Separate User Profiles per Locations

  • Thread starter Thread starter lozza
  • Start date Start date
L

lozza

Guest
Guys,

A theoretical based question.

If I have a single global AD domain and I have a TS Server in London and NY,
can I split configure this so when a user logs onto the TS (london) his
profile will be on a NAS device in the London DC and the when the same user
logs onto the TS (NY) his profile will be located in the NY Datacentre.

If I put each TS into an OU of its own OU=London (for London TS) and OU=NY
(for NY TS) then:

I am thinking I could Apply a separate GPO to each TS OU for location and set:

CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming Profile

and for the London OU point it to \\London-NAS\TSProfiles and for NY OU
point it to \\NY-NAS\TSProfiles. Will this then achieve what I want it to
achieve?

I think the above will work....

My understanding however breaks down, when I want to also use folder
redirection for these profiles inorder to keep profiles sizes to a minimum.
How would I go about redirecting these folders for each DC location? and is
this typically how it is done?

Many Thanks
Lozza
 
Re: Separate User Profiles per Locations

I've never tested this, but it should work, I believe.
Along the same lines, you can add the folder redirection settings
to the same 2 GPOs, redirecting them to the Londen and NY NAS
respectively:

User Configuration - Windows Settings - Folder Redirection
Application Data
Desktop
My Documents
Start Menu

But since these settings are User Configurations, you will also
need to use loopback processing of the GPO:

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - "Replace"

which ensure that when a user logs on to a TS, the user settings
are taken from the GPO which is linked to the OU which contains the
TS account, not from the GPO which is linked to the OU containing
the user account. That should do what you want to achieve.

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?bG96emE=?= <lozza@discussions.microsoft.com> wrote on 01
feb 2008 in microsoft.public.windows.terminal_services:

> Guys,
>
> A theoretical based question.
>
> If I have a single global AD domain and I have a TS Server in
> London and NY, can I split configure this so when a user logs
> onto the TS (london) his profile will be on a NAS device in the
> London DC and the when the same user logs onto the TS (NY) his
> profile will be located in the NY Datacentre.
>
> If I put each TS into an OU of its own OU=London (for London TS)
> and OU=NY (for NY TS) then:
>
> I am thinking I could Apply a separate GPO to each TS OU for
> location and set:
>
> CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming
> Profile
>
> and for the London OU point it to \\London-NAS\TSProfiles and
> for NY OU point it to \\NY-NAS\TSProfiles. Will this then
> achieve what I want it to achieve?
>
> I think the above will work....
>
> My understanding however breaks down, when I want to also use
> folder redirection for these profiles inorder to keep profiles
> sizes to a minimum. How would I go about redirecting these
> folders for each DC location? and is this typically how it is
> done?
>
> Many Thanks
> Lozza
 
RE: Separate User Profiles per Locations

All you need to do is put each terminal server in a different OU, and use
different loopback policies to determine where to store the profiles, and
where to redirect the folders.

directions are here:

http://www.msterminalservices.org/articles/Configure-Folder-Redirection.html

--
Patrick C. Rouse
Microsoft MVP - Terminal Server
SE, West Coast USA & Canada
Quest Software, Provision Networks Division
Virtual Client Solutions
http://www.provisionnetworks.com


"lozza" wrote:

> Guys,
>
> A theoretical based question.
>
> If I have a single global AD domain and I have a TS Server in London and NY,
> can I split configure this so when a user logs onto the TS (london) his
> profile will be on a NAS device in the London DC and the when the same user
> logs onto the TS (NY) his profile will be located in the NY Datacentre.
>
> If I put each TS into an OU of its own OU=London (for London TS) and OU=NY
> (for NY TS) then:
>
> I am thinking I could Apply a separate GPO to each TS OU for location and set:
>
> CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming Profile
>
> and for the London OU point it to \\London-NAS\TSProfiles and for NY OU
> point it to \\NY-NAS\TSProfiles. Will this then achieve what I want it to
> achieve?
>
> I think the above will work....
>
> My understanding however breaks down, when I want to also use folder
> redirection for these profiles inorder to keep profiles sizes to a minimum.
> How would I go about redirecting these folders for each DC location? and is
> this typically how it is done?
>
> Many Thanks
> Lozza
 
RE: Separate User Profiles per Locations

yes, excellent... using loopback to redirect these folders to the same
location where profiles for each specific TS are stored makes sense. as these
are User settings in a GPO

but, how would I configure loopback for profile location depending on which
server a user logs onto?

