Roaming Profiles Not Working

Hello, we recent migrated our file server to Server 2012 R2. Everything went smooth until I noticed users' account we're getting their Roaming Profiles when launching a Citrix application/session. They're being logged into the Citrix servers with the
'TEMP' profile. Upong logon, I'm seeing the error below thrown in the App logs of the Citrix server:
Windows cannot locate the server copy of your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you log off. This error may be caused by network problems or insufficient
security rights.
DETAIL - Access is denied.
Each user account's 'Profile' and 'Remote Desktop Services Profile' tab are using the same UNC path to their profile folder. I've checked the share permissions of the parent folder which I gave 'Everyone' 'Full Control' and I've checked the security permissions
of the users' folders. Each user has 'Full Control' of their folder. What's a bit stranger is that I also have their account configured to map a drive to the same profile folder which works when they launch an application in Citrix. They can browse the folder,
create sub-folders and files, etc.. So while the error suggests that it could be a permissions issue, the fact they can do all this within the mapped drive contradicts that idea. Also, my Domain Admin account is able to access my roaming profile which would
also suggest a permissions issue, but like I said, I think all the share and security permissions are fine.
Is there anything else that may be affecting why the profiles aren't being copied to the Citrix servers and causing this error? Is there a Local Security Policy setting that would weigh in on this? We do harden these servers so I was wondering if it's something
of that nature?

Hi,
Please refer to the article below to check if you the permissons on the profile folder is configured correctly.
Security Considerations when Configuring Roaming User Profiles
http://technet.microsoft.com/en-us/library/cc737633(WS.10).aspx
There is a similar thread, please go through it to help troubleshoot this issue:
Roaming Profiles RDS 2008R2 permissions issue
https://social.technet.microsoft.com/Forums/windowsserver/en-US/6e3c589a-bfa0-492b-86bc-507891fdbee2/roaming-profiles-rds-2008r2-permissions-issue
Best Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

Roaming profile not working anymore

hi
im definitely shure, in a earlier version of ZCM 10.0, the Roaming Profile to the Home directory did work and so, i never checked this since then.
now i updated to 10.3.1 and roaming profile does not work anymore. the local profile gets not copied to the Home-Directory on the server, it doesnt depends, if i have the "Edir Home" set or the real path to the directory.....
where can i start to search for this problem ? i was so shortly to go "productiv".......but no, there is again a delay after 6 Months waiting and testing....:-(
it's so sad ! Zenworks is not that quality product it was.....
Sascha

hi craig
sorry, about not enough informations.....
- no, all clients are only in the E-Dir
- Clients are Windows XP SP2 with Novell Client 4.9 SP2, but tested also higher ones...
- Home-directory is on a Netware 6.5 SP8
- ZCM Server is SLES 10 SP3 without OES
thanks
Sascha
>>> craig wilson<[email protected]> 27.08.2010 17:36 >>>
Are your devices a member of a Windows Domain?
What Client OS?
What type of Server do the Home Directories reside?
On 8/27/2010 11:17 AM, Sascha Oetiker wrote:
> hi
> im definitely shure, in a earlier version of ZCM 10.0, the Roaming
> Profile to the Home directory did work and so, i never checked this
> since then.
> now i updated to 10.3.1 and roaming profile does not work anymore. the
> local profile gets not copied to the Home-Directory on the server, it
> doesnt depends, if i have the "Edir Home" set or the real path to the
> directory.....
> where can i start to search for this problem ? i was so shortly to go
> "productiv".......but no, there is again a delay after 6 Months waiting
> and testing....:-(
> it's so sad ! Zenworks is not that quality product it was.....
> Sascha
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Roaming profiles not working from time to time

