[windows2000] Re: Profiles

  • From: "Berger, Gunnar" <GBerger@xxxxxxxxxx>
  • To: <windows2000@xxxxxxxxxxxxx>
  • Date: Thu, 30 Oct 2003 09:47:14 -0500

I've been working on this with both real users and test users.  Both users get 
the same problems.  With my test users I not setting a terminal server profile 
path, it is just running locally off a TS.  Permission on Documents and 
Settings are whatever they are set by default, I've never touched them or had 
need to.  However, if I go inside the directory and look at a users folder the 
security settings are set for full control for the user the domain admin and 
for the system.  If I look at the security settings on the Documents and 
Settings folder this is what I have:
Administrators     FULL
Everyone            R & E, List Folders, Read
?1-5-32-547        R & E, List Folders, Read
System            FULL
Users                R & E, List Folders, Read
I don't know what that ? thing is all about.
Permissions on the TS Profile path for those that use a TS profile path 
(meaning real users) is Full control.  They have access to screw around with 
each other profiles even, I don't care, I opened that thing wide open to make 
sure it wasn't a permissions issue.  FULL control to EVERYONE group.
profile size on average is less than a meg.  although I do have the user who 
has 12 meg profile.  I would delete it but there is no point, it's local for 
one, and secondly this isn't a profile issue.  I can log in as any one of these 
users (including Mrs. 12Meg) from my machine and it logs in in 8 seconds.  It 
is only from every other machine on this network that it takes 3 minutes.  I 
need to figure out what is different about my machine than the other machines 
on this network.  The only thing I can think of is this machine is not a part 
of the domain, it is the only machine running XP home.

-----Original Message-----
From: Claus, Brian [mailto:BClaus@xxxxxxxxxxxxx]
Sent: Thursday, October 30, 2003 9:37 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Profiles 

What's your terminal server profile path set to?
What are your permissions on Documents and Settings?
What are your permissions on your terminal server profile path? 
How large are the profiles your users have to load?  



Brian Claus, A+, Network+, MCP
Network Administrator
WESCO Distribution, Inc.
225 West Station Square Drive, Suite 700
Pittsburgh, PA 15219-1122
Phone:  412-454-2412
Fax:  412-454-2540
 <mailto:bclaus@xxxxxxxxxxxxx> bclaus@xxxxxxxxxxxxx

-----Original Message-----
From: windows2000-bounce@xxxxxxxxxxxxx 
[mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Berger, Gunnar
Sent: Thursday, October 30, 2003 8:42 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Profiles

Okay, I have just verified that any users logging in from my workstation can 
log in normally.  So that means this is not a permissions issue or a profile 
issues.  (Yes I still need to get modprof.exe working but I can worry about 
that later.)  Right now, I need help on figuring out why my workstation can log 
into Citrix in 8 seconds whereas the rest of my users take 3 minutes.  I'm not 
even sure how to begin to troubleshoot this one.

-----Original Message-----
From: Berger, Gunnar [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of 
Berger, Gunnar
Sent: Thursday, October 30, 2003 7:48 AM
To: windows2000@xxxxxxxxxxxxx
Subject: RE: [windows2000] Re: Profiles

Here is what really gets me.  My non-admin user can login in seconds!  The 
problem simply does not exist when connecting from my computer.  I'm going to 
try and use my user at a different workstation and see if the problem exists.  
However, I feel that this may be my workstation that connects without issue.  
The only difference between my workstations and the others, is I'm not part of 
the domain.  How would that make a difference.  I would think that would slow 
me down.
Exteremely Confused,

-----Original Message----- 
From: Braebaum, Neil [mailto:Neil.Braebaum@xxxxxxxxxxxxxxxxx] 
Sent: Thu 10/30/2003 4:33 AM 
To: windows2000@xxxxxxxxxxxxx 
Subject: [windows2000] Re: Profiles

For what it's worth, I've run Citrix / TS servers for over 5 years, and
although use network profiles, have always used mandatory profiles. This
helps with login speed, because you can tune and trim the size of the
profile loaded.

I personalise it, where needed, largely by scripting - things like the
user details for Office, and outlook profile by using modprof (and of
course a tailored prf file).

Also redirecting certain folders outside of the profile structure
(temporary internet files, favorites, that sort of thing) can keep the
size of normal profiles down - and if need be, still have a certain
degree of personalised mandatory profile.

There is middle ground, here, too in the form of hybrid profiles
(effectively a warm, soothing blend of roaming profiles and mandatory
profiles) which sort of extends the idea of scripting, to personalise
the profile, by doing it login and logout and working on certain folders
/ registry hierarchies.

To speed login up, though, normally is a matter of trimming the profile
loaded (assuming all other factors are OK), that and optimising the
login script environment. Mandatory profiles can make this much quicker
and simpler from an admin perspective, the only issue is the technical
complexity of the environment deployed, and a possible lack of
flexibility / customisation available to the users (probably not largely
a problem for TS / Citrix environments).


> Subject: [windows2000] Profiles
> Date: Wed, 29 Oct 2003 07:34:26 -0500
> From: "Berger, Gunnar" <GBerger@xxxxxxxxxx>
> Hello all,
> I'm guessing the majority of you out there use modprof.exe or
> newprof.exe to take care of your Outlook/Exchange issues.  I
> had this working myself at one point in time but for the past
> 4 months I have not been able to get this to work properly. 
> I use roaming TS profiles in my environment because my Citrix
> servers are load balanced.  However, it takes my users a
> little over 2 minutes to log on to the server.   I just
> bought new Citrix servers and I'm setting them up from
> scratch.  I need to get these things to work like they are
> suppose to, it used to take 10 seconds to log in and I need
> that type of response again.
> Here is the really weird part, there is only one users on my
> network (me) that it responds correctly to.  It takes me only
> a few seconds to bring up a Citrix app.  I have checked my
> settings on the server (Active Directory) and they are the
> same as anyone else.  The only difference between myself and
> the rest of the users is I'm stuck with XP Home on my machine
> so it is not a part of the network.  I don't see how this
> could be related but maybe it is.  My standard setup for my
> workstations is Windows 2000 Pro.  This may be permissions
> related on my profiles but I'm not sure.  Ideally I wouldn't
> even have to use profiles, or I would use them and they would
> delete on log out.
> I am at the point where if it cost money to fix these log on
> issues I am free to do it.  I found a program called Imanami
> OProfile not sure if that will take care of me or not.  If
> anyone has any insight to this please fill me in.  We have
> free reign to do whatever to these servers to make them work.

This e-mail and its attachments are confidential
and are intended for the above named recipient
only. If this has come to you in error, please
notify the sender immediately and delete this
e-mail from your system.
You must take no action based on this, nor must
you copy or disclose it or any part of its contents
to any person or organisation.
Statements and opinions contained in this email may
not necessarily represent those of Littlewoods.
Please note that e-mail communications may be monitored.
The registered office of Littlewoods Limited and its
subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB.
Registered number of Littlewoods Limited is 262152.

This Weeks Sponsor Pearl Software
Internet Monitoring, Filtering, and Control Solutions
Enabling User & Group Level Oversight & Access Policies
Fully Functional in a Thick or Thin Client Environment
To Unsubscribe, set digest or vacation
mode or view archives use the below link.


This email has been scanned for all viruses by the MessageLabs Email
Security System. For more information on a proactive email security
service working around the clock, around the globe, visit

This email has been scanned for all viruses by the MessageLabs Email
Security System. For more information on a proactive email security
service working around the clock, around the globe, visit

Other related posts: