Roaming Sensitivity Level Windows 10
2021年11月19日Download here: http://gg.gg/wxol0
-->
*What Is Roaming Sensitivity Level
*Wireless Roaming Sensitivity Level
*Roaming Sensitivity Level Windows 10 Update
Select Roaming Aggressiveness; Select your preferred Value from the drop down menu. Please note: If you are using a Ralink Wi-FI network adapter, click Roaming Sensitivity and select your preferred Value from the drop down menu. Ralink uses the term roaming sensitivity instead of roaming aggressiveness. Wi-Fi Roaming Aggressiveness Setting This setting alters the signal strength threshold at which the WiFi adapter starts scanning for another candidate AP. Find this setting under the advanced adapter settings. The default value is Medium. Jan 11, 2021 Once Device Manager opens locate your Wi-Fi adapter, right-click it and choose Properties. Go to the Advanced tab and locate Roaming Sensitivity Level, Roaming Aggressiveness or Roam Tendency to Highest or Aggressive. Set Transmit Power or Transmit Power Level to Highest. Select Antenna Diversity and set it to Auto. 03 Aug 2015 #13. I had the same problem too after upgrading to Windows 10, I have tried everything I found on the internet but it did not work. Maybe Internet access is blocked by firewall. Check your firewall setting, if you have firewall from the third party, just turn it off.
Applies To: Windows 10, Windows 7, Windows 8, Windows 8.1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Vista
This topic describes how to use Windows Server to deploy Roaming User Profiles to Windows client computers. Roaming User Profiles redirects user profiles to a file share so that users receive the same operating system and application settings on multiple computers.
For a list of recent changes to this topic, see the Change History section of this topic.
Important
Due to the security changes made in MS16-072, we updated Step 4: Optionally create a GPO for Roaming User Profiles of this topic so that Windows can properly apply the Roaming User Profiles policy (and not revert to local policies on affected PCs).PrerequisitesHardware requirements
Roaming User Profiles requires an x64-based or x86-based computer; it isn’t supported by Windows RT.Software requirements
Roaming User Profiles has the following software requirements:
*
If you are deploying Roaming User Profiles with Folder Redirection in an environment with existing local user profiles, deploy Folder Redirection before Roaming User Profiles to minimize the size of roaming profiles. After the existing user folders have been successfully redirected, you can deploy Roaming User Profiles.
*
To administer Roaming User Profiles, you must be signed in as a member of the Domain Administrators security group, the Enterprise Administrators security group, or the Group Policy Creator Owners security group.
*
Client computers must run Windows 10, Windows 8.1, Windows 8, Windows 7, Windows Vista, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, or Windows Server 2008.
*
Client computers must be joined to the Active Directory Domain Services (AD DS) that you are managing.
*
A computer must be available with Group Policy Management and Active Directory Administration Center installed.
*
A file server must be available to host roaming user profiles.
*
If the file share uses DFS Namespaces, the DFS folders (links) must have a single target to prevent users from making conflicting edits on different servers.
*
If the file share uses DFS Replication to replicate the contents with another server, users must be able to access only the source server to prevent users from making conflicting edits on different servers.
*
If the file share is clustered, disable continuous availability on the file share to avoid performance issues.
*
To use primary computer support in Roaming User Profiles, there are additional client computer and Active Directory schema requirements. For more information, see Deploy Primary Computers for Folder Redirection and Roaming User Profiles.
*
The layout of a user’s Start menu won’t roam on Windows 10 or Windows Server 2016 if they’re using more than one PC, Remote Desktop Session Host, or Virtualized Desktop Infrastructure (VDI) server. As a workaround, you can specify a Start layout as described in this topic. Or you can make use of user profile disks, which properly roam Start menu settings when used with Remote Desktop Session Host servers or VDI servers. For more info, see Easier User Data Management with User Profile Disks in Windows Server 2012.Considerations when using Roaming User Profiles on multiple versions of Windows
If you decide to use Roaming User Profiles across multiple versions of Windows, we recommend taking the following actions:
*
Configure Windows to maintain separate profile versions for each operating system version. This helps prevent undesirable and unpredictable issues such as profile corruption.
*
Use Folder Redirection to store user files such as documents and pictures outside of user profiles. This enables the same files to be available to users across operating system versions. It also keeps profiles small and sign-ins quick.