We have 6 Terminal servers and at random on the servers and at random with the users, the roaming profile will not be delete after the users log off.
The folder that remains in the user folder, this folder however is empty, not even hidden folders or files are present: C:\Users\"username"\AppData\LocalLow\Microsoft\CryptnetUrlCache
What we have tried is to run a log off script that has following in it "net stop CryptSvc" but this also does not work. We have had 6 users again today that had the problem. All on different servers.
We can manually delete the users folders without any problems when the problem occurs but this is not something that we would like to do every day.
I see a lot of similar problems but nowhere a real solution for this.
Ah the event viewer:
Windows cannot delete the profile directory C:\Users\"username". This error may be caused by files in this directory being used by another program.
DETAIL - The directory is not empty.
- System
- Provider
[ Name] Microsoft-Windows-User Profiles Service
[ Guid] {89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}
   EventID 1533
   Version 0
   Level 2
   Task 0
   Opcode 0
   Keywords 0x8000000000000000
   - TimeCreated
[ SystemTime] 2014-06-06T07:27:05.906799700Z
   EventRecordID 777512
   Correlation
   - Execution
[ ProcessID] 900
[ ThreadID] 6092
   Channel Application
   Computer TS05."domain".be
   - Security
[ UserID] S-1-5-18
- EventData
Folder C:\Users\"username"
Error The directory is not empty.
Services installed:
- File Services
° File Server
° Services for Network File System
- Remote Desktop Services
° Remote Desktop Session Host
All the latest updates have been installed on all the terminal servers. The users are on different servers who have the problems and they aren't always the same users who have the problems so
don't start by asking if everything is configured correctly cause that is the case!

Thank you for your answer.
The entry in that registry key remains indeed there. Is it safe to just remove that registry key when the user is no longer logged into that specific server?
The KB that you have send me is with the following explanation:
Notes
This issue occurs when the Windows Search service is enabled.
When this issue occurs, the registry subkey that represents the stale user profile is deleted. This subkey appears in the following location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
But we do not have the Windows Search service installed nor is it enabled in the services list? But the subkey does remain in the registry.
With kind regards,
Thijs

Roaming Profiles not working when Lenovo Hotkey Client Loader is running on Win 8.1 laptops

This issue seems to be Windows 8.1 related. Specifically it is affecting all our X1 Carbon, and T440S laptops running Windows 8.1, but NOT 430S running Windows 7. Basically roaming profiles were creating the proper folder on the file server but the folders were empty. Through trial and error, I narrowed it down to the "Lenovo Hotkey Client Loader" as listed in msconfig or Program Files\Lenovo\HotKey\TPHKLoad.exe. Once that service was disabled, the roaming profiles would copy over properly. I am running the latest and greatest version of "Hotkey Features Integration for Windows 8.1" Ver 5.25.0000. Wondering if anyone else is seeing this? Wondering how significant TPHKLoad.exe is? And wondering if we'll see an update to the Features pack to correct this? Hopefully this post can help some others who are looking at empty roaming profile folders.

Hi all,
A
After few months, problem occurred again and i could not install the windows from the scratch over and over again.
I started searching problem online and eventually i found the FIX.
Looks like Registry Entries are getting screwed up somehow.
My "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProvider" was looking exactly as below:
", schannel.dll"
And i made it as below:
"msapsspc.dll,
schannel.dll, digest.dll, msnsspc.dll, credssp.dll"
The solution for the other person in the link ( cannot share link since site does not allow me to ) as a source was only missing "credssp.dll" whereas i was missing everything except "schannel.dll". Strange...
============================
Adding credssp.dll to the list of SecurityProviders in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders
fixed it for me.
My full registry entry now reads "msapsspc.dll,
schannel.dll, digest.dll, msnsspc.dll, credssp.dll"
============================

My international data roaming is not working in china, why?

I am currently traveling in mid-east china, but my data roaming is not working. it shows good single bar, but when I try to receive emails (from gmail or AOL account), it gives me error messages. it is very frustrating. it has been 3 days that I can't retrieve emails. I do have voice service though.

You might need to contact VZW for some trouble shooting help. Unless you are using a 3rd party simcard...then you might have to check with them to make sure their isn't an issue.

