Roaming profiles in Active Directory?

Question

System administration

Give advice recommendations on the settings of such users
I liked the idea with such settings (movable), but if suddenly a person has 50 gigs of movies on his desktop. all of them will be loaded every time he enters or changes his workplace?
What generally who can advise the best practice for user management and automation in the Windows environment

Answer 1

Vi I do not recommend to contact moving profiles. I do not specify what kind of organization you have, the conditions of the park, etc., BUT! I do not recommend.
Create a Personal folder on a dedicated file server. we rummage it in a network - all on change\reading
We create policy: Folder_redirect
1. conf. computer: network\offline files. Limit the size of disk space used by offline files in MB: total 50000 size of automatically cached files: 10000 (but set the numbers according to your needs)
2. conf. user:
conv. Windows\folder redirection\Documents - and HERE! set the path of the shared folder, something like this: \\srv-profile\personal\%USERNAME%\documents
Set the parameters: exclusive access=off. move documentnet content to new=ON. policy for old systems - optional...
Policy removal procedure - restore content
Done. Now do the same with Desktop, only the path will be different at the end:
\\srv-profile\personal\%USERNAME%\desktop
Additionally configure administrative templates:
Network\offline files:
actions when disconnecting from the server: mode: Work offline (files will be available locally if the server is unavailable)
Enable offline file sync before logout and before suspend. Type: Full mode.
System\Folder Redirection:
Do not provide automatic offline access to certain folder redirections. folders: OFF. to all redirected folders: OFF
Now you have the following picture (if suddenly it is not clear) - no matter where the user sits down, and perhaps even connects to the terminal server - he will always have access to his desktop folders and my documents. Of course, without all its bells and whistles, a customized view on the desktop, etc. (how it works in a roaming profile), but all the functionality, namely THIS is often required, works for you! Synchronization is never a concern. Not the user, not you. Verified over a year.
Use it ;)

Answer 2

I won't say anything about windows 7, but for xp it is necessary to move the "my music" and "my video" folders outside the "my documents" folder. This is done through group policies. For service videos (all sorts of promotional videos of the enterprise, filming of production defects, etc.) there should be a separate network folder. Also, through group policies, you need to create a folder for users' personal files. And bring the shortcut of this folder to the desktop and to my documents.
If music and video gets into my documents - destroy ruthlessly. Under such conditions, synchronization occurs quite quickly. When synchronizing over the network, only those files that have changed are transferred.
And mandatory training. First, each (!) user needs to be shown how it works on their own example. In the presence of the user, you need to log in to two computers with your login, show that "my documents" and "desktop" are synchronized, but the folder on the c: drive, programs, music and videos are not. Explain that everything that is on the desktop and in my documents is saved in the organization's backups forever, and that there is a separate folder for personal files, and that they are guaranteed to lose any music that they leave in my documents. You also need to explain that if something happens to the computer, then they will lose their personal data, let them keep it at home.
The algorithm turns out like this
1. Take out "heavy"
2. Conduct a briefing, give 3 days to put the files in their places.
3. Enable roaming profile
If the user "accidentally forgot", he will get a long turn on and off of the computer and lose "Igor Nikolaev's favorite songs".
Implementation is best done by department.

Answer 3

I agree with gimntut in everything, plus I’ll add that if you have Windows Server 2012, then you can configure software prohibitions on storing certain types of files (*.mp3, *.mp4, etc) in certain folders + set up quotas for the size of the user folder.