Windows 2012 RDP "resets" user settings while using Roaming Profiles

Last month we installed a RDP environment running a Windows 2012 DC and 2 Windows 2012 RDP servers. The RDP servers are running in a pool.
For the rest it's nothing fancy.
The problem is that user-settings are reset, most likely during logon. This only occurs when we use Roaming Profiles.
- We create a new user, in a container with no GPO's attached.
- This user gets a RP while logging on, no errors, at logoff the RP is written to it's correct folder.
- Logging on again. Now for example I make Chrome standard browser and change the program which opens JPG files.
- Logging off
- I check the NTUSER.DAT in the RP folder and the changes I made can be found in the file. So it has been saved to the NTUSER.DAT.
- Now I login again and check the settings I made. IE is standard browser again and the JPG setting is also back to standard.
- Logging off
- Checking the NTUSER.DAT in the RP folder and yes, everything is back to default.
Now the funny part is, when I create a user with a local profile, everything is working properly. Settings been saved.
It doesn't make a different what kind of user it is. Domain User, Domain Admin. They all have the same problems when using RP's.
No error messages in the Event Viewer.
I'm clearly unable to solve this problem. Hoping someone can help me on this one.
What makes the settings reset at logon while using Roaming Profiles?
Thanks!

Hi,
Thank you for posting in Windows Server Forum.
Have you enable Cache copies option of roaming profiles?
This issue might occurs because the User Profile service does not load the terminal server roaming profile correctly after the user account password is reset.
When the Delete cache copies of roaming profiles Group Policy setting is enabled, and when a user is prompted to change the user account password, the User Profile service loads a local temporary user profile. The User Profile service loads this user profile
to perform the password reset operation. However, the profile changes to a combination of the local temporary profile and of the roaming profile after the user password is reset. Therefore, the terminal server roaming profile is not loaded correctly.
In addition, please try to delete the SID of the user from registry key and check the result. You can follow the below path.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
More information:
You receive a "The User Profile Service failed the logon” error message
http://support.microsoft.com/kb/947215/en-us
Also check “User Profiles on Windows Server 2008 R2 Remote Desktop Services” article.
Hope it helps!
Thanks.
Dharmesh Solanki

Similar Messages

  • Migrate to Windows 2012 R2 and Exchange 2013 SP1 using database portability

    Hi, I'm planning to migrate from Exchange 2013 SP1 running on Windows 2012 to Exchange 2013 SP1 on Windows 2012 R2.
    Is it possible to use database portability to move the databases from the exchange installation on win 2012 to the new installation on Win 2012 R2? This would save a great deal of time not doing the mailbox moves.
    I've searched similar cases but couldn't find any, all speak about disaster recovery and database portability but I've found no articles that uses the migration scenario.
    Would it be possible to do and if so, what would the steps be? Do I need to delete the database from the source server, move the database files to the new server and mount them and relocate the mailboxes? Or should I dismount the database on the source server,
    move them to the new server and mount them and relocate the mailboxes?
    Frank.

    Hi,
    According to your description, I recommend you consider using DAG to achieve your requirement.
    The following steps for your reference:
    1.Prepare a new server which installed windows 2012 R2 for Exchange 2013 mailbox server.
    2.After you deploy Exchange 2013 Mailbox servers, you can create a DAG, add Mailbox servers to the DAG, and then replicate mailbox databases between the DAG members.
    3.After replication, you can mount all the databases on the new server.
    Hope this helps!
    Thanks.
    Niko Cheng
    TechNet Community Support
    This no way a resolution. This won't work at all as Both OS will be different and you can't form the Cluster.
    Please Unmark it!
    Cheers,
    Gulab Prasad
    Technology Consultant
    Blog:
    http://www.exchangeranger.com    Twitter:
      LinkedIn:
       Check out CodeTwo’s tools for Exchange admins
    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

  • How to handle  user exits while using BAPI

    HI experts can any one help me on how to handle user exits while using BAPI. Do we need to handle it explicitly or standard  BAPI will take care of it??.
    Regards,
    Hari Krishna

    If you have added some fields using append structures for screen enhancements, then you have to use appropriate user exits to fill these data while calling BAPI.  Some BAPIs have EXTENSION structures to fill the custom data which can be processed using user exists or enhancements.
    Regards
    Vinod

