DirectAccess and Roaming Profiles

I've just implemented a proof of concept 2012 R2 DA server in an Edge config.
All was looking great until I started to log off and on - the times were horrendous. I assumed it was roaming profiles and Google proved me correct, right at the very, very bottom on this 2008 R2 DirectAccess MS article https://technet.microsoft.com/en-us/library/ee382285%28WS.10%29.aspx?f=255&MSPPError=-2147217396
is the bomb-shell that you basically have to use Folder Redirection.
This just won't work in our environment as you can only redirect a very specific subset of folders with Folder Redirection and the bulk of our users' data is not in any of these. For example we have a lot users with a OneDrive For Business folder in their profile
and that can be huge. We also run some applications that store data in user profiles.
Are there any options with DA on Server 2012 R2 that can help with this predicament or do I give up before now before even pushing out to some test users?

Hi,
>>I'm going to give UE-V a go and see if it's any better.
For questions about User Experience Virtualization, we can post the question on the forum below:
https://social.technet.microsoft.com/Forums/en-US/home?forum=mdopuev
Hope this helps.
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

7310 - Problem with CIFS and Roaming Profiles since upgrade to 2010.Q1.0.2

We have developed a strange problem with our environment which I'm pretty sure is down to the upgrade to 2010.Q1.0.2 from 2009.Q3.4.1 on our 7310 (all the previous 2009 releases had been fine) since nothing else has changed in our environment. I suspect some changes to the underlying CIFS server causing this?
We have virtual Windows servers hosted on a VMWare VSphere cluster which are stored on the 7310 via iSCSI LUNs and also CIFS shares on the 7310 for home directories and separate CIFS shares for roaming profiles - all paths are correct in AD for each user - we also use folder redirection for XP Pro clients to force things like "Application Data", "My Documents" etc. onto the Homedir share.
What we've been seeing recently (which only started happening after the upgrade) is a lot of failed logons to the domain for users. It looks like the usual corrupted profile problem that has plagued Windows forever ...the usual messages that it cannot log the user on with a copy of their roaming profile, and that it will use a temporary one. Some folder redirections (that are initiated via Group Policy) also don't get applied. Users don't see errors when logging off from a "good" profile, and NTUSER.DAT etc. seemingly gets written correctly - the next time they log on, around half the time the users will get these errors as described below:
Event viewer logs show "cannot find the file specified" errors for NTUSER.DAT, along with "directory name is invalid" errors for some of the folder redirections.
More worrying (and what I think might be the real reason for these failures) are the "offline caching is enabled on the roaming profile share" errors. I think that the client-side caching might not be working - possibly the profiles aren't getting flushed and written correctly upon logout?
Now, unfortunately the MMC snap-in for managing shares doesn't seem to support changing the behaviour for client-side caching on the CIFS shares (as confirmed in the latest 7000-series Admin Guide on page 198).
I've been thinking about unchecking the "Enable Oplocks" box which from the CIFS side would completely stop all client-side caching I presume?
Is this likely to be the culprit here, or is there any other known behaviour that could be causing these errors? Is it also worth disabling "Cache device usage" altogether for the Profiles share itself?
Can anyone help? It's a bit of a strange problem, and something I don't want to raise with Sun on our support contract just yet, since at first glance it looks like a Windows problem, but I suspect the storage could well be to blame...

Unfortunately, this is still not working correctly...
So, it looks like it's not related to the offline caching seeing as it all works on the Q2009 despite the warnings...
Some more errors coming out of userenv.log on the affected Windows machines:
USERENV(280.284) 10:07:33:230 ReconcileFile: GetFileAttributes on the source failed with error = 2
USERENV(280.284) 10:07:33:230 CopyProfileDirectoryEx: ReconcileFile failed with error = 2
and later:
USERENV(280.284) 10:07:33:245 GetShareName: WNetGetConnection initially returned error 2250
USERENV(280.284) 10:07:33:245 CopyProfileDirectoryEx: Leaving with a return value of 0
USERENV(280.284) 10:07:33:245 RestoreUserProfile: CopyProfileDirectory failed. Issuing default profile
...which then forces the TEMP profiles.
All other errors linked to this look like "file not found", "invalid path" etc. when the files are present and the paths are correct.
Manually mapping drives using CIFS with UNC paths sporadically fails too now. We have a bunch of GPOs that map shares to users depending on their group memberships - these too are sporadically failing.
It certainly looks to me like it could be a CIFS problem introduced in the Q2010 release.
I'm going to raise a ticket with Sun...

