Blocking Roaming Profile Problem

I am working on a new Server 2012r2 system where roaming profiles need to be blocked/disabled.  I linked the same GP I have used for Server 2008r2 systems that sets the following at
Computer Configuration | Policies | Administrative Templates | System | User Profiles to help accomplish this:
Only allow local user profiles: Enabled
Prevent Roaming Profile changes from propagating to the server: Enabled
However, after applying this to the Server 2012r2 system, user roaming profiles continue to load and unload, i.e. neither of the settings above appear to be correctly taking effect.  I have confirmed that both of these settings
are applying according to gpresult, and I also confirmed that the corresponding registry keys were successfully created at
HKLM\SOFTWARE\Policies\Microsoft\Windows\System:
LocalProfile: 1 (dword)
ReadOnlyProfile: 1 (dword)
I have rebooted the server several times, and also enabled “Always wait for the network at startup” just in case, but roaming profiles continue to be enabled on this Server 2012r2 system.  I was also able to replicate this
on another Server 2012r2 system in our environment.
As a test, I removed the GP disabling roaming profiles and applied these settings locally using gpedit, but this produced the same behavior.
Questions:
Is there something different on Server 2012r2 that needs to be set to disable roaming profiles from loading and being saved?
Is anyone else seeing this in their environment? 
Have I overlooked anything?  Does anyone have any other ideas/suggestions?
Please let me know if I can provide any other information. 
Thanks!
-Aakash Shah

Hello Frank!  Thank you for your reply and for confirming that it works as expected in your environment.
I noticed the following behavior for 2 test users on this server, which helped me conclude that roaming profiles were not successfully disabled on the server:
Assuming a blank roaming profile (no Profile.V2 folder), upon login, a blank
Profile.V2 folder is created in the roaming profile path.  Upon logout, the local profile is saved/synced to the roaming profile path (the
Profile.V2 folder now has contents in it).
If there exists a roaming profile prior to first login, it is loaded on the server (for example, the taskbar icons appear from the roaming profile.
I am also able to delete the local profile on the server, and the above behavior can be reproduced.
Also, as a test, I also had attempted to set UseProfilePathExtensionVersion=1 at
HKLM\System\CurrentControlset\Services\ProfSvc\Parameters, and this produced a similar behavior as above, except that it created a Profile.V4 folder instead of Profile.V2 - but the local profile continued to
be written to the roaming profile path.
Please let me know if I can provide any other information.
Thanks.

Similar Messages

  • Roaming profile problem?

    I'm not sure it's a roaming profile problem or not, but I need help to fix it.
    we use MetaFrame citrix to connect a remote computer running a medical program. Every computer has Citrix online plug-in.
    If user uses computer user always use, everything will be fine.
    It will be failed login Citrix if user need to login to anther computer to load the medical program.  uninstall and re-install Citrix online plug-in will fix it.  There's lots computers and users, I can't fix it by this way, need to find
    out why.
    Windows 2008 R2 + windows 7 pro & 8.1 pro.
    Thanks for any suggestion,
    ITdragon

    seems no related to profile...
    you can recreate a user account to test.
    just a thoght...
    create a script to uninstall this application. set it as logon script via gpo. when all uninstall, reinstall it...
    Best,
    Howtodo

  • Adobe premiere elements and roaming profiles problem

    We bought Adobe premiere elements 12 for use in our school lab environment and after lots of struggle I now see that it doesn't support roaming profiles. Is there a fix for this or have we wasted lots of money.
    Is there a way to change the default save location during deployment?

    I know that it have to be installed on the c: drive. But my question is if there are any way to change the default save location during deployment. Because Premiere will be installed on c:\program files\adobe\ adobe premiere elements 12\ but the default scratch disks and project location will be automatically tried to save to their roaming profiles the first time and causing the problem.
    Remember this is in a lab environment and new users will log on all the time and therefore get the error messages failures.
    Again, my question is:
    Is there a way to change the default start location during DEPLOYMENT (we use Configuration manager 2012) so that it will always start on for example c:\localmedia instead of their documents or appdata folders which are inside their roaming profile.

