Roaming profiles

[Asha'man X]

Hey everyone

Just a question from my side. Have any of you ever made use of roaming profiles on your Windows network?

It was a feature I always meant to try and roll out at my ex-job but never got around to it. I was looking through my MCSE study books today, and it hit me again that it could have worked wonders - in thoery.

So does anyone have any real life stories they can share?

Thanks

 

[warwickw]

Works great, until some idiot copies large files into their profiles. Then it sucks.

Problem is the profile syncs at start up and at shutdown to the PC the users is logging on to, so if he has large files it takes ages before he can work. Even worse on a large network with remote branches it definatly is a no no, as it could kill the WAN links.

 

[Conradl]

Yes, lots. What you want to know??

Roaming profiles are essential when configuring Citrix/Terminal Services with load balancing as users don't log onto the same machine every time.

It can also help desktop users cause they don't store data on their machines (my docs, desktop etc), so everything should always be backed up. Consider also using redirected folders (your MSCE book should cover it) to reduce the size of the users roaming profile. And don't configure roaming profiles for remote/branch office users; it might just impact logon times ;-)

Anyway, happy to answer any more specific questions that you may have....

 

[The_Unbeliever]

Works great, until some idiot copies large files into their profiles. Then it sucks.

Problem is the profile syncs at start up and at shutdown to the PC the users is logging on to, so if he has large files it takes ages before he can work. Even worse on a large network with remote branches it definatly is a no no, as it could kill the WAN links.

So that's why they strongly disapprove of using roaming profiles over WAN links...

Best not to implement it then... you will ALWAYS get the user who will copy a huge amount of large files into their profiles.

 

[Conradl]

Large profiles can also impact the server that hosts the roaming profiles. 10 users logging on at the same time will cause problems and slow logon times even on a LAN.

Thats why its a good idea to use Redirected folders, and limit the size of the users' profile. Redirected folders move the Desktop, MyDocs and AppData out of the profile and onto a file share. Then the use profile is only a few megs....

 

[Ry4n]

So that's why they strongly disapprove of using roaming profiles over WAN links...

Best not to implement it then... you will ALWAYS get the user who will copy a huge amount of large files into their profiles.

I agree, although you could always implement quotas

 

[ghalied]

Works great, until some idiot copies large files into their profiles. Then it sucks.

Problem is the profile syncs at start up and at shutdown to the PC the users is logging on to, so if he has large files it takes ages before he can work. Even worse on a large network with remote branches it definatly is a no no, as it could kill the WAN links.

The above is incorrect as this is not the behaviour of a roaming profile, the profile only gets pulled onto the machine when it's the 1st time the user logs onto a new machine, the profile then only sync's what has changed since the last time the user logged on, this is during the logoof/shutdown period.

Backups of the profile directory is very important. I've never eperienced any problems with users logging on via remote sites and pulling down profiles for the 1st time a slow 2mb link.

You can set your gpo to limit what gets stored on the profile especially on the desktops.

 

[Conradl]

The above is incorrect as this is not the behaviour of a roaming profile, the profile only gets pulled onto the machine when it's the 1st time the user logs onto a new machine, the profile then only sync's what has changed since the last time the user logged on, this is during the logoof/shutdown period.

Backups of the profile directory is very important. I've never eperienced any problems with users logging on via remote sites and pulling down profiles for the 1st time a slow 2mb link.

You can set your gpo to limit what gets stored on the profile especially on the desktops.

Works great, until some idiot copies large files into their profiles. Then it sucks.

Problem is the profile syncs at start up and at shutdown to the PC the users is logging on to, so if he has large files it takes ages before he can work. Even worse on a large network with remote branches it definatly is a no no, as it could kill the WAN links.

Kinda saying exactly the same thing eh??

 

[ghalied]

er......... no.......2kb sync vs a full sync is not the same

 

[Conradl]

Easy there ghalied, was just pointing out that WW never said that it was a full sync ;-)

 

[ghalied]

sorry.................bad mood, manager decided to reset all the permissions on the domain to default on a Friday eve and now the crackberry server is not working, damn fool

 

[Conradl]

Ouch! When locking down any IT system, ALWAYS start by removing the IT managers admin rights first....

 

[Asha'man X]

Thanks for all the replies guys, I appreciate it.

I wasn't really looking to implement it, was just curious to hear stories from those who have used it. I've always thought that in theory it sounded like a great feature, easy to backup and save user settings, as well as providing the same desktop across the network for the user.

However, the whole sync thing kind of put me off. I know that it's not the same sluggish thing it once was, but I've learnt just how big a user profile can get sometimes. More and more applications store data there, temporary internet files, and the dreaded Outlook PST's.

The PST question really intrigues me. For example, a user logs on and gets their profile. Works with Outlook and sends/receives mail. PST size changes. Now they log off. The bulk of the PST file hasn't changed, so does Windows do some sort of delta update, or does it totally resync the file? I have seen some big PST's, and the thought of having that kind of traffic to and from a server bothered me for the possible performance hit.

I guess it's possible to redirect My Docs and all the rest and implement size restrictions, which should help. I know you can also have the PST file someplace else, but that involves a lot of work reconfiguring the Outlook clients before you can upload the profiles to the server. I don't know of any GPO setting that can configure Outlook to find the file somewhere else?

Pity though, because in theory it always felt like the solution to problems I had.

 

[ghalied]

You can use a GPO once you have the Office 11/12 .adm files loaded in group policy to change the location of the .OST and .pst files or once you've got a new user immediately change the .pst storage folder.

 

[Asha'man X]

You can use a GPO once you have the Office 11/12 .adm files loaded in group policy to change the location of the .OST and .pst files or once you've got a new user immediately change the .pst storage folder.

Ah, I didn't know that. I always had a feeling there were such GPO's around, but I never got around to looking for them. I'll see if I can find them and play around.