Windows Server 2012 Active Directory Basic Configuration and application (Novice tutorial) 5---User profile

1, understand the user's profile?

STEP1 : Check DC whether an account with its own name already exists. (continuation of the experimental results, the account should exist in the DC)

STEP2 : Using STEP1 The account specified in the client WIN7 Log on once.

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M02/8A/1E/wKiom1gnB7-x1VojAABLkrnMhT4053.jpg-wh_500x0-wm_3 -wmp_4-s_279279932.jpg "title=" 5-1.jpg "alt=" Wkiom1gnb7-x1vojaablkrnmht4053.jpg-wh_50 "/>

STEP3 : Log off after successful login, and use WIN 7 Local Administrator account Login. After logging in, create a new account that is named after your own name. Note that the account is a local account .

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M01/8A/1A/wKioL1gnB-jRWQY4AABEji9sSbk782.jpg-wh_500x0-wm_3 -wmp_4-s_2609158869.jpg "title=" 5-2.jpg "alt=" Wkiol1gnb-jrwqy4aabeji9ssbk782.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M02/8A/1A/wKioL1gnCA2zqPPFAADH-1O7skE884.jpg-wh_500x0-wm_3 -wmp_4-s_533300929.jpg "title=" 5-3.jpg "alt=" Wkiol1gnca2zqppfaadh-1o7ske884.jpg-wh_50 "/>

STEP4 : With STEP3 Login to the local account established in the At logon, the account name is preceded by the host name of the client.

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M02/8A/1A/wKioL1gnCJOz7RCZAAA2iYlEEFI880.jpg-wh_500x0-wm_3 -wmp_4-s_2669179012.jpg "title=" 5-4.jpg "alt=" Wkiol1gncjoz7rczaaa2iyleefi880.jpg-wh_50 "/>

after the above steps are completed, on the surface, two accounts with the same name are logged on the same host, but the nature of the account is different!! Check the "user" directory of the C drive for a folder with the same name as the account, and to analyze whether there are similar or more obvious differences. (Can you open it?? )

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/8A/1E/wKiom1gnCLrg5Z48AABTrc4FPGU648.jpg-wh_500x0-wm_3 -wmp_4-s_3440088010.jpg "title=" 5-5.jpg "alt=" Wkiom1gnclrg5z48aabtrc4fpgu648.jpg-wh_50 "/>

from the above experimental results, we know the following information: according to Microsoft's official explanation : user profiles are settings and files and collections that define the environment in which the system loads when the user logs on, including all user-specific configuration settings .

Where the user profile is saved : system Disk ( usually C - drive ) Under The user folder, there is a folder that is the same as the login user name, the user profile is saved here. If you have a user with the same name on your computer and domain, and you have logged in, you will be prompted to drag the suffix after the folder with the same name.

( 1 ) Local account login First : The local User Configuration folder is user name, and the User Configuration folder for the domain user is user name . the first part of the domain name.

( 2 ) domain account first login : then the User Configuration folder for the domain user is "user name" and the local user's configuration folder is "user name . Local host name.

Analysis: The above operation is in the first situation?

by viewing the contents of the user profile, you can see that the user profile includes desktop settings, My Documents, favorites, IE Set and so on some personalized configuration.  

When the network becomes a domain framework, all domain users can log on to a computer in any domain, and when the user profile on one computer is modified, it will be found on another computer, all the settings are original, and there is no modification, because the user's profile is saved locally, Whether it is a domain user or a local user, it is stored on that logged-on computer.

STEP5 : Re-use your name's domain account to log on to the client and make some simple changes, such as creating a few files on the desktop, modifying the desktop background, and so on. As shown in.

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M00/8A/1B/wKioL1gnCR3zMMNsAABX47QCWlw152.jpg-wh_500x0-wm_3 -wmp_4-s_3583233545.jpg "title=" 5-6.jpg "alt=" Wkiol1gncr3zmmnsaabx47qcwlw152.jpg-wh_50 "/>

Log off when the modification is complete and use the account on another client or DC , you will notice that the changes made on the client are not changed by the user's login. The main reason is:

650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M01/8A/1E/wKiom1gnCVXz8-DXAAEe_9ymnj8413.jpg-wh_500x0-wm_3 -wmp_4-s_2514156261.jpg "title=" 5-7.jpg "alt=" Wkiom1gncvxz8-dxaaee_9ymnj8413.jpg-wh_50 "/>

Note that the "type" is all "local", which means that the user profile is saved on the host that was logged off after the last operation. How can I let the user's profile follow the account, that is, regardless of the user on which computer login can keep the user profile consistent ? in order to solve this problem, it is necessary to use the roaming user profile, the principle is to save the user profile in a public location of the network, when the user on the computer login, the user profile will be downloaded from the network public location to the local and applied, and then when the user logs off, Synchronizes the local user profile to a public location on the network to ensure that the public location user profile is valid for the next use.

the configuration of the roaming profile is tested below (as a domain administrator) .