  • 7310 - Problem with CIFS and Roaming Profiles since upgrade to 2010.Q1.0.2

    We have developed a strange problem with our environment which I'm pretty sure is down to the upgrade to 2010.Q1.0.2 from 2009.Q3.4.1 on our 7310 (all the previous 2009 releases had been fine) since nothing else has changed in our environment. I suspect some changes to the underlying CIFS server causing this?
    We have virtual Windows servers hosted on a VMWare VSphere cluster which are stored on the 7310 via iSCSI LUNs and also CIFS shares on the 7310 for home directories and separate CIFS shares for roaming profiles - all paths are correct in AD for each user - we also use folder redirection for XP Pro clients to force things like "Application Data", "My Documents" etc. onto the Homedir share.
    What we've been seeing recently (which only started happening after the upgrade) is a lot of failed logons to the domain for users. It looks like the usual corrupted profile problem that has plagued Windows forever ...the usual messages that it cannot log the user on with a copy of their roaming profile, and that it will use a temporary one. Some folder redirections (that are initiated via Group Policy) also don't get applied. Users don't see errors when logging off from a "good" profile, and NTUSER.DAT etc. seemingly gets written correctly - the next time they log on, around half the time the users will get these errors as described below:
    Event viewer logs show "cannot find the file specified" errors for NTUSER.DAT, along with "directory name is invalid" errors for some of the folder redirections.
    More worrying (and what I think might be the real reason for these failures) are the "offline caching is enabled on the roaming profile share" errors. I think that the client-side caching might not be working - possibly the profiles aren't getting flushed and written correctly upon logout?
    Now, unfortunately the MMC snap-in for managing shares doesn't seem to support changing the behaviour for client-side caching on the CIFS shares (as confirmed in the latest 7000-series Admin Guide on page 198).
    I've been thinking about unchecking the "Enable Oplocks" box which from the CIFS side would completely stop all client-side caching I presume?
    Is this likely to be the culprit here, or is there any other known behaviour that could be causing these errors? Is it also worth disabling "Cache device usage" altogether for the Profiles share itself?
    Can anyone help? It's a bit of a strange problem, and something I don't want to raise with Sun on our support contract just yet, since at first glance it looks like a Windows problem, but I suspect the storage could well be to blame...

    Unfortunately, this is still not working correctly...
    So, it looks like it's not related to the offline caching seeing as it all works on the Q2009 despite the warnings...
    Some more errors coming out of userenv.log on the affected Windows machines:
    USERENV(280.284) 10:07:33:230 ReconcileFile: GetFileAttributes on the source failed with error = 2
    USERENV(280.284) 10:07:33:230 CopyProfileDirectoryEx: ReconcileFile failed with error = 2
    and later:
    USERENV(280.284) 10:07:33:245 GetShareName: WNetGetConnection initially returned error 2250
    USERENV(280.284) 10:07:33:245 CopyProfileDirectoryEx: Leaving with a return value of 0
    USERENV(280.284) 10:07:33:245 RestoreUserProfile: CopyProfileDirectory failed. Issuing default profile
    ...which then forces the TEMP profiles.
    All other errors linked to this look like "file not found", "invalid path" etc. when the files are present and the paths are correct.
    Manually mapping drives using CIFS with UNC paths sporadically fails too now. We have a bunch of GPOs that map shares to users depending on their group memberships - these too are sporadically failing.
    It certainly looks to me like it could be a CIFS problem introduced in the Q2010 release.
    I'm going to raise a ticket with Sun...

  • Roaming profile login problem to the domain

    Hi all,
    Domain Environment, DC Server with Server OS of Microsoft Server 2008 R2 Standart SP1.
    Roaming profiles unable to login to the domain on couple of PC's. They just inserting the password, starting to wait to log in with "Welcome"
    on the screen, its thinking and looks like hes gona open the user's desktop but in this secong its just logging out back to the login screen.
    Thanks for your help.
    Best Regards,
    Vlad Dodin

    Hi Vlad Dodin,
    I want to get more information about this issue.
    Had you got any error messages during the login process?
    If no domain users can log into those PCs?
    If this is just a login problem in those PCs and there is no error Roaming profiles error during the login process, this article may be helpful for you:
    How To Fix Stopping, Freezing, and Reboot Issues During Windows Login:
    http://pcsupport.about.com/od/findbysymptom/ht/windows-freezes-reboots-during-login.htm
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information
    I hope this helps.

