Strange behavior of system with enabled FileVault2, Roaming profile

Hello,
I have encountered strange behavor of my Macbook Air after some testing.
Macbook Air 2012 was newly installed with 10.8.4 and joined network account server on 10.8.4 server with Roaming profile (synced with server home directory). After installing some basic apps like iWork I turned on FileVault.
Then I start to have the strange behavior - iWorks are not displaying content of document - it seams blank - just white screen without any borders where should be at least lines in numbers or empty cells.
Another display problem is in Safari. On same pages (even default Top SItes) it`s flashing and especially when scrolling.
Did you encountered something similar? I`m not able to get rid of it.
Computers was used for some time before turining on FIle Vault and problem started to occur after this action. Disabling of FileVault didn`t helped (properly restarted between steps).
I didn`t found anything strange in Console or elsewhere..

Please read this whole message before doing anything.
This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.
Step 1
The purpose of this step is to determine whether the problem is localized to your user account.
Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”
While logged in as Guest, you won’t have access to any of your personal files or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
Test while logged in as Guest. Same problem?
After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.
Step 2
The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, or by corruption of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled on some models, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to boot and run than normal, and some things won’t work at all, including sound output and Wi-Fi on certain iMacs. The next normal boot may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of steps 1 and 2.

Similar Messages

Strange behavior of entourage with shared IMAP folders

Hi the list,
I have a strange behavior with entourage 11.2.5 with shared IMAP folders. Here's what I'd like to do :
All this has to do with spamassassin and spamtrainer. Some of our mails accounts are IMAP ones, but most are POP only and I don't want them to be IMAP. But I also want both IMAP and POP users to have some IMAP access to shared mailboxes for spam and ham to be learned. For those who are using IMAP accounts, that's not a problem with shared mailboxes. But, considering those with only POP accounts, I decided to create a dedicated user called anti_spam, using IMAP access, with two mail boxes that are spam and non_spam, so that all POP users could share this account.
Using SirAdmin, I set l/p/i ACL rights for anyone and the same for anti-spam user so that mail can't be read back with this shared account. Everything just works fine with Mail, but it doesn't work with Entourage. I set up an IMAP account for anti_spam to get an access to shared mailboxes even if main account is a POP one. Everything's fine except I can't write anything on mailboxes : I get an error 1025 and a denied access for writing. The only way to get write access to these mailboxes is to add "r" ACL to them with SirAdmin, which is NOT the solution as it would allow anybody to read mails. It's obvious it has more to do with Entourage than OS X mail service, all the more trying the same conf in Thunderbird is OK as expected.
I was just wondering if somebody here would have some idea of what could be wrong ...

I'd be interested to hear if anyone has a solution too as am having the same problem of not being able to write to IMAP mailboxes.
JJJ

Strange behavior when compiled with Visual C++ 2005 Express Edition

I wrote a program for Berkeley DBXML 2.2.13 on Windows XP that executes a query 5 times and prints out the runtime for each execution. When I run the program using the Debug version of the libraries the queries take about the same time to execute for all 5 executions. When I run the program using the Release version of the libraries the execution time of the queries degrades significantly between each execution. One query takes 2 seconds to execute the first time and 20 to execute the last. I have tried recompiling the Release version without optimization and the strange behavior persists. I have run both the Release and Debug versions several times and gotten the same results, so I doubt it is a program running in the background that is slowing the execution.
This behavior does not happen when I compile the program under Unbuntu using g++, so I assume it is caused by some flag set in the Release version of Visual C++. Has anyone else experienced this behavior and know what flags I should or should not set?
Thanks for your time.
Lauren

Hi Lauren,
We've had users experience this before, and it seems to be a bug/"feature" of the default windows heap allocator. Please see this post for a bit more explanation and a solution:
Re: Performance Issue caused by XmlResults.next().asString();
John

How do I use long path names ("\\?\UNC\...") with Server 2008 roaming profiles?