Windows Domain Controller on Windows Server 2012 R2: Hyper-V roaming profiles not loading due to slow connection

I have racked my brain and done everything that I know to do for about two weeks now. I am setting up a new system at our fire department and I am having the worst luck with getting the workstations to login to the domain controller with roaming
profiles. It keeps telling me that the roaming profile could not be loaded because of a slow connection. These are workstations that are connected directly to the switch that the DC is connected to. I have tried multiple connections regarding
the layout (DC into the router, router into the switch). The router is a Cisco RV220W. I have two VLANS, one for public and one for private domain. The Private VLAN has DHCP turned off since I am providing it through the DC. I currently
have a connection from the Private VLAN going to the unmanaged switch that the workstations and server are plugged into.
The server is a Dell PowerEdge R420 that has 6 NIC ports (1 dual port and 1 quad port). I have a virtual switch setup on Hyper-V for an external port (let's say Card 2 Port 3) that is assigned to the WS 2012R2 Domain Controller. The DC can see
the internet fine and the workstations can connect to the shared folders on the server. I can retrieve files by just using the computer name or FQDN. The DC is also running DNS and DHCP. The DNS has the _msdcs setup from when I installed
the active directory role. I have attempted to assign static IP addresses to the workstations:
IP:                     10.0.0.80
Subnet:             255.255.255.0
IPV4 Gateway: 10.0.0.1
IPV4 DNS:        10.0.0.12
I've attempted "append the specific DNS suffix", I've "registered the connection in DNS", I've used "use this connections suffix in DNS registration".
The server is assigned:
IP:                     10.0.0.12
Subnet:             255.255.255.0
IPV4 Gateway: 10.0.0.1
IPV4 DNS:         10.0.0.12
The DNS entries have forwarders that forward to my ISP DNS servers for lookup
I've enabled and disabled DHCP, I've installed a new VM just to create another DC to make sure that I didn't goof up when I created it.
I've lost my patience with this project and am sinking fast. Can someone please offer some advice as to what I've done wrong? I've created this exact scenario at work many times but, I've never done it with Windows Server 2012. Is this
possibly something to do with the Dell PowerEdge server (Generation 12) with the SR-IOV? I am going to attempt to work on it some more tomorrow when I get over there. I think there may be an issue with the SR-IOV not being enabled on the machine
through the Dell Bios. Would the SR-IOV really cause the workstations to report a slow connection? When I login at the domain controller the roaming profiles and folder redirection work fine so, I know the GPO settings are correct. I don't
have "ignore slow connections" or any of those GPO's set. I need to get it working the correct way so, I didn't want to fool the server when there is another underlying problem. Any help that someone can offer, I am more than willing
to listen. If you need more information, please ask.
Thanks,
Jay

So, I've managed to research this some more since Thursday and I've come to the conclusion that Hyper-V does a horrible job of supporting Qualcomm NIC cards. That's the only thing I can conclude as far as where the issue is originating. I've read many
post and walkthroughs but nothing that has helped. The issue wasn't with any settings in the domain controller. The issue was that there really is a slow connection originating at the domain controller that is a VM and has network connectivity through the
virtual switch from Hyper-V. So, next question is, how do I get the DC to have better connectivity through the NIC that Hyper-V won't give it? If hyper-v would allow passthrough, this would be so much simpler. VM-ware is looking really good at this point.
Im disappointed in MS right now.

