Implementing Roaming Profiles
- Start the domain controller and log on.
- Create a shared folder to store the user profiles with the following steps:
- Start Windows Explorer by clicking Start → Computer.
- Double-click the C: drive. Right-click the main Windows pane and click New → Folder. Name the folder Profiles or another name that matches your company's needs.
- Select Share from the Windows Explorer toolbar.
- Type Authenticated Users in the text box, and click Add. (You can also click Find And Search and use the Active Directory search tool to locate any group.) Change Reader to Contributor.
- Click Share. Click Done.
- Launch Active Directory Users and Computers by clicking Start → Administrative Tools → Active Directory Users And Computers.
- Locate a user account. Right-click the user account and click Properties.
- Select the Profile tab. Enter the UNC path to the share in the Profile Path text box. For my test bed, I created the Profiles share on DC1, so the full path is \\DC1\Profiles\%UserName%. Click OK.
If you look in the Profiles folder now, you won't see anything. However, the next time the user logs on, a folder will be created for the user in the UNC path.
The operating system also configures the NTFS permissions for the folder. The user and the system both have full control of the folder, but no other users are granted any access to the data in the folder.
In this tutorial:
- Managing Windows 7 in a Domain
- The Domain
- What is Wrong with Workgroups
- The Domain Concept
- Active Directory
- Domain Security
- Joining a Domain
- Windows 7 Offline Domain Join
- Browsing the Domain
- Searching the Domain
- Custom Searches
- Assigning Permissions to Domain Members
- The Double-Thick Security Trick
- Creating a Test Bed
- Creating a Domain
- Installing Windows Server 2008 on vPC
- Configuring a Windows Server 2008 Server
- Promoting a Server to a Domain Controller
- Joining Windows 7 to a Domain
- Authentication vs Authorization
- Authentication
- Authorization
- Built-in Groups
- Organizing Users with Groups
- Group Scope and Group Type
- Creating Users and Groups in a Domain
- Using HomeGroup with a Domain-Based Computer
- Identifying and Resolving Logon Issues
- Hardware vs. Network
- Using Cached Credentials
- Password Expiration
- Determining Logon Context
- Logon Hours Compliance
- Restricting Computer Access
- Time Synchronization
- Understanding User Profiles
- Standard Profiles
- Roaming Profiles
- Implementing Roaming Profiles
- Mandatory Profiles
- Super-Mandatory User Profiles
- Modifying the Default User Profile
- Configuring Settings with Scripts
- Anti-Malware Software
- Microsoft Windows 7 Defender
- Third-Party Anti-malware Software