Zen 3.2 DLU and Local profiles

We're a high school and DLU has been great in the labs, because we don't
want students to alter any local settings such as wallpaper, etc. Works
great. For teachers and staff, I have begun disabling workstation manager
and setting them up with a static local account so they can have more
flexibility in their local settings. I don't want to do anything with
roaming profiles. Is there a way to setup workstation manager (in Zen 3.2)
to basically create a NON-volatile local user the first time through, and
then to authenticate through and manage that account going forward? Is it
just a matter of checking "Manage existing account" and unchecking
"volatile user" in the user package??
Thanks - Eric

Yes but..............
Any existing Volatile DLU accounts will remain volatile.
The Volatile/Non-Volatile nature of an account is determined upon creation.
[email protected] wrote:
> We're a high school and DLU has been great in the labs, because we don't
> want students to alter any local settings such as wallpaper, etc. Works
> great. For teachers and staff, I have begun disabling workstation manager
> and setting them up with a static local account so they can have more
> flexibility in their local settings. I don't want to do anything with
> roaming profiles. Is there a way to setup workstation manager (in Zen 3.2)
> to basically create a NON-volatile local user the first time through, and
> then to authenticate through and manage that account going forward? Is it
> just a matter of checking "Manage existing account" and unchecking
> "volatile user" in the user package??
> Thanks - Eric

Similar Messages

  • DLU and local "Administrator" account

    I have another network admin that has given me some information of the
    subject heading that I don't quite understand...
    They are using ZEN 3.2 with DLU on a Citrix server. This way, when a
    student logs in via Citrix and gets logged in, ZEN policies restrict
    them to what they can and cannot do on the local machine. Since they
    need elevated rights to the registry (for whatever reason), they use
    the "Administrator" account and are members of the "Administrator"
    group on the local machine.
    I simply don't understand it...When I use DLU (on workstations mind
    you), I have the following for the policy...
    ================================================== =======
    Enable DLU
    Manage Existing User Account (if any)
    Use eDirectory Credentials
    Nothing underneath for the username, but they are members of "Users"
    ================================================== =======
    His configuration is as follows...
    ================================================== =======
    Enable DLU
    Manage Existing User Account (if any)
    Username: Administrator
    Member of: Administrators, Users
    ================================================== =======
    He tells me that with this config when a student logs in, they
    automatically use the local "administrator" account. That's what I
    don't get.
    My config makes a new user on the workstation if they haven't logged
    into the machine before. I thought at times it would be handy to make
    3 accounts locally, such as "Staff" "Student" and "Administrator" for
    instance, but didn't realize this config he talks about could make it
    happen. Can it? I still don't get it at this point. I'm reading my
    manuals and what-not and am not yet convinced.
    What I'm hung up on is the password syncing. If I am logging in as
    "bbinder" with a password of "hello" (NDS credentials) but the local
    "administrator" password is "goodbye", why wouldn't it prompt me for
    the administrator password since it's not the same as mine? There
    isn't an "existing account" to manage in his config. This (I assume)
    means it uses the account specified in the name field you can type in.
    In his case, this is "administrator" as typed in above. But since the
    passwords aren't the same, how does it use the local "administrator"
    account? Does it overwrite the password? Does it create a new
    administrator account and call it "administrator.001" ??? Not quite
    getting it yet.
    Anyone want to try and help me with this? Some people think there
    would be some big benefits by having everyone use the local
    "administrator" account, for instance because it has full rights to
    the registry and file system. Plus, GP's will still be in effect, so
    they would be locked out of the parts of the workstation you want to
    lock them out of anyway.
    Other advantages would include a "pre-made" user profile that has
    already been secured and populated with the various things deemed
    acceptable by the company's/school's policies.
    Also, no delay on login when a new local account has to be created.
    Since they are all using the same account being specified in the
    policy, it would be nice and fast to login to.
    Finally, no more prompting new users to enter in their names and
    initials when MS Office apps run for the first time under a user
    account. Maybe this could be avoided with a policy, but this would
    suffice as well.
    Sorry it's so long, but I appreciate any help you guys can offer to
    clear this up for me.
    Brian

    Craig,
    I'm sorry - I thought I replied on this post but I didn't.
    Just wanted to say thanx for taking the time to explain this to me.
    Brian
    On Fri, 20 Aug 2004 10:46:44 GMT, Craig Wilson
    <[email protected]> wrote:
    >DLU simply changes the "Administrator" accounts password in this instance.
    >
    >How do you know what the current "Administrator's Password"? You don't
    >and you just pray DLU or something does not break.
    >
    >Instead of using the "Administrator's Account", just use any other name of
    >an account that does not exist like "SQUAREPANTS".
    >
    >DLU will create the account and put it in the administrators group.
    >All users will share the same profile so you get all the benefeits of the
    >other system, without the risk of losing access to the box.
    >
    >I actually never give user's local admin rights nor do I have user's share
    >profiles, but .............

