{"id":671,"date":"2016-01-08T09:22:28","date_gmt":"2016-01-08T15:22:28","guid":{"rendered":"http:\/\/www.thedarktimes.us\/wordpress\/?p=671"},"modified":"2016-01-08T09:22:28","modified_gmt":"2016-01-08T15:22:28","slug":"roaming-profiles","status":"publish","type":"post","link":"https:\/\/www.thedarktimes.us\/wordpress\/windows-server-2008\/roaming-profiles\/%20","title":{"rendered":"Roaming Profiles"},"content":{"rendered":"<div>\n<div><a class=\"LW_CollapsibleArea_TitleAhref\" title=\"Click to collapse. Double-click to collapse all.\"><span class=\"LW_CollapsibleArea_Title\">Step 1: Enable the use of separate profile versions<\/span><\/a><\/p>\n<div id=\"Anchor_1\" class=\"LW_CollapsibleArea_Anchor_Div\"><\/div>\n<div class=\"LW_CollapsibleArea_HrDiv\"><\/div>\n<\/div>\n<div class=\"sectionblock\">\n<div class=\"section\">\n<p>If you are deploying Roaming User Profiles on computers running Windows 8.1, Windows 8, Windows Server 2012 R2, or Windows Server\u00a02012, we recommend making a couple of changes to your Windows environment prior to deploying. These changes help ensure that future operating system upgrades go smoothly, and facilitate the ability to simultaneously run multiple versions of Windows with Roaming User Profiles.<\/p>\n<p>To make these changes, use the following procedure.<\/p>\n<div class=\"section\">\n<h3 class=\"subHeading\">Enable the use of separate profiles for each version of Windows<\/h3>\n<ol class=\"steps\">\n<li class=\"step\">\n<div class=\"section\">\n<p>Download and install the appropriate software update on all computers on which you\u2019re going to use roaming, mandatory, super-mandatory, or domain default profiles:<\/p>\n<ul class=\"unordered\">\n<li>Windows 8.1, or Windows Server 2012 R2: install the software update described in article <a href=\"http:\/\/support.microsoft.com\/kb\/2887595\">2887595<\/a> in the Microsoft Knowledge Base (when released).<\/li>\n<li>Windows 8 or Windows Server\u00a02012: install the software update described in article <a href=\"http:\/\/support.microsoft.com\/kb\/2887239\">2887239<\/a> in the Microsoft Knowledge Base.<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>On all computers running Windows 8.1, Windows 8, Windows Server 2012 R2, or Windows Server\u00a02012 on which you will use Roaming User Profiles, use Registry Editor or Group Policy to create the following registry key DWORD Value and set it to <strong>1<\/strong>. For information about creating registry keys by using Group Policy, see <a href=\"https:\/\/technet.microsoft.com\/library\/cc753092.aspx\">Configure a Registry Item<\/a>.<\/p>\n<div id=\"code-snippet-1\" class=\"codeSnippetContainer\">\n<div class=\"codeSnippetContainerTabs\"><\/div>\n<div class=\"codeSnippetContainerCodeContainer\">\n<div class=\"codeSnippetToolBar\"><\/div>\n<div id=\"CodeSnippetContainerCode_9a2e0412-0143-4db7-b699-0f817a1a02a4\" class=\"codeSnippetContainerCode\" dir=\"ltr\">\n<div>\n<pre>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\ProfSvc\\Parameters\\UseProfilePathExtensionVersion\r\n<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"alert\">\n<table>\n<tbody>\n<tr>\n<th align=\"left\"><img decoding=\"async\" id=\"s-e6f6a65cf14f462597b64ac058dbe1d0-system-media-system-caps-caution\" title=\"System_CAPS_caution\" src=\"https:\/\/i-technet.sec.s-msft.com\/dynimg\/IC1429.jpeg\" alt=\"System_CAPS_caution\" \/><span class=\"alertTitle\">Caution <\/span><\/th>\n<\/tr>\n<tr>\n<td>Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Restart the computers.<\/p>\n<\/div>\n<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div>\n<div><a class=\"LW_CollapsibleArea_TitleAhref\" title=\"Click to collapse. Double-click to collapse all.\"><span class=\"LW_CollapsibleArea_Title\">Step 2: Create a Roaming User Profiles security group<\/span><\/a><\/p>\n<div id=\"Anchor_2\" class=\"LW_CollapsibleArea_Anchor_Div\"><\/div>\n<div class=\"LW_CollapsibleArea_HrDiv\"><\/div>\n<\/div>\n<div class=\"sectionblock\">\n<div class=\"section\">\n<p>If your environment is not already set up with Roaming User Profiles, the first step is to create a security group that contains all users and\/or computers to which you want to apply Roaming User Profiles policy settings.<\/p>\n<ul class=\"unordered\">\n<li>Administrators of general-purpose roaming user profiles deployments typically create a security group for users.