Is this good practice to have different profiles for the same user to be
scattered about depending on which Global TS Server they log onto? even
though all TS servers will host same applications, if this goes ahead?

Happy Friday... working :(

"Patrick Rouse" wrote:

> All you need to do is put each terminal server in a different OU, and use
> different loopback policies to determine where to store the profiles, and
> where to redirect the folders.
>
> directions are here:
>
> http://www.msterminalservices.org/articles/Configure-Folder-Redirection.html
>
> --
> Patrick C. Rouse
> Microsoft MVP - Terminal Server
> SE, West Coast USA & Canada
> Quest Software, Provision Networks Division
> Virtual Client Solutions
> http://www.provisionnetworks.com
>
>
> "lozza" wrote:
>
> > Guys,
> >
> > A theoretical based question.
> >
> > If I have a single global AD domain and I have a TS Server in London and NY,
> > can I split configure this so when a user logs onto the TS (london) his
> > profile will be on a NAS device in the London DC and the when the same user
> > logs onto the TS (NY) his profile will be located in the NY Datacentre.
> >
> > If I put each TS into an OU of its own OU=London (for London TS) and OU=NY
> > (for NY TS) then:
> >
> > I am thinking I could Apply a separate GPO to each TS OU for location and set:
> >
> > CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming Profile
> >
> > and for the London OU point it to \\London-NAS\TSProfiles and for NY OU
> > point it to \\NY-NAS\TSProfiles. Will this then achieve what I want it to
> > achieve?
> >
> > I think the above will work....
> >
> > My understanding however breaks down, when I want to also use folder
> > redirection for these profiles inorder to keep profiles sizes to a minimum.
> > How would I go about redirecting these folders for each DC location? and is
> > this typically how it is done?
> >
> > Many Thanks
> > Lozza
 
RE: Separate User Profiles per Locations

Put the two different servers in two different OUs, i.e. London & New York.
If users will typically only use one server or the other, you shouldn't have
a problem.

Al alternative is to use a hybrid profile solution like our User Profile
Service, SepagoProfile or Login Consultants Flex Profile Kit.

--
Patrick C. Rouse
Microsoft MVP - Terminal Server
SE, West Coast USA & Canada
Quest Software, Provision Networks Division
Virtual Client Solutions
http://www.provisionnetworks.com


"lozza" wrote:

> yes, excellent... using loopback to redirect these folders to the same
> location where profiles for each specific TS are stored makes sense. as these
> are User settings in a GPO
>
> but, how would I configure loopback for profile location depending on which
> server a user logs onto?
>
> Is this good practice to have different profiles for the same user to be
> scattered about depending on which Global TS Server they log onto? even
> though all TS servers will host same applications, if this goes ahead?
>
> Happy Friday... working :(
>
> "Patrick Rouse" wrote:
>
> > All you need to do is put each terminal server in a different OU, and use
> > different loopback policies to determine where to store the profiles, and
> > where to redirect the folders.
> >
> > directions are here:
> >
> > http://www.msterminalservices.org/articles/Configure-Folder-Redirection.html
> >
> > --
> > Patrick C. Rouse
> > Microsoft MVP - Terminal Server
> > SE, West Coast USA & Canada
> > Quest Software, Provision Networks Division
> > Virtual Client Solutions
> > http://www.provisionnetworks.com
> >
> >
> > "lozza" wrote:
> >
> > > Guys,
> > >
> > > A theoretical based question.
> > >
> > > If I have a single global AD domain and I have a TS Server in London and NY,
> > > can I split configure this so when a user logs onto the TS (london) his
> > > profile will be on a NAS device in the London DC and the when the same user
> > > logs onto the TS (NY) his profile will be located in the NY Datacentre.
> > >
> > > If I put each TS into an OU of its own OU=London (for London TS) and OU=NY
> > > (for NY TS) then:
> > >
> > > I am thinking I could Apply a separate GPO to each TS OU for location and set:
> > >
> > > CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming Profile
> > >
> > > and for the London OU point it to \\London-NAS\TSProfiles and for NY OU
> > > point it to \\NY-NAS\TSProfiles. Will this then achieve what I want it to
> > > achieve?
> > >
> > > I think the above will work....
> > >
> > > My understanding however breaks down, when I want to also use folder
> > > redirection for these profiles inorder to keep profiles sizes to a minimum.
> > > How would I go about redirecting these folders for each DC location? and is
> > > this typically how it is done?
> > >
> > > Many Thanks
> > > Lozza
 
