LUM, integrated login, roaming profile

Re-reading many message threads in this and other forums, I'm
confused. For SLED, LUM creates users accounts on-the-fly after eDir
login (like DLU on ZEN on Windows), the Novell client reads login
scripts and maps drives (like on Windows) but integration with LUM is
less than transparent, and there may or may not be plans to support
roaming profies, without which settings and user document folders are
stuck on each machine the account was created on, making it very
difficult to support without mass confusion.
I run a college network. If we are to have a chance to make people
interested in an alternative to Windows, all those functions must be
transparent to users (as it is with the Windows client and ZEN) --
they authenticate to the directory, their local account is created,
they get their network resources, and their roaming profile settings
and locations are as expected. They logout, their info is safe on the
network, their account is deleted. They go to the next class in a
different lab and repeat. This happens thousands of times per day in
30 different labs with students of wildly different capabilities and
expectations. But it just works.
This has been the Novell experience since the beginning (16 years for
us). It is still valid. Anything less than this makes SLED an
unworkable alternative. I'm looking for a way to make it workable. By
summer we'll have 1200 XP/SLED dual boot machines in labs and offices.
To make SLED a viable alternative we need those other features.
Otherwise, it's just a toy for the curious. Unfortunate.
So, here are my end of year questions:
Which of these fundamental functions are working with which others?
Which ones are in the SP beta plans?
Which ones are not being planned?
What is the process for helping the planners understand the needs of
the users out here?
Thanks.
Lyle

Mark,
Thanks for the comments. I actually don't care if it doesn't implement
the same way as Windows. I agree, that is not a good model. Copying
the profile is dumb. If the plan is to simply mount the home, that's
by far the best way.
I suspect that what we are working with is a terminology problem. If,
we define "roaming profile" to mean that the user sees what they
expect to see regardless of what machine they login to, that is all
that matters. The need to copy the profile on Windows causes all kinds
of problems and is a poor solution.
So, let me re-state what I feel our needs are: 1) the user, not having
a local account, authenticates to the linux workstation using eDir, 2)
gets all the network resources per network scripts and policies, 3)
their home "profile" looks like it should, with all settings in tact,
4) they logout and no residue is left on the workstation.
However that is accomplished, I don't care and I'm not wedded to any
Windows terminology or processes. Hope this helps.
Lyle
On Wed, 27 Dec 2006 22:37:41 GMT, Mark Robinson
<[email protected]> wrote:
>On Tue, 26 Dec 2006 19:55:27 +0000, luzuml wrote:
>
>> Re-reading many message threads in this and other forums, I'm confused.
>> For SLED, LUM creates users accounts on-the-fly after eDir login (like DLU
>> on ZEN on Windows), the Novell client reads login scripts and maps drives
>> (like on Windows) but integration with LUM is less than transparent, and
>> there may or may not be plans to support roaming profies, without which
>> settings and user document folders are stuck on each machine the account
>> was created on, making it very difficult to support without mass
>> confusion.
>>
>> I run a college network. If we are to have a chance to make people
>> interested in an alternative to Windows, all those functions must be
>> transparent to users (as it is with the Windows client and ZEN) -- they
>> authenticate to the directory, their local account is created, they get
>> their network resources, and their roaming profile settings and locations
>> are as expected. They logout, their info is safe on the network, their
>> account is deleted. They go to the next class in a different lab and
>> repeat. This happens thousands of times per day in 30 different labs with
>> students of wildly different capabilities and expectations. But it just
>> works.
>>
>> This has been the Novell experience since the beginning (16 years for us).
>> It is still valid. Anything less than this makes SLED an unworkable
>> alternative. I'm looking for a way to make it workable. By summer we'll
>> have 1200 XP/SLED dual boot machines in labs and offices. To make SLED a
>> viable alternative we need those other features. Otherwise, it's just a
>> toy for the curious. Unfortunate.
>>
>> So, here are my end of year questions:
>>
>> Which of these fundamental functions are working with which others?
>>
>> Which ones are in the SP beta plans?
>>
>> Which ones are not being planned?
>>
>> What is the process for helping the planners understand the needs of the
>> users out here?
>
>Ok, there is a beta for NCL that will start in Jan. Please sign up at
>beta.novell.com if you are interested.
>
>At the moment, I have no idea what will and won't be in there! So why the
>reply?
>
>Well, things work kinda different under Linux. The idea of copying a
>roaming profile is very alien. In fact a roaming profile is just such a
>bad idea(tm) that it should never have been let loose in the first place
>IMHO :-)
>With Unix/Linux /home is a filesystem that can easily be exported from a
>server, and mounted on all workstations. That way the users' home
>directories are always available, but never need to be copied anywhere.
>Now, this doesn't fit well with OES Linux right now, but I am hoping to
>work with Novell on the OES 2 beta to try to get some of this stuff sorted!
>
>If you are serious about implementing Linux you need to get to know what
>some of the major differences are, and not just try to do the same thing
>again :-)
>
>I hope this doesn't sound like I'm ranting at you, it's not meant to, I
>just get a little narked when people see really **** stuff (like roaming
>profiles) and want it implemented when there's already a much better
>solution...

