Advanced Guidelines for User Profiles, Group Policy Objects, and Policies

1
Advanced Guidelines for User Profiles, Group
Policy Objects, and Policies
2
Objective

• HOW do you implement an efficient user profile
  and policy management strategy that enhances
  security, speeds up logons, and is
  corruption-proof?
• We promise youll leave this session with the
  answers youve been seeking.

3
Workshop Questions

• How do you implement Terminal Server profiles?
• When should you use roaming or mandatory
  profiles?
• How do you implement multiple roaming profiles
  per user?
• What is shell folder redirection and how do you
  implement it?

4
Workshop Questions

• What are the advantages of hybrid profiles and
  how do you implement them?
• How do you implement group policies in Terminal
  Server environment and what is loopback
  processing?
• What are MetaFrame policies and how can you
  leverage them?

5
What is a User Profile?

• Graphical User interface Configuration
• Registry
• Folder
• File
• Types
• Local
• Roaming
• Mandatory

6
Local Profile

• Default User Profile
• Files, Folders, and Registry Hive

7
Profile Inventory

• System/Advanced/User Profiles
• HKLM/Software/Windows NT/CurrentVersion/ProfileLis
  t
• HKCU
• HKU

8
Configuring Local Profiles

• Automatic!!!

9
Roaming Profile

• Administrative Action
• User Profile
• TS user profile
• Select Start/Run
• Type dsa.msc
• KB Article

10
Shell Folders

• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp
  lorer
• HKCU\Software\Microsoft\Windows\CurrentVersion\Exp
  lorer

11
User Shell Folders

• HKCU\Software\Microsoft\Windows\CurrentVersion\Exp
  lorer
• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp
  lorer

12
User Shell Folders
13
Shared Shell Folders
14
Win2K3/XP

• CommonMusic
• CommonPictures
• CommonVedio

15
(No Transcript)
16
Assign Roaming Profiles

• AD Users and Computers
• Group Policy Object in W2K3
• Script

17
Mandatory

• Read Only Profile
• Change ntuser.dat to ntuser.man

18
Hybrid Approaches

• Flex Profiles
• Provision Networks MetaProfiles

19
Flex Profile Kit

• DABCC.com
• ProfWizard based
• Ini file driven
• Uses mandatory profile as starter

20
Provision Networks

• MetaProfiles
• Mandatory profile starter
• Storage Server driven back-end
• Administrative GUI to assign persisted keys

21
MetaProfiles Implementation

• Local
• Mandatory
• Roaming

22
Installing MetaProfiles

• Database Implementation
• Install MetaProfiles on the Storage Svr
• Connect PNConsole to Database
• Configure Global Metaprofiles Properties
• Connect PNConsole to Database
• Configure TS Servers in PNConsole
• Configure Storage Server
• Configure Agent Servers

23
Presentation Server Policies

• Bandwidth
• Printing
• Client Devices
• User Workspace
• Security

24
(No Transcript)
25
(No Transcript)
26
(No Transcript)
27
(No Transcript)
28
(No Transcript)
29
Notes