|
Hey everyone,
This might be a bit lengthy, but here is my situation. I am an intern at a small to medium organization. I have been tasked with getting Roaming Profiles up and running via Group Policy (I know lots of people don't like roaming profiles, again, intern so not my call). Problem: My degree is in network engineering and I have almost zero experience with group policy. I have done as much research as I can to get these things working, but I am at an impasse.
Here is what I have tried:
Step 1 - Create a security group in Active Directory on our domain controller. Controller is running Server 2012 r2. Security group includes the Test PC and Test account I created. The security group, test pc, and test account are all currently in a Test OU.
Step 2 - Create the file share. The share was created on our data server. Data server is running server 2008 (I know I know). Settings for the share include: Sharing the folder and giving the security group full control for share permissions. Under security, the security group is added with read/write permissions. Creator Owner, SYSTEM, Administrators All have full control. Users have read/write.
Inheritance has been disabled.
Step 3 - Create the GPO for the redirects - Again on our domain controller, server 2012 r2
GPO is created in the Test OU where the group, test computer, and test account are located.
Under Scope, Everything is removed and the Security Group is added. As per Microsoft's instructions, Authenticated users are added to Delegation and given read permissions.
Edit the GPO, go to Computer Configuraiton -> Administrative Templates -> System -> User Profiles -> Set Roaming profile path for all users logging onto this computer.
Edit - and set set it to "Enabled" I then entered the network path of the previously created Network Share under "Users logging onto this computer should use this roaming profile path" Apply and exit.
Step 4 - Go to the test PC. Open an elevated command prompt and use gpupdate /force. Most people seem to say you can log out at this point, but I just restarted the PC to be safe.
PC comes back up, log into one of the accounts associated with the security policy and... nada. The profile redirect does nothing.
Some things I have tried: On the Test PC, I have run gpresult /Z in a prompt window. The profile redirect policy appears in the "Applied Policies" list.
I have also tried the alternative method of setting the profile path for an individual account in Active Directory. This again does nothing.
On the network share, I have just given full blown full control permissions to everyone and everything just to see if it works. (It doesn't)
From what I am seeing it seems like one of two things, but my limited knowledge makes it hard to know. Either I have set the permissions on the network share incorrectly, or there is some other permission somewhere that is blocking any profile redirects. What complicates things is the Folder Redirection component in group policy works perfectly. I was also able to create a GPO that created a mapped drive to where the network share is housed. From the test PC, i could click on the drive, and even click ON the network share. The PC can see it, but the profiles just won't go there.
As an fyi, all of our workstations are running Windows 10
From everything I've read and with my limited understanding, I feel like this SHOULD be working. Is there something else I have not considered or some switch somewhere that needs to be flicked? Any help would be greatly appreciated.
|
|
|
|
|
I just reinstalled Windows 10 on my desktop after a disk crash.
The problem is that Windows thinks it's running on a mobile device, for some reason. It shows the battery charge indicator in the taskbar, and it offers Airplane Mode, among other details.
I suppose it's not a bad problem, but I'm wondering if there's a way I can make it know it's on a desktop.
I do not know what to Google to find the answer. Perhaps someone could give me some search terms?
The difficult we do right away...
...the impossible takes slightly longer.
|
|
|
|
|
You might ask the manufacturer of your system (if it is not an old one).
The Airplane mode exists also for desktop systems (at least when WiFi hardware is present).
You might have a look at this thread (which I found by "windows 10 installation airplane mode"): Airplane Mode Windows 10 - Microsoft Community[^].
I have not read all posts but some mentioned that they had similar behaviours on desktop systems:
Quote: My PC is a desktop and doesn't have wireless or a battery. Then I realized that my APC battery backup had a USB cable plugged in to my PC. I removed the cable and rebooted my computer and both Airplane Mode and the Battery Saver options are gone.
|
|
|
|
|
Thanks! I have a UPS plugged into my machine too. That must be what's doing it. 
The difficult we do right away...
...the impossible takes slightly longer.
|
|
|
|
|
Hi frnds. I need to configure outlook 2010 . having gmail account.It have about 50,000 emails in gmail server. I don't have any old pst files for this account.But need to import all contacts,calender, and tasks from gmailI selected
Enable POP for mail that arrives from now on.But, when i configured, all mails are starting arriving.how can I do this?
|
|
|
|
|
Hi Frnds
One of the pc having a shared folder that is working fine. My employee often shutdown the pc when leaving from the office. But Next day, the share folder is not accessible and there is no ping between the computers. If I change the ip address to a different one, then it will work. This is a big headache for me and the users. Its a brand new pc. I am using kapersky end point security antivirus.
