UserExperience

DanHolme dan.holme@intelliem.com

April2011

ManagingtheUserExperience
AcrossPhysicalandVirtual
Environments
DanHolme
Author,WindowsAdministrationResourceKit(MicrosoftPress)
Trainer&Consultant,MicrosoftTechnologiesConsultant,NBCOlympics
ContributingEditor,WindowsITPromagazine(www.windowsitpro.com)
ChiefSharePointEvangelist,AvePoint
FoundingPartner,Aptillon (www.aptillon.com)

@danholme
dan.holme@intelliem.com
http://bit.ly/gPH8hn

DanHolme
Consultant,Trainer,Author
Fortunecaliberbusiness,academic&government
MicrosoftTechnologiesConsultant,NBCOlympics
DirectorofTraining&Consulting,Intelliem
Foundingpartner,Aptillon

ChiefSharePointEvangelist,AvePoint
MicrosoftPress
WindowsServer2008R2ActiveDirectoryTrainingKit,Exam70640
WindowsAdministrationResourceKit

WindowsITPro andSharePointPromagazines
@danholme
dan.holme@avepoint.com
Downloadslidesfrom:http://bit.ly/gPH8hn(casesensitive)

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Resources
WindowsAdministrationResourceKit:
ProductivitySolutionsforITProfessionals
SolutionsCollection3:
ManagingUserDataandSettings

WindowsITPromagazine
February&March2008issues

Definethebusinessrequirements
Security
Mobility

Businessdatacreatedbyuserswillbesecure
UserscanaccessUDSfromanycomputer
Physicalorvirtual

Availability
Resiliency

UDSwillbefullyavailableatfirstlogon
ReplacementoffailedsystemwithallUDSinx hours
LossofUDSwillbelimitedintheeventofclientdisk
failure

Whatareyourbusinessrequirements?

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Userprofile

ComponentsofUDSframework
Redirectedfolders
UsersaccessdatainstandardUIfolders
Redirectedtonetworkdatastores

Offlinefiles
Laptopusers disconnectedscenarios
Encryptedcache reduceriskofdataloss

Roamingprofiles
Limitedtousers'registryhives(ntuser.dat),AppData &smallfolders
Smallprofilesize supportedverywellbyroaming

DFSnamespaces
AbstractphysicallocationofUDSdatastoresforeasymanagement

Configurationmanagement:GroupPolicy
Managinguserdata
Quotas,filescreens,storagemanagement,etc.

Unmanageddata
Classesofdatathataren'tsubjecttorequirements,sonotonnetwork

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Keepingitsimple
CreateasharedfolderwithcorrectACLs(KB274443)
\\server01\users$

UseGroupPolicytoredirectfolderstothesharedfolder
BasicRedirection
Target:\\server01\users$\%username%

UseProfilePath attributetoroamuserprofilesettings
ProfilePath:\\server01\users$\%username%\Profile[.V2]
.V2extensionaddedautomaticallybyWindowsVistaandWindows7

Redirectedfoldersautomaticallyexcluded

Userlogson
RedirectionmayrequiretwologonsunlessAlwaysWaitfortheNetwork

Windowscreatesuserspecificfoldersautomatically
Documentsmigratedatlogon,settingsatlogoff
Alldataandsettingsareavailableoffline
RedirectedfoldersareautomaticallycachedbyOfflineFiles
Roamingprofileissynchronizedatlogonandlogoff

Folderredirectionpolicysettings

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Offlinefiles
Allowredirectedfolderstobeavailableoffline
Redirectedfoldersmadeavailableofflineautomatically
Badidea formostenterprises!
Thinkaboutusersloggingoninaconferenceroom.