*
Allocate sufficient storage for Roaming User Profiles. If you support two operating system versions, profiles will double in number (and thus total space consumed) because a separate profile is maintained for each operating system version.
*
Don’t use Roaming User Profiles across computers running Windows Vista/Windows Server 2008 and Windows 7/Windows Server 2008 R2. Roaming between these operating system versions isn’t supported due to incompatibilities in their profile versions.
*
Inform your users that changes made on one operating system version won’t roam to another operating system version.
*
When moving your environment to a version of Windows that uses a different profile version (such as from Windows 10 to Windows 10, version 1607 - see Appendix B: Profile version reference information for a list), users receive a new, empty roaming user profile. You can minimize the impact of getting a new profile by using Folder Redirection to redirect common folders. There isn’t a supported method of migrating roaming user profiles from one profile version to another.Step 1: Enable the use of separate profile versions
If you are deploying Roaming User Profiles on computers running Windows 8.1, Windows 8, Windows Server 2012 R2, or Windows Server 2012, we recommend making a couple of changes to your Windows environment prior to deploying. These changes help ensure that future operating system upgrades go smoothly, and facilitate the ability to simultaneously run multiple versions of Windows with Roaming User Profiles.
To make these changes, use the following procedure.Enable the use of separate profiles for each version of Windows
*
Download and install the appropriate software update on all computers on which you’re going to use roaming, mandatory, super-mandatory, or domain default profiles:
*
Windows 8.1, or Windows Server 2012 R2: install the software update described in article 2887595 in the Microsoft Knowledge Base (when released).
*
Windows 8 or Windows Server 2012: install the software update described in article 2887239 in the Microsoft Knowledge Base.
*
On all computers running Windows 8.1, Windows 8, Windows Server 2012 R2, or Windows Server 2012 on which you will use Roaming User Profiles, use Registry Editor or Group Policy to create the following registry key DWORD Value and set it to 1. For information about creating registry keys by using Group Policy, see Configure a Registry Item.
Warning
Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer.
*
Restart the computers.Step 2: Create a Roaming User Profiles security group
If your environment is not already set up with Roaming User Profiles, the first step is to create a security group that contains all users and/or computers to which you want to apply Roaming User Profiles policy settings.
*
Administrators of general-purpose roaming user profiles deployments typically create a security group for users.
*
Administrators of Remote Desktop Services or virtualized desktop deployments typically use a security group for users and the shared computers.To create a security group for Roaming User Profiles
*
Open Server Manager on a computer with Active Directory Administration Center installed.
*
On the Tools menu, click Active Directory Administration Center. Active Directory Administration Center appears.
*
Right-click the appropriate domain or OU, click New, and then click Group.
*
In the Create Group window, in the Group section, specify the following settings:
*
In Group name, type the name of the security group, for example: Roaming User Profiles Users and Computers.
*
In Group scope, click Security, and then click Global.
*
In the Members section, click Add. The Select Users, Contacts, Computers, Service Accounts or Groups dialog box appears.
*
If you want to include computer accounts in the security group, click Object Types, select the Computers check box and then click OK.
*
Type the names of the users, groups, and/or computers to which you want to deploy Roaming User Profiles, click OK, and then click OK again.Step 3: Create a file share for roaming user profiles
If you do not already have a separate file share for roaming user profiles (independent from any shares for redirected folders to prevent inadvertent caching of the roaming profile folder), use the following procedure to create a file share on a server running Windows Server 2012.
Note
Some functionality might differ or be unavailable if you create the file share on a server running another version of Windows Server.To create a file share on Windows Server 2012
*
In the Server Manager navigation pane, click File and Storage Services, and then click Shares to display the Shares page.
*
In the Shares tile, click Tasks, and then click New Share. The New Share Wizard appears.
*
On the Select Profile page, click SMB Share – Quick. If you have File Server Resource Manager installed and are using folder management properties, instead click SMB Share - Advanced.
*
On the Share Location page, select the server and volume on which you want to create the share.
*
On the Share Name page, type a name for the share (for example, User Profiles$) in the Share name box.
Tip
When creating the share, hide the share by putting a $ after the share name. This hides the share from casual browsers.
*
On the Other Settings page, clear the Enable continuous availability checkbox, if present, and optionally select the Enable access-based enumeration and Encrypt data access checkboxes.
*
On the Permissions page, click Customize permissions…. The Advanced Security Settings dialog box appears.
*
Click Disable inheritance, and then click Convert inherited permissions into explicit permission on this object.