Hey folks!
I administrate a Windows Server 2008 R2 SP1 Domain with about 40 users on
Windows 7 SP1 clients. Because the users often switch between the many PCs, I am using Roaming Profiles which tend to produce errors with different application-specific paths and files inside the users profiles.
As one of many example, our standard mail application Thunderbird produces paths and files according to folders/subfolders and mails in a user's mailbox. Another one is Microsoft Office's Auto Recovery files which reside in a user's profile and can
get very long.
These paths and filenames often extend the allowed max. path of about 256 characters, when (on log on or off) the synchronization process between the client and the server takes place, leading to errors in the event log and a notification to the user about
the conflict:
"Event ID 1509 - Windows cannot copy file \\server\share\users\user123.v2\AppData\Roaming\looooong to location C:\Users\user123\AppData\Roaming\looooong. DETAIL - The filename or extension is too long."
In the long run this leads to different file versions on different clients which - in the case of Thunderbird - leads to missing mails.
After extensive searches and lectures of forums - including this - I haven't found a solution for this problem.
So my question is if there's a way to use the extended max path with roaming profiles and if so how do I get it to work?
I tried changing the profile path of a test user in the Active Directory user preferences from "\\server\share\profiles\test_user" to something like "\\?\UNC\server\share\profiles\test_user" without any changes in the system's behavior.
Also I think that because this is such a fundamental problem somebody must have come up with a solution for it...
Thanks in advance,
Nico

Hi,
Thanks for your posting.
The Event 1509 can happen if the destination path of the users profile is on a server with a long name and share folder name. For detail information, please refer to:
User profile cannot be loaded with Event ID 1509, DETAIL - The filename or extension is too long
http://blogs.technet.com/b/win7/archive/2011/02/15/user-profile-cannot-be-loaded-with-event-id-1509-detail-the-filename-or-extension-is-too-long.aspx
User profile cannot be loaded with Event ID 1509, DETAIL - The filename or extension is too long
http://support.microsoft.com/kb/2536571
Hope this helps.
Regards.
Vivian Wang
TechNet Community Support

7310 - Problem with CIFS and Roaming Profiles since upgrade to 2010.Q1.0.2

We have developed a strange problem with our environment which I'm pretty sure is down to the upgrade to 2010.Q1.0.2 from 2009.Q3.4.1 on our 7310 (all the previous 2009 releases had been fine) since nothing else has changed in our environment. I suspect some changes to the underlying CIFS server causing this?
We have virtual Windows servers hosted on a VMWare VSphere cluster which are stored on the 7310 via iSCSI LUNs and also CIFS shares on the 7310 for home directories and separate CIFS shares for roaming profiles - all paths are correct in AD for each user - we also use folder redirection for XP Pro clients to force things like "Application Data", "My Documents" etc. onto the Homedir share.
What we've been seeing recently (which only started happening after the upgrade) is a lot of failed logons to the domain for users. It looks like the usual corrupted profile problem that has plagued Windows forever ...the usual messages that it cannot log the user on with a copy of their roaming profile, and that it will use a temporary one. Some folder redirections (that are initiated via Group Policy) also don't get applied. Users don't see errors when logging off from a "good" profile, and NTUSER.DAT etc. seemingly gets written correctly - the next time they log on, around half the time the users will get these errors as described below:
Event viewer logs show "cannot find the file specified" errors for NTUSER.DAT, along with "directory name is invalid" errors for some of the folder redirections.
More worrying (and what I think might be the real reason for these failures) are the "offline caching is enabled on the roaming profile share" errors. I think that the client-side caching might not be working - possibly the profiles aren't getting flushed and written correctly upon logout?
Now, unfortunately the MMC snap-in for managing shares doesn't seem to support changing the behaviour for client-side caching on the CIFS shares (as confirmed in the latest 7000-series Admin Guide on page 198).
I've been thinking about unchecking the "Enable Oplocks" box which from the CIFS side would completely stop all client-side caching I presume?
Is this likely to be the culprit here, or is there any other known behaviour that could be causing these errors? Is it also worth disabling "Cache device usage" altogether for the Profiles share itself?
Can anyone help? It's a bit of a strange problem, and something I don't want to raise with Sun on our support contract just yet, since at first glance it looks like a Windows problem, but I suspect the storage could well be to blame...