Youmustturnthisbehavioroff!
UserConfiguration\AdministrativeTemplates\System\
FolderRedirection\
Donotautomaticallymakeredirectedfoldersavailableoffline

Pinfilesofflineontheusersprimarycomputer(s)
Aspartofsystemprovisioning

Offlinefiles
Eliminateerrorsfromblockedfiletypes
Defaultblockedtypes:*.slm;*.mdb;*.ldb;*.mdw;*.mde;*.pst;*.db?
ComputerConfiguration\AdministrativeTemplates\Network\Offline
Files\FilesNotCached:Settoblank

Updatecacheiffilesmovedinnetworknamespace
Knowhowtoresetthecache
Aregistryentryandarestart

Encrypttheofflinefilescache
UnlessusingBitLocker oranotherfulldiskencryption

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

UserExperience
DanHolme dan.holme@intelliem.com

April2011

ApplicationData
%AppData%=%userprofile%\AppData\Roaming
SomeapplicationsstoreusefuldatainAppData\Local
MicrosoftOutlook*.pst files

SomeapplicationsdonotrespectredirectionofAppData
Someapplicationsdonotsurvivestatechange(onlinetooffline)
Guidance
*Roam*AppData untilyouhavecompletelytestedredirection
RedirectAppData onlyinhighlymanaged,testedenvironments

Permissions
Permissionsgrantedonrootarenotleastprivilege
Microsoftdocumentation(KB274443)
http://support.microsoft.com/kb/274443

LeastprivilegeACLs

Userisgrantedexclusiveaccesstoredirectedfolders
Canchangethisinthepolicysettingfortheredirectedfolder

Userisgrantedexclusiveaccesstoprofilefolders
Musttestfunctionalityinproduction
Someappsbehavebadlyandwillbreakwithoutgreaterpermissions

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

UserExperience
DanHolme dan.holme@intelliem.com

April2011

DFSN
Redirectedfoldertargetsaretiedtoserverandsharenames
\\server01\users$\%username%\foldername...
Cannotmovestoretonewserverwithoutreconfiguation
GroupPolicyredirectedfoldersettings,ActiveDirectoryProfilePath
Offlinefilescache
Userlinksandshortcuts

Cannotmanageusersasgroupsofrelatedusers
Relocatesomeuserstoanotherofficeanddatacenter

Solution:DFSNamespace(DFSN)
DFSNdomainnamespace
\\contoso.com\users

DFSNfolderandtarget
\\contoso.com\users\jfine>\\server01\users$\jfine

GroupPolicyredirectedfoldertargets
\\contoso.com\users\%username%

ProfilePath
\\contoso.com\users\%username%\Profile

Whathappenswhenauser'sdatamoves?
Pathsoftargetstoredirectedfolders
GroupPolicyobjectsettings
Registryredirectionpaths

Roamingprofilepath
Useraccountsetting

Sourcepathsofofflinefiles
Requiresresetting&resynching,orretargeting

Pathsusedinapplications,byshortcuts,
bymappeddrives,etc.(yuck!)
Pathsforlinkswithinandbetweendocuments
(superyuck!)
betweenExcelworksheetsintheuser'sDocumentsfolder

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Provisioning
Mustprovision(precreate)folders,ACLs,andDFSNfolders

Physical(NTFS)Namespace
Flatnamespace allfoldersaresubfoldersofusername folder
Problematicbecausedatamanagementrequirementsarenot flat

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Identifyandclassifydata
Whatstoresofdataexist?
Whichonesarerelatedvariationsonatheme?
Whattypesofdatashouldbemanagedsimilarly?
Proposal:fourclassesofdata
Settings:ApplicationData(AppData\Roaming)
Userdata
Emailarchives
Outlook:AppData\Local\Microsoft\Outlook\*.pst
Notes:ProgramFiles\Lotus\Notes\Data

Archives,backups,longtermstorage

Whichdatatypesare,orarenot,subjecttoeachofthe
businessrequirements?
Whataretheinformationmanagement
characteristicsofeachdatatype?

RepresentdataclassesinNTFSnamespace
DataClass folders
foreachclassofdata
Businessdata
Quota
FileScreen
Email
Classification
Settings
Replication
Storage(Archivedfiles)
YoumayhavemoreorfewerDataClass folders
basedonyourbusinessrequirements

Providea
managementscope
Quotas
Filescreens
Fileclassification
Storagemanagement
e.g.Archivesonslower/cheaperstorage
Differentreplicationpolicies

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Data:Physical(NTFS)namespace
Data folder
Containsuserdatastores
Providesascopetomanageallusersdata
username folder
Subfolders aredatastoresequivalent
tothoseintheuserprofile
Youmayormaynotredirectallprofilefolders,
basedonbusinessrequirements