  • File Associations in 2012 R2 RDS Server using Roaming Profiles

    Background Information
    We recently moved from using 2008 R2 RDS servers to 2012 R2 RDS Servers. All of our users
    have roaming profiles. When we migrated from the old terminal servers to the
    new terminal servers, the users got completely new profiles. The only thing
    moved from their old profiles were documents and items on their desktops. We
    have multiple PDF viewers/editors installed on our RDS servers. Mostly due to
    the cost difference between Adobe Acrobat and other, cheaper products that a
    lot of our users can get away with using that don't need the functionality of
    Adobe Acrobat.
    The Problem
    Ever since moving to the new 2012 R2 RDS servers, whenever our users log off terminal
    server, the next time they log in their default PDF Viewer association doesn't
    load, and they have to go through the process of choosing a default PDF viewer.
    This only occurs when there's more than one PDF viewer installed on the server.
    We've tested it with only one PDF viewer program, and the setting remains after
    logging off and back on. The problem we've found is that the registry key that
    houses the default user choice:
    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice
    when set during the session, to Adobe Acrobat 11 for example, reads as such
    inside that registry key. For example, the Progid key will say
    Acrobat.Document.11 and this setting will persist until the user logs off. Upon
    logging off and back on to the terminal servers, if you look at that same
    Progid key, it has been converted in to a Hash value, and the Operating System
    is unable to read the hashed value and determine what that user's default PDF
    Viewer choice is, causing them to have to go through the process of setting it
    again.
    Things we've tried
    We created a GPO that runs a script that exports the registry key upon log off that has
    the non-hashed value, and have it set to import that value on log on. However,
    by default this registry key has the DENY WRITE permission applied to it, so
    when the system tries to import the registry key through the login script it is
    unable to do so. 
    Summary
    This issue only started happening once we moved over to 2012 R2 RDS servers. It only
    occurs for users using Roaming Profiles. It only occurs when we have multiple
    PDF Viewers installed on the servers. Any insight on why this is happening or
    how to resolve it would be greatly appreciated.

    I would use GPP to push the value, 'not hashed'. You can give right to the registry too, so like adding everyone group to that registry branch. (https://technet.microsoft.com/en-ca/library/cc753092.aspx)
    Regards, Philippe
    Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
    Answer an interesting question ? Create a
    wiki article about it!

  • Default Keyboard input change in using roaming Profile on different Win 7

    We found a strange problem on default Keyboard setting.
    We are using roaming profiles for all users.
    One of our users is using two Windows 7. One Windows 7 is VDI for working out of office and another Win 7 is her local PC.
    She is only using Two keyboard input: Chinese Traditional English and Chinese Traditional Pinyin.
    Whenever she had used the Windows 7 VDI, when she comes back to office and use her local PC, the default Keyboard input will automatically change to Chinese Traditional Pinyin.
    The user said she had not changed any default keyboard input in the VDI of local PC.
    Is there anything we can do for this issue?
    Ivan

    Hi Ivan,
    I am just writing to check the status of this thread. Was the information provided in previous reply
    helpful to you?
    Do you have any further questions or concerns? Please feel free to let us know.
    If you have any feedback on our support, please click
    here
    Karen Hu
    TechNet Community Support

  • Can i install windows 7 via bootcamp (MB Air) while using remote disc? I put the windows 7 disk in my macbook pro drive, and connect to my brand new macbook air. In bootcamp i allocate the partition then i click install and bootcamp will not see the disk.

    Can i install windows 7 via bootcamp (on my MB Air) while using remote disc? I put the windows 7 disk in my macbook pro drive, and connect to my brand new macbook air via remote disk. In bootcamp (on my air) i allocate the partition, then i click install, and bootcamp will not see the disk from my macbook pro's drive. How do i get the bootcamp assistant running on my MB air to automatically find the disk in my macbook pro with the ISO image of windows 7? The remote disk on my air can find the cd but bootcamp will not begin installing it. Anyway to do this without buying the damned usb drive?

    I don't know first hand if you can use the Remote Disk option with Windows but as of 10.7.2 you can now use BCAssistant to make a bootable USB (thumb drive or external disk) W7 installer with the Boot Camp drivers installed also. Have you tried that yet?