  • AppV 5 slow to refresh with roaming profile (no redirects) but fast with local profile

    Hi,
    I have an issue I can't get thought out. I have an AppV5 SP3 full infra, with SMB share and local caching of packages enabled. Everything works from a functional level. However I have an issue where users with a roaming profile get a very slow AppV refresh
    during login.
    I created a few testaccounts, a few with local profile and a few with roaming profiles. For these testusers there are NO folder redirects. The only difference between them is local profile or roaming profile.
    When I login with a local-profile user initially, the AppV client rather slowly refreshes the applications and shortcuts. It generates quite some CPU load on the RDS host, but as soon as the shortcuts are placed everything is fine. When I log that user off,
    and log in again, the shortcuts are there immediately and I can immediately start the applications (Office 2010 for example). Blazing fast. Also when logging in, the refresh-UI is there for about half a second, it really flashes and it's done.
    Then with a testuser with roaming profile, the initial refresh is about the same. But when I logoff that user and login again, it's all very slow. The shortcuts are there but blank initially, it takes about 5-10 seconds to get the correct icon. It takes
    much longer before the refresh actually starts (sometimes up to 30 seconds after login), and it takes 5-10 seconds to do the refresh, with 100% cpu load on the thread AppVclient.exe is running on. Also right after loging in when the shortcuts are blank they
    don't work until they get the proper icon. WHen everything is refreshed it works all fine though. It's just painfully slow at start.
    I don't understand this. I can reproduce this every single time. Without folder redirects I don't see the difference between roaming and local profile from AppV perspective, as the roaming profile is of course copied to the server and in that sense the server
    just works with a local copy anyway.
    Anyone encountered this, and how to troubleshoot, or better fix this?

    So is the fact that there is a 5-10 second delay during refresh actually an issue? What I mean by that is - are any users comparing the local profiles with roaming profiles experience, or complaining that the delay is there?
    Roaming profiles and Folder redirection are of course very simple to configure; however for the best user experience I recommend managing profiles with a real profile management solution.
    If you have MDOP, then you'll also have access to UE-V. You've mentioned your environment is RDS, which sadly doesn't get UE-V, even though you have App-V.
    Here are some resources on UE-V + App-V and what's required when managing App-V with roaming users:
    How To Use Microsoft User Experience Virtualization With App-V Applications
    Application Publishing and Client Interaction: Roaming registry and data
    Here's also some resources on App-V performance worth looking at:
    Performance Guidance for Application Virtualization 5.0
    App-V Performance Best Practices: New Project VRC White Paper
    Please remember to click "Mark as Answer" or "Vote as Helpful" on the post that answers your question (or click "Unmark as Answer" if a marked post does not actually
    answer your question). This can be beneficial to other community members reading the thread.
    This forum post is my own opinion and does not necessarily reflect the opinion or view of my employer, Microsoft, its employees, or other MVPs.
    Twitter:
    @stealthpuppy | Blog:
    stealthpuppy.com |
    The Definitive Guide to Delivering Microsoft Office with App-V

  • Local and Roaming profiles not being created

    Hello all,
    I'm in need of help and I wondered if there was anyone out there with some suggestions.
    The problem is that one of our sites has Netware 5 and Zfd3.2 and there are no longer any roaming profiles or local profiles being created. Volatile user is not used. Roaming profiles go to the users home directory. All file rights are fine. DLU is still working. Novell client on W2K workstations is 4.90. All other sites appear to be OK.
    I suspected that the user policy was at fault and so created a test user package and associated a test user to it = same result.
    I have checked from top to bottom and compared all settings to other sites and can see no difference or anything unusual. I've been working on this for 2 days now and I'm going grey and bald.
    Any suggestions anyone?
    I'll buy a pint for anyone with the answer - LOL.
    Thanks in advance
    Alan Graham
    email: [email protected]

    elvisgraham,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • Personalization - Locale Profiles - Two Filters / OR not And!