<\/li>\n<li>Administrators of Remote Desktop Services or virtualized desktop deployments typically use a security group for users and the shared computers.<\/li>\n<\/ul>\n<div class=\"section\">\n<h3 class=\"subHeading\">To create a security group for Roaming User Profiles<\/h3>\n<ol class=\"steps\">\n<li class=\"step\">\n<div class=\"section\">\n<p>Open Server Manager on a computer with Active Directory Administration Center installed.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>On the <strong>Tools<\/strong> menu, click <strong>Active Directory Administration Center<\/strong>. Active Directory Administration Center appears.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Right-click the appropriate domain or OU, click <strong>New<\/strong>, and then click <strong>Group<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In the <strong>Create Group<\/strong> window, in the <strong>Group<\/strong> section, specify the following settings:<\/p>\n<ul class=\"unordered\">\n<li>In <strong>Group name<\/strong>, type the name of the security group, for example: <strong>Roaming User Profiles Users and Computers<\/strong>.<\/li>\n<li>In <strong>Group scope<\/strong>, click <strong>Security<\/strong>, and then click <strong>Global<\/strong>.<\/li>\n<\/ul>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In the <strong>Members<\/strong> section, click <strong>Add<\/strong>. The Select Users, Contacts, Computers, Service Accounts or Groups dialog box appears.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>If you want to include computer accounts in the security group, click <strong>Object Types<\/strong>, select the <strong>Computers <\/strong>check box and then click <strong>OK<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Type the names of the users, groups, and\/or computers to which you want to deploy Roaming User Profiles, click <strong>OK<\/strong>, and then click <strong>OK<\/strong> again.<\/p>\n<\/div>\n<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div>\n<div><a class=\"LW_CollapsibleArea_TitleAhref\" title=\"Click to collapse. Double-click to collapse all.\"><span class=\"LW_CollapsibleArea_Title\">Step 3: Create a file share for roaming user profiles<\/span><\/a><\/p>\n<div id=\"Anchor_3\" class=\"LW_CollapsibleArea_Anchor_Div\"><\/div>\n<div class=\"LW_CollapsibleArea_HrDiv\"><\/div>\n<\/div>\n<div class=\"sectionblock\">\n<div class=\"section\">\n<p>If you do not already have a separate file share for roaming user profiles (independent from any shares for redirected folders to prevent inadvertent caching of the roaming profile folder), use the following procedure to create a file share on a server running Windows Server 2012.<\/p>\n<div class=\"alert\">\n<table>\n<tbody>\n<tr>\n<th align=\"left\"><img decoding=\"async\" id=\"s-e6f6a65cf14f462597b64ac058dbe1d0-system-media-system-caps-note\" title=\"System_CAPS_note\" src=\"https:\/\/i-technet.sec.s-msft.com\/dynimg\/IC101471.jpeg\" alt=\"System_CAPS_note\" \/><span class=\"alertTitle\">Note <\/span><\/th>\n<\/tr>\n<tr>\n<td>Some functionality might differ or be unavailable if you create the file share on a server running another version of Windows Server.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<div class=\"section\">\n<h3 class=\"subHeading\">To create a file share on Windows Server 2012<\/h3>\n<ol class=\"steps\">\n<li class=\"step\">\n<div class=\"section\">\n<p>In the Server Manager navigation pane, click <strong>File and Storage Services<\/strong>, and then click <strong>Shares<\/strong> to display the Shares page.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In the Shares tile, click <strong>Tasks<\/strong>, and then click <strong>New Share<\/strong>. The New Share Wizard appears.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>On the <strong>Select Profile<\/strong> page, click <strong>SMB Share \u2013 Quick<\/strong>. If you have File Server Resource Manager installed and are using folder management properties, instead click <strong>SMB Share &#8211; Advanced<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>On the <strong>Share Location<\/strong> page, select the server and volume on which you want to create the share.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>On the <strong>Share Name<\/strong> page, type a name for the share (for example, <strong>User Profiles$<\/strong>) in the <strong>Share name<\/strong> box.