Ah gotcha, my bad. Still fumbing with 2003 here :) - Sean
On Wed, Feb 9, 2011 at 7:34 AM, Rankin, James R <[email protected]>wrote: > That's the one I set, the RDS policy has replaced the old TS one on 2008 R2 > > Typed frustratingly slowly on my BlackBerry® wireless device > ------------------------------ > *From: *Sean Martin <[email protected]> > *Date: *Wed, 9 Feb 2011 07:23:06 -0900 > *To: *NT System Admin Issues<[email protected]> > *ReplyTo: *"NT System Admin Issues" <[email protected] > > > *Subject: *Re: Mandatory profile > > James, > > Just out of curiousity, can you set the following: Computer > Configuration/Administrative Templates/Windows Components/Terminal Services > - "Set path for TS Roaming Profiles". > > Those are the policy settings we use to control roaming profile locations. > > - Sean > > On Wed, Feb 9, 2011 at 7:15 AM, James Rankin <[email protected]>wrote: > >> After deliberating this all afternoon, I seem to have guessed the answer >> within a few minutes of posting.... >> >> The problem I am looking at is caused by the fact that this *is *a >> Computer Config object. Every time I changed something on the GPO, I needed >> to do a *gpupdate*. Because I was treating it like a user setting, I >> wasn't doing this, and was expecting it to update with every login. Now that >> the computer has refreshed, my policy has kicked into life. >> >> As someone mentioned before, maybe sitting down and writing everything out >> helped me focus.... >> >> Cheers! >> >> >> On 9 February 2011 16:07, James Rankin <[email protected]> wrote: >> >>> A bit of a follow-up to my earlier question:- >>> >>> I am trying to configure a mandatory profile for my users (I am going to >>> use this as the base for a hybrid profile). I've built the base profile, >>> named it to ntuser.man, stored it on a network share with the appropriate >>> .v2 extension. Now, I used to use the *Terminal Services Profile *tab in >>> ADUC to deploy the mandatory profile path, but this time I thought I would >>> streamline things a bit and use a GPO. >>> >>> Now I found the GPO in *Computer Config | Windows Settings | Admin >>> Templates | Windows Components | Remote Desktop Services | Remote Desktop >>> Session Host | Profiles* and set them as appropriate (I set the path, >>> and the *Use mandatory profiles* setting also). I found it a bit weird >>> that this was in Computer Config, given that it was a user setting, AFAIK. I >>> ensured that Loopback Processing was enabled (even though this is a Computer >>> setting, it felt like it was necessary), and filtered the GPO to both my >>> test server and my test user group (as I wasn't sure which one it would need >>> to apply). >>> >>> However, the mandatory profile will only apply if I explicitly set the >>> path in ADUC. The GPO never kicks in and I always get a local profile unless >>> the ADUC setting is filled in. When I run a RSOP, the GPO never shows up. I >>> have tried setting it to "Enforced", which makes no difference at all. I >>> have performed some replication troubleshooting on AD (as there was an >>> issue) but this has turned out to be a red herring. >>> >>> Can anyone give me any hint as to what I am doing wrong? I've discovered >>> a couple of threads pertaining to similar issues, but no resolution. For the >>> record, it is Windows Server 2008 R2 running XenApp 6 I am connecting to, in >>> a Windows 2003 R2 FFL domain. >>> >>> TIA, >>> >>> >>> >>> JRR >>> >>> -- >>> "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into >>> the machine wrong figures, will the right answers come out?' I am not able >>> rightly to apprehend the kind of confusion of ideas that could provoke such >>> a question." >>> >>> *IMPORTANT: This email is intended for the use of the individual >>> addressee(s) named above and may contain information that is confidential, >>> privileged or unsuitable for overly sensitive persons with low self-esteem, >>> no sense of humour or irrational religious beliefs. If you are not the >>> intended recipient, any dissemination, distribution or copying of this email >>> is not authorised (either explicitly or implicitly) and constitutes an >>> irritating social faux pas. >>> >>> Unless the word absquatulation has been used in its correct context >>> somewhere other than in this warning, it does not have any legal or no >>> grammatical use and may be ignored. No animals were harmed in the >>> transmission of this email, although the kelpie next door is living on >>> borrowed time, let me tell you. Those of you with an overwhelming fear of >>> the unknown will be gratified to learn that there is no hidden message >>> revealed by reading this warning backwards, so just ignore that Alert Notice >>> from Microsoft. >>> >>> However, by pouring a complete circle of salt around yourself and your >>> computer you can ensure that no harm befalls you and your pets. If you have >>> received this email in error, please add some nutmeg and egg whites, whisk >>> and place in a warm oven for 40 minutes.* >>> >>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>> >>> --- >>> To manage subscriptions click here: >>> http://lyris.sunbelt-software.com/read/my_forums/ >>> or send an email to [email protected] >>> with the body: unsubscribe ntsysadmin >>> >> >> >> >> -- >> "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into >> the machine wrong figures, will the right answers come out?' I am not able >> rightly to apprehend the kind of confusion of ideas that could provoke such >> a question." >> >> *IMPORTANT: This email is intended for the use of the individual >> addressee(s) named above and may contain information that is confidential, >> privileged or unsuitable for overly sensitive persons with low self-esteem, >> no sense of humour or irrational religious beliefs. If you are not the >> intended recipient, any dissemination, distribution or copying of this email >> is not authorised (either explicitly or implicitly) and constitutes an >> irritating social faux pas. >> >> Unless the word absquatulation has been used in its correct context >> somewhere other than in this warning, it does not have any legal or no >> grammatical use and may be ignored. No animals were harmed in the >> transmission of this email, although the kelpie next door is living on >> borrowed time, let me tell you. Those of you with an overwhelming fear of >> the unknown will be gratified to learn that there is no hidden message >> revealed by reading this warning backwards, so just ignore that Alert Notice >> from Microsoft. >> >> However, by pouring a complete circle of salt around yourself and your >> computer you can ensure that no harm befalls you and your pets. If you have >> received this email in error, please add some nutmeg and egg whites, whisk >> and place in a warm oven for 40 minutes.* >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to [email protected] >> with the body: unsubscribe ntsysadmin >> > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