Pls help me to resolve this
|
|
|
|
|
Do not post this in multiple places - it duplicates work and annoys people. You have this in QA, leave it there!
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Buy a raspberry pi, add a USB stick, install NAS-software.
How to build a Raspberry Pi NAS: the full guide[^]
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
Maybe one of you have encountered this and fixed it or perhaps some sage advice is out there.
My laptop is Windows 10 Pro, and I have full admin rights. I travel between my home office and my customer location. At the customer location, I have a networked drive mapped to our development server file storage area:
N drive mapped to \\SwServer\Development
This server also hosts our SVN repositories, which will come into this story in a bit.
My laptop is mine, and as a consultant, I am not allowed to be a member of the domain (nor do I want to be). My credentials are entered, saved, and I can access this drive as you would expect.
Now I go home to my corporate office  and I'm attempting to access the network drive using the customer supplied VPN software (global protect if it matters). Once connected (no error messages in the log), I cannot see the network drives. If I ping the server, I get timeouts. Okay, the network is screwed up somehow.
But here comes the weird part - our svn server is hosted on SwServer behind an Apache web server (standard SVN setup). I can access my svn repositories just fine. So, somehow the path from my laptop to the SwServer exists somewhere.
Something is screwed up. Any suggestions as to what to look for?
The odd thing is that I can go a week and things will work flawlessly, then it all comes off the rails....
Charlie Gilley
<italic>Stuck in a dysfunctional matrix from which I must escape...
"Where liberty dwells, there is my country." B. Franklin, 1783
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
|
|
|
|
|
charlieg wrote: Now I go home to my corporate office and I'm attempting to access the network drive using the customer supplied VPN software (global protect if it matters). Once connected (no error messages in the log), I cannot see the network drives. If I ping the server, I get timeouts. Okay, the network is screwed up somehow.
What is the /24 network at home and at work?
charlieg wrote: But here comes the weird part - our svn server is hosted on SwServer behind an Apache web server (standard SVN setup). I can access my svn repositories just fine. So, somehow the path from my laptop to the SwServer exists somewhere.
I have no idea about SVN, does it use direct IP or some other magic like HTTP that may take the IP out of the equation?
Michael Martin
Australia
"I controlled my laughter and simple said "No,I am very busy,so I can't write any code for you". The moment they heard this all the smiling face turned into a sad looking face and one of them farted. So I had to leave the place as soon as possible."
- Mr.Prakash One Fine Saturday. 24/04/2004
|
|
|
|
|
My understanding is that svn leverages the html / web api. I don't think there is anything "special" it does....
Charlie Gilley
<italic>Stuck in a dysfunctional matrix from which I must escape...
"Where liberty dwells, there is my country." B. Franklin, 1783
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
|
|
|
|
|
There's a firewall on the VPN entry point that allows HTTP but is blocking the SMB/CIFs protocol; that might be part of the organizational DMZ internal access point. You'll need to coordinate with the organization's NOC to figure out how to get that drive mapping to work through the VPN, or use a cloud service accessible from both networks.
"There are three kinds of lies: lies, damned lies and statistics."
- Benjamin Disraeli
|
|
|
|
|
I sort of understood that. However, I wonder why it would work some of the time? The wildcard in this equation is that 99.99% of the users of this VPN are employees and members of the domain. No problems reported by them.
Charlie Gilley
<italic>Stuck in a dysfunctional matrix from which I must escape...
"Where liberty dwells, there is my country." B. Franklin, 1783
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
|
|
|
|
|
Ah, it sounds like it entirely depends on how your credentials are handled, your description doesn't mean much on that light unfortunately.
Regardless, there is definitely a firewall between you and the internal network that you don't have to contend with while on site. I suspect it will boil down to how authentication is handled. If possible, I've found the easiest solution is to use a jump box or terminal server to work from on premises.
"There are three kinds of lies: lies, damned lies and statistics."
- Benjamin Disraeli
|
|
|
|
|
Hmmm,
I'd begin debugging by doing:
route print
(This is probably your problem)
On both networks and making sure you have a route to the SwServer. You are probably on a different IP address range while connected to the VPN and have a different route or no route at all.
You might be able to add a route to SwServer by doing:
route ADD [network] MASK [mask] [gateway]
Keep in mind it could also be a firewall rule on the company network so you may want to get the Systems Administrator involved.
Some additional thoughts:
Make sure the NETBIOS name 'SwServer' resolves to an IP by doing:
nslookup SwServer
If SwServer resolves to an IP address... try manually mapping the drive:
net use N: \\SwServer\Development
charlieg wrote: The odd thing is that I can go a week and things will work flawlessly, then it all comes off the rails....
