none
Selective Roaming Profiles Possible?

    Question

  • Hello everyone,

    I have a terminal services environment where I would like to apply roaming profiles to all users except for a specific set of users, primarily the admins. I currently have the GPO configured for profile redirection and I set domain admins to deny for the "Apply group policy," which I didn't think the deny would work.  And it doesn't seem to because when I log in with a domain admin account, I am still getting a roaming profile. 

    I am pretty sure I know the answer and that is this can't be done with GPO as the policy is a computer policy and can't be targeted to a specific user as we want.

    Thank you in advance.

    Wednesday, September 23, 2015 2:33 PM

Answers

  • > I have a terminal services environment where I would like to apply
    > roaming profiles to all users except for a specific set of users,
     
    Roaming Profiles are defined in the account properties in active
    directory. As soon as you enter a profile path here, the profile will
    roam. You then can specify a different profile path for RDS sessions.
     
    In addition, you can specify a profile path for the computer - either
    remote or "all local profiles".
     
    But unfortunately, you cannot do so on a "per user" base. The reason for
    that is:
     
    To do that on a per user base, you need to use user policies. But
    policies can only be applied AFTER the profile has already been loaded.
     
    And this is why this GPO setting is available for computers only, not
    for users.
     
    > I am pretty sure I know the answer and that is this can't be done with
    > GPO as the policy is a computer policy and can't be targeted to a
    > specific user as we want.
     
    Exactly. My recommendation: Do not use RUP for Admin users, but rely on
    Folder Redirection only. Admins should be able to adjust whatever they
    need quickly enough, and Admins should not use e.g. Office which might
    need more customization.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by BrianGWAccount Wednesday, September 23, 2015 3:32 PM
    Wednesday, September 23, 2015 3:00 PM