Similar Messages

  • Roaming profile login problem to the domain

    Hi all,
    Domain Environment, DC Server with Server OS of Microsoft Server 2008 R2 Standart SP1.
    Roaming profiles unable to login to the domain on couple of PC's. They just inserting the password, starting to wait to log in with "Welcome"
    on the screen, its thinking and looks like hes gona open the user's desktop but in this secong its just logging out back to the login screen.
    Thanks for your help.
    Best Regards,
    Vlad Dodin

    Hi Vlad Dodin,
    I want to get more information about this issue.
    Had you got any error messages during the login process?
    If no domain users can log into those PCs?
    If this is just a login problem in those PCs and there is no error Roaming profiles error during the login process, this article may be helpful for you:
    How To Fix Stopping, Freezing, and Reboot Issues During Windows Login:
    http://pcsupport.about.com/od/findbysymptom/ht/windows-freezes-reboots-during-login.htm
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information
    I hope this helps.

  • Alternatives to using Zenworks for Roaming Profiles

    Novell support tells me I should be using a dedicated Server for Zenworks
    This would be a real over kill!
    So, are there any alternatives to using Zenworks for Roaming profiles?
    Googeling I see SAMBA can support Roaming Profiles
    Samba is installed & I created Samba users via SBE Admin but when I select
    Samba Administration - seems to be no details ie. users, workgroup name etc?
    Is Novell Samba differently?
    Is it possible setup Roaming Profiles with Novell Samba?

    I'm gonna attempt this with a couple of scripts - (one added to login script
    & the other at shutdown)
    to copy Desktop & Favorites - already told users they will be shot if the
    they put files in my docs!
    (It would be nice to do Desktop Colour / Image etc so the user feels at home
    but...)
    "W_ Prindl" <[email protected]> wrote in message
    news:[email protected]...
    > Although I use OWS SBE I never use the integrated Simba tools, etc. I
    > install everything using the standard non SBE methods. So I don't know
    > if you installed SLES Samba or OES ( = Novell) Samba. Of course Novell
    > Samba is different from plain Samba as it provides integrated
    > Edirectory logon and - if using NSS volumes - transparent consistent
    > file access rights.
    >
    > For Novell Samba your users have to be LUM enabled.
    >
    > But roaming profiles should work regardless of the Samba server in use.
    > But of course - if you do not have a common configuration source such
    > as a domain or Zenworks - you will have to configure your roaming ( =
    > server-stored) profiles locally at each PC for each user individually.
    > Should be possible in a 10 users/10 PCs environment - but that are 100
    > configuration entries just for this feature.
    >
    > BTW I have Zenworks and Groupwise running on the same server in a small
    > setup similar to yours.
    >
    > Only negative thing with Zenworks Configuration Management is, that it
    > is a real resource hog at the client side. Recent dual core or quad
    > core processor PCs have no problem, but older dual cores and single
    > cores come really to a halt with the Zenworks Agent.
    > --
    > W. Prindl
    >
    >
    > Chris wrote:
    >
    >>Novell support tells me I should be using a dedicated Server for
    >>Zenworks This would be a real over kill!
    >>
    >>So, are there any alternatives to using Zenworks for Roaming profiles?
    >>
    >>Googeling I see SAMBA can support Roaming Profiles
    >>
    >>Samba is installed & I created Samba users via SBE Admin but when I
    >>select Samba Administration - seems to be no details ie. users,
    >>workgroup name etc?
    >>
    >>Is Novell Samba differently?
    >>
    >>Is it possible setup Roaming Profiles with Novell Samba?