<\/p>\n<div class=\"alert\">\n<table>\n<tbody>\n<tr>\n<th align=\"left\"><img decoding=\"async\" id=\"s-e6f6a65cf14f462597b64ac058dbe1d0-system-media-system-caps-tip\" title=\"System_CAPS_tip\" src=\"https:\/\/i-technet.sec.s-msft.com\/dynimg\/IC115537.jpeg\" alt=\"System_CAPS_tip\" \/><span class=\"alertTitle\">Tip <\/span><\/th>\n<\/tr>\n<tr>\n<td>When creating the share, hide the share by putting a <strong>$<\/strong> after the share name. This hides the share from casual browsers.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>On the <strong>Other Settings<\/strong> page, clear the <strong>Enable continuous availability<\/strong> checkbox, if present, and optionally select the <strong>Enable access-based enumeration<\/strong> and <strong>Encrypt data access<\/strong> checkboxes.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>On the <strong>Permissions<\/strong> page, click <strong>Customize permissions\u2026<\/strong>. The Advanced Security Settings dialog box appears.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Click <strong>Disable inheritance<\/strong>, and then click <strong>Convert inherited permissions into explicit permission on this object<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Set the permissions as described Table 1 and shown in Figure 1, removing permissions for unlisted groups and accounts, and adding special permissions to the Roaming User Profiles Users and Computers group that you created in Step 1.<\/p>\n<div class=\"inset\"><img decoding=\"async\" id=\"8acdd7ce-316b-49c9-83fd-337ee0be4dd2\" title=\"The Advanced Security Settings window.\" src=\"https:\/\/i-technet.sec.s-msft.com\/dynimg\/IC780823.jpeg\" alt=\"The Advanced Security Settings window.\" \/><\/div>\n<p><span class=\"label\">Figure 1<\/span>\u00a0\u00a0\u00a0Setting the permissions for the roaming user profiles share<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>If you chose the <strong>SMB Share &#8211; Advanced <\/strong>profile, on the <strong>Management Properties<\/strong> page, select the <strong>User Files<\/strong> Folder Usage value.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>If you chose the <strong>SMB Share &#8211; Advanced <\/strong>profile, on the <strong>Quota<\/strong> page, optionally select a quota to apply to users of the share.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>On the <strong>Confirmation<\/strong> page, click <strong>Create.<\/strong><\/p>\n<\/div>\n<\/li>\n<\/ol>\n<\/div>\n<h3 class=\"subHeading\">Table 1 Required permissions for the file share hosting roaming user profiles<\/h3>\n<table>\n<tbody>\n<tr>\n<td>User Account<\/td>\n<td>Access<\/td>\n<td>Applies to<\/td>\n<\/tr>\n<tr>\n<td>System<\/td>\n<td>Full control<\/td>\n<td>This folder, subfolders and files<\/td>\n<\/tr>\n<tr>\n<td>Administrators<\/td>\n<td>Full Control<\/td>\n<td>This folder only<\/td>\n<\/tr>\n<tr>\n<td>Creator\/Owner<\/td>\n<td>Full Control<\/td>\n<td>Subfolders and files only<\/td>\n<\/tr>\n<tr>\n<td>Security group of users needing to put data on share (Roaming User Profiles Users and Computers)<\/td>\n<td>List folder \/ read data<span class=\"sup\">1<\/span><\/p>\n<p>Create folders \/ append data<span class=\"sup\">1<\/span><\/td>\n<td>This folder only<\/td>\n<\/tr>\n<tr>\n<td>Other groups and accounts<\/td>\n<td>None (remove)<\/td>\n<td><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>1 Advanced permissions<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div>\n<div><a class=\"LW_CollapsibleArea_TitleAhref\" title=\"Click to collapse. Double-click to collapse all.\"><span class=\"LW_CollapsibleArea_Title\">Step 4: Optionally create a GPO for Roaming User Profiles<\/span><\/a><\/p>\n<div id=\"Anchor_4\" class=\"LW_CollapsibleArea_Anchor_Div\"><\/div>\n<div class=\"LW_CollapsibleArea_HrDiv\"><\/div>\n<\/div>\n<div class=\"sectionblock\">\n<div class=\"section\">\n<p>If you do not already have a GPO created for Roaming User Profiles settings, use the following procedure to create an empty GPO for use with Roaming User Profiles. This GPO allows you to configure Roaming User Profiles settings (such as primary computer support, which is discussed separately), and can also be used to enable Roaming User Profiles on computers, as is typically done when deploying in virtualized desktop environments or with Remote Desktop Services.