*
Set the permissions as described Table 1 and shown in Figure 1, removing permissions for unlisted groups and accounts, and adding special permissions to the Roaming User Profiles Users and Computers group that you created in Step 1.
Figure 1 Setting the permissions for the roaming user profiles share
*
If you chose the SMB Share - Advanced profile, on the Management Properties page, select the User Files Folder Usage value.
*
If you chose the SMB Share - Advanced profile, on the Quota page, optionally select a quota to apply to users of the share.
*
On the Confirmation page, click Create.Table 1 Required permissions for the file share hosting roaming user profilesUser AccountAccessApplies toSystemFull controlThis folder, subfolders and filesAdministratorsFull ControlThis folder onlyCreator/OwnerFull ControlSubfolders and files onlySecurity group of users needing to put data on share (Roaming User Profiles Users and Computers)List folder / read data1Create folders / append data1This folder onlyOther groups and accountsNone (remove)
1 Advanced permissionsStep 4: Optionally create a GPO for Roaming User Profiles
If you do not already have a GPO created for Roaming User Profiles settings, use the following procedure to create an empty GPO for use with Roaming User Profiles. This GPO allows you to configure Roaming User Profiles settings (such as primary computer support, which is discussed separately), and can also be used to enable Roaming User Profiles on computers, as is typically done when deploying in virtualized desktop environments or with Remote Desktop Services.To create a GPO for Roaming User Profiles
*
Open Server Manager on a computer with Group Policy Management installed.
*
From the Tools menu click Group Policy Management. Group Policy Management appears.
*
Right-click the domain or OU in which you want to setup Roaming User Profiles and then click Create a GPO in this domain, and Link it here.
*
In the New GPO dialog box, type a name for the GPO (for example, Roaming User Profile Settings), and then click OK.
*
Right-click the newly created GPO and then clear the Link Enabled checkbox. This prevents the GPO from being applied until you finish configuring it.
*
Select the GPO. In the Security Filtering section of the Scope tab, select Authenticated Users, and then click Remove to prevent the GPO from being applied to everyone.
*
In the Security Filtering section, click Add.
*
In the Select User, Computer, or Group dialog box, type the name of the security group you created in Step 1 (for example, Roaming User Profiles Users and Computers), and then click OK.
*
Click the Delegation tab, click Add, type Authenticated Users, click OK, and then click OK again to accept the default Read permissions.
This step is necessary due to security changes made in MS16-072.
Important
Due to the security changes made in MS16-072, you now must give the Authenticated Users group delegated Read permissions to the GPO - otherwise the GPO won’t get applied to users, or if it’s already applied, the GPO is removed, redirecting user profiles back to the local PC. For more info, see Deploying Group Policy Security Update MS16-072.Step 5: Optionally set up Roaming User Profiles on user accounts
If you are deploying Roaming User Profiles to user accounts, use the following procedure to specify roaming user profiles for user accounts in Active Directory Domain Services. If you are deploying Roaming User Profiles to computers, as is typically done for Remote Desktop Services or virtualized desktop deployments, instead use the procedure documented in Step 6: Optionally set up Roaming User Profiles on computers.
Note
If you set up Roaming User Profiles on user accounts by using Active Directory and on computers by using Group Policy, the computer-based policy setting takes precedence.To set up Roaming User Profiles on user accounts
*
In Active Directory Administration Center, navigate to the Users container (or OU) in the appropriate domain.
*
Select all users to which you want to assign a roaming user profile, right-click the users and then click Properties.
*
In the Profile section, select the Profile path: checkbox and then enter the path to the file share where you want to store the user’s roaming user profile, followed by %username% (which is automatically replaced with the user name the first time the user signs in). For example:
fs1.corp.contoso.comUser Profiles$%username%
To specify a mandatory roaming user profile, specify the path to the NTuser.man file that you created previously, for example, fs1.corp.contoso.comUser Profiles$default. For more information, see Create mandatory user profiles.
*
Click OK.