Unfortunately, this is still not working correctly...
So, it looks like it's not related to the offline caching seeing as it all works on the Q2009 despite the warnings...
Some more errors coming out of userenv.log on the affected Windows machines:
USERENV(280.284) 10:07:33:230 ReconcileFile: GetFileAttributes on the source failed with error = 2
USERENV(280.284) 10:07:33:230 CopyProfileDirectoryEx: ReconcileFile failed with error = 2
and later:
USERENV(280.284) 10:07:33:245 GetShareName: WNetGetConnection initially returned error 2250
USERENV(280.284) 10:07:33:245 CopyProfileDirectoryEx: Leaving with a return value of 0
USERENV(280.284) 10:07:33:245 RestoreUserProfile: CopyProfileDirectory failed. Issuing default profile
...which then forces the TEMP profiles.
All other errors linked to this look like "file not found", "invalid path" etc. when the files are present and the paths are correct.
Manually mapping drives using CIFS with UNC paths sporadically fails too now. We have a bunch of GPOs that map shares to users depending on their group memberships - these too are sporadically failing.
It certainly looks to me like it could be a CIFS problem introduced in the Q2010 release.
I'm going to raise a ticket with Sun...

OneDrive Sync Settings with Domain Account Roaming Profile

This question seems to have been asked in various manners online including here at TechNet but it has never actually been answered that I can find.
Home domain using Windows Server 2012 R2 Essentials, client is Windows 8.1 Pro 64-bit with Update 1. Logged in as a domain user account with a Roaming Profile and Folder Redirection connected to a Microsoft Account.
Under PC Settings > OneDrive > Sync Settings, everything is greyed out and disabled. I wasn't too bothered about it previously however with Windows Phone 8.1 out now it means that I cannot use Tab Sync with Internet Explorer 11 on the phone.
I have a GPO which excludes the following folders from the Roaming Profile to both allow Folder Redirection to function and also to allow the OneDrive app to function: "Downloads;Pictures;My Pictures;Music;My Music;Videos;My Videos;Dropbox;SkyDrive;OneDrive"
I am using the Primary Computer attribute with a second GPO which limits profile redirection to the users primary computer.
When logging on to my Primary Computer with the Roaming Profile activated, all of the Sync Settings are disabled but on another machine which is non-primary and therefore my roaming profile does not sync, I can connect my Microsoft Account to the local
profile generated on this machine and all of the Sync Settings are available, clearly linked to the Roaming element of the profile.
Is the non-functionality of Sync Settings on domain accounts with Roaming Profiles by design or by virtue of the fact that things are trying to steer away from Roaming Profiles now? I love the Sync features but in that they don't sync everything (3rd party
Application Settings for example) there is a need for both features to exist in parallel.
There is a new section in Group Policy to limit the use of the Sync Settings features for Enterprises which wish to prevent users from using these features so I don't understand the reason for it to not function at all for anyone.
Richard Green | MCSA 2012, MCSE 2003, MCTS Desktop Virtualization, VCP5-DV http://richardjgreen.net

Hi,
Was your issue resolved?
If yes, we will archive this thread temporarily.
If no, please reply and tell us the current situation.
If you have any other question, feel free to contact us. We will try our best to help you.
Karen Hu
TechNet Community Support

Strange behavior in System Preferences when trying to change backgrounds

Running 10.5.1 on my MacBook Pro without a hitch until today. Installed Aperture 1.5 and updated it to 1.5.6 last night and it too works fine.
However, today when I went to change my background image in System Preferences I encountered some strange voodoo. I originally under the Desktop applet in System Preferences I had the default images and folders supplied with the operating system, and one images folder I maintain under my Documents folder for my personal backgrounds.
Now I am no longer able to view my personal backgrounds folder in the System Preferences Desktop applet to select one of my images as a background. Instead I have, literally, two occurrences of the Aperture Projects folder listed under the default operating system background image options.
Initially I found I cannot discard either instance of the Aperture folder, nor can I re-add my personal images folder (states the folder is already in the list as an option). Naturally I figured something might be amiss with permissions. So I rebooted and ran the Disk Utility which checked my drive to find no pertinent errors. No change in symptom.
Next I renamed my personal images folder. This produced a change in symptom.
Now I only observed one occurrence of the Aperture Projects Folder in the System Preferences applet. However, when I went to add my newly renamed personal images folder the second occurrence of the Aperture Projects folder appeared and would not let me access anything therein.
Could certainly be a problem specific to Aperture, but thought it worth posting here in case anybody else wants to try to troubleshoot or has the same voodoo. Plus, the problem did not occur in 10.4.X running Aperture - so I think it is pretty specific to 10.5.1.
Not a show stopper, but certainly weird. Hopefully not indicative of any additional problems lurking under the covers.
TIA for any input or responses.