<\/p>\n<div class=\"section\">\n<h3 class=\"subHeading\">To create a GPO for Roaming User Profiles<\/h3>\n<ol class=\"steps\">\n<li class=\"step\">\n<div class=\"section\">\n<p>Open Server Manager on a computer with Group Policy Management installed.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>From the <strong>Tools<\/strong> menu click <strong>Group Policy Management<\/strong>. Group Policy Management appears.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Right-click the domain or OU in which you want to setup Roaming User Profiles and then click <strong>Create a GPO in this domain, and Link it here<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In the <strong>New GPO<\/strong> dialog box, type a name for the GPO (for example, <strong>Roaming User Profile Settings<\/strong>), and then click <strong>OK<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Right-click the newly created GPO and then clear the <strong>Link Enabled<\/strong> checkbox. This prevents the GPO from being applied until you finish configuring it.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Select the GPO. In the <strong>Security Filtering<\/strong> section of the <strong>Scope<\/strong> tab, select <strong>Authenticated Users<\/strong>, and then click <strong>Remove<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In the <strong>Security Filtering<\/strong> section, click <strong>Add<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In the <strong>Select User, Computer, or Group<\/strong> dialog box, type the name of the security group you created in Step 1 (for example, <strong>Roaming User Profiles Users and Computers<\/strong>), and then click <strong>OK<\/strong>.<\/p>\n<\/div>\n<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div>\n<div><a class=\"LW_CollapsibleArea_TitleAhref\" title=\"Click to collapse. Double-click to collapse all.\"><span class=\"LW_CollapsibleArea_Title\">Step 5: Optionally set up Roaming User Profiles on user accounts<\/span><\/a><\/p>\n<div id=\"Anchor_5\" class=\"LW_CollapsibleArea_Anchor_Div\"><\/div>\n<div class=\"LW_CollapsibleArea_HrDiv\"><\/div>\n<\/div>\n<div class=\"sectionblock\">\n<div class=\"section\">\n<p>If you are deploying Roaming User Profiles to user accounts, use the following procedure to specify roaming user profiles for user accounts in Active Directory Domain Services. If you are deploying Roaming User Profiles to computers, as is typically done for Remote Desktop Services or virtualized desktop deployments, instead use the procedure documented in Step 5 of this topic.<\/p>\n<div class=\"alert\">\n<table>\n<tbody>\n<tr>\n<th align=\"left\"><img decoding=\"async\" id=\"s-e6f6a65cf14f462597b64ac058dbe1d0-system-media-system-caps-note\" title=\"System_CAPS_note\" src=\"https:\/\/i-technet.sec.s-msft.com\/dynimg\/IC101471.jpeg\" alt=\"System_CAPS_note\" \/><span class=\"alertTitle\">Note <\/span><\/th>\n<\/tr>\n<tr>\n<td>If you set up Roaming User Profiles on user accounts by using Active Directory and on computers by using Group Policy, the computer-based policy setting takes precedence.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<div class=\"section\">\n<h3 class=\"subHeading\">To set up Roaming User Profiles on user accounts<\/h3>\n<ol class=\"steps\">\n<li class=\"step\">\n<div class=\"section\">\n<p>In Active Directory Administration Center, navigate to the <strong>Users<\/strong> container (or OU) in the appropriate domain.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Select all users to which you want to assign a roaming user profile, right-click the users and then click <strong>Properties<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In the <strong>Profile<\/strong> section, select the <strong>Profile path:<\/strong> checkbox and then enter the path to the file share where you want to store the user\u2019s roaming user profile, followed by <strong>%username%<\/strong> (which is automatically replaced with the user name the first time the user signs in). For example:<\/p>\n<p><strong>\\\\fs1.corp.contoso.com\\User Profiles$\\%username%<\/strong><\/p>\n<p>To specify a mandatory roaming user profile, specify the path to the NTuser.man file that you created previously, for example, <strong>\\\\fs1.corp.contoso.com\\User Profiles$\\default<\/strong>. For more information, see <a href=\"https:\/\/technet.microsoft.com\/library\/gg241183\">Creating a Mandatory User Profile<\/a>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Click <strong>OK<\/strong>.