Security
Useristheonlyonewithaccessto
thecontents ofthedatastores
Support/Admincanseeto(butnotinto)
thedatastores
Rolebasedaccessintouserdatastores
Auditing(ReadOnly)
Administration(FullControl)
Virusscanner
Securitygroupforemergencyaccess

Quotas
Defaultquota
AppliedtoDataClass folder
Configuredtoautoapply

Quota

Appliestoallexistingfolders
Appliestoeachnewfolderwhencreated

Exceptionquotas
Applydirectlytouserfolder

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

10

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Security
Useristheonlyonewithaccessto
thecontents ofthedatastores
Support/Admincanseeto(butnotinto)
thedatastores
Rolebasedaccessintouserdatastores
Auditing(ReadOnly)
Administration(FullControl)
Virusscanner
Securitygroupforemergencyaccess

Createthedataclassfolder
Createdataclassrootfolder(Data)
Applyleastprivilegepermissionstofolders
System::Allow:Full Control
ApplyTo:Thisfolder,subfolder,andfiles

Administrators::Allow:Full Control
ApplyTo:Thisfolderandsubfolders
Applypermissionswithinthiscontaineronly
Segregaterolesbetweensystem Administratoranddata administrators

UDSDataAdmins::Allow::FullControl
ApplyTo:Subfoldersandfiles
ThisisthelimitedgroupthatshouldhavefullcontrolofallUDS

UDSDataAudit::Allow::Read&Execute
ApplyTo:Thisfolder,subfolder,andfiles
ThisisthelimitedgroupthatshouldhavereadaccesstoallUDS

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

11

UserExperience
DanHolme dan.holme@intelliem.com

April2011

What'smissing?
Users!
That'sright,usersrequirezero permissionsontheroot
UserhasFullControlofuser'sspecifictoplevelfolder(jfine)
TraverseFoldersuserright(assignedtoEveryonebydefault)allowsuser
to"jumpthrough"tohisorherfoldereventhough(s)hedoesn'thave
permissiontoroot

Nowthatisleastprivilege
Thecatch:youmustprovisiontheuserfolders

Data:DFSNOptions
DFSNoptions
OneDFSNfolderforalluserprofiles
DFSNFolder:\\contoso.com\users\Data
Target:\\server01\Data$
ProfilePath:\\contoso.com\users\Data\%username%\Profile

OneDFSNfolderperuserdatastore
DFSNFolder:\\contoso.com\users\username\Desktop[Documents,etc.]
Target:\\server01\Data$\username\Desktop[Documents,etc.]
ProfilePath:\\contoso.com\users\%username%\Profile
.V2addedautomaticallybyWindowsVistaandlaterclients

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

12

UserExperience
DanHolme dan.holme@intelliem.com

April2011

DFSnamespacerecommendations
Goal:thelocationoftheusersfolders
intheDFSnamespaceneverchanges
DataclassorfullyenumeratedDFSnamespace
Scalability:Morethan5000foldersneeded?
UpgradetoWindowsServer2008domainfunctionallevel
300,000foldersinaDFSnamespaceinR2

or
CreategroupingsofusersintheDFSnamespace
Makegroupingarbitrary,notbasedonsites
oranyotherbusinessconstruct
e.g.\\contoso.com\Users01,\\contoso.com\Users02,
Tip:Groupingsofemployeesbyemployeenumber

Folderredirection
ForDocumentsandDesktop
NotforStartMenuorApplicationData*
Forotherfoldersbasedonrequirements

Whenconfiguringredirectionpolicies,choose
Redirecttothefollowinglocation
\\namespace\%username%\folder

Dontdoadvancedfolderredirection
Youwillwanttoconfigureotherpolicysettingsthatarentmultivalued
Instead,createoneGPOpergroup

Settingstab
Granttheuserexclusiverights:CLEARED
Movethecontents:CLEARED
AlsoapplyredirectiontoXP:SELECTED(whenavailable)
Removal:Leavethefolderinthenewlocation

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

13

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Folderredirection
FixtheUI
Vistaleavesthedefaultfoldersinplacesoyouseetwoofeverything
Applications(badones)willdropauserintothe%userprofile%folderand/or
recreatethefoldersifyoudeletethem

