This video is excellent. It contains all the information you need and also adds a couple of useful bits of information that I wasn't aware of. There are no unnecessary parts. Well done!
Your videos are spectacular brother, THank you a million!! Btw I loved the way you pronounced "ROAMINGG" at 8:46 , epic my friend :) - Thanks God bless!
Thank you very much for the detailed video. I have a question: I want all users when they log on to a computer to always have a roaming profile but of the same user profile. I had it in the XP environment and it worked fine even if the employee deleted all the icons on the desktop when he would log in to the computer again the computer was download from the server the specific profile I set for all users and the user was get back all the default settings I set in the first place. This situation helped us a lot to avoid glitches, whenever there was a problem for the user in the settings on the computer he would do a restart, re-enter our profile and the computer was like new. I could not recover the same situation in WIN10 I would like to know how to do it? It is important to note that to prevent the user from making profile changes I was change the "ntuser" file extension to the MAN extension instead of the DAT All this is done in a default user that all users would turn to this user I would love to know if there is an explanation on how to do this in WIN-10 Many thanks in advance
I have this configured using win server 2k19 with win 10 pro client pc. It works for some users of some computers, but others have an error that says problem with roaming profile, logged on using temporary profile. How do I fix this?
1. Log on with Administrator account 2. Open Windows Server 2019 3. Open Tools, Active Directory Users and Computers 4. Create Organizational Unit (OU) under domain WPSC.ORG a. Right click WPSC.ORG i. New, Organizational Unit ii. Fill in Name for each OU (Administrator, Bookkeeping. Front Desk etc.) Is this correct to this point? 5. Create a security group for each OU a. Right click each OU i. Select New, Group ii. Fill in Name for each security group Is this correct to this point? Do i just create one 'Shared folder' for all the OU's? Thanks
1. It depends on you and your requirements. As one user is not able to access other users profile, so permission is not an issue. 2. You can use only one security group to setup permission on shared folder. There is no need to create security group for each OU. Or 3.1 As per your setup, Create Security group in each OU, add the users from the respective OU. Create one more security group (GroupA) and add all other security groups (which you have created in each OU) 3.2 Create one Shared folder and use security group (GroupA) to setup permission.
Thanks for the reply to my question I’m still trying to get a better understanding. 1. This is what I have a small domain containing 20 Win 10 clients peer-peer 2. I would like to implement roaming profiles? 3. If I create a security group at the domain level would this cause a problem? 4. If so what? 5. Is it better to create a security group at either of the six OU levels?
Great Video! Thank you! i am about to try roaming profiles instead of folder redirection, and i have one vital question. Folder redirection works great. But windows 10 still creates a directory for every user under C:\Users. I manage a lab of shared workstations by hundred AD users. Very soon the disk get full by directories under C:\Users . AppData folder cause that issue. I redirect all the rest folders (Desktop, Document, etc). I apply the GPO that delete user profile after xx days but these cause logon slow because almost every login is "a first time login". I want to ask if with roaming profile, windows 10 still creates a local user profile directory under C:\Users? Does the GPO "Delete cached copies of roaming profile" delete the whole local profile? Thank you
I have been trying to get my CIO to allow me to migrate our enterprise to Roaming Profiles for a while now. I’m convinced that it would make for a better user experience. However she is convinced (adamant) that there are security concerns with the possibility of passing viruses and malware from client to client. She states that she’s also concerned about share growth. What security vulnerabilities, if any, do you see that could come up with using roaming profiles?
I mean, if your defense against viruses and malware is to avoid Roaming Profiles, then I'm sure you are in trouble. There are multiple endpoint security solutions out there.
You can create PowerShell script for that. Syntax: Set-ADUser -Identity User1 -ProfilePath \\dc01\Roaming_profiles\%username% (Where Roaming_profiles is the name of the shared folder on server name dc01.)
