Help with User Profiles in Windows Server 2008

Page 1 of 4 123 ... LastLast

  1. Posts : 19
    Windows 7 Pro 64 bit
       #1

    Help with User Profiles in Windows Server 2008


    Hey guys and ladies. So i have scoured the forums looking for answers to my problem and have yet to get a definitive fix. It may just be me though lol.

    So I am an IT technician for some schools and i have just implemented a new server. It is running Windows Server 2008. My client machines are running windows 7 in the domain. I have created all my user accounts already and set everything up. However, i have created one universal Student Account for all students to login with. Heres my issue. The students only have access to computers in our computer lab. We have about 20 machines in there and they run Windows 7 Pro. So lets say one student logs in and adds a bunch of items and shortcuts to the desktop. Now all client machines also have these junk icons on their desktops when another user logs in on any machines in the lab under the student profile. Is there something i can do to fix this? And since i have already created the Student Account can anything i apply help to reverse what they have already done, ie. added a pile of shortcuts to the desktop etc.

    I tried logging into a client machine (under the student profile) and in their default roaming profile, deleted all the desktop icons,i even tried locally changing the ntuser.dat to ntuser.man after i had deleted the icons... but as soon as i log out and back in the icons all return. I assume this is because the roaming profile desktop changes are stored server side on the share? So, I also tried locating the ntuser.dat file for the student profile on the network path where i assumed the profiles are stored in Student.V2 but there is no ntuser.dat at that location, only an ntuser.ini file.... just need some help to figure out what im doin wrong. Ideally i would like to prevent the student account from being able to edit anything on the desktop or delete anything off it as well. I have no problem creating a new student account as well since no important info has been stored yet on this profile, but i would like to do it correctly this time so any info is greatly appreciated. And if i didn't explain things very well, feel free to ask me any additional questions if it will help you guys help me ! Thanks for your time

    P.S. i hope that even though this is a server question its ok in the windows 7 forums. If not i apologize
    Last edited by ITtechie7783; 22 Oct 2014 at 20:09. Reason: changes
      My Computer


  2. Posts : 3,904
    Windows 7 Ultimate 64-bit
       #2

    The reason the Icons return is because i believe you are using a Citrix environment, if you was to look into your Citrix server farm under the Server they are connecting to have a look at there roaming profile there, it may be a wise idea to limit their privileges so they cannot save stuff on their desktop.
      My Computer


  3. Posts : 1,992
    10 Pro x64
       #3

    Sounds like you are doing folder redirection, idk why Harrie thinks your using Citrix as that behavior says roaming profile normal domain to me. Regardless look for a folder on the server pertaining to FOLDREDIR or the like. They could have named it anything. and also take a look in your GPO for I believe under User Configuration\Windows Settings\Folder Redirection. look in there for a setting for your redirects and set up the desktop to not be touched then apply your gpo with cmd "gpupdate" on the server and client machines or just reboot all of them starting with the server.
      My Computer


  4. Posts : 3,904
    Windows 7 Ultimate 64-bit
       #4

    rvcjew said:
    Sounds like you are doing folder redirection, idk why Harrie thinks your using Citrix as that behavior says roaming profile normal domain to me. Regardless look for a folder on the server pertaining to FOLDREDIR or the like. They could have named it anything. and also take a look in your GPO for I believe under User Configuration\Windows Settings\Folder Redirection. look in there for a setting for your redirects and set up the desktop to not be touched then apply your gpo with cmd "gpupdate" on the server and client machines or just reboot all of them starting with the server.
    Because when a user logs on through Citrix it copies there roaming profile folder...

    and 9/10 schools or other big agencies would use citrix....
      My Computer


  5. Posts : 1,992
    10 Pro x64
       #5

    HarriePateman said:
    rvcjew said:
    Sounds like you are doing folder redirection, idk why Harrie thinks your using Citrix as that behavior says roaming profile normal domain to me. Regardless look for a folder on the server pertaining to FOLDREDIR or the like. They could have named it anything. and also take a look in your GPO for I believe under User Configuration\Windows Settings\Folder Redirection. look in there for a setting for your redirects and set up the desktop to not be touched then apply your gpo with cmd "gpupdate" on the server and client machines or just reboot all of them starting with the server.
    Because when a user logs on through Citrix it copies there roaming profile folder...

