Terminal Server won't create Roaming Profile

drummer4lifex · July 7th, 2006

I am pulling my hair out over this!

I've created a share for separate TS Profiles and in Active Directory, you can set the group policy to store profiles on this specified share. Now when I go to login as a user, the profile is still created locally or pulled from their workstation roaming profile (we still have a few of those floating around). Shouldn't it be creating a NEW profile on the share that I specified?

**Mastershakes** · July 7th, 2006

Can you double check this procedure - Technet

drummer4lifex · July 7th, 2006

I double checked. That guide is what enlightened me about the option in the group policy. This is why it doesn't make sense.

**kcnychief** · July 7th, 2006

Have you checked the workstations are pulling the updated GPO? Do you have a single GPO, or more than one in use on the domain?

drummer4lifex · July 7th, 2006

I have one general one, and then there's one that just points all the workstations to the WSUS Server. The terminal services config is edited under the general domain GPO.

**kcnychief** · July 7th, 2006

Can you do a GPRESULT from the workstations to verify the GPO is being applied properly.

Also may want to try a general, low-impact change elsewhere in the GPO to see if the workstations are pulling it down without issue.

drummer4lifex · July 7th, 2006

Oh. That's not good. Apparently they are being filtered. I've never heard of this before, what does that mean?

**Brad** · July 7th, 2006

Are they being blocked by an ACL?

drummer4lifex · July 18th, 2006

I don't think they're being blocked by an ACL... how would I check?

**Brad** · July 18th, 2006

check the rules on your switches

drummer4lifex · July 18th, 2006

Originally Posted by Brad

check the rules on your switches

What would that qualify as? Access rules? like WAN to WAN probably? Or are you talking about like an application switch such as something like "run -w -d awesome.exe"

**Brad** · July 18th, 2006

sorry, I was thinking network switches. For instance, you can set up rules in your switches that will block certain types of packets. You can create one rule that says "if it is not in a set of these types, then block it" and no matter what, that packet/frame is not getting through. Check with the administrators of the network for the first three layers and see if anyone is blocking the tcp/udp port that you need.

drummer4lifex · July 18th, 2006

Originally Posted by Brad

sorry, I was thinking network switches. For instance, you can set up rules in your switches that will block certain types of packets. You can create one rule that says "if it is not in a set of these types, then block it" and no matter what, that packet/frame is not getting through. Check with the administrators of the network for the first three layers and see if anyone is blocking the tcp/udp port that you need.

I have inherited the duty of network administrator. Long story short, I'm consulting for a business that broke off from another larger business, but the larger network is still theirs.

Do you know by any chance what port it is? I can check the firewall tomorrow. In fact I have to clean out all the old VPNs and such anyway so it will be perfect to check.

**kcnychief** · July 18th, 2006

I am 99.9% sure that a switch is not the issue, GPO filtering takes place on the Domain Level, from the Domain Controller.

That being said, and wrt to your specific position of inheriting responsibilities, I suggest you give this a once over -

http://www.microsoft.com/technet/its...bjectmgmt.mspx

It touches on filtering a little bit, may start you in the right direction.

July 7th, 2006	Top \| #1
drummer4lifex OSNN Junior Addict Joined: January 2006 Posts: 22 Reputation: 10 Power: 78	Terminal Server won't create Roaming Profile I am pulling my hair out over this! I've created a share for separate TS Profiles and in Active Directory, you can set the group policy to store profiles on this specified share. Now when I go to login as a user, the profile is still created locally or pulled from their workstation roaming profile (we still have a few of those floating around). Shouldn't it be creating a NEW profile on the share that I specified?

July 7th, 2006	Top \| #2
Mastershakes OSNN Veteran Addict Joined: July 2004 Location: Montreal Posts: 1,721 Reputation: 1040 Power: 124	Re: Terminal Server won't create Roaming Profile Can you double check this procedure - Technet So many idiots - so little time

July 7th, 2006	Top \| #3
drummer4lifex OSNN Junior Addict Joined: January 2006 Posts: 22 Reputation: 10 Power: 78	Re: Terminal Server won't create Roaming Profile I double checked. That guide is what enlightened me about the option in the group policy. This is why it doesn't make sense.

July 7th, 2006	Top \| #4
kcnychief █▄█ ▀█▄ █ Joined: April 2005 Location: Massachusetts Posts: 16,949 Reputation: 4941 Power: 305	Re: Terminal Server won't create Roaming Profile Have you checked the workstations are pulling the updated GPO? Do you have a single GPO, or more than one in use on the domain? XBOX Live Gamertag: kcnychief

July 7th, 2006	Top \| #5
drummer4lifex OSNN Junior Addict Joined: January 2006 Posts: 22 Reputation: 10 Power: 78	Re: Terminal Server won't create Roaming Profile I have one general one, and then there's one that just points all the workstations to the WSUS Server. The terminal services config is edited under the general domain GPO.