  • Novell Client integrated login fails on reboot.

    I have LUM, NCL and CASA enabled and everything works just fine. I can log
    in as a user, save the profile, log in and out and get integrated login.
    The problem is that if i reboot SLED and try the same user that worked 30
    times in a row before it complains about "ncl_autologin[716]: Tree "" not
    found in miCASA." and fails to do the integrated login. If i look at the
    profile in the client everything looks just fine and i can login without
    errors if i supply the password again.
    In the Casa store i can see the tree and the password.
    I have SLP setup on the OES server and slptool on the SLED box connects to
    the OES server and works properly. All three buttons on the linux client
    works and finds trees, contexts and servers. I have reproduced the error on
    three different hardwares with different media for the install.
    Have anyone else reproduced this error? I have followed the documentation
    to the letter but integrated login still just fails after every reboot i make.
    Any ideas no matter how longshot is much appriciated, i just have to get
    this working.

    On Fri, 17 Nov 2006 16:16:33 +0000, linuxjoe wrote:
    > [email protected] wrote:
    >
    >> That is, CASA can store information both on
    >> disk and in memory
    >
    > In your home directory you have a series of .miCASA files. Each file should
    > have a regular miCASA... file and then one that ends with the extension .IV
    I have those and they contain the correct information when i look in the
    CASA manager GUI.
    >
    > Basically one is for persistance and one isn't. If only one is getting
    > created then you will loose your setting on reboot. I have seen this on
    > my own system and it is basically caused by deleting the .miCASA.. files
    > and then not restarting casa before you start to store secrets again. If
    > this is the case then you can delete you .miCASA files (you will loose
    > your secrets by doing this) and then logout and back in. You should then
    > see that two of each file is created. One regular one and one with a .IV
    > extension.
    >
    > If this is not your issue and you have both types for each .miCASA file
    > then I don't know what the issue is.
    I have a group of users i try with and it looks the same on all of them
    regardless of what i do. CASA stores the info and when i reboot it looses
    something that i cant really see. I have three computers with SLED on now
    and they all look exactly the same when i look in CASA and compares the
    info on a rebooted and a non rebooted computer.
    I will do a trace on the .miCASA files and see if i can spot any
    differences between a rebooted and a non rebooted computer on monday.
    One question, does it work for you after a reboot?

  • How to set up roaming profile on Macs using AD like in windows

    I can bind the workstations to the domain fine.. But can someone direct me to instructions of how to set up the roaming profiles ?
    What steps do I need on the server ? This is what I've done so far.
    I already have OU's for the departments and the users have a shared folder inside their department folder.... \\server\shared_folder\user
    I have done the usual things with AD as far as the profile settings on the windows server.
    Am currently running Mac OS 10.5 and above
    My windows AD runs on windows server 2008
    All my windows workstation are able to use roaming profile without a problem.
    So far i have tried the so many avenues including..
    Make sure the Mac systems are joined to the domain controller and an ADS user can log on successfully. Use "Directory Utility" under "Utilities" menu to join the system to the domain.
    Backup all the contents from /Users to the storage or somewhere locally.
    Configure automount - Go to "Utilities" -> "Directory Utility" - Select the domain and click "Show advanced options" - Click "Mounts" tab and add automount as mentioned below. Remote NFS URL: nfs://server_name/share_name/path/to/profile/directory Mount location: /Users Additional mount parameters: -P,-T Apply the settings and this will mount the remote shared folder or we can name it as Roaming Profile Space - under /Users directory
    Enable roaming profile - Go to "Utilities" -> "Directory Utility" - Select the domain and click "Show advanced options" - Click "Services" -> Select "Active Directory" and click "Show advanced option" - Click "User experience" tab and select the option "Create mobile account at login".
    Reboot the system and log in as any ADS user. The Roaming shared folder will be mounted and the user profile will be created on the shared folder
    Can anyone kindly assist me

