AD User object - cannot change Terminal Server Profile Path

Hello
When I try to change the "Profile Path:" on the "Remote Desktop Services Profile" Tab on a Users AD Properties, I receive a Error Message:
"Operation failed: The operation completed successfully."
After closing and reopen the users properties, the old path is shown as Profile Path...
The problemes seems to be on only 1 user account.
Any Ideas how i can fix this error?
Thanks very much for any help
pAscii

Hi,
Could you tell us how many user have these question?
Did you change the path to remote domain?
Is there any other error information?
Does the user have permission to access the new location?
More detailed information about this setting is appropriate.
Best Regards,
Erin

Similar Messages

Terminal Server profiles path between Server 2008

My existing Citrix farm has published desktops on Server 2008 x86 SP1, and the new farm I'm building is based on Server 2008 R2 x64. I can't get the x64 servers to use the same path as the x86 servers, despite having the same GPO's.
Both have the same GPO linked: under Computer Configuration/Policies/Administrative Templates/Windows Components/Remote Desktop Session Host/Profiles, the path is set to \\server\share\%username%.
When a user who doesn't have a profile logs in to a Server 2008 x86 server, after they log out their profile is uploaded to the share as \\server\share\username.V2. When a user logs into Server 2008 R2, it doesn't pull their username.V2 profile and instead
creates a new one as \\server\share\username\username.domain.V2.
Please help me get the x64 R2 servers to use the existing TS profiles.

Hi,
Thank you for posting in Windows Server Forum.
Set up RD Session Host roaming profile path
Roaming profiles should be configured separately for each RD session farm. They should not be shared between farms or user’s physical desktops since profile corruption and data loss may occur if a user is simultaneously logged into two machines that load the
same user profile.
Configure the following Group Policy on the RD Session Host:
Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Profiles ->
Set path for Remote Desktop Services Roaming Profiles
Kindly go through beneath article for information.
User Profiles on Windows Server 2008 R2 Remote Desktop Services
http://blogs.msdn.com/b/rds/archive/2009/06/02/user-profiles-on-windows-server-2008-r2-remote-desktop-services.aspx
Hope it helps!
Thanks.
Dharmesh Solanki

OIM: Terminal Services Profile Path

Hi,
I am using OIM and AD with the OOTB AD connector.
I have made a pre-populate adapter that generates a Terminal Services Profile Path for a user. I would like the path to be added to users when they are created.
I have added an entry in the the AD User Form, pre-populate tab. Field name: Terminal Profile Path. Adapter: My generate Terminal Services Profile Path adapter.
Unfortunately, the Terminal Profile Path field is not pre-populated in the process form.
I have also tried to add a process task triggered by the create user task, and made my adapter a Process Task Adapter. This did not work either.
Just to test it, since there is no column for Terminal Services in the usr table, I created a Terminal Services Profile Path UDF. When I fill in the path in the UDF manually, the Terminal Profile Path field is not pre-populated in the process form.
I have made pre-populate adapters for other UDFs and had no troubles with that. Does anyone know if there is something special about this Terminal Services Profile Path field?
Thanks!!

Thanks Rajiv,
When I use a process task, the task is invoked, and I get:
Status: Rejected
Response: 62: Unknown response received.
But I thought I didn't really need to use a process task, and that it would be sufficient with a pre-populate adapter mapped to the right field. But it seems like I'm not using the field in the correct way...?
Thanks!

Getting Terminal Service Profile Path

We are provisioining users to the Active Directory. However, using Xpress/Java, how can the AD's Terminal Services Profile Path can be retrieved by IDM. Basically, i would like to retrieve this information before the the account is deprovisioned.
Edited by: user6420881 on 3/10/2010 23:45

I dont see much hope with Java/Xpress to set the Terminal Services group of attributes.
There is no LDAP attribute named 'Terminal Services Profile Path' which is the problem. All these Terminal Services "attributes" are bundled up as a set of User Parameters. I think MS had to do this for historical reasons with NT4.
Unless the AD Gateway service has support for Terminal Services builtin (check the documentation) the only way I can see to set these is by Using Powershell or some MS script based solution called as an After Update or After create action. But that's setting only IDM -> AD.
Reading these strings back to IDM is hard.. maybe a Powershell script can decode the TS blob and store the strings in CustomAttributes ???
I know this TS stuff is a pain.