Roaming profiles not created while the creation of user account

Hello,
Our file server (running windows server 2003) is hosting Roaming profiles for users (in active directory running 2003). And that worked just fine till this week, when trying to create some users, we figured out that their roaming profiles are not created
(after their first logon the the domain of course)
We checked out the NTFS permissions and the SMB share permissions, and everything looks correct.I have even modified the permissions as Microsoft recommands. But still nothing has changed.
What could be the problem? or where to look for some paths to troubleshoot this problem??
Thanks in advance!
Lotfi BOUCHERIT

Hi Lotfi B,
According to your description
the user, is not able to access the share from the Explorer, as Awinish said, there may be a network or Firewall issue.
Please try to troubleshoot the network issue referring to the following article:
Troubleshoot network connection problems
In addition, it would be helpful if you could help to collect the following information:
Could the old users access the share?
Did the GPResult show the GPO had applied successfully? Please run
Gpresult /h > C:\temp\gpresult.html (“C:\temp\”is the path of the gpresult.html,
you can set it yourself) in Command Prompt, the file gpresult.html is used for checking the resultant of Group Policy information.
Regards,
Lany Zhang

Local and Roaming profiles not being created

Hello all,
I'm in need of help and I wondered if there was anyone out there with some suggestions.
The problem is that one of our sites has Netware 5 and Zfd3.2 and there are no longer any roaming profiles or local profiles being created. Volatile user is not used. Roaming profiles go to the users home directory. All file rights are fine. DLU is still working. Novell client on W2K workstations is 4.90. All other sites appear to be OK.
I suspected that the user policy was at fault and so created a test user package and associated a test user to it = same result.
I have checked from top to bottom and compared all settings to other sites and can see no difference or anything unusual. I've been working on this for 2 days now and I'm going grey and bald.
Any suggestions anyone?
I'll buy a pint for anyone with the answer - LOL.
Thanks in advance
Alan Graham
email: [email protected]

elvisgraham,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Roaming profiles not roaming correctly

is the second computer joined/logging on to the domain. have her log in with user@domain to me it sounds like perhaps even if computer 2 is joined to the domain its logging in locally. I could be wrong if so delete all the local profiles off the local computer. Another idea is perhaps you created her folder in the server and you copied the user profiles off of computers the first time? Do other policies in group policy effect new employee? Is she in the same organizational unit in AD?

I have roaming profiles/redirected folders setup for 5 users and everything is working fine. I just setup a new employee and on workstation1 (Win 7) her profile is called "User.Domain" and on workstation2 (Win 7) its called "User." This causes an Outlook problem where it cannot find the OST file.
I've tried deleting the profiles off both workstations and starting from scratch but it just recurs again. Note - I delete the profiles by using Computer > Properties > Advanced System Settings > Advanced > User Profile - Settings.
Server is 2008 R2 and the roaming profile is named "User.V2"
I cannot figure out what to google. Everything I try isn't coming up with this specific problem.
Help if you have a minute?
Thanks.
This topic first appeared in the Spiceworks Community

PSE 11 - MacOX 10.7.5 Printing Wide Format Printer and Profiles Not Working Correctly

Macosx 10.7.5
When I start up PSE11 and go to print I set up the paper size then select a Printer Profile. When print the image it is a mess and seem to be black and white it is as if I printed on the wrong side of the paper.
I then go and try to print it again.   Now it all works as it should beutiful colours and spot on. all other print following this works.
Then I shut down PSE11.   Start it up again. Guess what first print is a mess again.   all others after are fine.
I uninstalled PSE11, deleted prefs. and reinstalled PSE11.    Same thing..   first print a mess all others ok.
the issue can be replicated consistantly......
no problems with PSE10 or PSE9
any suggestions?????
cheers elo

Thank You for your suggestions.
I have been printing using PSE for over 14 years going back before the term PSE came up. I have done this professionally using profiles from others and those I generate myself..
All the things you mentioned have been done.
The main point missing in your suggestions is   It is only the first print every time I open up PSE11 that does not work...
at completion of print I immediately go back to the file command and say print and then bypass all settings and print again.   this time and every other print aafter are perfect...      I did not change one single setting...
I know about printer and adobe settings etc.     but thanks for going through the list it was a good reminder of how to remember everything sometimes we rush and forget something...
Finally    It works PSE6, PSE9, PSE10, CS5, Lightroom 4.   I think I have the settings right......
Any suggestions for how to get PSE11 to force the settings for the first print would be appreciated..
Only thing I have not done is upgrade to the latest version of the epson driver. Released less than a month ago to provide support for mountain lion.(iam only on lion) Maybe just maybe???   you never know.   Will try this when I finish by next batch of prints.
I will back up as I do weekly...    Still have the old driver from way back in release 10.5.8   will try to fire up to 10.5.8 and see what happens....
cheers elo
Message was edited by: Elo Laugesen