    Hi Guys, anyone with the Soln...or Tips..Am waiting

  • Windows Domain Controller on Windows Server 2012 R2: Hyper-V roaming profiles not loading due to slow connection

    I have racked my brain and done everything that I know to do for about two weeks now.  I am setting up a new system at our fire department and I am having the worst luck with getting the workstations to login to the domain controller with roaming
    profiles.  It keeps telling me that the roaming profile could not be loaded because of a slow connection.  These are workstations that are connected directly to the switch that the DC is connected to.  I have tried multiple connections regarding
    the layout (DC into the router, router into the switch).  The router is a Cisco RV220W.  I have two VLANS, one for public and one for private domain.  The Private VLAN has DHCP turned off since I am providing it through the DC.  I currently
    have a connection from the Private VLAN going to the unmanaged switch that the workstations and server are plugged into.
    The server is a Dell PowerEdge R420 that has 6 NIC ports (1 dual port and 1 quad port).  I have a virtual switch setup on Hyper-V for an external port (let's say Card 2 Port 3) that is assigned to the WS 2012R2 Domain Controller.  The DC can see
    the internet fine and the workstations can connect to the shared folders on the server.  I can retrieve files by just using the computer name or FQDN.  The DC is also running DNS and DHCP.  The DNS has the _msdcs setup from when I installed
    the active directory role.  I have attempted to assign static IP addresses to the workstations:
    IP:                     10.0.0.80
    Subnet:             255.255.255.0
    IPV4 Gateway:  10.0.0.1
    IPV4 DNS:        10.0.0.12
    I've attempted "append the specific DNS suffix", I've "registered the connection in DNS", I've used "use this connections suffix in DNS registration".
    The server is assigned:
    IP:                     10.0.0.12
    Subnet:             255.255.255.0
    IPV4 Gateway:  10.0.0.1
    IPV4 DNS:         10.0.0.12
    The DNS entries have forwarders that forward to my ISP DNS servers for lookup
    I've enabled and disabled DHCP, I've installed a new VM just to create another DC to make sure that I didn't goof up when I created it.
    I've lost my patience with this project and am sinking fast.  Can someone please offer some advice as to what I've done wrong?  I've created this exact scenario at work many times but, I've never done it with Windows Server 2012.  Is this
    possibly something to do with the Dell PowerEdge server (Generation 12) with the SR-IOV?  I am going to attempt to work on it some more tomorrow when I get over there.  I think there may be an issue with the SR-IOV not being enabled on the machine
    through the Dell Bios.  Would the SR-IOV really cause the workstations to report a slow connection?  When I login at the domain controller the roaming profiles and folder redirection work fine so, I know the GPO settings are correct.  I don't
    have "ignore slow connections" or any of those GPO's set.  I need to get it working the correct way so, I didn't want to fool the server when there is another underlying problem.  Any help that someone can offer, I am more than willing
    to listen.  If you need more information, please ask.
    Thanks,
    Jay

    So, I've managed to research this some more since Thursday and I've come to the conclusion that Hyper-V does a horrible job of supporting Qualcomm NIC cards. That's the only thing I can conclude as far as where the issue is originating. I've read many
    post and walkthroughs but nothing that has helped. The issue wasn't with any settings in the domain controller. The issue was that there really is a slow connection originating at the domain controller that is a VM and has network connectivity through the
    virtual switch from Hyper-V. So, next question is, how do I get the DC to have better connectivity through the NIC that Hyper-V won't give it? If hyper-v would allow passthrough, this would be so much simpler. VM-ware is looking really good at this point.
    Im disappointed in MS right now.

