Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Help with User Profiles in Windows Server 2008

22 Oct 2014   #1
ITtechie7783

Windows 7 Pro 64 bit
 
 
Help with User Profiles in Windows Server 2008

Hey guys and ladies. So i have scoured the forums looking for answers to my problem and have yet to get a definitive fix. It may just be me though lol.

So I am an IT technician for some schools and i have just implemented a new server. It is running Windows Server 2008. My client machines are running windows 7 in the domain. I have created all my user accounts already and set everything up. However, i have created one universal Student Account for all students to login with. Heres my issue. The students only have access to computers in our computer lab. We have about 20 machines in there and they run Windows 7 Pro. So lets say one student logs in and adds a bunch of items and shortcuts to the desktop. Now all client machines also have these junk icons on their desktops when another user logs in on any machines in the lab under the student profile. Is there something i can do to fix this? And since i have already created the Student Account can anything i apply help to reverse what they have already done, ie. added a pile of shortcuts to the desktop etc.

I tried logging into a client machine (under the student profile) and in their default roaming profile, deleted all the desktop icons,i even tried locally changing the ntuser.dat to ntuser.man after i had deleted the icons... but as soon as i log out and back in the icons all return. I assume this is because the roaming profile desktop changes are stored server side on the share? So, I also tried locating the ntuser.dat file for the student profile on the network path where i assumed the profiles are stored in Student.V2 but there is no ntuser.dat at that location, only an ntuser.ini file.... just need some help to figure out what im doin wrong. Ideally i would like to prevent the student account from being able to edit anything on the desktop or delete anything off it as well. I have no problem creating a new student account as well since no important info has been stored yet on this profile, but i would like to do it correctly this time so any info is greatly appreciated. And if i didn't explain things very well, feel free to ask me any additional questions if it will help you guys help me ! Thanks for your time

P.S. i hope that even though this is a server question its ok in the windows 7 forums. If not i apologize


My System SpecsSystem Spec
.
23 Oct 2014   #2
HarriePateman

Windows 7 Ultimate 64-bit
 
 

The reason the Icons return is because i believe you are using a Citrix environment, if you was to look into your Citrix server farm under the Server they are connecting to have a look at there roaming profile there, it may be a wise idea to limit their privileges so they cannot save stuff on their desktop.
My System SpecsSystem Spec
23 Oct 2014   #3
rvcjew

7 Pro x64, 10 Pro x64
 
 

Sounds like you are doing folder redirection, idk why Harrie thinks your using Citrix as that behavior says roaming profile normal domain to me. Regardless look for a folder on the server pertaining to FOLDREDIR or the like. They could have named it anything. and also take a look in your GPO for I believe under User Configuration\Windows Settings\Folder Redirection. look in there for a setting for your redirects and set up the desktop to not be touched then apply your gpo with cmd "gpupdate" on the server and client machines or just reboot all of them starting with the server.
My System SpecsSystem Spec
.

23 Oct 2014   #4
HarriePateman

Windows 7 Ultimate 64-bit
 
 

Quote   Quote: Originally Posted by rvcjew View Post
Sounds like you are doing folder redirection, idk why Harrie thinks your using Citrix as that behavior says roaming profile normal domain to me. Regardless look for a folder on the server pertaining to FOLDREDIR or the like. They could have named it anything. and also take a look in your GPO for I believe under User Configuration\Windows Settings\Folder Redirection. look in there for a setting for your redirects and set up the desktop to not be touched then apply your gpo with cmd "gpupdate" on the server and client machines or just reboot all of them starting with the server.
Because when a user logs on through Citrix it copies there roaming profile folder...

and 9/10 schools or other big agencies would use citrix....
My System SpecsSystem Spec
23 Oct 2014   #5
rvcjew

7 Pro x64, 10 Pro x64
 
 

Quote   Quote: Originally Posted by HarriePateman View Post
Quote   Quote: Originally Posted by rvcjew View Post
Sounds like you are doing folder redirection, idk why Harrie thinks your using Citrix as that behavior says roaming profile normal domain to me. Regardless look for a folder on the server pertaining to FOLDREDIR or the like. They could have named it anything. and also take a look in your GPO for I believe under User Configuration\Windows Settings\Folder Redirection. look in there for a setting for your redirects and set up the desktop to not be touched then apply your gpo with cmd "gpupdate" on the server and client machines or just reboot all of them starting with the server.
Because when a user logs on through Citrix it copies there roaming profile folder...

and 9/10 schools or other big agencies would use citrix....
I would use it too but he/she never mentioned it and if windows server is set up for folder redirection it will do the same thing.
My System SpecsSystem Spec
23 Oct 2014   #6
ITtechie7783

Windows 7 Pro 64 bit
 
 

nope we are not using a citrix environment nor have i changed anything in group policy yet. I do have my profiles stored on the server as windows server 2008 guide suggests. Heres how i have each users profile set up:

each user has a account profile created on the server. I also have a profile path set up for storing the profiles as windows suggests in its server 2008 guide.

Heres an example. Once i created all my users i then went to Start -> Administrative Tools -> Active Directory Users and Computers. In the the properties window of the required user, navigate to the Profile tab and enter the profile path as follows. Heres an example

\\servername.domainname.com\Profiles$\%username%

This will create the user’s profile copy inside the profile folder the first time the user logs in.