Business Object problem with terminal server

Post Author: Yaron
CA Forum: Authentication
Hello, I have a problem running Business Object ( version 5.1.8 at the moment, we might change to XI soon ) on windows 2003 terminal server (citrix) and we have problems from every station without full administrative rights. Giving full access to either the folder or the entire HDD did not help.Difference is the Business Object starts by calling his COM object rather then the normal exe for authentication issues and i think it might be a part of the problem.Thanks in advanace and apologies if I posted in the wrong place.

Hello,
Thanks.
Pinging from client is successful.
And the repository is not accessible from the client side.
We install the client tool in other computer and we still can't connect.
We got message : "Cant access repository"
I'll appreciate your help. Thanks.
Regards,
Eco

Terminal Server Profiles - Not Deleting(No Roaming Profiles)

I am currently not using roaming profiles. I have two Terminal Servers(both 2008R2) and 1 database server. Terminal server A houses the profiles and pulls user settings, desktop etc. In using the broker service, even if I log into to Terminal server B, I
get the profile that was setup on Terminal Server A or in other words, upon logging in the DELETED PROFILE is still being pulled.
So Indeed...
Upon deleting user1 from Terminal Server A and where the profiles are housed, it deletes just fine.
But..
Upon logging back into Terminal Server A or Terminal Server B I get the old profile. Obviously there is a caching problem somewhere.
Can anyone help please?

Assuming you are not running some other profile management product there are a few places a user profile comes from.
If they do not have a roaming profile set, their profile is copied from the hidden directory c:\Users\DEFAULT\
It can be copied from a roaming profile or it can be a mandatory profile.
I would be more inclined to think that on server B, the profile is roaming.
To check do a GPresult on the server or check the setting for the user in the registry. Run Regedit, navigate to
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\SID\
With SiD = Security Identifyer of the user. You can click ProfileList and Select find to search for the userID and locate the correct SID or you can examine the ProfileImagePath key to find it.
Once you have located the correct SID, look for CentralProfile key under the SID. If you don't find it or it matches the ProfileImagePath, then you are not roaming. If it is something else the profile is roaming.
If that doesn't work, download process monitor -> http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx to the server.
Run it as an administrator. Click filter at the top and select filter...
CLick the drop down that says architecture and select User, then in the box after is enter the username as domain\username. You can also clcik the down arrow and select the user if they are logged on.
Have the user logon, delete all the profiles and have them login and you should be able to see what is going on. Once the user is logged on click the magnify glass icon on the toolbar to stop the trace and llok for the section where the profile is being
copied.
You can click Edit and then select find to search for "C:\Users\whatevertheuseridis"

AD user object ntSecurityDescriptor changed

We have a single user object that was created with the same values under ntSecurityDescriptor as all other user objects in the same OU. Yesterday the user had
issues, no email, unable to access shared drives, unable to print etc. When we investigated we found over half of the settings under ntSecurityDescriptor
had been lost. There is nothing in the event logs/audit to show what, if anything, was done to his account.
I ran Get-ADUser
-Filter
-Properties ntSecurityDescriptor
|
select
-ExpandProperty
ntSecurityDescriptor
and found many inconsistencies despite user accounts being created to a standard format, apart from domain admins/IT
staff.
Is there a default set of values for ntSecurityDescriptor? If so, what is it?
Also, does anyone have any idea how a user object can suddenly lose some of these settings?

ntSecurityDescriptor == The Security Tab. This attribute holds the security defined on the object aka the ACL (Access Control List) and a set of ACEs (Access Control Entries) - Those can either be defined explicit on the object or inherited from parent objects
in the tree. Each objectClass (type) get a set of default ACEs from there schema definition - those are stored in defaultNtSecurityDescriptor.
ntSecurityDescriptor is changed when the security is changed on the object, or any other object above the particular object in the tree. Is the particular user a member of any built in group such as Domain Admins, Server Operators, Accounts Operators, Backup
Operators or Print Operators - If yes - AdminSDHolder is might what causing what you're experiencing:
http://technet.microsoft.com/sv-se/magazine/2009.09.sdadminholder(en-us).aspx
However changes to ntSecurityDescriptor / ACL would not result in the issues you describe such as the particular user who had it's ntSecurityDescriptor changed loosing access to resources.
Enfo Zipper
Christoffer Andersson – Principal Advisor
http://blogs.chrisse.se - Directory Services Blog