Icc Profile not working

Hi,
This is on a 2011 macbook pro with mountain lion. I have tried to use two new icc profiles, put them in:
library-colorsync-profiles-recommended
and while they work in preview, and illustrator, they will not work in photoshop. I go through the print dialog, with photoshop managing colors, select icc profile. Hit print, try to open pdf in preview, and it's all white (this only after blanks were printed out). I have tried, tested, and no luck.
Please help, thanks!

Ah-the driver is name is: mcpd-mac-pro9000ii-10_68_1-ea11.dmg
First thing I tried to do is delete and re-download new driver, but no luck.

Oracle 10g RAC SQL profiles not working for both the nodes

We have identified a long running sql.
Used Advisor to tune the sql
Applied the suggested sql_profile as per the recommendation.
when we re-run the sql from application, due to RAC setup the sql hit the other node, used the sql profile as indicated by v$sql but was long running.
it generated a new sql_id due to which we think it was not working.
Could you please advice how to apply sql_profile for both nodes?

HI Arun
Would you please post that in the GRID RAC section of this forum please ?
Please consult the following documents to get support on your question:
http://download.oracle.com/docs/cd/B19306_01/rac.102/b14197/votocr.htm#sthref211
http://download.oracle.com/docs/cd/B19306_01/install.102/b14205/undrstnd.htm#RISOL2610
Thanks

IOS Device-Sensor and ISE profiling not working

Hello,
I configured IOS device-sensor on one 2960CG-8-TCL switch. IOS is 15.2(2)E.
Switchconfig:
device-sensor filter-list dhcp list dhcp-list
option name host-name
device-sensor filter-spec dhcp include list dhcp-list
device-sensor accounting
device-sensor notify all-changes
Switch does DHCP-Snooping and "show device-sensor cache all" shows the DHCP name:
Device: b2b5.2fff.sa43 on port GigabitEthernet0/1
Proto Type:Name                       Len Value
DHCP    12:host-name                   17 0C 0F 11 31 22 41 50 43 33 31 32 30 30 30 37 38
                                          38
RADIUS probe on ISE is activated and TCPdump shows the accounting packets from the switch (see attachment).
I configured a profiling rule ot check for DHCP-Hostname with "contains". This rule does not work however. The device is getting profiled with a MAC-OUI via RADIUS-probe but the DHCP-Profile is not working.
Is this supposed to work?

That is interesting. I haven't worked with the "Device Sensor" much so I am running out of ideas. I really thought the certainty level was going to fix your issue as I have had issues similar like yours in the past where the certainty level of my custom rule was the same as a default one so mine custom rule was never hit. . I thought this was the case with you since your device was hitting the parent policy of "HP-Device" but not moving any further. With that being  l would still recommend keeping your custom conditions with higher certainty levels to avoid such situations.
Couple of more things:
1. What profiling probes do you have enabled?
2. Have you tried retrieving the DHCP hostname via another sensor/method. For example, via the DHCP probe and ip-helper?
3. Do you have the following commands entered on your switch:
access-session template monitor
no macro auto monitor
device-sensor accounting
device-sensor notify all-changes