Confirmed bug in Aperture on 10.5.1 - adding an iphoto library solves the issue in case anybody hits this post and suffers the same malady.
http://discussions.apple.com/thread.jspa?messageID=5847357&#5847357

Strange behavior of JTable with TableCellRender.

Hi, all!
i am creating a graphic application using Swing. i wanna use a single column table to display list of pictures.
JScrollPane tablePane = new JScrollPane();
TableValues tv = new TableValues(TableValues.TYPE_FRAME);
JTable picTable = new JTable(tv);
picTable.setCellSelectionEnabled(true);
TableColumnModel tcm = picTable.getColumnModel();
TableColumn tc = tcm.getColumn(0);
tc.setCellRenderer(new PicRender());
tablePane.setViewportView(picTable);
this.getContentPane().add(tablePane);
When i run the code, the JTable seems refreshing the cells at all the time! (And i did not click anything or move the cursor above the table).
and CPU time runs as high as 99%!
Please help. Thank you in advance.
the following is my TableCellRender:
public class PicRender extends JLabel implements TableCellRenderer {
static Border selectedBorder = BorderFactory.createBevelBorder(BevelBorder.RAISED, Color.magenta, Color.magenta);
static Border unselectedBorder = BorderFactory.createEmptyBorder();
static int counter = 0;
public PicRender() {
super();
System.out.println("Creating label");
public Component getTableCellRendererComponent(JTable table, Object value, boolean isSelected, boolean hasFocus, int row, int col) {
try {
TableValues tv = (TableValues) table.getModel();
BufferedImage image = tv.getPic(row);
int imageHeight = image.getHeight();
int imageWidth = image.getWidth();
Icon icon = new ImageIcon(image);
//setIcon(icon);
setText("#" + row);
setToolTipText(tv.getToolTip(row));
table.setRowHeight(row, imageHeight + 10);
setHorizontalAlignment(SwingConstants.CENTER);
if(isSelected) {
setBorder(selectedBorder);
}else{
setBorder(unselectedBorder);
catch (Exception ex) {
setIcon(null);
setText("Thumbnails N/A");
System.out.println("Paint: " + row + "\t" + (++counter));
return this;
* The following methods copied from Sun's DefaultTableCellRender.java.
* Overridden for performance reasons.
public void validate() {}
public void revalidate() {}
public void repaint(long tm, int x, int y, int width, int height) {}
public void repaint(Rectangle r) {}
protected void firePropertyChange(String propertyName, Object oldValue,
Object newValue) {
// Strings get interned...
if (propertyName == "text") {
// super.firePropertyChange(propertyName, oldValue, newValue);
public void firePropertyChange(String propertyName, boolean oldValue,
boolean newValue) {}

It is probably related to the fact that you are setting the tables row height in the renderer this will fire a render message when the height changes. One height is applied to all rows of a table. This means that is you have images of different heights you are continually changing the tables row height and therefore continually rendereing.
My approach would be to have all the images fit into a set size ( say 64*64 ( with scaling if neccesary ) you could then have a popup show the full size image if required.

Strange behavior when resizing with 'Selection Tool'

Hello,
I have a really strange issue when using selection tool to resize object. I have several rectangles stacked and grouped inside a layer. When I select one of them (either in Layer panel or with Group selection tool) and switch to 'Selection Tool (V)' to resize it, this tool behaves diferently at diferent zoom levels. Only at 200% zoom it behaves as it shoul.. With 100-150% zoom result is diferent - like there's a invisible box around selected object and I'm resizing it.. I've tried to explain the issue in attached image.. Anyone knows why is this happening?
Thanks.

- make new document, size 16383x16383px
- create rectangle any width, hight say 200px (or anything less then 320px for 5% zoom)
- select rectangle and show bounding box
- try resizing hight by stretching bounding box
- this is how same selection looks at diferent zoom levels
- same zoom level as befor, hight 100px..