Local and Roaming profiles not being created

Hello all,
I'm in need of help and I wondered if there was anyone out there with some suggestions.
The problem is that one of our sites has Netware 5 and Zfd3.2 and there are no longer any roaming profiles or local profiles being created. Volatile user is not used. Roaming profiles go to the users home directory. All file rights are fine. DLU is still working. Novell client on W2K workstations is 4.90. All other sites appear to be OK.
I suspected that the user policy was at fault and so created a test user package and associated a test user to it = same result.
I have checked from top to bottom and compared all settings to other sites and can see no difference or anything unusual. I've been working on this for 2 days now and I'm going grey and bald.
Any suggestions anyone?
I'll buy a pint for anyone with the answer - LOL.
Thanks in advance
Alan Graham
email: [email protected]

elvisgraham,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Best solution for data availability for end users --- reverse redirected folder and roaming profile

Roaming profiles and redirected folders do not seem to work for our environment. They often become troublesome and cause much help desk time and resources.
Is there a way to have a roaming profile and redirected folder configuration however have the local workstation have the primary copy and have the "server side" version be a backup?
This would seem to allow the user to have a constantly updated local copy and also have a backed up version on the enterprise server side available.

Hi,
I'm afraid there is no such function for saving the main copy on local side.
However if the sync of your roaming profile or folder redirection is not working well, it will still affect the result even if the function is available.
Also roaming profile is for "using same profile on different client computers", if the primary copy is on client it will not affect the purpose.
And for folder redirection it supports Offline Files so client should have a local copy when sync is not work.
If you have any feedback on our support, please send to [email protected]

Internet Explorer 10 cookies and roaming profiles (WebCache directory)

Hi,
I'm having a cookie problem on 2 out of 2 tested environments using Windows Server 2008 R2 (with roaming profiles) and Internet Explorer 10 (IEAK'ed) :S
For instance when I login to www.google.com with my username and password, as long as I'm using my Windows session I'm logged in to
www.google.com every time I open the browser (with all iexplore.exe processes closed before). When I logoff my Windows session my (roaming) profile is beeing saved on the fileserver and the locally cached Windows profile
is beeing deleted.
When I logon to Windows again (on the same computer) the roaming profile is beeing copied from the fileserver to my client (including the .txt cookies), but
www.google.com isn't logging me in automatically. The same thing happens with other cookies related stuff on websites :S
Also tried WITH and WITHOUT folder redirection for AppData/Cookies/etc, even a newly installed environment with Microsoft defaults is giving me problems.
Anybody out there having the same problem ?

Okay, I've made some progress on this today and it's working so far. It's still unclear what the following article/IE hotfix actually does:
http://support.microsoft.com/kb/2955387/en-gb
Because it's certainly doesn't magically fix getting cookies to fully roam - the webcache is still in the same folder. However, I think what it fixes is the problems reported above whereby any other stuff one want's to do with webcache fails
because the files are locked most of the time.
So with this hotfix in place, I was able to implement the following PowerShell logon script:
$SourcePath = "$LocalAppData\Microsoft\Windows\WebCache"
$LinkExists = $False
If (Test-Path $SourcePath) {
$Attributes = (Get-Item -Path $SourcePath -Force).Attributes
$LinkExists = [Bool]($Attributes -band [IO.FileAttributes]::ReparsePoint)
If (!$LinkExists) {
If ($Debugging) {Write-Host "Debug: deleting old webcache folder"}
Remove-Item -Path $SourcePath -Recurse -Force -ErrorAction SilentlyContinue
$TargetPath = "$RoamingAppData\Microsoft\Windows\WebCache"
If (!(Test-Path $TargetPath)) {
If ($Debugging) {Write-Host "Debug: creating new webcache folder"}
[void](New-Item -Path $TargetPath -ItemType Directory)
If (!$LinkExists) {
Write-Host "Configuring IE webcache to roam"
$Cmd = "cmd /c 'mklink /d " + $SourcePath + " " + $TargetPath + "'"
Invoke-Expression $Cmd 2> $Null
$LocalAppData and $RoamingAppData are variables that point to here:
C:\Users\myusername\AppData\Local
C:\Users\myusername\AppData\Roaming
What the script basically does is this set-up a symbolic link that links:
"C:\Users\myusername\AppData\Local\Microsoft\Windows\WebCache"
To:
"C:\Users\myusername\AppData\Roaming\Microsoft\Windows\WebCache"
When one logs off, WebCache roams to the network. When one logs on, it roams back and so far, cookies appear to be sticking. We use Spiceworks and before one had to type username & password each time. In my test, the logon details are persisted.