Profiles not working as expected

I have created a simple publication for a webi report using efashion uiniverse. It's in BO 4.0. I have created 2 profiles. One is State=California and another is Month= 2. If I add any one of the profile to the publication, it works fine.
Example:
Case 1: when I add the profile state=california to the publication, i get data for only state=California.
Case 2: If i remove the profile state=california and add profile month= 2 to the publication , then i get data only for month=2.
Case 3: Now if I add both the profiles state=california and month=2, i get data for sate=california and for all the months. The profile month=2 doesn't get applied.
what's happening is that the profile which is added first is getting processed while the profile added second is not working. If I add the profile month=2 first and then profile state=california, then only month =2 gets applied and not state=california.
Is there any settings that may be causing this behaviour?
Below is the log :
2012-01-17 01:57:44,072 INFO [PublishingService:RunInstancePool-1] BusinessObjects_PublicationAdminLog_Instance_48714 - [Publication ID # 48714] - Running publication instance.
2012-01-17 01:57:44,519 INFO [PublishingService:RunInstancePool-1] BusinessObjects_PublicationAdminLog_Instance_48714 - [Publication ID # 48714] - The global delivery rule for this publication was met; publication processing will now begin.
2012-01-17 01:57:46,168 INFO [PublishingService:HandlerPool-0] BusinessObjects_PublicationAdminLog_Instance_48714 - [Publication ID # 48714] - Document jobs started for scope batch 48,721 [recipients "PGOWDA" to "PGOWDA"].
2012-01-17 01:58:31,695 INFO [PublishingService:HandlerPool-0] BusinessObjects_PublicationAdminLog_Instance_48714 - [Publication ID # 48714] - Distribution jobs started for scope batch 48,721 [recipients "PGOWDA" to "PGOWDA"].
2012-01-17 01:58:42,272 INFO [PublishingService:HandlerPool-0] BusinessObjects_PublicationAdminLog_Instance_48714 - [Publication ID # 48714] - Distribution to destination CrystalEnterprise.Managed was successful. Recipient: PGOWDA, Document Scope: Sales Revenue by Sates : 48730 (Excel) : (AND (IN_LIST Month "3" )(IN_LIST State "California" )).
2012-01-17 01:58:42,797 INFO [PublishingService:RunInstancePool-1] BusinessObjects_PublicationAdminLog_Instance_48714 - [Publication ID # 48714] - Publication scheduling complete.

If I'm not wrong there are some considerations you must apply in your publication. Check in this guide:
http://help.sap.com/businessobject/product_guides/boexir31/en/xi3-1_bip_admin_en.pdf
Page: 942 Chapter Managing profiles
regards
Erika

HR PD profile not working

Dear Experts
the below solution earlier it is worked but after system refresh it is not working?????????????????????????????/
We have created the below PD profile based on the given requirement but when I assigned to person and check on" i" button in OOSB to see how many objects that he can able to see ..value is nill
1. Req : create only one PD profile that should be assigned to the chief positions in org so that chiefs can see only the data that of positions/orgunits that are assign under him..
Name : Manager
No : 0
Plan Ver : 01
Obj type : O
Object : 0 "here we dont maintaining any values, this values is pulled using the funtional module that assign"
maintain : yes
Eval Path : o-o-s-p
status vector = 12
depth = 0
sign =
period =
function module = RH_GET_MANAGER_ASSIGNMENT

Try executing following tcodes instead which calls the reports:
Step 1. S_PH0_48000112 - Check and Compare T77UU
Step 2. S_PH0_48000110 - Regeneration INDX for Struct.Auth
But if HRP1001 doesnot has entry then you might need to assign the org units to your users again via tcode PP01/PO13. To automate you can use a eCatt or LSMW script and use PP02 to assign org units to mass users by inputting the mapping of User ID/Position to Org units with appropriate relationship.
Let me know how it looks like after running the above tcodes.
P.S: Sorry for the typo, the reports are RHBAUS02 and RHBAUS00. Also change value of field "Threshold Value" to 1 for report RHBAUS02/tcode- S_PH0_48000112 before executing it
Thanks,
Sandipan
Edited by: Sandipan Choudhury on Jan 3, 2011 12:02 PM

Roaming Profiles Not Working

Similar Messages

Maybe you are looking for