  • AppV 5 slow to refresh with roaming profile (no redirects) but fast with local profile

    Hi,
    I have an issue I can't get thought out. I have an AppV5 SP3 full infra, with SMB share and local caching of packages enabled. Everything works from a functional level. However I have an issue where users with a roaming profile get a very slow AppV refresh
    during login.
    I created a few testaccounts, a few with local profile and a few with roaming profiles. For these testusers there are NO folder redirects. The only difference between them is local profile or roaming profile.
    When I login with a local-profile user initially, the AppV client rather slowly refreshes the applications and shortcuts. It generates quite some CPU load on the RDS host, but as soon as the shortcuts are placed everything is fine. When I log that user off,
    and log in again, the shortcuts are there immediately and I can immediately start the applications (Office 2010 for example). Blazing fast. Also when logging in, the refresh-UI is there for about half a second, it really flashes and it's done.
    Then with a testuser with roaming profile, the initial refresh is about the same. But when I logoff that user and login again, it's all very slow. The shortcuts are there but blank initially, it takes about 5-10 seconds to get the correct icon. It takes
    much longer before the refresh actually starts (sometimes up to 30 seconds after login), and it takes 5-10 seconds to do the refresh, with 100% cpu load on the thread AppVclient.exe is running on. Also right after loging in when the shortcuts are blank they
    don't work until they get the proper icon. WHen everything is refreshed it works all fine though. It's just painfully slow at start.
    I don't understand this. I can reproduce this every single time. Without folder redirects I don't see the difference between roaming and local profile from AppV perspective, as the roaming profile is of course copied to the server and in that sense the server
    just works with a local copy anyway.
    Anyone encountered this, and how to troubleshoot, or better fix this?

    So is the fact that there is a 5-10 second delay during refresh actually an issue? What I mean by that is - are any users comparing the local profiles with roaming profiles experience, or complaining that the delay is there?
    Roaming profiles and Folder redirection are of course very simple to configure; however for the best user experience I recommend managing profiles with a real profile management solution.
    If you have MDOP, then you'll also have access to UE-V. You've mentioned your environment is RDS, which sadly doesn't get UE-V, even though you have App-V.
    Here are some resources on UE-V + App-V and what's required when managing App-V with roaming users:
    How To Use Microsoft User Experience Virtualization With App-V Applications
    Application Publishing and Client Interaction: Roaming registry and data
    Here's also some resources on App-V performance worth looking at:
    Performance Guidance for Application Virtualization 5.0
    App-V Performance Best Practices: New Project VRC White Paper
    Please remember to click "Mark as Answer" or "Vote as Helpful" on the post that answers your question (or click "Unmark as Answer" if a marked post does not actually
    answer your question). This can be beneficial to other community members reading the thread.
    This forum post is my own opinion and does not necessarily reflect the opinion or view of my employer, Microsoft, its employees, or other MVPs.
    Twitter:
    @stealthpuppy | Blog:
    stealthpuppy.com |
    The Definitive Guide to Delivering Microsoft Office with App-V

  • How can we reset the SAP cache for users roaming profile in a d?

    Our active directory is on windows server 2003.
    SAP version 6.40
    users work from different workstations in our company with their roaming profile.
    printouts are defined by assigning a printer to the terminal (usually the closest terminal to theprinter)
    we have some users who have logined to windows, are unable to print to the assigned printer, because the name of the terminal is stuck on another terminal they worked on before.
    we think that the the cache in SAP does not update properly.
    Where is the SAP cache, is it in the server, or the workstation, or the user profile?
    Can anyone help?
    Robyn

    all configurations of the printers are correct.
    I will try and explain the problem differently:
    In general If a user logs on to SAP, we will see in tc al08 the username and terminal the user is working from. (The terminal is the full computer name e.g. WS-KITCHEN).
    When a user with the problem logs on to SAP, we will see in tc al08 the username and the name of a terminal he worked from in the past and not the work station he is at present. Therefore his printouts go to the printer that is allocated to the terminal that he worked on before and not the WS-KITCHEN he is working on now.
    Thanks
    Robyn

  • App-v 5.0 sp3 Publish application icons/ shourtcut missed on 2nd time logon on terminal server 2012 r2 with roaming profile with folder redirection