Note
By default, deployment of all Windows® Runtime-based (Windows Store) apps is allowed when using Roaming User Profiles. However, when using a special profile, apps are not deployed by default. Special profiles are user profiles where changes are discarded after the user signs out:To remove restrictions on app deployment for special profiles, enable the Allow deployment operations in special profiles policy setting (located in Computer ConfigurationPoliciesAdministrative TemplatesWindows ComponentsApp Package Deployment). However, deployed apps in this scenario will leave some data stored on the computer, which could accumulate, for example, if there are hundreds of users of a single computer. To cleanup apps, locate or develop a tool that uses the CleanupPackageForUserAsync API to cleanup app packages for users who no longer have a profile on the computer.For additional background information about Windows Store apps, see Manage Client Access to the Windows Store.Step 6: Optionally set up Roaming User Profiles on computers
If you are deploying Roaming User Profiles to computers, as is typically done for Remote Desktop Services or virtualized desktop deployments, use the following procedure. If you are deploying Roaming User Profiles to user accounts, instead use the procedure described in Step 5: Optionally set up Roaming User Profiles on user accounts.
You can use Group Policy to apply Roaming User Profiles to computers running Windows 8.1, Windows 8, Windows 7, Windows Vista, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, or Windows Server 2008.
Note
If you set up Roaming User Profiles on computers by using Group Policy and on user accounts by using Active Directory, the computer-based policy setting takes precedence.To set up Roaming User Profiles on computers
*
Open Server Manager on a computer with Group Policy Management installed.
*
From the Tools menu click Group Policy Management. Group Policy Management appears.
*
In Group Policy Management, right-click the GPO you created in Step 3 (for example, Roaming User Profiles Settings), and then click Edit.
*
In the Group Policy Management Editor window, navigate to Computer Configuration, then Policies, then Administrative Templates, then System, and then User Profiles.
*
Right-click Set roaming profile path for all users logging onto this computer and then click Edit.
Tip
A user’s home folder, if configured, is the default folder used by some programs such as Windows PowerShell. You can configure an alternative local or network location on a per-user basis by using the Home folder section of the user account properties in AD DS. To configure the home folder location for all users of a computer running Windows 8.1, Windows 8, Windows Server 2012 R2, or Windows Server 2012 in a virtual desktop environment, enable the Set user home folder policy setting, and then specify the file share and drive letter to map (or specify a local folder). Do not use environment variables or ellipses. The user’s alias is appended to the end of the path specified during user sign on.
*
In the Properties dialog box, click Enabled
*
In the Users logging onto this computer should use this roaming profile path box, enter the path to the file share where you want to sto
https://diarynote.indered.space
-->
*What Is Roaming Sensitivity Level
*Wireless Roaming Sensitivity Level
*Roaming Sensitivity Level Windows 10 Update
Select Roaming Aggressiveness; Select your preferred Value from the drop down menu. Please note: If you are using a Ralink Wi-FI network adapter, click Roaming Sensitivity and select your preferred Value from the drop down menu. Ralink uses the term roaming sensitivity instead of roaming aggressiveness. Wi-Fi Roaming Aggressiveness Setting This setting alters the signal strength threshold at which the WiFi adapter starts scanning for another candidate AP. Find this setting under the advanced adapter settings. The default value is Medium. Jan 11, 2021 Once Device Manager opens locate your Wi-Fi adapter, right-click it and choose Properties. Go to the Advanced tab and locate Roaming Sensitivity Level, Roaming Aggressiveness or Roam Tendency to Highest or Aggressive. Set Transmit Power or Transmit Power Level to Highest. Select Antenna Diversity and set it to Auto. 03 Aug 2015 #13. I had the same problem too after upgrading to Windows 10, I have tried everything I found on the internet but it did not work. Maybe Internet access is blocked by firewall. Check your firewall setting, if you have firewall from the third party, just turn it off.
Applies To: Windows 10, Windows 7, Windows 8, Windows 8.1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Vista
This topic describes how to use Windows Server to deploy Roaming User Profiles to Windows client computers. Roaming User Profiles redirects user profiles to a file share so that users receive the same operating system and application settings on multiple computers.
For a list of recent changes to this topic, see the Change History section of this topic.
Important
Due to the security changes made in MS16-072, we updated Step 4: Optionally create a GPO for Roaming User Profiles of this topic so that Windows can properly apply the Roaming User Profiles policy (and not revert to local policies on affected PCs).PrerequisitesHardware requirements
Roaming User Profiles requires an x64-based or x86-based computer; it isn’t supported by Windows RT.Software requirements
Roaming User Profiles has the following software requirements:
*
If you are deploying Roaming User Profiles with Folder Redirection in an environment with existing local user profiles, deploy Folder Redirection before Roaming User Profiles to minimize the size of roaming profiles. After the existing user folders have been successfully redirected, you can deploy Roaming User Profiles.