<\/p>\n<\/div>\n<\/li>\n<\/ol>\n<\/div>\n<div class=\"alert\">\n<table>\n<tbody>\n<tr>\n<th align=\"left\"><img decoding=\"async\" id=\"s-e6f6a65cf14f462597b64ac058dbe1d0-system-media-system-caps-note\" title=\"System_CAPS_note\" src=\"https:\/\/i-technet.sec.s-msft.com\/dynimg\/IC101471.jpeg\" alt=\"System_CAPS_note\" \/><span class=\"alertTitle\">Note <\/span><\/th>\n<\/tr>\n<tr>\n<td>By default, deployment of all Windows\u00ae Runtime-based (Windows Store) apps is allowed when using Roaming User Profiles. However, when using a special profile, apps are not deployed by default. Special profiles are user profiles where changes are discarded after the user signs out:<\/p>\n<ul class=\"unordered\">\n<li>Roaming user profiles to which the <strong>Delete cached copies of roaming profiles<\/strong> Group Policy setting applies (located in Computer Configuration\\Policies\\Administrative Templates\\System\\User Profiles)<\/li>\n<li>Mandatory user profiles and super-mandatory profiles, created by an administrator<\/li>\n<li>Temporary user profiles, created when an error prevents the correct profile from loading<\/li>\n<li>User profiles for the Guest account and members of the Guests group<\/li>\n<\/ul>\n<p>To remove restrictions on app deployment for special profiles, enable the <strong>Allow deployment operations in special profiles<\/strong> policy setting (located in Computer Configuration\\Policies\\Administrative Templates\\Windows Components\\App Package Deployment). However, deployed apps in this scenario will leave some data stored on the computer, which could accumulate, for example, if there are hundreds of users of a single computer. To cleanup apps, locate or develop a tool that uses the <a href=\"https:\/\/msdn.microsoft.com\/library\/windows\/apps\/windows.management.deployment.packagemanager.cleanuppackageforuserasync.aspx\">CleanupPackageForUserAsync<\/a> API to cleanup app packages for users who no longer have a profile on the computer.<\/p>\n<p>For additional background information about Windows Store apps, see <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/hh832040.aspx\">Manage Client Access to the Windows Store<\/a>.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div>\n<div><a class=\"LW_CollapsibleArea_TitleAhref\" title=\"Click to collapse. Double-click to collapse all.\"><span class=\"LW_CollapsibleArea_Title\">Step 6: Optionally set up Roaming User Profiles on computers<\/span><\/a><\/p>\n<div id=\"Anchor_6\" class=\"LW_CollapsibleArea_Anchor_Div\"><\/div>\n<div class=\"LW_CollapsibleArea_HrDiv\"><\/div>\n<\/div>\n<div class=\"sectionblock\">\n<div class=\"section\">\n<p>If you are deploying Roaming User Profiles to computers, as is typically done for Remote Desktop Services or virtualized desktop deployments, use the following procedure. If you are deploying Roaming User Profiles to user accounts, use the procedure described in Step 4 of this topic.<\/p>\n<p>You can use Group Policy to apply Roaming User Profiles to computers running Windows 8.1, Windows 8, Windows\u00a07, Windows\u00a0Vista, Windows Server 2012 R2, Windows Server 2012, Windows Server\u00a02008\u00a0R2, or Windows Server\u00a02008.<\/p>\n<div class=\"alert\">\n<table>\n<tbody>\n<tr>\n<th align=\"left\"><img decoding=\"async\" id=\"s-e6f6a65cf14f462597b64ac058dbe1d0-system-media-system-caps-note\" title=\"System_CAPS_note\" src=\"https:\/\/i-technet.sec.s-msft.com\/dynimg\/IC101471.jpeg\" alt=\"System_CAPS_note\" \/><span class=\"alertTitle\">Note <\/span><\/th>\n<\/tr>\n<tr>\n<td>If you set up Roaming User Profiles on computers by using Group Policy and on user accounts by using Active Directory, the computer-based policy setting takes precedence.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<div class=\"section\">\n<h3 class=\"subHeading\">To set up Roaming User Profiles on computers<\/h3>\n<ol class=\"steps\">\n<li class=\"step\">\n<div class=\"section\">\n<p>Open Server Manager on a computer with Group Policy Management installed.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>From the <strong>Tools<\/strong> menu click <strong>Group Policy Management<\/strong>. Group Policy Management appears.