Yes and No both.. No. If you are setting up or Active Directory users only. Then there is no need for group policy. Yes, If you want to setup roaming profile for only those users who logged on to specific computers. So at that time you can use GPO to setup compute base roaming profile for users. Computer Configuration --> policies --> administrative templates --> system --> user profile --> Modify the settings : "Set roaming profile path for all users logging onto this computer"
I have configured the shared folder, setup a group policy and also followed all the instructions given in this video. but somehow I could not get my desktop folders across to roaming profile . and your link for folder redirection is not working. Is there any solution to fix this issue? It seems all my setting for Startup programs and browser windows came across but just my Desktop is not. How do i fix this?
Did you run rsop.msc command on client? It will gives you information about the group policy settings. I recommended to that first. Both links are working, you can access the both web pages and go through it. Might you will find the solution. Try to access the shared folder from client to check "is it accessible or not"?
How to undo this? I set up roaming profiles but my users are storing lots of irrelevant data in the server. I would prefer them to store their stuff on their own computers. Will deleting profile path from the server affect their ability to access their files? Or do they store them in both sides? Thank you!
Hi, ive completed this task, and used two different user profile to test. but i get an error when logging into one user profile saying " User Profile Service - There was a problem with your roaming profile. You have been logged on with your previously saved local profile. Please see the event log for details or contact your administrator". when i check the properties, it shows up as a roaming profile. when i log into the second user, when checking the properties, it shows up as local profile and not roaming also this user folder.v6 doesn't show up on the C: drive. any help?
I think might be the issue with NTFS Permission. Have you specified the Share Folder path correctly? 1. Login with the user account on client machine. 2. Try to access the shared folder which you have created to store the users roaming profile. Let me know what happens?
hi I'm having issues with creating roaming profile, I did every step from your tutorial and when I try to login the roaming profile I receive a message "We can't sign in to your account" it gave me temporary profile, all the roaming profile I've created gave me the same error
In this case u need to go ad users and computers and create a new Organizational unit and Add yours users into that , Then you need to go to Computers options in Your ad users and computers and drag tha Particular computer into that newly created OU , restart the system and Try to Login through that and also run the Command Repadmin /syncall
Here it is: How to deploy folder redirection using group policy in Windows Server 2019 Active Directory. Link: ua-cam.com/users/edit?o=U&video_id=dyW0hZnE0lY
I honestly can't be the only person that can't stand an Indian accent because all I can think of is a damn telemarketer and how annoying they are. 🤷♂️
@@MSFTWebCast well mannered counter to him, as everyone now a days wont have sufficient time to open the document and learn everything but simply we find mistakes on someone else which is very irrelevant to out notion (I mean your ascent is not good, voice is bad , bla bla bla ........) first we must appreciate to his efforts and secondly to the contribution of his knowledge. MSFTWEBCAST TAKE A BOW FROM THE BOTTOM OF MY HEART AS i new to ad and i have chosen your channel to learn from A to Z in AD. kudos to you.
This video is excellent. It contains all the information you need and also adds a couple of useful bits of information that I wasn't aware of. There are no unnecessary parts. Well done!
Awesome, thank you!
Very Nice Videos Thanks for your Tutorials
Thank you for your great work. Truly appriciated
Your videos are spectacular brother, THank you a million!! Btw I loved the way you pronounced "ROAMINGG" at 8:46 , epic my friend :) - Thanks God bless!
Sorry mate for my bad pronunciations and accent. Hope that subtitle helped.
Videos are always great
I appreciate that!
Wow, amazing video, thank you so much!
Excellent video, thanks!
Thank You.
Great video
Thank you very much for the detailed video.
I have a question: I want all users when they log on to a computer to always have a roaming profile but of the same user profile.
I had it in the XP environment and it worked fine even if the employee deleted all the icons on the desktop when he would log in to the computer again the computer was download from the server the specific profile I set for all users and the user was get back all the default settings I set in the first place.
This situation helped us a lot to avoid glitches, whenever there was a problem for the user in the settings on the computer he would do a restart, re-enter our profile and the computer was like new.
I could not recover the same situation in WIN10 I would like to know how to do it?