Users not showing in Terminal Server Under Remote desktop services manager and Task Manager

Hi All,
I have a problem here in Terminal Server. I can not see the users logged in to Server but i know users are accessing the files and currently working.
1. From the Task Manager-- Show processes from all users displayed all the processes accessing by users.
2. From the Task Manager-- From Users Tab--No users list at all
3. From the Command Prompt- Query users-- No information
4. From the Remote desktop services Manager-- used with IP/Host name-- Still can not see the users list and processes. So i can not kill the session if needed.
Enviroment:
TS CALS 20 currently accessing 15 users
VM-WARE GUEST: 2008 RS Terminal Services/Remote Desktop services installed
Windows up to date-- Just updated last month
Problem is here for long time. Just couldn't find the time to trouble shoot.
UMESH DEUJA MCP,MCTS,MCSA,CCNA

Hi,
Thank you for posting in Windows Server Forum.
As you have tried many steps, I suggest you to try below command line and power shell command if successful in your case. Please try below command with Admin access:
qwinsta /server:<servername>
To kill a session use rwinsta to delete the session specifying the ID number:
rwinsta /server:computer01 3
Here's the list of command line tools for Remote Desktop Or, you can use PowerShell:
Get-RDUserSession and Disconnect-RDUser
Please check the list of Power Shell command from
this link.
Hope it helps!
Thanks,
Dharmesh

How to track the User who has changed the System Profile Options

HI ,
The system profile options are changed by one User (Ex: XX123).
Here, the user XX123, he is not having any sys admin responsibilities .
He is having only I-proc responsibility attached .
Is there any chance to update the system profile options , through I-proc.

Pl post details of OS, database and EBS versions, along with which profile options have been changed.
AFAIK, IProc responsibilities do not have access to change profile options.
HTH
Srini

GG user objects (schema) on separate server?

Dear community!
Is it possible to store checkpoint tables and other GGS_* tables (if created for DDL replication) on server other than the source/target for extract/replicat processes?
We are integrating with other department's system and do not want to create any objects (other than GG user with appropriate priveleges) and to store any data on their instance.
Increased latency is not so important. Replication setups are Oracle (10gR2/11gR2) -> Oracle 11gR2 and MS SQL -> Oracle 11gR2.
Thanks in advance.

To avoid creating checkpoint table on the target db, you need to disable it with NODBCHECKPOINT.
For DDL replication, you can't avoid creating those tables on the source.
For MySQL, no ddl replication support yet.

"Profile Missing" on startup, cannot initiate terminal level "Profile Manager"

I have downloaded Firefox from the internet today (10/7/2011), presumably Ver 7, but I cannot identify the version because it won't open. When I open it, I get a message, "Profile Missing: You firefox profile cannot be loaded. It may be missing or inaccessible." This was an upgrade from a prior version that worked, so I decided to use AppDelete to remove all traces of Firefox from the machine and to a reinstall using this latest software.
I have deleted the application using AppDelete, and reinstalled a fresh current download, I have rebooted the MacMini, all to no avail. The message continues. When I go to the FAQ section on this website, it advises that I use terminal to start the profile manager. When I do this, I get the same message. which I see when I try to start the program.
Please Advise

Do you have the Firefox icon on your quick launch? Right click
on it, and select '''Open New Window.''' Sometimes this works.
If it opens, close it by '''Menu > File > Exit.'''
This is not a cure but will make it easier if Firefox locks up in Windows.
'''https://support.mozilla.org/questions/997866''' {web link}
Separate Issue;
Your System Details shows;
Installed Plug-ins
Shockwave Flash 16.0 r0
Shockwave Flash 11.8 r800
Having more than one version of a program may cause issues.
Grab the uninstaller from here:
'''[http://helpx.adobe.com/flash-player/kb/uninstall-flash-player-windows.html Uninstall Flash Player | Windows]'''
'''[http://helpx.adobe.com/flash-player/kb/uninstall-flash-player-mac-os.html Uninstall Flash Player | Mac]'''
Then reinstall the latest version.
Flash Player '''Version 16.0.0.305<br>https://www.adobe.com/products/flashplayer/distribution3.html'''
Shockwave Director '''Version 12.1.7.157 http://get.adobe.com/shockwave/'''