Strange behavior Lion SMB with Vista clients

Hi,
I have a problem with the SMB server in Lion. The configuration is as followes:
- Server: Lion Server (10.7.1) on Mac Mini
- Clients: Mixed, WinXP/Vista/7, 10.6/10.7
Problem:
Vista client have a problem with the SMB shares on Lion.
When I add for example a new folder, in explorer the folder shows up as "ew Folder" instead of "New Folder".
When I try to change the name of the created folder, Windows report it can't find the folder. When I refresh the explorer, the foldername is correct.
It also occurs when creating new files, change files, etc.
It only happens on the Windows Vista client, on Windows XP/7 I have no problems with it.
I can reproduce the problem. On a clean install of 10.7 server and Win Vista the problems exists.

Even after 10.7.2 Server upgrade the problem described byJeroen still remain.
Did someone has a Windows Vista client machine that write files and folders correctly to an SMB share on Lion?
When I say correctly i mean with correct name (example: in my network vista machine can write in SMB share on Lion, but when we add a new folder, this news folder is shown with "ew Folder" instead of "New Folder. Only refreshing explorer we can see the real correct folder name).
This problem doesn't affect ours XP and Vindows 7 clients that are working very well.
Any ideas and solutions?
thanks

Strange behavior with Zoom and Image control

HELP - I have a strange behavior (bug?) with using Zoom
effect on an Image that has been placed on a Canvas. I am using
dynamically instantiated images which are placed on a canvas inside
a panel. I then assign a Zoom IN and Zoom Out behavior to the
image, triggered by ROLL_OVER and ROLL_OUT effect triggers. THE BUG
is that the image jumps around on the Zoom OUT and lands on a
random place on the canvas instead of coming back to the original
spot. This is especially true if the mouse goes in and out of the
image very quickly. HELP -- what am I doing wrong? Computer = Mac
OS X 10.4.9 Flex 2.0.1
Here's a simple demo of the bug -- be sure to move the mouse
in and out rapidly:
<?xml version="1.0" encoding="utf-8"?>
<mx:Application xmlns:mx="
http://www.adobe.com/2006/mxml"
layout="absolute" creationComplete="setUp();">
<mx:Script><![CDATA[
import mx.events.EffectEvent;
import mx.effects.Fade;
import mx.effects.Zoom;
import mx.rpc.events.ResultEvent;
import flash.display.Sprite;
import mx.core.UIComponent;
import mx.controls.Image;
private var zoomIn:Zoom;
private var zoomOut:Zoom;
private function setUp():void {
var image:Image = new Image();
image.id = "album_1_1";
image.x = 200;
image.y = 200;
image.width = 64;
image.height = 64;
image.source = "
http://s3.amazonaws.com/davidmccallie/album-128.jpg";
image.addEventListener(MouseEvent.ROLL_OVER, doZoom);
image.addEventListener(MouseEvent.ROLL_OUT, doZoom);
myCanvas.addChild(image);
zoomIn = new Zoom();
zoomIn.zoomHeightTo = 2.0;
zoomIn.zoomWidthTo = 2.0;
zoomIn.captureRollEvents = true;
zoomIn.suspendBackgroundProcessing = true;
zoomOut = new Zoom();
zoomOut.zoomHeightTo = 1.0;
zoomOut.zoomWidthTo = 1.0;
zoomOut.captureRollEvents = true;
zoomOut.suspendBackgroundProcessing = true;
private function doZoom(event:MouseEvent):void {
var image:Image = Image(event.currentTarget);
if (event.type == MouseEvent.ROLL_OVER) {
zoomIn.target = event.currentTarget;
zoomIn.play();
} else if (event.type == MouseEvent.ROLL_OUT) {
zoomOut.target = event.currentTarget;
zoomOut.play();
]]>
</mx:Script>
<mx:Panel width="100%" height="100%"
layout="absolute">
<mx:Canvas id="myCanvas" width="100%" height="100%">
</mx:Canvas>
</mx:Panel>
</mx:Application>

There must be bugs in the Zoom effect code -- I changed the
Zoom to Resize in the above code, and it works perfectly. Of
course, Resize is not as nice as Zoom because you can't set the
resize to be around the center of the image, but at least it works.
Does anyone know about bugs in the Zoom effect?