Latest News Posts

Latest Forum Posts

Latest Member Blogs

July 7th, 2006	Top \| #6
kcnychief █▄█ ▀█▄ █ Joined: April 2005 Location: Massachusetts Posts: 16,949 Reputation: 4941 Power: 305	Re: Terminal Server won't create Roaming Profile Can you do a GPRESULT from the workstations to verify the GPO is being applied properly. Also may want to try a general, low-impact change elsewhere in the GPO to see if the workstations are pulling it down without issue. XBOX Live Gamertag: kcnychief

July 7th, 2006	Top \| #7
drummer4lifex OSNN Junior Addict Joined: January 2006 Posts: 22 Reputation: 10 Power: 78	Re: Terminal Server won't create Roaming Profile Oh. That's not good. Apparently they are being filtered. I've never heard of this before, what does that mean?

July 7th, 2006	Top \| #8
Brad OSNN Veteran Addict Joined: March 2002 Location: Cary, NC Posts: 2,276 Blog Entries: 1 Reputation: 1552 Power: 161	Re: Terminal Server won't create Roaming Profile Are they being blocked by an ACL?

July 18th, 2006	Top \| #9
drummer4lifex OSNN Junior Addict Joined: January 2006 Posts: 22 Reputation: 10 Power: 78	Re: Terminal Server won't create Roaming Profile I don't think they're being blocked by an ACL... how would I check?

July 18th, 2006	Top \| #10
Brad OSNN Veteran Addict Joined: March 2002 Location: Cary, NC Posts: 2,276 Blog Entries: 1 Reputation: 1552 Power: 161	Re: Terminal Server won't create Roaming Profile check the rules on your switches

July 18th, 2006	Top \| #11
drummer4lifex OSNN Junior Addict Joined: January 2006 Posts: 22 Reputation: 10 Power: 78	Re: Terminal Server won't create Roaming Profile Originally Posted by Brad check the rules on your switches What would that qualify as? Access rules? like WAN to WAN probably? Or are you talking about like an application switch such as something like "run -w -d awesome.exe"

July 18th, 2006	Top \| #12
Brad OSNN Veteran Addict Joined: March 2002 Location: Cary, NC Posts: 2,276 Blog Entries: 1 Reputation: 1552 Power: 161	Re: Terminal Server won't create Roaming Profile sorry, I was thinking network switches. For instance, you can set up rules in your switches that will block certain types of packets. You can create one rule that says "if it is not in a set of these types, then block it" and no matter what, that packet/frame is not getting through. Check with the administrators of the network for the first three layers and see if anyone is blocking the tcp/udp port that you need.

July 18th, 2006	Top \| #13
drummer4lifex OSNN Junior Addict Joined: January 2006 Posts: 22 Reputation: 10 Power: 78	Re: Terminal Server won't create Roaming Profile Originally Posted by Brad sorry, I was thinking network switches. For instance, you can set up rules in your switches that will block certain types of packets. You can create one rule that says "if it is not in a set of these types, then block it" and no matter what, that packet/frame is not getting through. Check with the administrators of the network for the first three layers and see if anyone is blocking the tcp/udp port that you need. I have inherited the duty of network administrator. Long story short, I'm consulting for a business that broke off from another larger business, but the larger network is still theirs. Do you know by any chance what port it is? I can check the firewall tomorrow. In fact I have to clean out all the old VPNs and such anyway so it will be perfect to check.

July 18th, 2006	Top \| #14
kcnychief █▄█ ▀█▄ █ Joined: April 2005 Location: Massachusetts Posts: 16,949 Reputation: 4941 Power: 305	Re: Terminal Server won't create Roaming Profile I am 99.9% sure that a switch is not the issue, GPO filtering takes place on the Domain Level, from the Domain Controller. That being said, and wrt to your specific position of inheriting responsibilities, I suggest you give this a once over - http://www.microsoft.com/technet/its...bjectmgmt.mspx It touches on filtering a little bit, may start you in the right direction. XBOX Live Gamertag: kcnychief

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
How to create a User Profile Template	jonny813	Windows Server Systems	4	June 24th, 2007 7:33am
roaming profile	torchey	Windows Desktop Systems	3	June 9th, 2006 1:24pm
Roaming Profile error message when logging onto computer not on network	Punkrulz	Windows Desktop Systems	9	August 25th, 2005 2:05pm
Roaming Profile Paths / Redirect Documents	Electronic Punk	Windows Server Systems	10	August 3rd, 2005 6:05pm
Roaming/mandatory profile locations	daveburger99	Windows Desktop Systems	3	September 8th, 2002 8:16am