*
To administer Roaming User Profiles, you must be signed in as a member of the Domain Administrators security group, the Enterprise Administrators security group, or the Group Policy Creator Owners security group.
*
Client computers must run Windows 10, Windows 8.1, Windows 8, Windows 7, Windows Vista, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, or Windows Server 2008.
*
Client computers must be joined to the Active Directory Domain Services (AD DS) that you are managing.
*
A computer must be available with Group Policy Management and Active Directory Administration Center installed.
*
A file server must be available to host roaming user profiles.
*
If the file share uses DFS Namespaces, the DFS folders (links) must have a single target to prevent users from making conflicting edits on different servers.
*
If the file share uses DFS Replication to replicate the contents with another server, users must be able to access only the source server to prevent users from making conflicting edits on different servers.
*
If the file share is clustered, disable continuous availability on the file share to avoid performance issues.
*
To use primary computer support in Roaming User Profiles, there are additional client computer and Active Directory schema requirements. For more information, see Deploy Primary Computers for Folder Redirection and Roaming User Profiles.
*
The layout of a user’s Start menu won’t roam on Windows 10 or Windows Server 2016 if they’re using more than one PC, Remote Desktop Session Host, or Virtualized Desktop Infrastructure (VDI) server. As a workaround, you can specify a Start layout as described in this topic. Or you can make use of user profile disks, which properly roam Start menu settings when used with Remote Desktop Session Host servers or VDI servers. For more info, see Easier User Data Management with User Profile Disks in Windows Server 2012.Considerations when using Roaming User Profiles on multiple versions of Windows
If you decide to use Roaming User Profiles across multiple versions of Windows, we recommend taking the following actions:
*
Configure Windows to maintain separate profile versions for each operating system version. This helps prevent undesirable and unpredictable issues such as profile corruption.
*
Use Folder Redirection to store user files such as documents and pictures outside of user profiles. This enables the same files to be available to users across operating system versions. It also keeps profiles small and sign-ins quick.
*
Allocate sufficient storage for Roaming User Profiles. If you support two operating system versions, profiles will double in number (and thus total space consumed) because a separate profile is maintained for each operating system version.
*
Don’t use Roaming User Profiles across computers running Windows Vista/Windows Server 2008 and Windows 7/Windows Server 2008 R2. Roaming between these operating system versions isn’t supported due to incompatibilities in their profile versions.
*
Inform your users that changes made on one operating system version won’t roam to another operating system version.
*
When moving your environment to a version of Windows that uses a different profile version (such as from Windows 10 to Windows 10, version 1607 - see Appendix B: Profile version reference information for a list), users receive a new, empty roaming user profile. You can minimize the impact of getting a new profile by using Folder Redirection to redirect common folders. There isn’t a supported method of migrating roaming user profiles from one profile version to another.Step 1: Enable the use of separate profile versions
If you are deploying Roaming User Profiles on computers running Windows 8.1, Windows 8, Windows Server 2012 R2, or Windows Server 2012, we recommend making a couple of changes to your Windows environment prior to deploying. These changes help ensure that future operating system upgrades go smoothly, and facilitate the ability to simultaneously run multiple versions of Windows with Roaming User Profiles.
To make these changes, use the following procedure.Enable the use of separate profiles for each version of Windows
*
Download and install the appropriate software update on all computers on which you’re going to use roaming, mandatory, super-mandatory, or domain default profiles:
*
Windows 8.1, or Windows Server 2012 R2: install the software update described in article 2887595 in the Microsoft Knowledge Base (when released).
*
Windows 8 or Windows Server 2012: install the software update described in article 2887239 in the Microsoft Knowledge Base.
*
On all computers running Windows 8.1, Windows 8, Windows Server 2012 R2, or Windows Server 2012 on which you will use Roaming User Profiles, use Registry Editor or Group Policy to create the following registry key DWORD Value and set it to 1. For information about creating registry keys by using Group Policy, see Configure a Registry Item.
Warning
Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer.
*
Restart the computers.Step 2: Create a Roaming User Profiles security group
If your environment is not already set up with Roaming User Profiles, the first step is to create a security group that contains all users and/or computers to which you want to apply Roaming User Profiles policy settings.
*
Administrators of general-purpose roaming user profiles deployments typically create a security group for users.