Adobe premiere elements and roaming profiles problem

We bought Adobe premiere elements 12 for use in our school lab environment and after lots of struggle I now see that it doesn't support roaming profiles. Is there a fix for this or have we wasted lots of money.
Is there a way to change the default save location during deployment?

I know that it have to be installed on the c: drive. But my question is if there are any way to change the default save location during deployment. Because Premiere will be installed on c:\program files\adobe\ adobe premiere elements 12\ but the default scratch disks and project location will be automatically tried to save to their roaming profiles the first time and causing the problem.
Remember this is in a lab environment and new users will log on all the time and therefore get the error messages failures.
Again, my question is:
Is there a way to change the default start location during DEPLOYMENT (we use Configuration manager 2012) so that it will always start on for example c:\localmedia instead of their documents or appdata folders which are inside their roaming profile.

Outlook 2010 - IMAP and Roaming Profiles

Hello,
If we setup a roaming profile user with an IMAP account in Outlook 2010 everything works on the machine the account was created on. If the user logs off and uses another machine they get the following message when trying to send an email:
"Task '*Email Address* - Sending' reported error (0x8004010F) : 'Outlook data file cannot be accessed.'
They are able to receive email without an issue.
I've seen other people report the same problem but with no fix reported. I wonder if anyone had made any progress on this.
Thanks,
Andrew

I have come up with a temporary solution. I say temporary because it involves redirecting the pst files to a network share, which is not recommended by MS. That said, our users have not had any issues with their personal/archive
pst files being on a network share as long as the PC they are working is local to the network share, i.e. in the same building on the same local network.
We have several users that share systems, some physical, some virtual, set up with roaming profiles. We ran into the situation described above when one of the users needed to access a gmail account via Outlook 2010. Along with roaming profiles,
the users are in a GPO which enforces folder redirection, so the server share was already set up..
\\ServerName\GPO_Redirect\%username%
I added the Outlook2010 ADM (outlk14.adm) to the GPO, and enabled... "User Configuration/Administrative Templates/Microsoft Outlook 2010/Miscellaneous/PST Settings/Default location for PST files" ...and set the value to \\ServerName\GPO_Redirect\%username%\OutlookPSTRedirect
I had to remove the existing IMAP account from Outlook and readd it. Doing so created the "OutlookPSTRedirect" folder automatically under the user's network share and the [email protected] file was created there. Everything seems to be working fine
after multiple logoffs and logons to different systems. No (2), (3), (4), etc. file versions are being created, messages do not get stuck in the outbox, folder view settings are remembered, etc., etc.
Apparently you can also set the "ForcePSTPath" registry value manually, but I have not tested that.

Local and roaming profiles in Samba

The logon path setting in my smb.conf is enabled and it works fine, but I do not want to use roaming profiles for all users.
So, and according to the documentation I have read, I use the pdbedit command to set the profile path for an specific user.
Theoretically, the command "pdbedit -u <username> -p=" should set the profile path to a null string, but and error saying that the value is invalid is shown.
How can I use both kind of profiles in my server?
Thanks in advance.

elvisgraham,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Flash player 10 and roaming profile

Hi,
Some of my clients are having similar issues since they've upgraded from flash player version 9 to version 10. They all use roaming profile, i.e user documents and settings are stored on the server rather than individual machines.
The problem is that when they log in my application their login is successful but they don't get past that stage. This is because upon login, the application tries to write into a shared object but I believe it fails to do so.
If they revert back to Flash player 9, it's all fine. Client with no roaming profile don't experience this issue.
Therefore I believe there are some changes in Flash player 10 security. What should I do ?
Thanks

Hi !
I knew somebody from Adobe would finally reply
Well, I've actually come across this bug report this afternoon ! And I've asked my client to try the suggested workarounds. That was his reply :
' These work arounds are no good I’m afraid. These work arounds mean we have to mess around with file redirection which we don’t want to do. The reason these work arounds do work is that there is a Desktop folder in the local profile. When you re-direct the Desktop the local Desktop gets moved to the network. If we then re-create a local Desktop folder we break folder re-direction and there is potential for the user to have the wrong desktop displayed, or have files stored locally on their PC not being backed up. '
As you can see he's not so keen to change any network settings.
Do you have any other suggestions ?
Thanks

Acrobat 9.1 and Roaming Profile -- Windows Vista

Hello,
my Problem is, that Acrobat crash, when i started. (Runtime Error)
We yuse Roaming Profile. Any a solution ?
Thanks

Roaming profiles are not yet supported in Reader/Acrobat 8 or even 9.