  • Timezone from portal user settings not used in DateNavigator

    Hi experts
    I'm facing a problem with DateNavigator component.
    There is a WDJ application that used with different timezones in NW Portal.
    In the app there is a DateNavigator which bound to the date context attribute.
    When user select some date in DateNavigator, system converts selected date to the context using system default timezone, rather than timezone in portal user settings. This leads to the fact that the time in context is wrong - the system considers that user works in "Default" timezone but really user works in its own timezone, which different with default.
    If I force TimeZone.setDefault(WDClientUser.getCurrentUser().getTimeZone()) everything works fine, but this is an empty and wrong way.
    I'm using NW 7.2 CE.
    Thanks in advice, how to solve this issue!

    mwohlf wrote:
    After Installing Patch 121657-19 the Calendar Express view seems to mix up
    the default preferences with the user selected preferences.I hit the same issue with a 6.2->6.3 upgraded system and a fresh 6.3 installation. A quick search didn't reveal any pre-existing bugs nor could I find any obvious problems delving into the xsl code -- please log a Sun support case to have this issue looked into further. Please note that in 6.3 calendar express is a deprecated interface so you should be making every effort to move to UWC/CE anyway.
    Regards,
    Shane.

  • Windows 2012 : A domain user who does not belong to the Administrators group can change the passwords

    Hello,
    Can a domain user
    that does not belong to the Administrators group,
    be able to change your password ?
    I tried to create a domain user account
    without administrative access. This user account have
    permission to access Windows Server
    2012 via Remote Desktop.
    I tried to access the same account
    to the Active Directory Users and Computers,
    i was amazed, because the user account it can  changed
    the password for multiple accounts,
    included one administrator account.
    Best regards,
    Ricardo

    Hi Ricardo, 
    I agree with Martin, we can check the membership about this user account. Besides, we can refer to following steps to check the memberships:
    Start the ADUC on windows 2012.
    Right-click the user account and select
    Properties, then click the Member Of tab.
    Check which group is the user account belongs to.
    In addition, i suggest you create a new user account, and check if the new account can change other user’s password.
    Best Regards,
    Erin

  • Removing Windows 2003 Group Policy user settings

    I'm having a difficult time finding what to do.
    I have a windows 2003 domain with many GP settings.  One of which I can't find.  It has to do with the favorites bar in IE.  When a user from a certain OU logs on to any computer with any Windows OS, any favorites saved either to their Favorites
    bar, or even in the Favorites folder, disappear on next logon.  This happens all the time.
    I thought I would create another OU with a BLANK GP and blocked inheritance.  I moved a user from the original OU into the test OU, replicated the changes, and rebooted the computer on which the user would log on.  The user logged on and the settings
    from the original OU still applied.
    I created a completely new user in the test OU and no settings were applied, which is what I want.
    What is the best way to remove the original OU settings from a user that was in that original OU?
    Thank you for any help

    Thanks for the quick response.  There are no scripts that run with the former GPO.
    I did run RSOP.MSC from the test computer and received an error about not being able to read the computer settings, but the user settings were displayed.  The settings the account received were from "Software Restriction Policy" and "Public
    Key Policy".  Nothing shows about any IE settings.  I'm at a loss as to why this is happening and where these dang policies are coming from.
    I've even gone as far as to go to the original GPO, and in Delegation, deny the Apply Group Policy permission to the user.  
    And the only policy that is applying is the test policy.  The others show as either Disabled(link), or Blocked(SOM).

  • Bought an iphone 4s. already tried resetting it. how do i reset user settings

    how do I reset user settings

    Go to Settings > General > Reset > Erase All Settings and Content will remove all of the previous owner material, unless the owner turned on iCloud > Find My and did not turn it off.  In that case you must get the previous owner to turn that off and remove the Apple ID and password or you will not be able to reset the iPhone.

  • Does "reset all settings" remove the provisioning profiles on my iphone?

    Basically have a few installed provisioning profiles and wonder if resetting all settings will remove it.

    Take it to an Apple store to be evaluated; without a working power button, there is no further troubleshooting you can do.
    ~Lyssa

  • Move Users Favorites Folder in Roaming Profile and then Delete?

    Hello,
    My current scenario is as follows for user accounts:
    \\90.244.233.10\userprofile$\User-16 (this is their profile path)
    \\90.244.233.10\userprofile$\User-16\Favorites (this is their favorites folder)
    I need to take the above favorites folder and move it to their userhome$ folder found here:
    \\90.244.233.10\userhome$\%username%\Favorites (these folders already exist) 
    Then delete their complete userprofile$ folder.
    How can I achieve this using powershell? I think the tricky part for me is going through each folder in userprofile$ and looking for a \Favorites folder and then matching that userprofile$ foldername to %username% since they're the same.
    Thank you.