*
Administrators of Remote Desktop Services or virtualized desktop deployments typically use a security group for users and the shared computers.To create a security group for Roaming User Profiles
*
Open Server Manager on a computer with Active Directory Administration Center installed.
*
On the Tools menu, click Active Directory Administration Center. Active Directory Administration Center appears.
*
Right-click the appropriate domain or OU, click New, and then click Group.
*
In the Create Group window, in the Group section, specify the following settings:
*
In Group name, type the name of the security group, for example: Roaming User Profiles Users and Computers.
*
In Group scope, click Security, and then click Global.
*
In the Members section, click Add. The Select Users, Contacts, Computers, Service Accounts or Groups dialog box appears.
*
If you want to include computer accounts in the security group, click Object Types, select the Computers check box and then click OK.
*
Type the names of the users, groups, and/or computers to which you want to deploy Roaming User Profiles, click OK, and then click OK again.Step 3: Create a file share for roaming user profiles
If you do not already have a separate file share for roaming user profiles (independent from any shares for redirected folders to prevent inadvertent caching of the roaming profile folder), use the following procedure to create a file share on a server running Windows Server 2012.
Note
Some functionality might differ or be unavailable if you create the file share on a server running another version of Windows Server.To create a file share on Windows Server 2012
*
In the Server Manager navigation pane, click File and Storage Services, and then click Shares to display the Shares page.
*
In the Shares tile, click Tasks, and then click New Share. The New Share Wizard appears.
*
On the Select Profile page, click SMB Share – Quick. If you have File Server Resource Manager installed and are using folder management properties, instead click SMB Share - Advanced.
*
On the Share Location page, select the server and volume on which you want to create the share.
*
On the Share Name page, type a name for the share (for example, User Profiles$) in the Share name box.
Tip
When creating the share, hide the share by putting a $ after the share name. This hides the share from casual browsers.
*
On the Other Settings page, clear the Enable continuous availability checkbox, if present, and optionally select the Enable access-based enumeration and Encrypt data access checkboxes.
*
On the Permissions page, click Customize permissions…. The Advanced Security Settings dialog box appears.
*
Click Disable inheritance, and then click Convert inherited permissions into explicit permission on this object.
*
Set the permissions as described Table 1 and shown in Figure 1, removing permissions for unlisted groups and accounts, and adding special permissions to the Roaming User Profiles Users and Computers group that you created in Step 1.
Figure 1 Setting the permissions for the roaming user profiles share
*
If you chose the SMB Share - Advanced profile, on the Management Properties page, select the User Files Folder Usage value.
*
If you chose the SMB Share - Advanced profile, on the Quota page, optionally select a quota to apply to users of the share.
*
On the Confirmation page, click Create.Table 1 Required permissions for the file share hosting roaming user profilesUser AccountAccessApplies toSystemFull controlThis folder, subfolders and filesAdministratorsFull ControlThis folder onlyCreator/OwnerFull ControlSubfolders and files onlySecurity group of users needing to put data on share (Roaming User Profiles Users and Computers)List folder / read data1Create folders / append data1This folder onlyOther groups and accountsNone (remove)
1 Advanced permissionsStep 4: Optionally create a GPO for Roaming User Profiles
If you do not already have a GPO created for Roaming User Profiles settings, use the following procedure to create an empty GPO for use with Roaming User Profiles. This GPO allows you to configure Roaming User Profiles settings (such as primary computer support, which is discussed separately), and can also be used to enable Roaming User Profiles on computers, as is typically done when deploying in virtualized desktop environments or with Remote Desktop Services.To create a GPO for Roaming User Profiles
*
Open Server Manager on a computer with Group Policy Management installed.
*
From the Tools menu click Group Policy Management. Group Policy Management appears.
*
Right-click the domain or OU in which you want to setup Roaming User Profiles and then click Create a GPO in this domain, and Link it here.
*
In the New GPO dialog box, type a name for the GPO (for example, Roaming User Profile Settings), and then click OK.
*
Right-click the newly created GPO and then clear the Link Enabled checkbox. This prevents the GPO from being applied until you finish configuring it.
*
Select the GPO. In the Security Filtering section of the Scope tab, select Authenticated Users, and then click Remove to prevent the GPO from being applied to everyone.
*
In the Security Filtering section, click Add.
*
In the Select User, Computer, or Group dialog box, type the name of the security group you created in Step 1 (for example, Roaming User Profiles Users and Computers), and then click OK.