Cannot change from server core 2012 to gui

I have tried EVERYTHING (and I mean everything), but I cannot update from a server core 2012 to gui. I get the source error everytime. I have manually downloaded patches, and updated the source, but did not work. The server is connected to the internet.
Really wishing I could just switch to RedHat for this server, but unfortunately the acronis management server doesn't run on redhat (at least with redhat you pay for support, not just the privilege to use their shitty software, so when you have problems you
can contact them). Every article or blogs says the samething, but it does not work.

And the first thing to check for is to ensure that you installed Windows Server 2012 and not Hyper-V Server 2012. Windows Server you can update. Hyper-V Server you cannot.
What are the first few lines of output from systeminfo?
. : | : . : | : . tim

Administrative Users / Rights cannot change why?

cannot modify administrative user account in SCCM 2012 R2
security roles for a user cannot be added or removed. It looks like this first pic and the second pick is what it is supposed to look like. The third pick is on properties security roles. Thought about just removing the user from
SCCM and letting it re-populate through AD?

Are you able to modify any of the other SCCM administrative user accounts? Trying to determine if you have "rights" to do so. What SCCM role\s are assigned to the administrative user\group you below to?
--Tony

Can't copy past to desktop on Terminal server user profile

Hi,I have a problem that I've seen posted in the forums but can not find a solution. I am using windows 2008 r2 Terminal servers to log user on to the environment. My users can't create/Copy/save files/shortcuts to the desktop. My Terminal
server profile path is filled out correctly and each user has full access to respective profile folder.
Any help would be very much appreciated.
Thank you.

Hi,
Thank you for posting in Windows Server Forum.
Which client RDP version using for your environment?
Please make sure that you not enabled “Do not allow clipboard redirection” in GPO setting under below mention path.
Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
User Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
More information.
Make Local Devices and Resources Available in a Remote Session
http://technet.microsoft.com/en-us/library/cc770631.aspx
Also see that you have enable clipboard redirection. On client side please check following setting:
1. On Windows client machine, type mstsc.exe and press Enter.
2. Click the Options button, click Local Resources tab and make sure that the
Clipboard check box has been selected.
Hope it helps!
Thanks.
Dharmesh Solanki

How to change path of Users Terminal Services Profile for multiple AD users on server 2003?

Hello experts. I am working on a file server migration. All data has been migrated, I am currently working on redirecting users to the new file server. I
am able to select multiple users at once in ADUC -> right-click -> properties -> profile and here I can change the home folder and roaming profile path for each all users to point towards the new file server.
The issue I have run in to is that we have roaming profiles for terminal services users. So, there are hundreds of users that have their terminal services profile
configured in AD -> Right-click user (one at a time) -> properties -> terminal services profile. Here, the profile path is configured for each user as \\OLDserver\Profiles\%username%
and I need to change it to \\NEWserver\profiles\%username%.
I know that you can configure this path via group policy, I set up a GPO; Computer / Administrative Templates / Windows Components / Terminal Services / “Set Path
for TS Roaming Profiles” as \\NEWserver\profiles and applied this GPO to an OU containing the TS servers.
The problem is, the GPO is not working... When I log in to the TS and add a document to My Documents, it is still saving under \\OLDserver\profiles\Username.
So, the settings in AD are trumping the GPO I believe. What is the best way to accomplish my goal? Thanks in advance!

> to change it to \\NEWserver\profiles\%username%.
That is "profile" in opposite to...
> add a document to My Documents, it is still saving under
> \\OLDserver\profiles\Username.
...this one which is Folder Redirection and has NOTHING to do with
server based profiles.
> So, the settings in AD are trumping the GPO I believe.
No, it isn't. When you do not enable FR and you access "Documents", you
will never see an UNC path but the local c:\users\xyz\documents folder.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

AD User object - cannot change Terminal Server Profile Path

Similar Messages

Maybe you are looking for