  • Problem sending mail with roaming profile (Outlook 2010)

    Hello all,
    I hope you will be able to help me.
    Here's the problem I have with Outlook 2010:
    When a user opens a roaming profile on another
    PC or on his new
    PC, everything works perfectly except
    Outlook.
    Outlook opens normally with all email
    accounts, you can even see the email, no worries
    about that.
    But when we want to send an email, it
    gets stuck in the outbox.
    Some additional info:
         - In the account settings,
    you can test the account settings, it says
    that everything is working (sending and receiving)
         - The only way I found today to
    operate the account is to
    completely remove and reconfigure
         - There is an error message
    that says I can not write on the file C:\Users\UserName\AppData\Roaming\Microsoft\Outlook\accountName.pst
         - The problem occurs with
    all users, not just one in particular
         - The accounts are IMAP
         - Incoming emails work
    Thank you for your help.

    Hi Tim,
    This is a known issue in Outlook, we don't recommend using IMAP account with roaming profile.
    For more information, you might want to read this similar thread:
    https://social.technet.microsoft.com/Forums/office/en-US/f9b1bf03-d468-46e8-b40d-76fac11fd66c/outlook-2010-creates-new-imap-pst-files-at-random-and-cannot-send-mail-roaming-profiles-and-imap?forum=outlook
    Regards,
    Ethan Hua
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.

  • Any news on the problem of large CHC files increasing size of roaming profiles?

    Any news on the problem of large CHC files increasing the size of roming profiles?  Thank you.

    I talked to the product manager.  Here's what he said.
    This was addressed in our last release.  CHC 4.0 changes the location of the locally stored documents so that they are longer included when users synchronize their roaming profiles.  The CHC will even move previous files to the new location when users upgrade.

  • Roaming Profiles - Office 2013, RAID 5 Failure oh and a Headache!

    Your RAID failed to rebuild so you have used the same drives and re-created the same type of RAID again? I would say start by fixing this first
    Delete the RAID, move to a RAID that if it degrades will not fail on rebuild. 
    RAID 10 would be your logical choice here as its blazingly fast and magnitudes safer to rebuild

    Hello People,Wondering if someone can give me some friendly advice. The roaming profiles which my users have are around 13MB, we also user Folder Redirection alongside. The only item which is Roaming is the AppData, now looking in the profile which is using the disk space, is folders which belong to Office 2013, Bibliography and Document Building Blocks. I have downloaded and installed the Office 2013 GPO templates, and I am finding it hard to redirect these files to their documents.What I want to achieve is, point them folders to. Documents which is the H drive, so let's say H:\Office Templates\BibliographyThe other problem I am having, is my RAID 5. After an incorrect shutdown because we lost power, my Server failed the re-syncing process, so what I did was backup the drive and I deleted all the HDD from the server which this RAID 5...
    This topic first appeared in the Spiceworks Community

  • How to set up roaming profile on Macs using AD like in windows

    I can bind the workstations to the domain fine.. But can someone direct me to instructions of how to set up the roaming profiles ?
    What steps do I need on the server ? This is what I've done so far.
    I already have OU's for the departments and the users have a shared folder inside their department folder.... \\server\shared_folder\user
    I have done the usual things with AD as far as the profile settings on the windows server.
    Am currently running Mac OS 10.5 and above
    My windows AD runs on windows server 2008
    All my windows workstation are able to use roaming profile without a problem.
    So far i have tried the so many avenues including..
    Make sure the Mac systems are joined to the domain controller and an ADS user can log on successfully. Use "Directory Utility" under "Utilities" menu to join the system to the domain.
    Backup all the contents from /Users to the storage or somewhere locally.
    Configure automount - Go to "Utilities" -> "Directory Utility" - Select the domain and click "Show advanced options" - Click "Mounts" tab and add automount as mentioned below. Remote NFS URL: nfs://server_name/share_name/path/to/profile/directory Mount location: /Users Additional mount parameters: -P,-T Apply the settings and this will mount the remote shared folder or we can name it as Roaming Profile Space - under /Users directory
    Enable roaming profile - Go to "Utilities" -> "Directory Utility" - Select the domain and click "Show advanced options" - Click "Services" -> Select "Active Directory" and click "Show advanced option" - Click "User experience" tab and select the option "Create mobile account at login".
    Reboot the system and log in as any ADS user. The Roaming shared folder will be mounted and the user profile will be created on the shared folder
    Can anyone kindly assist me