Many Systems Admins sit in their office and poke buttons and change network security/patch things every day while consuming large amounts of coffee. It's a repeating pattern of fixing 90% of everything and breaking the other 10% of users. Rise and repeat.
Best Wishes,
-David Delaune
|
|
|
|
|
Guys, I really appreciate the suggestions. Since some times I can connect instantly and other times (like right now) it takes 10s of minutes, I don't think it's a firewall. A firewall issue would just say, "no, hell no" and never let me in... ever. That's according to my logic, so I'm ready to be corrected.
For a credential issue, I would think that would play in the same manner as a firewall. I don't think it would be hit or miss?
The routing issue passes the sniff test, and I'll have to dig in to that. I have seen some weird stuff in that area, and just because my client is a $5B company doesn't mean the net admins know what they are doing. Admittedly, I'm not high on their radar.
I have another client that uses different VPN software, and in a BFO I wondered if the two vpn packages were interfering with each other. Sadly, no.
And after 5 min of typing... I can access the network drive...
 I'll keep plugging. This is interesting.
Charlie Gilley
<italic>Stuck in a dysfunctional matrix from which I must escape...
"Where liberty dwells, there is my country." B. Franklin, 1783
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
|
|
|
|
|
Still debugging this issue. This morning, the VPN was completely non-functional. Doing a tracert to the server as well as the route print, I just saw lots of junk - things that made me go hmm...
So, I re-installed the VPN software - no joy. Step 2 was remote the USB connection I have to a hub full of devices (I do embedded development and use some additional usb to ethernet to talk to local hardware). Still nothing. Final step was to power down the laptop, reboot my cable modem start the connection process all over again.
Instant success. The tracert output to the server shows 8 hops- it have been 50+, leading me to believe that perhaps the routing table had been hosed. Or my cablemodem was just in the weeds.
Will monitor
Charlie Gilley
<italic>Stuck in a dysfunctional matrix from which I must escape...
"Where liberty dwells, there is my country." B. Franklin, 1783
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
|
|
|
|
|
Just to close this out - it's my gateway.
I have AT&T internet service that looks like this:
street -> cable -> gateway -> Amplifi router -> users
the gateway includes a wireless router and a 4 port gigabit hub. I normally plug directly into the gateway so I don't share bandwidth with the kids in the house. When I cannot connect, I re-boot the gateway and it works for a while, but sooner or later it goes insane.
But, if I connect to the amplifi router, it works 100%.
Enough time lost...
Charlie Gilley
<italic>Stuck in a dysfunctional matrix from which I must escape...
"Where liberty dwells, there is my country." B. Franklin, 1783
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
|
|
|
|
|
We'll be needing to change the ownership and permissions on a few hundred thousand folders & files.
Can it be done in PS (or other) in such a way that any errors encountered are ignored (and logged?) so the process doesn't come to a screeching halt? I fully expect for it to find folders that the creator locked down so tightly that they will require special attention on an individual basis.
I've websearched, but either I'm asking in the wrong way, or no one has ever needed to do this. (Doubtful)
For obvious reasons, I refuse to use the GUI to do it. 
|
|
|
|
|
It should be possible using PS but I have not done so far.
You probably want to call Set-Acl[^] for each single file and directory within a try a catch block (about_Try_Catch_Finally | Microsoft Docs[^]). So errors will not let your script terminate and can be logged.
|
|
|
|
|
|
Thank you for the update. It is always good to find a ready-to-use solution which might be also helpful for others.
|
|
|
|
|
Good day all;
I have a Mac Mini Late 2012 with 4GB Ram and i5. The machine is upgraded to 16GB, and might change drive to SSD. I am targeting this machine to be a host machine running Virtual Box on which I will run a Win 10 machine and an Ubuntu Server 16.04. Both these VM’s will be hosting web applications and connecting to the Internet. On Win 10 I will be running IIS and hosting ASP.NET sites. On Ubuntu I have some two PHP/MySQL applications and two other web applications running on own ports (8500 & 8501).
The thinking is that I will route relevant ports to the relevant VM/Port using Virtual Box. My questions:
1. Is this doable with Mac?
2. Do I need to install MacOS Server since the machine will be connected directly to the web?
3. Will I be able to remote into the VM’s directly (eg: ssh into the Ubuntu box)?
4. Will I be able to remote into the Mac to, for example, restart the physical machine or restart Virtual Box?
Thanks
|
|
|
|
|
how to display the graphics in c language?
|
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