Re: Separate User Profiles per Locations

Guys,

Thanks for the explanations... As soon as I have the test kit and
confirmation that this is the direction that needs to be followed, I'll get
testing.

The important thing for me is to keep profiles of the Global TS Servers in
the same DC to each TS Server... so effectivley the same user account will
have different profiles depending on the location TS they log into. I dont
like this maintenance of many profiles for the same user, but this is the way
it may have to go. People are worried about what will happen if profiles are
stored in a single location for all TS servers and then problem of whether
this location goes down or even possible slowness of loading profiles of
users in NY that may have profiles stored in London.

The way its looking each TS user will have 6 different TS profiles and home
directories in each global DC. I hope this doesnt cause confusion.

Thanks for your expert help.
loz
"Vera Noest [MVP]" wrote:

> I've never tested this, but it should work, I believe.
> Along the same lines, you can add the folder redirection settings
> to the same 2 GPOs, redirecting them to the Londen and NY NAS
> respectively:
>
> User Configuration - Windows Settings - Folder Redirection
> Application Data
> Desktop
> My Documents
> Start Menu
>
> But since these settings are User Configurations, you will also
> need to use loopback processing of the GPO:
>
> Computer Configuration - Administrative Templates - System - Group
> Policy
> "User Group Policy loopback processing mode" - "Replace"
>
> which ensure that when a user logs on to a TS, the user settings
> are taken from the GPO which is linked to the OU which contains the
> TS account, not from the GPO which is linked to the OU containing
> the user account. That should do what you want to achieve.
>
> 231287 - Loopback Processing of Group Policy
> http://support.microsoft.com/?kbid=231287
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?bG96emE=?= <lozza@discussions.microsoft.com> wrote on 01
> feb 2008 in microsoft.public.windows.terminal_services:
>
> > Guys,
> >
> > A theoretical based question.
> >
> > If I have a single global AD domain and I have a TS Server in
> > London and NY, can I split configure this so when a user logs
> > onto the TS (london) his profile will be on a NAS device in the
> > London DC and the when the same user logs onto the TS (NY) his
> > profile will be located in the NY Datacentre.
> >
> > If I put each TS into an OU of its own OU=London (for London TS)
> > and OU=NY (for NY TS) then:
> >
> > I am thinking I could Apply a separate GPO to each TS OU for
> > location and set:
> >
> > CC\Amin_Temp\Win_Com\Terminal Service\Set Path for TS Roaming
> > Profile
> >
> > and for the London OU point it to \\London-NAS\TSProfiles and
> > for NY OU point it to \\NY-NAS\TSProfiles. Will this then
> > achieve what I want it to achieve?
> >
> > I think the above will work....
> >
> > My understanding however breaks down, when I want to also use
> > folder redirection for these profiles inorder to keep profiles
> > sizes to a minimum. How would I go about redirecting these
> > folders for each DC location? and is this typically how it is
> > done?
> >
> > Many Thanks
> > Lozza
>
 
Back
Top