MSTerminalServices.org Forums

Forums Home | FAQ | Search | Profile | Private Messages | Log in/Register/Password

Automatically delete the profile after you are done

Page 1 of 1
Next:  Microsoft Terminal Services: Terminal Server Lockdown  
Author Message
macscott




Joined: Feb 26, 2008
Posts: 5



(Msg. 1) Posted: Thu Feb 28, 2008 4:53 pm
Post subject: Automatically delete the profile after you are done

It appears I do not understand how to make GPO work. Question

I have a Terminal Server (Win2003) setup that allows users to log in (authentication comes from a Mac OSX LDAP/Open Dir PDC). This works beautifully. I have managed to make GPO open IE7, go to my specific website (thanks to vera_noest's for that tip), and upon exiting, quit the Connection. Very Happy

I did not realize that each person logging in was making a username folder in the "Documents and Settings" folder. We do not want this. I would like for the user folders to be deleted after logout or even have them connect with out even making a folder, just use a temp folder that can be cleared out. (Yes, this terminal server is only providing a Mac user with IE7 for 1 website, nothing else so there is no need to save any user data)
I do not have the luxury of Active Directory so I am assuming my solution has to come from GPO

Can anyone point me in the right direction?
Back to top
Send e-mail Login to vote
vera_noest




Joined: May 27, 2007
Posts: 174

Location: Sweden

(Msg. 2) Posted: Thu Feb 28, 2008 5:26 pm
Post subject:

You cannot prevent the creation of the local profile. Each user always has a local profile, whether they log on to their workstation or the TS.

But you can remove the locally stored profile by creating a roaming profile on a network share, and then delete the locally cached copy when they log off.

Both of these 2 tasks can be done with a GPO. You'll find the settings here:

Computer Configuration - Administrative templates - Windows Components - Terminal Services
"Set path for TS roaming profiles"

Computer Configuration - Administrative Templates - System - User profiles
"Delete cached copies of roaming profiles"

You write that you don't have AD, so I assume that you mean the Terminal Server's local policy?

Another approach is to use local profiles and to delete them once a week in an automated script, using the Delprof.exe utility from the Windows 2003 Resource Kit. You will probably have to reboot the server before you can delete the profiles, so you must ensure that nobody is logged on at the time the script is running. You can schedule the script with the Task Scheduler.
Back to top
Send e-mail Login to vote
Display posts from previous:   
    All times are: Eastern Time (US & Canada) (change) Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Looking for more Terminal Services info?

Sign up to the MSTerminalServices.org Monthly Newsletter, written by Terminal Server MVP & Citrix CTP Stefan Vermeulen, containing news, tips, interviews, links of the month and much more. Subscribe today and don't miss a thing!

Become an MSTerminalServices.org member!

Discuss your Terminal Services & Citrix issues with thousands of other SBC experts. Click here to join!

Community Area

Log in | Register