    1. I updated app-v 5.0 sp3 environment on 2012 R2. Roaming profile users with folder redirection logon fine at first time applications icons available but at 2nd logon applicaitons icons are missed while packages are available. we are using existing
    roaming profiles with folder redirection which are running in current environment through APP-V 4.6 2008 R2. Please suggest work around to resolve this issue.
    2. TS Nodes of 2008 R2 with App-v 4.6 running fine on Microsoft 2012 private cloud but we are facing performance issue (stuck, slow logon, slow performance etc) when we are moving in new 2012 R2 private cloud. SAP, SCSM and other sevices are running
    fine, please provide solution.
    Thanks

    1.) What are you doing with the App-V Icon path? e.g. %LOCALAPPDATA%\Microsoft\AppV\Client\Integration\<GUID>\Root\AppVClientUX.exe.0.ico ?
    I guess you could workaround it with deploying the icons to a central location and then pointing to the icon out on a central share. Or put the icons in a machine location...I haven't had this issue but that's just off the top of my head.
    2.) I have not used App-V 4.6 in an environment like yours BUT would pre-caching the applications be possible? Any chance you'll be moving those apps into App-V 5.0 soon?
    PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog:
    rorymon.com Twitter: @Rorymon

  • Roaming Profile issues

    Hi all,
    Since we migrated the infrastructure of our client to Win 8.1 and Server 2012 we are experiencing issues with roaming profiles. Before they had Win 7 and SBS Server 2003. The users have different problems:
    RemoteApps are not working anymore (error 0x80070003), means we need to delete the contents of "HKEY_CURRENT_USER\Software\Microsoft\workspaces\Feeds\" and "%USERPROFILE%\AppData\Roaming\Microsoft\Workspaces\"
    The computer does not download the profile from the server so that the most recent local profile will be loaded. Events: "User Profiles General - 1509" and "User Profile Service - 1540" (I don't have the English error message available).
    When this happens once, it never will work again even after days. Only deleting the local profile and re-login will solve the issue 
    And then there is the next problem! After deletion of the local profile and  re-login with the users profile, the profile will be downloaded from the server. But there are always two things missing:
    %USERPROFILE%\AppData\Local\Microsoft\Windows\WinX: No right-click-menu on the start button available
    %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\[Default-Icons]: There are no standard programs available in the start menu, such as explorer, IE, Calc, etc because of the missing shortcuts. When I checked the server I saw that the shortcuts
    disappeared some days ago (previous versions)
    So my questions here are
    Why isn't the WinX folder being created? The local Default profile does contain it.
    Where are the start menu shortcuts gone? I don't think it's caused by the user because it already happened 4 or 5 times. 
    This applies to migrated users but also to newly created users in the WIn8 environment and on different machines. I hope anyone had similar issues and was able to solve it..?
    Thanks a lot

    Hi,
    Would you please check the post from Rainer Meier and
    Sean Maisonneuvein this thread? Hope this can also help you:
    http://social.technet.microsoft.com/Forums/windows/en-US/161692bf-fa57-4ac1-b9b8-4e550ad9c987/windows-key-x-does-not-work-in-windows-8
    Kate Li
    TechNet Community Support

  • Roaming Profiles not working when Lenovo Hotkey Client Loader is running on Win 8.1 laptops

    This issue seems to be Windows 8.1 related.  Specifically it is affecting all our X1 Carbon, and T440S laptops running Windows 8.1, but NOT 430S running Windows 7. Basically roaming profiles were creating the proper folder on the file server but the folders were empty.  Through trial and error, I narrowed it down to the "Lenovo Hotkey Client Loader" as listed in msconfig or Program Files\Lenovo\HotKey\TPHKLoad.exe.  Once that service was disabled, the roaming profiles would copy over properly.  I am running the latest and greatest version of "Hotkey Features Integration for Windows 8.1" Ver 5.25.0000.  Wondering if anyone else is seeing this?  Wondering how significant TPHKLoad.exe is? And wondering if we'll see an update to the Features pack to correct this?  Hopefully this post can help some others who are looking at empty roaming profile folders.