So each user has their profile stored on the server but i still dont see any ntuser.dat file within the profile folder on the server. When i am on a client machine and i log on as student for example, if i hit start and type in \\mydomainname (<<example) i can then see my folder but that folder is just for that specific user to save his her documents. I need a way to get to the users profile data which i am assuming is stored on the server.

I am even just looking for an easy way to delete the junk off the desktop that will stick so when they log in again its gone. I need to find the correct way to delete the stored info that keeps adding the crap back to the desktop. I will take some pictures my next day at work as well if it helps.

And what is crappy is if i log into the server and try to edit anything in a users account i am denied. It is something windows has set up on purpose. If i give myself ownership on an already created profile it can break or corrupt the profile from what i have read. However this may be the way for me to get to that student profile to edit etc. Heres what i mean:

https://social.technet.microsoft.com...um=winserverGP
My System SpecsSystem Spec
23 Oct 2014   #7
ITtechie7783

Windows 7 Pro 64 bit
 
 

P.S. even if i cannot fix this current profile issue(which i really want to do) i am also looking for suggestions for if i create a new profile and want to keep a user from trashing the desktop. Or, at least a way where if they do trash the desktop, i can clean it back up without it reverting to the old desktop.

Is my solution kind of in the above link? In other words, if as an admin i can access their profile folder on the server i am thinking i would then have access to their roaming profile folder. So i could delete the stored info that is making the desktop revert even after i delete it on the client users machine. My issue is i assumed the user themselves would be able to edit their own profile seeing as each user has their own profile on the server. Yet when the user logs on to their client account (as student for example) and tries to delete the extra junk icons etc. off the desktop it always reverts and puts them back. It doesnt make sense that the user cannot delete without it reverting and the icons coming back... (Note** these icons they are trying to delete are something the user themself originally added to their desktop.) So any time the user adds new things to the desktop, somehow the profile data file which i think its maybe ntuser.dat, saves this info but will not save when they delete......

Again i have not added anything to group policy etc. to stop users from deleting etc.
My System SpecsSystem Spec
01 Nov 2014   #8
ITtechie7783

Windows 7 Pro 64 bit
 
 

any ideas? Thanks !!!!
My System SpecsSystem Spec
01 Nov 2014   #9
rvcjew

7 Pro x64, 10 Pro x64
 
 

I currently don't have server i can go into atm but you need to set up on your group policy that they can not edit their desktops. This a how to do it in windows 7 policy but it should look similar in your group policy editor for the server. Just find your GPO and right click it and pick edit then make your changes then run in a elevated cmd prompt "gpupdate" on the server and re logg on your test clients. Make sure the gpo you edit is set to affect that userbase though, if it is the default one you edit it should be system wide.


Attached Thumbnails
Help with User Profiles in Windows Server 2008-ss-2014-11-01-03.08.16-.png  
My System SpecsSystem Spec
02 Nov 2014   #10
ITtechie7783

Windows 7 Pro 64 bit
 
 

Thanks for the info. However, if the profile is already created i dont think this update to gp will help correct? In other words it will work on a new profile that has not yet been altered, or am i wrong?

I keep hearing something about changing ntuser.dat to ntuser.man as well. Anyone know if this is an option as well?
My System SpecsSystem Spec
Reply

 Help with User Profiles in Windows Server 2008




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Enable user account at logoff/shutdown - server 2008 R2
Hi folks. I've got Server 2008 R2 laptop that I need to transfer files to. Frequently, when I reconnect the mapped drive on the source computer, it disables my account on the laptop. Sometimes I forget to check & re-enable it, causing me to get someone to re-enable my account. I created a...
General Discussion
setting up a server for school help (windows server 2008)
As my final project for the year i am setting up a server that we will eventually move all our computers on to. I am using a poweredge 2900 as a server with windows server 2008 installed. As of now i have 2 computers connected to the domain which they can log on to. - what i need help with -...
Network & Sharing
Help choose: Windows Home Server 2011 vs. Windows Server 2008 R2
I have a file server at home with a Quad core, 4gb ram, and a 3tb of storage. It is running Ubuntu Desktop and sharing video files primarily. From my school I have access to a free copy of Windows Server 2008 R2. Other than the server I have 2 Windows 7 desktops, 1 Windows 7 laptop and 1 Windows...
Software
Windows 2008 Server or Linux for server
Hi all Have been a LONG LONG user of Linux as a server (hosting VM's XP / W7 mix) and file / print sharing. I used to avoid MS like the plague as far as SERVER environments are concerned - probably because my first experince was Windows NT (Windows NeanderThal or Windows No Thanks) which was...
Network & Sharing
Windows home server vs Server 2008 R2
I'm trying to decide between Windows Home Server and Windows Server 2008 R2 for my home server PC. Ordinarily it would be a clear cut choice, but I've got a free copy of Server 2008 R2 through my academic MSDN subscription. I'd like to avoid spending extra money if Server 2008 R2 would do the job....
Software
User Profiles without Server
I have several PC's running Windows 7 and was wondering whether it was possible to create a single user account for a user over all the pc's rather then have a seperate user account on each of the pcs. For example, when using a server you can be assigned a login and then no matter what pc you use,...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 20:32.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App