It is important to note that to prevent the user from making profile changes I was change the "ntuser" file extension to the MAN extension instead of the DAT
All this is done in a default user that all users would turn to this user
I would love to know if there is an explanation on how to do this in WIN-10
Many thanks in advance
great video!!!
I have this configured using win server 2k19 with win 10 pro client pc. It works for some users of some computers, but others have an error that says problem with roaming profile, logged on using temporary profile. How do I fix this?
Ciyaal orbit ma jogtaan
5:36 I WANNA KNOW FROM THERE SUPPOSE I HAVE 100 USERS/PCS AM I SUPPOSE TO GO EVERY DEVICE AND DO THAT
Thanks sir
roaming is profile is got corrupted but i have full backup how to recover the user desktop data.
1. Log on with Administrator account
2. Open Windows Server 2019
3. Open Tools, Active Directory Users and Computers
4. Create Organizational Unit (OU) under domain WPSC.ORG
a. Right click WPSC.ORG
i. New, Organizational Unit
ii. Fill in Name for each OU (Administrator, Bookkeeping. Front Desk etc.)
Is this correct to this point?
5. Create a security group for each OU
a. Right click each OU
i. Select New, Group
ii. Fill in Name for each security group
Is this correct to this point?
Do i just create one 'Shared folder' for all the OU's?
Thanks
1. It depends on you and your requirements. As one user is not able to access other users profile, so permission is not an issue.
2. You can use only one security group to setup permission on shared folder. There is no need to create security group for each OU.
Or 3.1 As per your setup, Create Security group in each OU, add the users from the respective OU. Create one more security group (GroupA) and add all other security groups (which you have created in each OU)
3.2 Create one Shared folder and use security group (GroupA) to setup permission.
Thanks for the reply to my question I’m still trying to get a better understanding.
1. This is what I have a small domain containing 20 Win 10 clients peer-peer
2. I would like to implement roaming profiles?
3. If I create a security group at the domain level would this cause a problem?
4. If so what?
5. Is it better to create a security group at either of the six OU levels?
Great Video! Thank you!
i am about to try roaming profiles instead of folder redirection, and i have one vital question.
Folder redirection works great. But windows 10 still creates a directory for every user under C:\Users. I manage a lab of shared workstations by hundred AD users. Very soon the disk get full by directories under C:\Users . AppData folder cause that issue. I redirect all the rest folders (Desktop, Document, etc). I apply the GPO that delete user profile after xx days but these cause logon slow because almost every login is "a first time login".
I want to ask if with roaming profile, windows 10 still creates a local user profile directory under C:\Users?
Does the GPO "Delete cached copies of roaming profile" delete the whole local profile?
Thank you
Need to test it.
I have been trying to get my CIO to allow me to migrate our enterprise to Roaming Profiles for a while now.
I’m convinced that it would make for a better user experience. However she is convinced (adamant) that there are security concerns with the possibility of passing viruses and malware from client to client.
She states that she’s also concerned about share growth.
What security vulnerabilities, if any, do you see that could come up with using roaming profiles?
I mean, if your defense against viruses and malware is to avoid Roaming Profiles, then I'm sure you are in trouble.
There are multiple endpoint security solutions out there.
6:08 suppose i have hundred users should I do this to every user,no short cut?
You can create PowerShell script for that. Syntax: Set-ADUser -Identity User1 -ProfilePath \\dc01\Roaming_profiles\%username% (Where Roaming_profiles is the name of the shared folder on server name dc01.)
thanks
so the GPO settings for roaming profiles are really not needed? just edit the prpperties on the users directly??
Yes and No both..
No. If you are setting up or Active Directory users only. Then there is no need for group policy.
Yes, If you want to setup roaming profile for only those users who logged on to specific computers. So at that time you can use GPO to setup compute base roaming profile for users.