    This worked:
    gc users.txt | % {
    $user = "$_"
    if (Test-Path -Path "\\90.244.233.10\userprofile$\$user\Favorites")
    copy-item -path \\90.244.233.10\userprofile$\$user\Favorites -destination \\90.244.233.10\userhome$\$user\
    remove-item -path \\90.244.233.10\userprofile$\$user -recurse

  • Want to stop using roaming profiles

    Not sure of the best forum to put this in, so sorry if it's in the wrong place...
    I have nearly all my Windows XP users in a policy package being pushed out by Zen 6.5 (sp1, I believe). In that policy package, I have enabled roaming profiles. Now, I'd like to simply turn that off. What will be the ramifications of turning off roaming profiles in that policy package? What are the "gotchya's"?
    Thanks!
    -Farren

    Do you have volatile DLU setup for the users?
    If so they will get the default user desktop on every login.
    Timothy Leerhoff
    Novell Support Forum Sysop
    Success is getting what you want, however Happiness is wanting what you
    get.

  • Querying user groups while using @RunAs on a bean

    Hi,
    I am trying to implement a scenario in which I have three entities:
    - bean A - datastore for all users
    - bean B - implementing logic, filtering results from datastore for specific user based on groups he is in
    - User - calling bean B
    Calling chaing is User -> bean B -> bean A.
    bean B has to query user groups and filter data based on that. I've implemented that using:
    Subject subject = Security.getCurrentSubject();
    for (Principal principal : subject.getPrincipals()) {
    if (principal instanceof WLSGroup) {
    Without any security specified (like @RolesAllowed) it works like charm.
    But I want to add security constraints to the beans:
    @RolesAllowed("admin")
    class A {}
    @RolesAllowed("user")
    class B {}
    The problem is that B cannot acces A methods because it is calling A using 'user' security context.
    I've thought I change it to:
    @RunAs("application")
    @RolesAllowed("user")
    class B {}
    "Application" is an account in group admin.
    Now B can call A. The problem is that security context is switched to "application" on entering B's methods. Inside them I cannot query user groups using method presented above, because I get "application" groups.
    Is there a way to change security context on calling other bean methods? Like using Security.runAs( somehowGetApplicationSubject(), runnable) ??
    Other method I've thought of, but I have no idea how to implement that, is somehow querying weblogic to get groups of SessionContext.getCallerPrincipal(), which returns user account regardless of using RunAs.
    Hope someone made through this problem before,
    Krzysiek

    getBounds() will only generally make sense while the component itself is being rendered. I wouldn't be completely surprised if the framework which gets that component also resets its size once it's done painting the thing.
    If you're calling it from outside the rendering loop, perhaps you could try calling validate() on the component, which should force it to determine its size.
    Failing that, you could possible use getPreferredSize() instead, which will likely obtain a similar result in most cases.

  • Resetting user settings of views to default

    Hi,
    we are using ALBPM Enteprise 6.0 Mp5.
    We have prepared our custom presentations to be used in custom views in the Workspace - meaning we have defined a specific set of columns that we want the user to see.
    Some user have modified his presentation and saved it - thus now everytime he opens the custom view he sees different set of fields as we want him to, even after logout and login.
    How can we force change of the presentation for the view to be back to default? To throw away his changes?
    Can he somehow go back to the default presentation?
    Thanks for help,
    Juraj

    Hi Juraj and everybody.
    I have a simillar problem. The user changes his views and now, when he logs in, a javascript error is throwed and nothing appears on screen.
    Did you make it? I need to reset the user custom layout either.
    Someone knows how to do that?
    Thanks

Maybe you are looking for

  • Anyone using source control AND cloud sharing?

    Hi. I'm curious if anyone has any experience or tips to share about a RoboHelp environment that uses BOTH source control and cloud sharing. My company uses perforce. I'm purchasing a couple copies of TCS5, one for me in California, one for writer col

  • Google docs applications

    Does anyone have any experience/views on the various apps which offer editing and syncing with google documents? there is very little user feedback on the appstore pages. I would like the ability to do simple text editing on existing documents on the

  • Can't Start Portal After Install

    After downloading and installing the of evaluation Portal 4.0 SP1, I get the following message upon startup when I enter the system password that I entered during installation: Starting WebLogic Server .... The WebLogic Server did not start up proper

  • How to get result of string1 minus string2

    I have a field that stores data like: "err_code1; err_code2; err_code3". When the program identifies the err_code1 can be discarded, I want to have this field updated as "err_code2; err_code3". Like: (err_code1; err_code2; err_code3) - (err_code1) =

  • Populate ADF Rich Table taking data from two tables of database

    Hi, Can anyone please guide me as to how I can populate ADF Rich Table taking data from two tables A and B of a database. The condition is I want to fetch row 1 from table A and populate into ADF Rich Table at row 1 then I want to fetch row 1 from ta