NAC and AD, Machine GPOs, Roaming Profiles = Chaos

I've just observed a hapless Cisco consultant try to make NAC 4.1 work on computers with machine GPOs, roaming profiles, logon scripts within user GPOs, and for that matter legacy logon scripts with "run logon scripts synchronously" enabled. All of these technologies seem to fail on a NAC-enforced connection.
We assign software on machine GPOs and we use roaming user profiles, and it seems we either need to have a domain controller and profile share on the isolation VLAN, which defeats the purpose of NAC, or perform some kind of machine authentication, which can occur before GPO processing and net logons can happen.
While I'm not the Cisco consultant, it wasn't hard to recognize this problem.
Everything I've read about NAC and CAA suggests this is a per-user compliance solution and not a per-machine solution. Surely others have observed this, and I think this is what machine authentication (802.1x) NAC, as opposed to user authentication NAC, is all about. At the risk of sounding like a total n00b, where can I start researching a NAC solution that supports what I want and lets us use the Cisco NAC gear we've already invested in?

I have had similar issues and have solved many with a custom script that runs at log on. It is a compiled script and works great, AutoIT3.
The policy part takes care of itself if you leave machines logged in long enough or do a gpupdate /force. This will force the group policy to synchronize but you will need to log off and on again.
The roaming profile is much tougher. I am still trying to get this working. If anyone has any info on EXACTLY what takes place on a roaming profile synchronization, I would be grateful. If I can I will replicate that process in my script and solve this issue also.
I have fixed the log in script stuff with a delayscript that I use (ironically) clean access to install. You have to launch it with the users credentials, though and not from Clean Access which uses the SYSTEM users credentials in its stub agent!
This is a known issue to Cisco but any prodding of them to get it working would help. Their solution is braindead, just give unremediated machines full access! If they fail remediation, kick them off then. Gee, that gives the unremediated machine a mere two to three minutes to attack your AD DCs on each log in attempt. Not good.
Anyway, that's where I am at. Most of this can be dealt with, some is still problematical.
Dan S.

Blocking Roaming Profile Problem

I am working on a new Server 2012r2 system where roaming profiles need to be blocked/disabled. I linked the same GP I have used for Server 2008r2 systems that sets the following at
Computer Configuration | Policies | Administrative Templates | System | User Profiles to help accomplish this:
Only allow local user profiles: Enabled
Prevent Roaming Profile changes from propagating to the server: Enabled
However, after applying this to the Server 2012r2 system, user roaming profiles continue to load and unload, i.e. neither of the settings above appear to be correctly taking effect. I have confirmed that both of these settings
are applying according to gpresult, and I also confirmed that the corresponding registry keys were successfully created at
HKLM\SOFTWARE\Policies\Microsoft\Windows\System:
LocalProfile: 1 (dword)
ReadOnlyProfile: 1 (dword)
I have rebooted the server several times, and also enabled “Always wait for the network at startup” just in case, but roaming profiles continue to be enabled on this Server 2012r2 system. I was also able to replicate this
on another Server 2012r2 system in our environment.
As a test, I removed the GP disabling roaming profiles and applied these settings locally using gpedit, but this produced the same behavior.
Questions:
Is there something different on Server 2012r2 that needs to be set to disable roaming profiles from loading and being saved?
Is anyone else seeing this in their environment?
Have I overlooked anything? Does anyone have any other ideas/suggestions?
Please let me know if I can provide any other information.
Thanks!
-Aakash Shah

Hello Frank! Thank you for your reply and for confirming that it works as expected in your environment.
I noticed the following behavior for 2 test users on this server, which helped me conclude that roaming profiles were not successfully disabled on the server:
Assuming a blank roaming profile (no Profile.V2 folder), upon login, a blank
Profile.V2 folder is created in the roaming profile path. Upon logout, the local profile is saved/synced to the roaming profile path (the
Profile.V2 folder now has contents in it).
If there exists a roaming profile prior to first login, it is loaded on the server (for example, the taskbar icons appear from the roaming profile.
I am also able to delete the local profile on the server, and the above behavior can be reproduced.
Also, as a test, I also had attempted to set UseProfilePathExtensionVersion=1 at
HKLM\System\CurrentControlset\Services\ProfSvc\Parameters, and this produced a similar behavior as above, except that it created a Profile.V4 folder instead of Profile.V2 - but the local profile continued to
be written to the roaming profile path.
Please let me know if I can provide any other information.
Thanks.