    Hi all,
    A
    After few months, problem occurred again and i could not install the windows from the scratch over and over again.
    I started searching problem online and eventually i found the FIX.
    Looks like Registry Entries are getting screwed up somehow.
    My "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProvider" was looking exactly as below:
    ", schannel.dll"
    And i made it as below:
    "msapsspc.dll,
    schannel.dll, digest.dll, msnsspc.dll, credssp.dll"
    The solution for the other person in the link ( cannot share link since site does not allow me to ) as a source was only missing "credssp.dll" whereas i was missing everything except "schannel.dll". Strange...
    ============================
    Adding credssp.dll to the list of SecurityProviders in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders
    fixed it for me. 
    My full registry entry now reads "msapsspc.dll,
    schannel.dll, digest.dll, msnsspc.dll, credssp.dll"
    ============================

  • File Associations in 2012 R2 RDS Server using Roaming Profiles

    Background Information
    We recently moved from using 2008 R2 RDS servers to 2012 R2 RDS Servers. All of our users
    have roaming profiles. When we migrated from the old terminal servers to the
    new terminal servers, the users got completely new profiles. The only thing
    moved from their old profiles were documents and items on their desktops. We
    have multiple PDF viewers/editors installed on our RDS servers. Mostly due to
    the cost difference between Adobe Acrobat and other, cheaper products that a
    lot of our users can get away with using that don't need the functionality of
    Adobe Acrobat.
    The Problem
    Ever since moving to the new 2012 R2 RDS servers, whenever our users log off terminal
    server, the next time they log in their default PDF Viewer association doesn't
    load, and they have to go through the process of choosing a default PDF viewer.
    This only occurs when there's more than one PDF viewer installed on the server.
    We've tested it with only one PDF viewer program, and the setting remains after
    logging off and back on. The problem we've found is that the registry key that
    houses the default user choice:
    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice
    when set during the session, to Adobe Acrobat 11 for example, reads as such
    inside that registry key. For example, the Progid key will say
    Acrobat.Document.11 and this setting will persist until the user logs off. Upon
    logging off and back on to the terminal servers, if you look at that same
    Progid key, it has been converted in to a Hash value, and the Operating System
    is unable to read the hashed value and determine what that user's default PDF
    Viewer choice is, causing them to have to go through the process of setting it
    again.
    Things we've tried
    We created a GPO that runs a script that exports the registry key upon log off that has
    the non-hashed value, and have it set to import that value on log on. However,
    by default this registry key has the DENY WRITE permission applied to it, so
    when the system tries to import the registry key through the login script it is
    unable to do so. 
    Summary
    This issue only started happening once we moved over to 2012 R2 RDS servers. It only
    occurs for users using Roaming Profiles. It only occurs when we have multiple
    PDF Viewers installed on the servers. Any insight on why this is happening or
    how to resolve it would be greatly appreciated.

    I would use GPP to push the value, 'not hashed'. You can give right to the registry too, so like adding everyone group to that registry branch. (https://technet.microsoft.com/en-ca/library/cc753092.aspx)
    Regards, Philippe
    Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
    Answer an interesting question ? Create a
    wiki article about it!

  • Acrobat 9.1 update - Roaming Profiles still crashes

    Roaming Profiles crash Acrobat 9 9.1
    Got the official. "Known Problem. Wait until the next update"
    Sad news for those that have struggled.
    The solution that works for me is a login script to create the folder "C\users\%username%\appdata\LocalLow"
    You can quickly test it first by logging in as a roaming user, enable show hidden folders and just simply make the directory LocalLow inside your appdata folder. Dont log off, just launch Acrobat and if youre lucky..
    Specificaly for me:
    makedir C\users\%username%\appdata\LocalLow
    pasted into notepad saved as startup.bat and added through a group policy object.
    We use 2008 server and Vista SP1 workstation under mandatory roaming profiles.
    Its a Microsoft problem, apparently:
    http://support.microsoft.com/kb/955555/en-us
    Interesting to note that Microsoft includes an XPS Document Printer with Vista.
    PROPS to Ge3oR THANKS BRO!!
    dgrambo

    I guess I am not the only one when it comes to crashed after update to Acrobat 9.1.0.
    Major bug so far that i see is I cannot copy simple text from any PDF file after the update. It immediately crashed Acrobat with this:
    AppName: acrobat.exe     AppVer: 9.1.0.163     ModName: saveasrtf.api
    ModVer: 9.1.0.163     Offset: 0000237a
    I first noticed it when I tried to copy something from inside Firefox - my browser would just close and ask me to restart...
    Repair didn't do any good, just a waste of about 30 minutes of my time. I had to fully uninstall and reinstall 9.0 to figure out what went wrong.
    Everything works fine in 9.0 - Nothing works fine in 9.1. Strangely there were no problems in Reader 9.1...
    People stay away from upgrading to 9.1!!!