    and 9/10 schools or other big agencies would use citrix....
    I would use it too but he/she never mentioned it and if windows server is set up for folder redirection it will do the same thing.
      My Computer


  6. Posts : 19
    Windows 7 Pro 64 bit
    Thread Starter
       #6

    nope we are not using a citrix environment nor have i changed anything in group policy yet. I do have my profiles stored on the server as windows server 2008 guide suggests. Heres how i have each users profile set up:

    each user has a account profile created on the server. I also have a profile path set up for storing the profiles as windows suggests in its server 2008 guide.

    Heres an example. Once i created all my users i then went to Start -> Administrative Tools -> Active Directory Users and Computers. In the the properties window of the required user, navigate to the Profile tab and enter the profile path as follows. Heres an example

    \\servername.domainname.com\Profiles$\%username%

    This will create the user’s profile copy inside the profile folder the first time the user logs in.


    So each user has their profile stored on the server but i still dont see any ntuser.dat file within the profile folder on the server. When i am on a client machine and i log on as student for example, if i hit start and type in \\mydomainname (<<example) i can then see my folder but that folder is just for that specific user to save his her documents. I need a way to get to the users profile data which i am assuming is stored on the server.

    I am even just looking for an easy way to delete the junk off the desktop that will stick so when they log in again its gone. I need to find the correct way to delete the stored info that keeps adding the crap back to the desktop. I will take some pictures my next day at work as well if it helps.

    And what is crappy is if i log into the server and try to edit anything in a users account i am denied. It is something windows has set up on purpose. If i give myself ownership on an already created profile it can break or corrupt the profile from what i have read. However this may be the way for me to get to that student profile to edit etc. Heres what i mean:

    https://social.technet.microsoft.com...um=winserverGP
      My Computer


  7. Posts : 19
    Windows 7 Pro 64 bit
    Thread Starter
       #7

    P.S. even if i cannot fix this current profile issue(which i really want to do) i am also looking for suggestions for if i create a new profile and want to keep a user from trashing the desktop. Or, at least a way where if they do trash the desktop, i can clean it back up without it reverting to the old desktop.

    Is my solution kind of in the above link? In other words, if as an admin i can access their profile folder on the server i am thinking i would then have access to their roaming profile folder. So i could delete the stored info that is making the desktop revert even after i delete it on the client users machine. My issue is i assumed the user themselves would be able to edit their own profile seeing as each user has their own profile on the server. Yet when the user logs on to their client account (as student for example) and tries to delete the extra junk icons etc. off the desktop it always reverts and puts them back. It doesnt make sense that the user cannot delete without it reverting and the icons coming back... (Note** these icons they are trying to delete are something the user themself originally added to their desktop.) So any time the user adds new things to the desktop, somehow the profile data file which i think its maybe ntuser.dat, saves this info but will not save when they delete......

    Again i have not added anything to group policy etc. to stop users from deleting etc.
      My Computer


  8. Posts : 19
    Windows 7 Pro 64 bit
    Thread Starter
       #8

    any ideas? Thanks !!!!
      My Computer


  9. Posts : 1,992
    10 Pro x64
       #9

    I currently don't have server i can go into atm but you need to set up on your group policy that they can not edit their desktops. This a how to do it in windows 7 policy but it should look similar in your group policy editor for the server. Just find your GPO and right click it and pick edit then make your changes then run in a elevated cmd prompt "gpupdate" on the server and re logg on your test clients. Make sure the gpo you edit is set to affect that userbase though, if it is the default one you edit it should be system wide.
    Attached Thumbnails Attached Thumbnails Help with User Profiles in Windows Server 2008-ss-2014-11-01-03.08.16-.png  
      My Computer


  10. Posts : 19
    Windows 7 Pro 64 bit
    Thread Starter
       #10

    Thanks for the info. However, if the profile is already created i dont think this update to gp will help correct? In other words it will work on a new profile that has not yet been altered, or am i wrong?

    I keep hearing something about changing ntuser.dat to ntuser.man as well. Anyone know if this is an option as well?
      My Computer


 
Page 1 of 4 123 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 13:50.
Find Us