrix desktop from XP Metaframe as Citrix is in the progress of being upgraded.
>From what your saying its not recommended to leave a users profile behind when they log out or so that the user will still have their desktop if they go to a different machine?
Thanks
Ronnie
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jeremy Saunders
Sent: 18 February 2009 13:37
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] user profile question
Hi Ronnie,
I'm unsure about question 1, but for question 2 I would simply create a logoff script that copies the gadgets to a folder under the users home drive at logoff, and then a logon script that copies them back at logon. Something similar to the Office 2007 Quick Access Toolbar issue as I described here: http://www.jhouseconsulting.com/index.php/blog/2008/08/04/managing-ms-office-2007-quick-access-toolbars-with-roaming-profiles/. It's weird why they would not automatically place this stuff in the "roaming" folders to start with.
Cheers,
Jeremy.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hamilton, Ronnie
Sent: Wednesday, February 18, 2009 6:42 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] user profile question
Hey,
I come from a mainly Citrix background were we used roaming profiles which were deleted on user logout as best practice for various reasons.
Not that we have been rolling out Vista PC's round the place I have been replicating this process but have run into some issues, although I do need the user to be able to roam and keep their settings I have had difficulty with the following:
1. When a user selects to allow pop ups always for a web site - the user logs out but the key that holds the settings does not get written back to the users profile.
2. when a user makes changes to their Gadgets they do not hold the next time they log in - this is because these settings do not roam (ie in Appdata\local)
My question is really if I do not delete the user profile when these users log outs to resolve my above issues are there any other issues or is this normal practice.
Thanks
Ronnie
Visit our website : www.ltai.ie
__________________________________________
Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg. No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin.
Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole, Co.Dublin.
__________________________________________
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please advise by return email and delete all copies of the message.
________________________________
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.
________________________________
________________________________
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.
________________________________
________________________________
*NOTICE: This e-mail message is for the sole use of the intended recipient(s) and may contain certain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by e-mail and delete all copies of the original message. - Copyright (c) 2009 Levittown Public Schools - All rights reserved.
| | | |
|
|