Xenapp6 2k8r2 profile creation, in the Profiles / User Environment forum on BrianMadden.com
Brian Madden Logo
Your independent source for desktop virtualization, consumerization, and enterprise mobility management.

Xenapp6 2k8r2 profile creation, in the Profiles / User Environment forum on BrianMadden.com

rated by 0 users
This post has 2 Replies | 3 Followers

Not Ranked
Points 255
Stuart Harwood Posted: Mon, Dec 6 2010 6:56 AM

Hi All

I have just started to look in to xenapp 6. have just come across my first stumbling block. In my 2k3 environment i would create a dummy domain account logon locally to the xenapp server then log off. then using a domain admin account go to user profiles and setting and use the copy to button to turn the local domain user profile in to roaming profile. however this functionality is now disabled.

so question is how to i create my first/test template roaming profile if i cant copy it?

 

any advice guidance would be much appreciated.

 

regards

 

sharwood 

  • | Post Points: 35
Top 500 Contributor
Points 1,110
David replied on Tue, May 17 2011 10:19 AM

Do a google search for "Windows Enabler".  It is a simple program that will unlock buttons that are greyed out.  I used this to create the default profile for our XA6 environment.  It is easy to use... just run windows enabler and things M$ decided to disable in 2008 will be allowed (like copying a template profile over the default profile).

A word of advice though.  Run through the ntuser.dat file and clean it up a bit (load the hive in regedit).  Look for keys with things that have explicit paths (ie: c:\users\<acct>\appdata\roaming...) and change them to something generic (ie: %userprofile%\appdata\roaming...).  We ran into one program that had issues due to explicit paths that no longer existed.

  • | Post Points: 5
Top 500 Contributor
Points 530

As David mentioned, the Window Enabler is a really good tool to overcome this limitation in Windows 2008. You can also do everything manually...

1. Copy C:\Users\Account to desired location such as \\server\share\mandatory.v2

2. Set NTFS permissions on mandatory.v2 to Administrators (Read & Execute, List, Read), System (Full), Domain Computers (Full), Users (Read & Execute, List, Read). Do not give the users write access to ensure that the profile does not copy back (for mandatory profile).

3. Load regedit.exe, browser to HKEY_USERS, select File > Load Hive, load the ntuser.dat, and specify a name. Right-click the loaded hive and select Permissions. Set the permissions to "Security Group" (Domain Users) to Full Control. Then unload the hive through File > Unload Hive...

4. If this is a mandatory profile then rename the ntuser.dat to ntuser.man.

James Szivos

  • | Post Points: 5
Page 1 of 1 (3 items) | RSS