Tiger Login Freezing, Local and Roaming Profiles

I'm having problems with the login screen. Both server and emac are using the newest 10.4.4 updates and users regardless of logging in to local accounts or accounts on the server are freezing after pressing the "Login" button on the login screen.
generally speaking the user can login at least once per restart. the problem tends to occur if users logout and then attempt to login another user.
wondering if anyone has seen this problem
it only seems to happen with emacs (different gens) running 10.4
imacs and other machines running the same system/image to not appear to suffer the problem.

update:
even updating to 10.4.6 which has become available since the problem first came about there have been no less instances of this happening.
any help would be great.

Issue with offline availability of roaming profiles in Server 2012

I've recently stood up a Windows 2012 R2 server. I set up folder redirection using the guidelines
here and roaming profiles using Group Policy. All is well except for the fact that if the client is physically disconnected from the network then the profile isn't available.
I've set up folder redirection/roaming profiles on many different version of Windows Server and this is the first time I can remember that the files weren't available offline without further intervention from me. Is there some new setting or default on 2012
R2 that I'm running afoul of?
I note the following screen on the share properties but don't want to go at it until I know more
Location of image in case of no display
Sunt ludi et ioci dum aliquis oculo nocet.

Shaon,
No problem at all, I'm delighted that someone is answering at all! :-)
The answers to your points/questions are as follows:
1. The issue persists after a reboot
2. All computers in the OU are experiencing this issue along with all users affected by these group policy items
3. There is only one group policy applied here and in relation to the three items you've mentioned:
Action on server disconnect [Not configured]
Non-default server disconnect actions [Not configured]
Do not automatically make redirected folders available offline [Not visible]
All the relevant group policy objects (on the server) are at their default "Not configured" value. I've filtered by Windows 7 and Windows 8 as I have nothing below that. I've checked both locations viz.:
Computer Configuration\Policies\Administrative Templates\Network\Offline Files
User Configuration\Policies\Administrative Templates\Network\Offline Files
The same is true for Local Computer Policy, all are set to "Not configured". In Explorer on the client under the Easy Access option all of the salient settings are greyed out.
- Derek
Sunt ludi et ioci dum aliquis oculo nocet.

Roaming Profile are not stored completely

Hello NG
In our environment we work with NWClient 2 SP1 IR9, ZCM11 SP1a and Roaming
profile is activated by a ZCM policy.
Now we have the problem, that when a user logout from the workstation, the
roaming profile is not stored completely to the home profile. Strange is,
that the ntuser.dat has an updated times
The homedirectory where the roaming profiles should be stored is a NSS
volume.
On the workstation evenviewer i saw following interesting information.
Event ID 1509
Source \\?\C:\Users\MichelB\Favorites\Links
Target \\?\UNC\SERVER2$NOCSC$\HOMEL\USERS/MichelB\Windows NT 6.1 Workstation
Profile.V2\Favorites\Links
Error The system can not found the path
Source \\?\C:\Users\MichelB\Favorites
Target \\?\UNC\SERVER2$NOCSC$\HOMEL\USERS/MichelB\Windows NT 6.1 Workstation
Profile.V2\Favorites
Error The system can not found the path
etc. this happens for all folders in the profile path.
Then event ID 1534 is diplayed that says there was too many copy errors.....
And at last the Event ID 1504 that says that the roaming profile couldn't be
updated completely
I suppose that here the Novell Client has problems to write to the NSS
volume
Somebody can help me to solve this issue?