  • Roaming profiles on network

    Hi all!
    Ok, so first the problem (it is on our school network, and im
    currently helping the admins with something:
    There are 1500+ users on the school network, and 800 of them
    are required to create an "E-portfolio" in dreamweaver, for our IT
    course.
    When a user configures dreamweaver it creates a configuration
    file in the users profile "c:\Documents and
    Settings\username\Application Data\Macromedia\Dreamweaver
    MX\Configuration" however, with everyone having a roaming profile
    (and static profiles would be out of the question) when users log
    on, it has to drag a 20meg file from the server to the root
    directory of the computer the user has logged on to. Now although
    20meg isn't very big, when 150 users are all login on at the same
    time, it can take ages to log on.
    Now our original idea was to just get rid of this
    configuration file, and see what it affected - however it gets rid
    of all defined sites, and also how you configure your window in
    dreamweaver - so this is out of the question.
    So my question is - "Is there anyway the we can reduce the
    file size, or have a "shared" configuration file, so that it just
    saves the defined sites on the user profiles?"

    If the E-portfolios are allowed to have the same structure I
    think your time
    would be better spent designing this system with a Database
    backend and
    admin tool.
    This way a person can login to the admin tool and fill in
    whatever
    information they want and then click update. You could make
    this as simple
    or "cool" as you want. The benefit to this is that you can
    almost guarantee
    that it will always work and that a person will not upload
    something that
    breaks.
    Just a thought.
    "shaddowarrior2006" <[email protected]>
    wrote in message
    news:es1fcc$kd9$[email protected]..
    > Hi all!
    >
    > Ok, so first the problem (it is on our school network,
    and im currently
    > helping the admins with something:
    > There are 1500+ users on the school network, and 800 of
    them are required
    > to
    > create an "E-portfolio" in dreamweaver, for our IT
    course.
    > When a user configures dreamweaver it creates a
    configuration file in the
    > users profile "c:\Documents and
    Settings\username\Application
    > Data\Macromedia\Dreamweaver MX\Configuration" however,
    with everyone
    > having a
    > roaming profile (and static profiles would be out of the
    question) when
    > users
    > log on, it has to drag a 20meg file from the server to
    the root directory
    > of
    > the computer the user has logged on to. Now although
    20meg isn't very
    > big,
    > when 150 users are all login on at the same time, it can
    take ages to log
    > on.
    > Now our original idea was to just get rid of this
    configuration file, and
    > see
    > what it affected - however it gets rid of all defined
    sites, and also how
    > you
    > configure your window in dreamweaver - so this is out of
    the question.
    >
    > So my question is - "Is there anyway the we can reduce
    the file size, or
    > have
    > a "shared" configuration file, so that it just saves the
    defined sites on
    > the
    > user profiles?"
    >
    >

  • Roaming profile problem?

    I'm not sure it's a roaming profile problem or not, but I need help to fix it.
    we use MetaFrame citrix to connect a remote computer running a medical program. Every computer has Citrix online plug-in.
    If user uses computer user always use, everything will be fine.
    It will be failed login Citrix if user need to login to anther computer to load the medical program.  uninstall and re-install Citrix online plug-in will fix it.  There's lots computers and users, I can't fix it by this way, need to find
    out why.
    Windows 2008 R2 + windows 7 pro & 8.1 pro.
    Thanks for any suggestion,
    ITdragon

    seems no related to profile...
    you can recreate a user account to test.
    just a thoght...
    create a script to uninstall this application. set it as logon script via gpo. when all uninstall, reinstall it...
    Best,
    Howtodo

Maybe you are looking for