Computer Configuration --> policies --> administrative templates --> system --> user profile --> Modify the settings : "Set roaming profile path for all users logging onto this computer"
I have configured the shared folder, setup a group policy and also followed all the instructions given in this video. but somehow I could not get my desktop folders across to roaming profile . and your link for folder redirection is not working. Is there any solution to fix this issue? It seems all my setting for Startup programs and browser windows came across but just my Desktop is not. How do i fix this?
Did you run rsop.msc command on client? It will gives you information about the group policy settings. I recommended to that first. Both links are working, you can access the both web pages and go through it. Might you will find the solution. Try to access the shared folder from client to check "is it accessible or not"?
It does not work I part that once worked once did not work
How to undo this? I set up roaming profiles but my users are storing lots of irrelevant data in the server. I would prefer them to store their stuff on their own computers. Will deleting profile path from the server affect their ability to access their files? Or do they store them in both sides? Thank you!
YOU CAN SET WHAT TYPE OF FILES YOU WANT TO BE STORED IN A ROAMING PROFILE
Hi, ive completed this task, and used two different user profile to test. but i get an error when logging into one user profile saying
" User Profile Service - There was a problem with your roaming profile. You have been logged on with your previously saved local profile. Please see the event log for details or contact your administrator". when i check the properties, it shows up as a roaming profile.
when i log into the second user, when checking the properties, it shows up as local profile and not roaming
also this user folder.v6 doesn't show up on the C: drive. any help?
I think might be the issue with NTFS Permission. Have you specified the Share Folder path correctly?
1. Login with the user account on client machine.
2. Try to access the shared folder which you have created to store the users roaming profile.
Let me know what happens?
I get this message as well when I log into a second computer.
Roaming profiles can be a nightmare. Go with folder redirection instead.
Indeed if it is not implemented correctly.
why is that?
hi I'm having issues with creating roaming profile, I did every step from your tutorial and when I try to login the roaming profile I receive a message "We can't sign in to your account" it gave me temporary profile, all the roaming profile I've created gave me the same error
In this case u need to go ad users and computers and create a new Organizational unit and Add yours users into that , Then you need to go to Computers options in Your ad users and computers and drag tha Particular computer into that newly created OU , restart the system and Try to Login through that and also run the Command Repadmin /syncall
It doesn't work at all, there is some kind of permission problem to roaming profile share.
Again check out the required permission which I have mentioned in the video.
@@MSFTWebCast YES SORRY! Great video, helped me a lot!
Echa usarrrr wa, echa usaa too, echa usa trii.. Echa usa grrrrup... LOL 😂😂🤣
Thank you for the comment. Sir, any tips to improve accent?
@@MSFTWebCast everything is good sir! I'm just messing around... But you can work on your accent by compressing yours to English speakers!
@@SamuelShabtayevDadashev I have taken it positively. No hard feeling. Thank you for the suggestion.
Hi, the best way to use Roaming Profiles is to redirect folders from User Profile. Try this maybe next time.
@@IJoeAceJRI Allready tested, its easy bro. mizitechinfo.wordpress.com/2014/11/18/simple-step-configure-folder-redirection-in-window-server-2012-r2/
Here it is:
How to deploy folder redirection using group policy in Windows Server 2019 Active Directory.
Link: ua-cam.com/users/edit?o=U&video_id=dyW0hZnE0lY
(X) You have exceeded your profile storage space.
well
I honestly can't be the only person that can't stand an Indian accent because all I can think of is a damn telemarketer and how annoying they are. 🤷♂️
My bad Nathan...But one thing is for sure that I am not a telemarketer...
@@MSFTWebCast well mannered counter to him, as everyone now a days wont have sufficient time to open the document and learn everything but simply we find mistakes on someone else which is very irrelevant to out notion (I mean your ascent is not good, voice is bad , bla bla bla ........) first we must appreciate to his efforts and secondly to the contribution of his knowledge. MSFTWEBCAST TAKE A BOW FROM THE BOTTOM OF MY HEART AS i new to ad and i have chosen your channel to learn from A to Z in AD. kudos to you.
@@bricksindustrialequipments2457 Thank you.