Originally Posted by breezer
-keeping the thread alive-
We have been doing extensive testing here and have found (win7) that the local user & profile created by zcm is not properly removed after a user logs out.
We have found up to 40 student user accounts in the LRC machines when doing a net user and the equivalent c:\user\<username>, there are also <username>-<machinename>.001/2/3 directories as well.
I use volatile accounts, [setting] using existing account or not doesn't make any difference.
I can demonstrate that clearing down local profiles (net user <username> /delete and rd c:\users\<username>) allows the user to log in again without any issues, but usually they can do this only once or twice before the profile blows out.
Our students are very mobile and a typical day will be 9.00-10.00 lessons, 10.00-10.30 LRC, 10.30-12.30 lessons (different class room) ........
This was identified in September when the students returned from break and we have had the issues for nearly 4 months.
Our machines are built via zen imaging, the client and agent are then installed with the appropriate enabling software for the machine (zoomtext/jaws/dragon/read&write).
Can anybody give me any pointers on this as my tech support and novell (via a SR) have not yet been able to pin point the problem and provide a fix.
Breezer
Try Knowlegebase 7940698, that might lead you the right way?

Bug: For a migrated roaming profile from V2 to V3 browser history may not work ...

Solution: Do a new profile ...
or
use the bug fix from Win8 and previous:
https://social.technet.microsoft.com/Forums/ie/en-US/6418ae13-63c7-44a1-9e97-0ad875a2bd7a/browsing-history-not-being-recorded?forum=ieitprocurrentver#d16f8580-0d2a-40f7-8197-86d232bbaa74
Try this ....
Problem:
C:\users\%username%\appdata\local\Microsoft\Windows\history is lacking the +S (system attribute)
Test:
> Desktop > File Explorer > \users\appdata\local\Microsoft > Shift+Right Click on Windows Folder > Open new command prompt > attrib History
The result you get back in the command window should read something like this (Note the "S" to left):
S I C:\Users\%username%\AppData\Local\Microsoft\Windows\History
Fix:
> \users\appdata\local\Microsoft > Shift+Right Click on Windows Folder > Open new command prompt > attrib +S History
... and History comes back in IE:
> Desktop > IE to confirm.
Reason:
A Bug in Windows (or Windows 8 ... seen this issue posted quite a few times for Windows 8.
I'm actually able to recreate the issue persistently with domain accounts and roaming profiles on a second login on any Windows 8 system. The issue is there after the local profile has been ("re")created on that system. I don't why it happens
... but it happens every time for domain account.

Thank you for your answer.
The entry in that registry key remains indeed there. Is it safe to just remove that registry key when the user is no longer logged into that specific server?
The KB that you have send me is with the following explanation:
Notes
This issue occurs when the Windows Search service is enabled.
When this issue occurs, the registry subkey that represents the stale user profile is deleted. This subkey appears in the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
But we do not have the Windows Search service installed nor is it enabled in the services list? But the subkey does remain in the registry.
With kind regards,
Thijs

Roaming profile not working anymore

hi
im definitely shure, in a earlier version of ZCM 10.0, the Roaming Profile to the Home directory did work and so, i never checked this since then.
now i updated to 10.3.1 and roaming profile does not work anymore. the local profile gets not copied to the Home-Directory on the server, it doesnt depends, if i have the "Edir Home" set or the real path to the directory.....
where can i start to search for this problem ? i was so shortly to go "productiv".......but no, there is again a delay after 6 Months waiting and testing....:-(
it's so sad ! Zenworks is not that quality product it was.....
Sascha

hi craig
sorry, about not enough informations.....
- no, all clients are only in the E-Dir
- Clients are Windows XP SP2 with Novell Client 4.9 SP2, but tested also higher ones...
- Home-directory is on a Netware 6.5 SP8
- ZCM Server is SLES 10 SP3 without OES
thanks
Sascha
>>> craig wilson<[email protected]> 27.08.2010 17:36 >>>
Are your devices a member of a Windows Domain?
What Client OS?
What type of Server do the Home Directories reside?
On 8/27/2010 11:17 AM, Sascha Oetiker wrote:
> hi
> im definitely shure, in a earlier version of ZCM 10.0, the Roaming
> Profile to the Home directory did work and so, i never checked this
> since then.
> now i updated to 10.3.1 and roaming profile does not work anymore. the
> local profile gets not copied to the Home-Directory on the server, it
> doesnt depends, if i have the "Edir Home" set or the real path to the
> directory.....
> where can i start to search for this problem ? i was so shortly to go
> "productiv".......but no, there is again a delay after 6 Months waiting
> and testing....:-(
> it's so sad ! Zenworks is not that quality product it was.....
> Sascha
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

DirectAccess and Roaming Profiles

Similar Messages

Maybe you are looking for