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In Group Policy Management, right-click the GPO you created in Step 3 (for example, <strong>Roaming User Profiles Settings<\/strong>), and then click <strong>Edit<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In the Group Policy Management Editor window, navigate to <strong>Computer Configuration<\/strong>, then <strong>Policies<\/strong>, then <strong>Administrative Templates<\/strong>, then <strong>System<\/strong>, and then <strong>User Profiles<\/strong>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Right-click <strong>Set roaming profile path for all users logging onto this computer<\/strong> and then click <strong>Edit<\/strong>.<\/p>\n<div class=\"alert\">\n<table>\n<tbody>\n<tr>\n<th align=\"left\"><img decoding=\"async\" id=\"s-e6f6a65cf14f462597b64ac058dbe1d0-system-media-system-caps-tip\" title=\"System_CAPS_tip\" src=\"https:\/\/i-technet.sec.s-msft.com\/dynimg\/IC115537.jpeg\" alt=\"System_CAPS_tip\" \/><span class=\"alertTitle\">Tip <\/span><\/th>\n<\/tr>\n<tr>\n<td>A user&#8217;s home folder, if configured, is the default folder used by some programs such as Windows PowerShell. You can configure an alternative local or network location on a per-user basis by using the <strong>Home folder<\/strong> section of the user account properties in AD\u00a0DS. To configure the home folder location for all users of a computer running Windows 8.1, Windows 8, Windows Server 2012 R2, or Windows Server 2012 in a virtual desktop environment, enable the <strong>Set user home folder<\/strong> policy setting, and then specify the file share and drive letter to map (or specify a local folder). Do not use environment variables or ellipses. The user\u2019s alias is appended to the end of the path specified during user sign on.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In the <strong>Properties<\/strong> dialog box, click <strong>Enabled<\/strong><\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>In the <strong>Users logging onto this computer should use this roaming profile path<\/strong> box, enter the path to the file share where you want to store the user\u2019s roaming user profile, followed by <strong>%username%<\/strong> (which is automatically replaced with the user name the first time the user signs in). For example:<\/p>\n<p><strong>\\\\fs1.corp.contoso.com\\User Profiles$\\%username%<\/strong><\/p>\n<p>To specify a mandatory roaming user profile, which is a preconfigured profile to which users cannot make permanent changes (changes are reset when the user signs out), specify the path to the NTuser.man file that you created previously, for example, <strong>\\\\fs1.corp.contoso.com\\User Profiles$\\default<\/strong>. For more information, see <a href=\"https:\/\/technet.microsoft.com\/library\/gg241183\">Creating a Mandatory User Profile<\/a>.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Click <strong>OK<\/strong>.<\/p>\n<\/div>\n<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div>\n<div><a class=\"LW_CollapsibleArea_TitleAhref\" title=\"Click to collapse. Double-click to collapse all.\"><span class=\"LW_CollapsibleArea_Title\">Step 7: Enable the Roaming User Profiles GPO<\/span><\/a><\/p>\n<div id=\"Anchor_7\" class=\"LW_CollapsibleArea_Anchor_Div\"><\/div>\n<div class=\"LW_CollapsibleArea_HrDiv\"><\/div>\n<\/div>\n<div class=\"sectionblock\">\n<div class=\"section\">\n<p>If you set up Roaming User Profiles on computers by using Group Policy, or if you customized other Roaming User Profiles settings by using Group Policy, the next step is to enable the GPO, permitting it to be applied to affected users.<\/p>\n<div class=\"alert\">\n<table>\n<tbody>\n<tr>\n<th align=\"left\"><img decoding=\"async\" id=\"s-e6f6a65cf14f462597b64ac058dbe1d0-system-media-system-caps-tip\" title=\"System_CAPS_tip\" src=\"https:\/\/i-technet.sec.s-msft.com\/dynimg\/IC115537.jpeg\" alt=\"System_CAPS_tip\" \/><span class=\"alertTitle\">Tip <\/span><\/th>\n<\/tr>\n<tr>\n<td>If you plan to implement primary computer support or other policy settings, do so now, before you enable the GPO. This prevents user data from being copied to non-primary computers before primary computer support is enabled.