    Hi Guys, anyone with the Soln...or Tips..Am waiting

  • Windows Domain Controller on Windows Server 2012 R2: Hyper-V roaming profiles not loading due to slow connection

    I have racked my brain and done everything that I know to do for about two weeks now.  I am setting up a new system at our fire department and I am having the worst luck with getting the workstations to login to the domain controller with roaming
    profiles.  It keeps telling me that the roaming profile could not be loaded because of a slow connection.  These are workstations that are connected directly to the switch that the DC is connected to.  I have tried multiple connections regarding
    the layout (DC into the router, router into the switch).  The router is a Cisco RV220W.  I have two VLANS, one for public and one for private domain.  The Private VLAN has DHCP turned off since I am providing it through the DC.  I currently
    have a connection from the Private VLAN going to the unmanaged switch that the workstations and server are plugged into.
    The server is a Dell PowerEdge R420 that has 6 NIC ports (1 dual port and 1 quad port).  I have a virtual switch setup on Hyper-V for an external port (let's say Card 2 Port 3) that is assigned to the WS 2012R2 Domain Controller.  The DC can see
    the internet fine and the workstations can connect to the shared folders on the server.  I can retrieve files by just using the computer name or FQDN.  The DC is also running DNS and DHCP.  The DNS has the _msdcs setup from when I installed
    the active directory role.  I have attempted to assign static IP addresses to the workstations:
    IP:                     10.0.0.80
    Subnet:             255.255.255.0
    IPV4 Gateway:  10.0.0.1
    IPV4 DNS:        10.0.0.12
    I've attempted "append the specific DNS suffix", I've "registered the connection in DNS", I've used "use this connections suffix in DNS registration".
    The server is assigned:
    IP:                     10.0.0.12
    Subnet:             255.255.255.0
    IPV4 Gateway:  10.0.0.1
    IPV4 DNS:         10.0.0.12
    The DNS entries have forwarders that forward to my ISP DNS servers for lookup
    I've enabled and disabled DHCP, I've installed a new VM just to create another DC to make sure that I didn't goof up when I created it.
    I've lost my patience with this project and am sinking fast.  Can someone please offer some advice as to what I've done wrong?  I've created this exact scenario at work many times but, I've never done it with Windows Server 2012.  Is this
    possibly something to do with the Dell PowerEdge server (Generation 12) with the SR-IOV?  I am going to attempt to work on it some more tomorrow when I get over there.  I think there may be an issue with the SR-IOV not being enabled on the machine
    through the Dell Bios.  Would the SR-IOV really cause the workstations to report a slow connection?  When I login at the domain controller the roaming profiles and folder redirection work fine so, I know the GPO settings are correct.  I don't
    have "ignore slow connections" or any of those GPO's set.  I need to get it working the correct way so, I didn't want to fool the server when there is another underlying problem.  Any help that someone can offer, I am more than willing
    to listen.  If you need more information, please ask.
    Thanks,
    Jay

    So, I've managed to research this some more since Thursday and I've come to the conclusion that Hyper-V does a horrible job of supporting Qualcomm NIC cards. That's the only thing I can conclude as far as where the issue is originating. I've read many
    post and walkthroughs but nothing that has helped. The issue wasn't with any settings in the domain controller. The issue was that there really is a slow connection originating at the domain controller that is a VM and has network connectivity through the
    virtual switch from Hyper-V. So, next question is, how do I get the DC to have better connectivity through the NIC that Hyper-V won't give it? If hyper-v would allow passthrough, this would be so much simpler. VM-ware is looking really good at this point.
    Im disappointed in MS right now.

  • How do I use long path names ("\\?\UNC\...") with Server 2008 roaming profiles?