Preference
Folder:Updatethe%userprofile%\foldername folder
SettoHidden

Shortcut:Putashortcutin%userprofile%\foldername thatprovideseasynavigationto
networkfolder

or ajunction (%username%\foldername)foreachfolder
RequiresVista+clients
Mustbecreatedperuserbutrequiresadmincredentials
Idonthaveananswerforyouyetonthisone

Settings:Physical(NTFS)Namespace
Settingsfolder
Containsroamingprofiles
Providesascopetomanagealluserssettings
username folder
Profile
UsedbyWindowsXP
Profile.v2
UsedbyVista,Windows7
WindowsServer2008/R2
VDIProfile.V2(notshown)
Usedbyvirtualandremoteinfrastructure

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

14

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Physicalnamespace
StorageGroupfolder
Providesmanagementscopeforalluserscontainedinthestoragegroup
Replication
Permissions&policies
Auditing
SLAs

Settings:DFSNOptions
DFSNoptions
OneDFSNfolderforalluserprofiles
DFSNFolder:\\contoso.com\users\Settings
Target:\\server01\Settings$
ProfilePath:\\contoso.com\users\Settings\%username%\Profile

OneDFSNfolderperuserprofile
DFSNFolder:\\contoso.com\users\username\Profile.V2
Target:\\server01\Settings$\username\Profile.V2
ProfilePath:\\contoso.com\users\%username%\Profile
.V2addedautomaticallybyWindowsVistaandlaterclients

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

15

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Userprofiles:Managingroamedfolders
Configurethefoldersthatwillnotroam
UserConfiguration\AdministrativeTemplates\System\UserProfiles\
Excludedirectoriesinroamingprofilesexcept

Whatwillroam
ntuser.dat
Roamingprofileistheonlyrealoption
formeetingrequirementsforthisUDSstore

ApplicationData
Canredirect(technically)
Requireslots ofvalidation
Applicationslookingfor
%userprofile%\ApplicationData
Accessfromnetwork
Offlinestatetransition

Links*
Othershellfoldersnotredirected

Userprofiles:Physicalvs.Virtual
ProfileconfigurationwithGroupPolicy
AppliestoWindowsVista,Windows7,WindowsServer2008&R2
ComputerConfigurationpolicysetting
Canuse%username%inthepath

Allowsegregationofprofilesbetweenenvironments
Physicalvs.virtual

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

16

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Userprofiles
Settingsynchronization
Someappsputsettingsinbadplaces
%userprofile%\AppData\Local\...
c:\programdata\...

Manualroaming
Scriptthatcopiessettingsatlogon&logoff
Ajunction thatredirectsthefoldertothedesiredlocation

Storage:Physical(NTFS)namespace
Storagefolder
Notasubfolderofdata
Providesauniquescopefor
quotas&othermanagement

Archivefolder
Datathatisn'tneededregularlyand
thereforedoesn'tneedtobeavailable
offlineforlaptopusers
Userand/orenterprisemanageswhat
goesin,whenandhow

LocalFilesBackupfolder
BackupofLocalFilesfolder
Enterprisemanageswhatdatagoesin,
when,andhow

Youmightsplitthesetwointo
separateDataClass folders
38

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

17

UserExperience
DanHolme dan.holme@intelliem.com

April2011

Resources
WindowsAdministrationResourceKit:
ProductivitySolutionsforITProfessionals
SolutionsCollection3:
ManagingUserDataandSettings

WindowsITPromagazine
February&March2008issues

dan.holme@avepoint.com
@danholme
Questions&Answers
Pleasefillinyourfeedbackforms!

2011Intelliem,Inc.Allrightsreserved. DONOTREPRODUCEORDISTRIBUTEWITHOUTTHEEXPRESSWRITTENPERMISSIONOFINTELLIEM,INC.
Microsoft,Windows,Office,SharePoint,andotherproductnamesareormayberegisteredtrademarksand/ortrademarksofMicrosoftCorporationintheU.S.and/orothercountries.
TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofIntelliem,Inc.asofthedateofthispresentation.BecauseIntelliemmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobea
commitmentonthepartofIntelliem,andIntelliemcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.
INTELLIEMMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.

18