STEP1: InDCCreate a folder onShareTo Save the personal profile that the client placed on the server. To configure permissions, because the client is writing to the server, you can set the folder share permissions to everyone"Full Control", the account used by the client belongs toDomain Usersand giveDomain Usersof theNTFSpermission is "modify".

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/8A/1E/wKiom1gnCY7iVTvqAAChfFnWnQM455.jpg-wh_500x0-wm_3 -wmp_4-s_2776352355.jpg "title=" 5-8.jpg "alt=" Wkiom1gncy7ivtvqaachffnwnqm455.jpg-wh_50 "/>

STEP2 : In DC set up the user's roaming profile, open the AD user and computer, double-click the user's properties to locate the configuration file. In the configuration file, enter the network path of the folder you just created on the DC ( Note: Only use the network path ),

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M00/8A/1B/wKioL1gnCbmxun-PAABtfyFcLd4599.jpg-wh_500x0-wm_3 -wmp_4-s_2087273459.jpg "title=" 5-9.jpg "alt=" Wkiol1gncbmxun-paabtfyfcld4599.jpg-wh_50 "/>

STEP3 : Restart the client WIN 7 , the domain user logs on to allow the roaming profile to take effect, and DC on Share Folder , the roaming user's folder is also generated.

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/8A/1E/wKiom1gnCezT7cj4AACX_CyRPGo065.jpg-wh_500x0-wm_3 -wmp_4-s_1626032697.jpg "title=" 5-10.jpg "alt=" Wkiom1gncezt7cj4aacx_cyrpgo065.jpg-wh_50 "/>

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/8A/1B/wKioL1gnCfqSMlVCAAA1WqTWhZE049.jpg-wh_500x0-wm_3 -wmp_4-s_2654621730.jpg "title=" 5-11.jpg "alt=" Wkiol1gncfqsmlvcaaa1wqtwhze049.jpg-wh_50 "/>

STEP4 : After the domain user logs in, make any changes to the desktop, log off (this is the desktop setting for example, but the user's profile contains more than just the desktop);

STEP5 : With STEP4 and log on to other clients (subject to a room environment DC on the login test), the desktop you see is consistent with the changes since the last logoff. That is, user profile roaming is implemented.

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M00/8A/1E/wKiom1gnCimxAOCmAABlU3N29Pk279.jpg-wh_500x0-wm_3 -wmp_4-s_1473807863.jpg "title=" 5-12.jpg "alt=" Wkiom1gncimxaocmaablu3n29pk279.jpg-wh_50 "/>

The user's home folder can be further modified in the same settings as the user profile.

STEP1 : Create a shared folder and set permissions.

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M01/8A/1B/wKioL1gnClDBxrDZAABeMkpk43U307.jpg-wh_500x0-wm_3 -wmp_4-s_2660492647.jpg "title=" 5-13.jpg "alt=" Wkiol1gncldbxrdzaabemkpk43u307.jpg-wh_50 "/>

STEP2 : Select multiple users at the same time, and follow the path of the configuration file, the home folder is modified ( \\IP\ Share name \%username% )

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M02/8A/1B/wKioL1gnCnaS6P2_AAENCewYU4Q758.jpg-wh_500x0-wm_3 -wmp_4-s_2894568232.jpg "title=" 5-14.jpg "alt=" Wkiol1gncnas6p2_aaencewyu4q758.jpg-wh_50 "/>

STEP3 : With the user logged in to the client with the above modified home folder path, the following interface will appear:

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M00/8A/1F/wKiom1gnCqSzmHWvAABNtAJqHU4892.jpg-wh_500x0-wm_3 -wmp_4-s_1159981780.jpg "title=" 5-15.jpg "alt=" Wkiom1gncqszmhwvaabntajqhu4892.jpg-wh_50 "/>

From this analysis: with the owner of the folder, what role?

This article from "Network Snail" blog, declined reprint!

Windows Server 2012 Active Directory Basic Configuration and application (Novice tutorial) 5---User profile