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<div class=\"section\">\n<h3 class=\"subHeading\">To enable the Roaming User Profile GPO<\/h3>\n<ol class=\"steps\">\n<li class=\"step\">\n<div class=\"section\">\n<p>Open Group Policy Management.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>Right-click the GPO that you created and then click <strong>Link Enabled<\/strong>. A checkbox appears next to the menu item.<\/p>\n<\/div>\n<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div>\n<div><a class=\"LW_CollapsibleArea_TitleAhref\" title=\"Click to collapse. Double-click to collapse all.\"><span class=\"LW_CollapsibleArea_Title\">Step 8: Test Roaming User Profiles<\/span><\/a><\/p>\n<div id=\"Anchor_8\" class=\"LW_CollapsibleArea_Anchor_Div\"><\/div>\n<div class=\"LW_CollapsibleArea_HrDiv\"><\/div>\n<\/div>\n<div class=\"sectionblock\">\n<div class=\"section\">\n<p>To test Roaming User Profiles, sign in to a computer with a user account configured for Roaming User Profiles, or sign in to a computer configured for Roaming User Profiles. Then confirm that the profile is redirected.<\/p>\n<div class=\"section\">\n<h3 class=\"subHeading\">To test Roaming User Profiles<\/h3>\n<ol class=\"steps\">\n<li class=\"step\">\n<div class=\"section\">\n<p>Sign in to a primary computer (if you enabled primary computer support) with a user account for which you have enabled Roaming User Profiles enabled. If you enabled Roaming User Profiles on specific computers, sign in to one of these computers.<\/p>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>If the user has previously signed in to the computer, open an elevated command prompt, and then type the following command to ensure that the latest Group Policy settings are applied to the client computer:<\/p>\n<div id=\"code-snippet-2\" class=\"codeSnippetContainer\">\n<div class=\"codeSnippetContainerTabs\"><\/div>\n<div class=\"codeSnippetContainerCodeContainer\">\n<div class=\"codeSnippetToolBar\"><\/div>\n<div id=\"CodeSnippetContainerCode_713b40a2-a6aa-4093-9238-92f3dfce855c\" class=\"codeSnippetContainerCode\" dir=\"ltr\">\n<div>\n<pre>GpUpdate \/Force\r\n<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/li>\n<li class=\"step\">\n<div class=\"section\">\n<p>To confirm that the user profile is roaming, open <strong>Control Panel<\/strong>, click <strong>System and Security<\/strong>, click <strong>System<\/strong>, click <strong>Advanced System Settings<\/strong>, click <strong>Settings<\/strong> in the User Profiles section and then look for <strong>Roaming<\/strong> in the <strong>Type<\/strong> column.<\/p>\n<\/div>\n<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div>\n<div><a class=\"LW_CollapsibleArea_TitleAhref\" title=\"Click to collapse. Double-click to collapse all.\"><span class=\"LW_CollapsibleArea_Title\">Appendix A: Checklist for deploying Roaming User Profiles<\/span><\/a><\/p>\n<div id=\"Anchor_9\" class=\"LW_CollapsibleArea_Anchor_Div\"><\/div>\n<div class=\"LW_CollapsibleArea_HrDiv\"><\/div>\n<\/div>\n<div class=\"sectionblock\">\n<div class=\"section\">\n<table>\n<tbody>\n<tr>\n<td><\/td>\n<td>1. Prepare domain<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>Join computers to domain<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>Enable the use of separate profile versions<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>Create user accounts<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>(Optional) Deploy Folder Redirection<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>2. Create security group for Roaming User Profiles<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>Group name:<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>Members:<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>3. Create a file share for Roaming User Profiles<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>File share name:<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>4. Create a GPO for Roaming User Profiles<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>GPO name:<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>5. Configure Roaming User Profiles policy settings<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>6. Enable Roaming User Profiles:<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>Enabled in AD\u00a0DS on user accounts?<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>Enabled in Group Policy on computer accounts?