    Hi all,
    I use the Dynamic Recipient functionality in 3.1 with Personalization. I set two different Filters in Locale Profiles. So I map two dynamic recipient fields to a report field. When I publish this publication (only 1 Webi-File inside) it works nearly perfect.
    The only problem I have is, that it makes a OR filter with this fields and not a AND. Is there any possibility to change this?`
    Thanks for your Feedback,
    Dominik Imark
    Edited by: Dominik Imark on Feb 19, 2010 1:24 PM

    >should I re-callibrate from a complete beginninng for the two different times of the day"?
    I don't.
    make sure your lighting is not overly bright in the daytime and not too dark at night. You should calibrate every 2 weeks at a minimum.

  • Environment variables /etc/skel/local.profile and /etc/skel/.profile

    Hi
    I have a problem to provide the working environment for ALL THE USERS :/ with all the files in this directory:
    */etc/skel/*
    In Oracle Documentation says: You can use these files ( */etc/skel/local.profile* ) as a starting point and then modify them to create a standard set of files
    that provide the work environment common to all users. Defines the user's environment at login.
    I edit the file */etc/skel/.profile* for put the JAVA_HOME variable for all the users of this way
    nano /etc/skel/.profile
    export JAVA_HOME=/usr/bin/java *#I added this variable*
    export PATH=/usr/bin:/usr/sbin
    if [ -f /usr/bin/less ]; then
    export PAGER="/usr/bin/less -ins"
    elif [ -f /usr/bin/more ]; then
    export PAGER="/usr/bin/more -s"
    fi
    case ${SHELL} in
    *bash)
    typeset +x PS1="\u@\h:\w\\$ "
    esac
    Later I check the parameters to add the user
    useradd -D
    group=staff,10 project=default,3 basedir=/export/home
    skel=/etc/skel shell=/usr/bin/bash inactive=0
    expire= auths= profiles= roles= limitpriv=
    defaultpriv= lock_after_retries=
    adduser -m testuser
    passwd testuser
    I log on as testuser and check if the variable JAVA_HOME is available, but no.
    Why it can not see that variable as available? THAN YOU FOR YOUR HELP

    Try local.profile instead of .profile
    If there is one already there then rename it first.
    alan

  • Office 2013 hangs when saving files to local profile locations on Windows 2012 server

    We installed Office 2013 a few weeks ago instead of Office 2003 on a Windows 2012 standard terminal server. We installed the last updates and Office is up-to-date now, but we experience problems with saving word, excel and powerpoint documents when we start
    a new/clean document. It's not possible to save our documents to the local profile (desktop, documents etc.), but it's no problem to save our stuff to a network share on a different server. 
    Word is not responding after pressing save or save as and after a few seconds we see the 'microsoft is looking for a solution and will restart microsoft word'. 
    We did a complete reinstall of Office 2013 and removed the old installation with the removal tool from the microsoft website, without luck. We have the same saving issues with Office 2010, so it's not an Office 2013 issue. 
    We were looking in the access/rights on the terminal server, because we thought that it was an access/rights issue. But unfortunately we have the same problem with an domain admin user. 
    I tried to disable DEP and my AVG 2012 antivirus, but this steps are also not the issue.
    I'm looking for a solution and i'm working on this case for a few days now. It gives me a headache when i'm thinking about a clean installation of this server. So please contact me when you have a solution or a tip to solve this problems! 
    Thanks!

    Hi,
    In regarding of the issue, it may be caused a lot of reasons. Please check to see whether the following link is helpful:
    https://support.microsoft.com/kb/313937/en-gb
    http://support.microsoft.com/kb/921541/en-gb?p=1
    http://support.microsoft.com/kb/271513
    Then Office hang when saving the file also may be caused by a printer installation.
    Check to see the following link:
    http://blogs.technet.com/b/the_microsoft_excel_support_team_blog/archive/2012/04/12/excel-hangs-or-becomes-unresponsive-when-saving-or-closing-a-workbook.aspx
    If you could upload the event log, I'll do deeply
    research.
    Thanks,
    George Zhao
    Forum Support
    Come back and mark the replies as answers if they help and unmark them if they provide no help.
    If you have any feedback on our support, please click "[email protected]"