Roaming Profiles on NSS

I do not use DLU, as my users authenticate against synchronized AD
Can Roaming Profile be assigned & how to configure (with user home
directories/profile etc) being on NSS volume
Seb

No, that is not correct.
Roaming Profiles work fine with DLU and Windows 7 and NSS.
On 6/18/2013 4:56 PM, HarryBoyee wrote:
>
> Hi Craig and Shaun,
>
> So just to clarify, if we are running Windows 7 (no-AD) with DLU and
> Roaming Profiles, we won't be able to "roam" because of Windows 7 and
> DLU? We would only be able to setup roaming profiles for Windows 7 if
> we had users login to an AD domain, correct? Most of our users have
> their 1 computer with a few exceptions but those exceptions are where we
> see issues with temp and incomplete profiles. Is there any way around
> this? If not, what I see happening is we put them on a domain and then
> we no longer need ZENworks for dlu, roaming profiles, and group policies
> since they are in a domain. We would start to think about why we would
> need ZENworks and possibly look at alternatives out there for remote
> management, application deployment, patching, full disk encryption, etc.
> For now we are looking at no longer using roaming profiles and just
> have DLU create a local account and maybe redirect the profile folders.
>
> Harry
>
>
> craig_wilson;2263670 Wrote:
>> You may still have Roaming Profiles on NSS Volumes, but you would need
>> to configure this via your AD Setup, not ZCM Setup.
>>
>> This may require configuring some type of Windows Emulation on your
>> server hosting the NSS Volumes to allow you to configure it through AD
>> if using Windows 7.
>>
>> On 5/14/2013 2:06 PM, spgsitsupport wrote:
>>>
>>> craig_wilson;2263322 Wrote:
>>>> None of this applies to you.
>>>>
>>>> #1 - ZCM Does not support Roaming Profiles with an AD Logon with
>>>> Windows
>>>> 7. (XP is still fine, but as you move to Windows 7 you will neee
>> to
>>>> move to AD Roaming Policies.)
>>>>
>>>
>>> But that also means that I can NOT have Roaming Profiles on NSS
>> volume
>>> any more, correct?
>>>
>>> Seb
>>>
>>>
>>
>>
>> --
>> Craig Wilson - MCNE, MCSE, CCNA
>> Novell Knowledge Partner
>>
>> Novell does not officially monitor these forums.
>>
>> Suggestions/Opinions/Statements made by me are solely my own.
>> These thoughts may not be shared by either Novell or any rational
>> human.
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Strange behavior with obssocookie on different browser

Hi,
I am trying to integrate OAM with our application deployed on WLS. I have set up an IIS proxy server and installed a web gate on it. I have seen a couple of strange behavior
1) If I try to access some static image file, SSO keeps asking for authentication. It happens for both firefox and IE, but it doesn't happen for chrome though. Looks like for image file request, the obssocookie is not passed correctly. Anyone sees that before?
2) If I use firefox on the machine where WLS app server is installed to connect to proxy server, if I use hostname in the URL, I don't see the obssocookie. If I use IP address in the URL, I can see obssocookie. If I use IE or any browser from any other machine, obssocookie is always available
thanks.
-Wei

I found it in the document
B.1 How Logout Works
The WebGate logs a user out when it receives a URL containing "logout." (including the "."), with the exceptions of logout.gif and logout.jpg, for example, logout.html or logout.pl. When the WebGate receives a URL with this string, the value of the ObSSOCookie is set to "logout."
The Access System sets an obSSOCookie for each user or application that accesses a resource protected by a WebGate. The obSSOCookie enables users to access resources that are protected by the Access System that have the same or a lower authentication level. Removing the ObSSOcookie causes the WebGate to log the user out and requires the user to re-authenticate the next time he or she requests a resource that is protected by the Access System.
Well, I havn't got that far in the document:)
Thanks a lot for your help.
-Wei

Strange behavior of system with enabled FileVault2, Roaming profile

Similar Messages

Maybe you are looking for