<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>7. Enable primary computer support<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>Designate primary computers for users\n<ul class=\"unordered\">\n<li>Location of user and primary computer mappings:<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>(Optional) Enable primary computer support for Folder Redirection\n<ul class=\"unordered\">\n<li>Computer-based or User-based?<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>\n<ul class=\"unordered\">\n<li>(Optional) Enable primary computer support for Roaming User Profiles<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>8. Enable the Roaming User Profiles GPO<\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td>9. Test Roaming User Profiles<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n<div>\n<div><a class=\"LW_CollapsibleArea_TitleAhref\" title=\"Click to collapse. Double-click to collapse all.\"><span class=\"LW_CollapsibleArea_Title\">Appendix B: Profile version reference information<\/span><\/a><\/p>\n<div id=\"Anchor_10\" class=\"LW_CollapsibleArea_Anchor_Div\"><\/div>\n<div class=\"LW_CollapsibleArea_HrDiv\"><\/div>\n<\/div>\n<div class=\"sectionblock\">\n<div class=\"section\">\n<p>The following table lists the location of Roaming User Profiles on various versions of Windows.<\/p>\n<table>\n<tbody>\n<tr>\n<th>Operating system version<\/th>\n<th>Roaming User Profile location<\/th>\n<\/tr>\n<tr>\n<td data-th=\"Operating system version\">Windows XP and Windows Server\u00a02003<\/td>\n<td data-th=\"Roaming User Profile location\">\\\\<em>&lt;servername&gt;<\/em>\\<em>&lt;fileshare&gt;<\/em>\\<em>&lt;username&gt;<\/em><\/td>\n<\/tr>\n<tr>\n<td data-th=\"Operating system version\">Windows Vista and Windows Server\u00a02008<\/td>\n<td data-th=\"Roaming User Profile location\">\\\\<em>&lt;servername&gt;<\/em>\\<em>&lt;fileshare&gt;<\/em>\\<em>&lt;username&gt;<\/em>.V2<\/td>\n<\/tr>\n<tr>\n<td data-th=\"Operating system version\">Windows 7 and Windows Server\u00a02008\u00a0R2<\/td>\n<td data-th=\"Roaming User Profile location\">\\\\<em>&lt;servername&gt;<\/em>\\<em>&lt;fileshare&gt;<\/em>\\<em>&lt;username&gt;<\/em>.V2<\/td>\n<\/tr>\n<tr>\n<td data-th=\"Operating system version\">Windows 8 and Windows Server\u00a02012<\/td>\n<td data-th=\"Roaming User Profile location\">\\\\<em>&lt;servername&gt;<\/em>\\<em>&lt;fileshare&gt;<\/em>\\<em>&lt;username&gt;<\/em>.V3 (after the software update and registry key are applied)<\/p>\n<p>\\\\<em>&lt;servername&gt;<\/em>\\<em>&lt;fileshare&gt;<\/em>\\<em>&lt;username&gt;<\/em>.V2 (before the software update and registry key are applied)<\/td>\n<\/tr>\n<tr>\n<td data-th=\"Operating system version\">Windows 8.1 and Windows Server 2012 R2<\/td>\n<td data-th=\"Roaming User Profile location\">HYPERLINK \\\\&lt;servername&gt;\\&lt;fileshare&gt;\\&lt;username&gt;.V4 (after the software update and registry key are applied)<\/p>\n<p>\\\\<em>&lt;servername&gt;<\/em>\\<em>&lt;fileshare&gt;<\/em>\\<em>&lt;username&gt;<\/em>.V2 (before the software update and registry key are applied)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Step 1: Enable the use of separate profile versions If you are deploying Roaming User Profiles on computers running Windows 8.1, Windows 8, Windows Server 2012 R2, or Windows Server\u00a02012, we recommend making a couple of changes to your Windows environment prior to deploying. These changes help ensure that future operating system upgrades go smoothly, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[44,58],"tags":[],"class_list":["post-671","post","type-post","status-publish","format-standard","hentry","category-windows-server-2008","category-windows-server-2012"],"_links":{"self":[{"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/posts\/671","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/comments?post=671"}],"version-history":[{"count":1,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/posts\/671\/revisions"}],"predecessor-version":[{"id":672,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/posts\/671\/revisions\/672"}],"wp:attachment":[{"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/media?parent=671"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/categories?post=671"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/tags?post=671"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}