  • Firefox 35.0 update loses Windows desktop and user profile

    Recently updated Adobe Reader and Flash player and Firefox to 35.0 on Windows 8.1 Dell laptop. This resulted in the administrator user profile failing. Windows Event Log has:
    Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.
    Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.
    Windows was unable to load the registry. This problem is often caused by insufficient memory or insufficient security rights.
    Windows cannot load the locally stored profile. Possible causes of this error include insufficient security rights or a corrupt local profile.
    DETAIL - The process cannot access the file because it is being used by another process.
    for C:\Users\Andy\ntuser.dat
    Non-administrator user is ok. Reboots did not help. I did system restore and all was well. Then I only updated Firefox to 35.0 and got same problem. Restoring again fixed the issue.
    Windows updates were last installed 22-Dec-14 and there are currently 9 updates waiting to be installed. Adobe is also notifying tht updates are available for Reader & Flash

    This is appears to be a Windows problem.
    Yes Firefox may not be working but it would appear to be because of a Windows problem.
    * See ''You receive a "The User Profile Service failed the logon” error message '' http://support.microsoft.com/kb/947215
    I do not think installing or upgrading Firefox could be expected to produce such an error, but if it did I would have expected this forum, and the input feedback to have had a sudden spike in complaints.
    I am not noticing anything on this forum. The input feedback no longer has the useful pictorial graphics, but interactive results are here if you wish to look through them
    * https://input.mozilla.org/en-GB/?product=Firefox&version=35.0&platform=Windows%208 <br /> Windows 8, Fx35, 7days
    Note people are probably more likely to complain than compliment. it is not at all unusual to have more negative than positive reports.
    You could try asking on a Windows forum. Try doing a web search if you do not already have some favourite forum. Or have a go with this one
    * http://www.eightforums.com/

  • Force Active Directory Users to Log Into a Shared Local Profile.

    I've searched long and hard for an answer to this but I've found very little info on it so I'm starting to wonder if it's at all possible.
    On some of our "Presenter PC's" at work it has been deemed that the creation of a new account from the Default profile takes too long when logging into Active Directory and slows presenting down too much. Our Default profile is probably around 120Mb due to
    the contents of the image after deployment and how every application is tailored for use hence the AppData folder takes the bulk of the size up and it's not an option to remove it.
    These PC's are (for now at least but hopefully not for much longer) locked down by Deep Freeze which resets all changes to all files when the PC is rebooted so a shared profile is not a problem at this point in time.
    What I want to know is whether there is ANY way to make it so that a user authenticating to Active Directory can ALWAYS be forced into a pre-configured, local profile running on Win 7 32/64 Pro?
    I've been looking at credential providers and replacing USERINIT.exe. I'm just not 100% sure which part of the process actually tells the PC which profile to use. I know that the registry is checked for the user GUID and if not present creates a new entry and
    copies the Default profile but I don't know quite where this is called and how to modify it.
    My programming knowledge limited to a bit of CMD and AutoIt but I do know a few coders so if we really have to get our hands dirty on this it isn't the end of the world.
    I should also add I've recently been toying with taking the AppData folder outside of the Default profile and creating a SymLink to it but upon copying the Default profile to a new profile (much quicker and more acceptable) the SymLink is lost and replaced
    with a relatively empty set of folders which can't be deleted and replaced with a SymLink because the LSASS.exe process is using it and obviously you can't stop that process...
    Making the PC log into a local profile on startup is also not an option because a user MUST log into AD to not be in breach of our AUP and all network drives must be availalbe (mapped by GPo and login script).
    Any help is more than welcome at this point in time as I've pretty much exhausted all avenues that I know of and have turned to you helpful folk.  Cheers

    Hi,
    For mandatory profile, I suggest you refer to the following articles:
    Customize the default local user profile when preparing an image of Windows
    http://support.microsoft.com/kb/973289
    mandatory profiles
    http://social.technet.microsoft.com/Forums/en/w7itproinstall/thread/d2406a55-e053-45c5-b064-bf009c4bfafc
    Hope this helps.
    Vincent Wang
    TechNet Community Support

  • Forcing server profile over local profile

    I have a user on in my office; he uses a laptop for all his work. How do I get him to log onto the server as a mobile user [I have already successfully setup other mobile accounts]?
    His server profile has the same username and password as the profile on the on his laptop. When he logs on to his laptop it always picks up his local profile, I need it to pick up the server profile so the server can sync his home folder with the server profile.
    Thanks for any help offered,
    Paul

    Hi Paul,
    You will need to delete the local account on his computer. This will force home to use the networked Open Directory account. make suer you have a good backup of his data first.
    The way I do this is:
    1. delete local account, creating archive of user data
    2. move archive to users/shared
    3. login using user's network account
    4. copy user data from users/shared/user_archive.img
    NB> copy the contents of Library, rather than the folder itself
    5. Log out
    6. Login again as user
    7. use System Prefs > accounts to change user's password.
    hth,
    b.