    Hey folks!
    I administrate a Windows Server 2008 R2 SP1 Domain with about 40 users on
    Windows 7 SP1 clients. Because the users often switch between the many PCs, I am using Roaming Profiles which tend to produce errors with different application-specific paths and files inside the users profiles.
    As one of many example, our standard mail application Thunderbird produces paths and files according to folders/subfolders and mails in a user's mailbox. Another one is Microsoft Office's Auto Recovery files which reside in a user's profile and can
    get very long.
    These paths and filenames often extend the allowed max. path of about 256 characters, when (on log on or off) the synchronization process between the client and the server takes place, leading to errors in the event log and a notification to the user about
    the conflict:
    "Event ID 1509 - Windows cannot copy file \\server\share\users\user123.v2\AppData\Roaming\looooong to location C:\Users\user123\AppData\Roaming\looooong. DETAIL - The filename or extension is too long."
    In the long run this leads to different file versions on different clients which - in the case of Thunderbird - leads to missing mails.
    After extensive searches and lectures of forums - including this - I haven't found a solution for this problem.
    So my question is if there's a way to use the extended max path with roaming profiles and if so how do I get it to work?
    I tried changing the profile path of a test user in the Active Directory user preferences from "\\server\share\profiles\test_user" to something like "\\?\UNC\server\share\profiles\test_user" without any changes in the system's behavior.
    Also I think that because this is such a fundamental problem somebody must have come up with a solution for it...
    Thanks in advance,
    Nico

    Hi,
    Thanks for your posting.
    The Event 1509 can happen if the destination path of the users profile is on a server with a long name and share folder name. For detail information, please refer to:
    User profile cannot be loaded with Event ID 1509, DETAIL - The filename or extension is too long
    http://blogs.technet.com/b/win7/archive/2011/02/15/user-profile-cannot-be-loaded-with-event-id-1509-detail-the-filename-or-extension-is-too-long.aspx
    User profile cannot be loaded with Event ID 1509, DETAIL - The filename or extension is too long
    http://support.microsoft.com/kb/2536571
    Hope this helps.
    Regards.
    Vivian Wang
    TechNet Community Support

  • How can we reset the SAP cache for users roaming profile in a d?

    Our active directory is on windows server 2003.
    SAP version 6.40
    users work from different workstations in our company with their roaming profile.
    printouts are defined by assigning a printer to the terminal (usually the closest terminal to theprinter)
    we have some users who have logined to windows, are unable to print to the assigned printer, because the name of the terminal is stuck on another terminal they worked on before.
    we think that the the cache in SAP does not update properly.
    Where is the SAP cache, is it in the server, or the workstation, or the user profile?
    Can anyone help?
    Robyn

    all configurations of the printers are correct.
    I will try and explain the problem differently:
    In general If a user logs on to SAP, we will see in tc al08 the username and terminal the user is working from. (The terminal is the full computer name e.g. WS-KITCHEN).
    When a user with the problem logs on to SAP, we will see in tc al08 the username and the name of a terminal he worked from in the past and not the work station he is at present. Therefore his printouts go to the printer that is allocated to the terminal that he worked on before and not the WS-KITCHEN he is working on now.
    Thanks
    Robyn

  • Issue with offline availability of roaming profiles in Server 2012

    I've recently stood up a Windows 2012 R2 server. I set up folder redirection using the guidelines
    here and roaming profiles using Group Policy. All is well except for the fact that if the client is physically disconnected from the network then the profile isn't available.
    I've set up folder redirection/roaming profiles on many different version of Windows Server and this is the first time I can remember that the files weren't available offline without further intervention from me. Is there some new setting or default on 2012
    R2 that I'm running afoul of?
    I note the following screen on the share properties but don't want to go at it until I know more
    Location of image in case of no display
    Sunt ludi et ioci dum aliquis oculo nocet.

    Shaon,
    No problem at all, I'm delighted that someone is answering at all! :-)
    The answers to your points/questions are as follows:
    1. The issue persists after a reboot
    2. All computers in the OU are experiencing this issue along with all users affected by these group policy items
    3. There is only one group policy applied here and in relation to the three items you've mentioned:
    Action on server disconnect [Not configured]
    Non-default server disconnect actions [Not configured]
    Do not automatically make redirected folders available offline [Not visible]
    All the relevant group policy objects (on the server) are at their default "Not configured" value. I've filtered by Windows 7 and Windows 8 as I have nothing below that. I've checked both locations viz.:
    Computer Configuration\Policies\Administrative Templates\Network\Offline Files
    User Configuration\Policies\Administrative Templates\Network\Offline Files
    The same is true for Local Computer Policy, all are set to "Not configured". In Explorer on the client under the Easy Access option all of the salient settings are greyed out.
    - Derek
    Sunt ludi et ioci dum aliquis oculo nocet.

