Roaming user profile in windows server 2008 r2

Windows Server TechCenter. Sign in. United States English. Ask a question. Quick access. Search related threads. Remove From My Forums. Answered by:. Archived Forums. Windows Server General Forum. Sign in to vote. Thursday, June 23, PM.

Hi Brent, Thanks for your quick response. Restoring the Authenticated Users permisions seems to have done the trick. The domain group policy have to be configured in order to grant permissions to administrators to view user profiles.

In the group policy editor navigate to. Open any partition on the hard disk and create a folder named Profiles you can give any name for the folder. Go to the properties window of the required user, navigate to the Profile tab and enter the profile path as follows. Temporary profiles are deleted at the end of each session, and changes made by the user to desktop settings and files are lost when the user logs off.

Temporary profiles are only available on computers running Windows and later. Folder redirection is a client-side technology that provides the ability to change the target location of predetermined folders found within the user profile.

This redirection is transparent to the user and gives the user a consistent way of saving their data, regardless of its storage location. Folder redirection provides a way for administrators to divide user data from profile data. This division of user data decreases user logon times because Windows downloads less data. Windows redirects the local folder to a central location, giving the user immediate access to their data when they save it, regardless of the computer they are using.

This immediate access removes the need to update the user profile. Right-click the appropriate domain or OU, select New , and then select Group. In the Create Group window, in the Group section, specify the following settings:.

In the Members section, select Add. If you want to include computer accounts in the security group, select Object Types , select the Computers check box and then select OK.

If you do not already have a separate file share for roaming user profiles independent from any shares for redirected folders to prevent inadvertent caching of the roaming profile folder , use the following procedure to create a file share on a server running Windows Server.

Some functionality might differ or be unavailable depending on the version of Windows Server you're using. In the Shares tile, select Tasks , and then select New Share.

The New Share Wizard appears. On the Share Location page, select the server and volume on which you want to create the share. This hides the share from casual browsers. On the Other Settings page, clear the Enable continuous availability checkbox, if present, and optionally select the Enable access-based enumeration and Encrypt data access checkboxes. On the Permissions page, select Customize permissions….

The Advanced Security Settings dialog box appears. Select Disable inheritance , and then select Convert inherited permissions into explicit permission on this object. Set the permissions as described in Required permissions for the file share hosting roaming user profiles and shown in the following screen shot, removing permissions for unlisted groups and accounts, and adding special permissions to the Roaming User Profiles Users and Computers group that you created in Step 1.

If you chose the SMB Share - Advanced profile, on the Quota page, optionally select a quota to apply to users of the share. This GPO allows you to configure Roaming User Profiles settings such as primary computer support, which is discussed separately , and can also be used to enable Roaming User Profiles on computers, as is typically done when deploying in virtualized desktop environments or with Remote Desktop Services.

From the Tools menu select Group Policy Management. Group Policy Management appears. This prevents the GPO from being applied until you finish configuring it. Select the GPO. This step is necessary due to security changes made in MS If you are deploying Roaming User Profiles to user accounts, use the following procedure to specify roaming user profiles for user accounts in Active Directory Domain Services.

If you are deploying Roaming User Profiles to computers, as is typically done for Remote Desktop Services or virtualized desktop deployments, instead use the procedure documented in Step 6: Optionally set up Roaming User Profiles on computers.

If you set up Roaming User Profiles on user accounts by using Active Directory and on computers by using Group Policy, the computer-based policy setting takes precedence. Select all users to which you want to assign a roaming user profile, right-click the users and then select Properties. For example:. To specify a mandatory roaming user profile, specify the path to the NTuser. For more information, see Create mandatory user profiles.

However, when using a special profile, apps are not deployed by default. However, deployed apps in this scenario will leave some data stored on the computer, which could accumulate, for example, if there are hundreds of users of a single computer.