*
Click the Delegation tab, click Add, type Authenticated Users, click OK, and then click OK again to accept the default Read permissions.
This step is necessary due to security changes made in MS16-072.
Important
Due to the security changes made in MS16-072, you now must give the Authenticated Users group delegated Read permissions to the GPO - otherwise the GPO won’t get applied to users, or if it’s already applied, the GPO is removed, redirecting user profiles back to the local PC. For more info, see Deploying Group Policy Security Update MS16-072.Step 5: Optionally set up Roaming User Profiles on user accounts
If you are deploying Roaming User Profiles to user accounts, use the following procedure to specify roaming user profiles for user accounts in Active Directory Domain Services. If you are deploying Roaming User Profiles to computers, as is typically done for Remote Desktop Services or virtualized desktop deployments, instead use the procedure documented in Step 6: Optionally set up Roaming User Profiles on computers.
Note
If you set up Roaming User Profiles on user accounts by using Active Directory and on computers by using Group Policy, the computer-based policy setting takes precedence.To set up Roaming User Profiles on user accounts
*
In Active Directory Administration Center, navigate to the Users container (or OU) in the appropriate domain.
*
Select all users to which you want to assign a roaming user profile, right-click the users and then click Properties.
*
In the Profile section, select the Profile path: checkbox and then enter the path to the file share where you want to store the user’s roaming user profile, followed by %username% (which is automatically replaced with the user name the first time the user signs in). For example:
fs1.corp.contoso.comUser Profiles$%username%
To specify a mandatory roaming user profile, specify the path to the NTuser.man file that you created previously, for example, fs1.corp.contoso.comUser Profiles$default. For more information, see Create mandatory user profiles.
*
Click OK.
Note
By default, deployment of all Windows® Runtime-based (Windows Store) apps is allowed when using Roaming User Profiles. However, when using a special profile, apps are not deployed by default. Special profiles are user profiles where changes are discarded after the user signs out:To remove restrictions on app deployment for special profiles, enable the Allow deployment operations in special profiles policy setting (located in Computer ConfigurationPoliciesAdministrative TemplatesWindows ComponentsApp Package Deployment). However, deployed apps in this scenario will leave some data stored on the computer, which could accumulate, for example, if there are hundreds of users of a single computer. To cleanup apps, locate or develop a tool that uses the CleanupPackageForUserAsync API to cleanup app packages for users who no longer have a profile on the computer.For additional background information about Windows Store apps, see Manage Client Access to the Windows Store.Step 6: Optionally set up Roaming User Profiles on computers
If you are deploying Roaming User Profiles to computers, as is typically done for Remote Desktop Services or virtualized desktop deployments, use the following procedure. If you are deploying Roaming User Profiles to user accounts, instead use the procedure described in Step 5: Optionally set up Roaming User Profiles on user accounts.
You can use Group Policy to apply Roaming User Profiles to computers running Windows 8.1, Windows 8, Windows 7, Windows Vista, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, or Windows Server 2008.
Note
If you set up Roaming User Profiles on computers by using Group Policy and on user accounts by using Active Directory, the computer-based policy setting takes precedence.To set up Roaming User Profiles on computers
*
Open Server Manager on a computer with Group Policy Management installed.
*
From the Tools menu click Group Policy Management. Group Policy Management appears.
*
In Group Policy Management, right-click the GPO you created in Step 3 (for example, Roaming User Profiles Settings), and then click Edit.
*
In the Group Policy Management Editor window, navigate to Computer Configuration, then Policies, then Administrative Templates, then System, and then User Profiles.
*
Right-click Set roaming profile path for all users logging onto this computer and then click Edit.
Tip
A user’s home folder, if configured, is the default folder used by some programs such as Windows PowerShell. You can configure an alternative local or network location on a per-user basis by using the Home folder section of the user account properties in AD DS. To configure the home folder location for all users of a computer running Windows 8.1, Windows 8, Windows Server 2012 R2, or Windows Server 2012 in a virtual desktop environment, enable the Set user home folder policy setting, and then specify the file share and drive letter to map (or specify a local folder). Do not use environment variables or ellipses. The user’s alias is appended to the end of the path specified during user sign on.
*
In the Properties dialog box, click Enabled
*
In the Users logging onto this computer should use this roaming profile path box, enter the path to the file share where you want to sto
https://diarynote.indered.space
コメント