  • Difference between Central and Local Repository

    Dear Experts:
    I'm relatively new to Data Integrator world. The question I have is around setting up a new Central Repository. As I understand, the steps involved in creating a central repository are: 
    1. Setup as a DI account (e.g. PRODREPO) 
    2. Create Central Repository tables
    My question is how does the DI application know that PRODREPO is a central repository and not a local. What differentiates a local vs. central repository?
    Any help or pointers is greatly appreciated.
    Thank you.

    repository type is stored in the DI repository, using which all DI application differentiate a local, profiler, central repository
    certain functions are not applicable to central repo like Job Execution, Login from Designer, Adding to Job Server

  • Flash player 10 and roaming profile

    Hi,
    Some of my clients are having similar issues since they've upgraded from flash player version 9 to version 10. They all use roaming profile, i.e user documents and settings are stored on the server rather than individual machines.
    The problem is that when they log in my application their login is successful but they don't get past that stage. This is because upon login, the application tries to write into a shared object but I believe it fails to do so.
    If they revert back to Flash player 9, it's all fine. Client with no roaming profile don't experience this issue.
    Therefore I believe there are some changes in Flash player 10 security. What should I do ?
    Thanks

    Hi !
    I knew somebody from Adobe would finally reply
    Well, I've actually come across this bug report this afternoon ! And I've asked my client to try the suggested workarounds. That was his reply :
    ' These work arounds are no good I’m afraid.  These work arounds mean we have to mess around with file redirection which we don’t want to do.  The reason these work arounds do work is that there is a Desktop folder in the local profile.  When you re-direct the Desktop the local Desktop gets moved to the network.  If we then re-create a local Desktop folder we break folder re-direction and there is potential for the user to have the wrong desktop displayed, or have files stored locally on their PC not being backed up. '
    As you can see he's not so keen to change any network settings.
    Do you have any other suggestions ?
    Thanks

  • Remote and local interface on same ejb 3.0 bean instance

    Hi,
    Is it posible to get remote and local interface on same ejb 3.0 bean instance.
    For example get local interface of a bean and than pass it as remote to client.
    Both interfaces must operate on same bean instance.
    Thanks
    Zlaja

    yes. You can implement multiple interfaces on a single class, so you can add a local and a remote interface. One trick to avoid duplicate code is to simply make the remote interface extend the local interface; then you only have to add the @Remote annotation and you're done.
    For example get local interface of a bean and than pass it as remote to client.You don't pass an instances to a client, a client looks up a remote instance of the bean through JNDI.

  • Logical system and partner profile configuration

    Hi,
    I have a SQL server which is defined as a Business system in my landscape. It is sending records to ECC 6.0 which makes it a JDBC to IDOC scenario (inbound IDocs)
    First question is do I have to mention a logical system name for the SQL server Business system too ?
    Second question is do I create a Logical system in the ECC system (BD54/SALE) for the SQL system or would it be for the client of the ECC system itslef?
    Third question is do I maintain partner profile configurations in WE20 for the SQL business system or for the ECC business system?
    Thanks in advance.
    Cheers,
    S

    Hi Sam,
    > First question is do I have to mention a logical system name for the SQL server Business system too ?
    Yes, In SLD You have to specify logical system name of the SQL server business system while creating SQL system.After importing business system into Integration directory,in Adepter-Specific Identifiers  you can see logical system name of SQL server business sytem which you defined in SLD.
    > Second question is do I create a Logical system in the ECC system (BD54/SALE) for the SQL system or would it be for the client of the ECC system itslef?
    Yes,You have to create Logical system in ECC system for SQL system(Logical system name must be with the same name as logical system name you have given in XI SLD in previous question)
    > Third question is do I maintain partner profile configurations in WE20 for the SQL business system or for the ECC business system?
    In WE20 You have to maintain partner profiles for SQL server Logical system
    For example: If SQL server Business system name is SQLDEVBS and logical system name is SQLDEVLS
    In ECC you have to create logical system as SQLDEVLS and
    Partner profiles for SQLDEVLS in WE20.
    Please let me know if you have any issues.
    Cheers,
    JAG

  • Remote and local databases

    let say that i access a oracle form through the web and that form access data from two distributed databases, then will there be a remote database and local database for the user or all the databases will be remote databases to the user

    In my opinion.
    using local databases -- access tables without DB_link
    using Remote databases -- access tables through DB_link

Maybe you are looking for