  • Slow logon for roaming profiles on Server 2012 R2.

    Hey all,
    We have migrated Windows Server 2008 R2 to 2012 R2. After this, roaming profiles began to take 7-8 mins to 15-16 mins to logon to the 2012 R2 RDHS. Same roaming profiles have no problems logging on other RDS servers running Server 2008 R2.
    All updates are installed. All RDS related HotFixes have been applied. Server 2012 R2 only got RDSH role activated. It's a domain environment and AD role is on a physical DC. This is a mixed OS environment for clients.
    Local users have no problems logging on. Roaming profiles have no problems logging back in day after the first logon - The very first logon took a long time for them.
    Profiles stored on an SSD NAS device. The device doesn't support SMB3 protocol. Could this be why?
    Also when we check Event Viewer, we see "Event ID 5: Kernel-General :: {Registry Hive Recovered} Registry hive (file): '\........\NTUSER.DAT' was corrupted and it has been recovered. Some data might have been lost." But again,
    same profiles have no problem logging on Server 2008 R2.
    Looking forward to hearing your thoughts and advices.
    Thanks in advance.

    Hi Bruce,
    >>After this, roaming profiles began to take 7-8 mins to 15-16 mins to logon to the 2012 R2 RDHS.
    Before going further, I want to further confirm if this happens when the users log onto the server first time or all the time.  Besides, does this happen to all domain users logging onto the server?
    >>"Event ID 5: Kernel-General :: {Registry Hive Recovered} Registry hive (file): '\........\NTUSER.DAT' was corrupted and it has been recovered. Some data might have been lost."
    For this event, we can refer to the solution provided by Justin in the following thread to tackle the issue.
    Registry Hive Corrupted - Event ID 5: Kernel-General
    http://answers.microsoft.com/en-us/windows/forum/windows_7-system/registry-hive-corrupted-event-id-5-kernel-general/275d080b-4d29-4eed-887d-bee55725c602?page=1
    Best regards,
    Frank Shen

  • NAC and AD, Machine GPOs, Roaming Profiles = Chaos

    I've just observed a hapless Cisco consultant try to make NAC 4.1 work on computers with machine GPOs, roaming profiles, logon scripts within user GPOs, and for that matter legacy logon scripts with "run logon scripts synchronously" enabled. All of these technologies seem to fail on a NAC-enforced connection.
    We assign software on machine GPOs and we use roaming user profiles, and it seems we either need to have a domain controller and profile share on the isolation VLAN, which defeats the purpose of NAC, or perform some kind of machine authentication, which can occur before GPO processing and net logons can happen.
    While I'm not the Cisco consultant, it wasn't hard to recognize this problem.
    Everything I've read about NAC and CAA suggests this is a per-user compliance solution and not a per-machine solution. Surely others have observed this, and I think this is what machine authentication (802.1x) NAC, as opposed to user authentication NAC, is all about. At the risk of sounding like a total n00b, where can I start researching a NAC solution that supports what I want and lets us use the Cisco NAC gear we've already invested in?

    I have had similar issues and have solved many with a custom script that runs at log on. It is a compiled script and works great, AutoIT3.
    The policy part takes care of itself if you leave machines logged in long enough or do a gpupdate /force. This will force the group policy to synchronize but you will need to log off and on again.
    The roaming profile is much tougher. I am still trying to get this working. If anyone has any info on EXACTLY what takes place on a roaming profile synchronization, I would be grateful. If I can I will replicate that process in my script and solve this issue also.
    I have fixed the log in script stuff with a delayscript that I use (ironically) clean access to install. You have to launch it with the users credentials, though and not from Clean Access which uses the SYSTEM users credentials in its stub agent!
    This is a known issue to Cisco but any prodding of them to get it working would help. Their solution is braindead, just give unremediated machines full access! If they fail remediation, kick them off then. Gee, that gives the unremediated machine a mere two to three minutes to attack your AD DCs on each log in attempt. Not good.
    Anyway, that's where I am at. Most of this can be dealt with, some is still problematical.
    Dan S.

Maybe you are looking for