Sunday, September 05, 2010

Windows 7 Profile Woes

Back in the days of good old Windows XP there was three ways of assigning a profile to your users:
  1. Roaming Profiles

  2. Mandatory Profiles

  3. A Default Profile stored in NETLOGON
I always chose to use the shared Default profile method but when changing to Windows 7, wiered things started to happen...

Every time a user logged on, they would receive a notification balloon informing them that they had been logged on with a temporary profile and accompanied by a message that my users found quite scary since it mentioned that none of their work would be saved! Whilst this was happening I was also experiencing a problem where folder re-direction would fail every other time that a user logged into a machine. This was particularly annoying!

So where to start?

I decided that the temporary profile warning must be because of using the default profile method above. The obvious thing to do then was switch to a different method with mandatory profiles being the most obvious. However, Microsoft decided that, as of Vista, it would make the production of mandatory profiles a pain in the arse. To find out how bad it is, see the Technet guide.

I spent a whole day building a nice fresh Windows 7 virtual machine so that I could create the mandatory profile. I followed the instructions to the letter only to have it not work! Onto roaming profiles then.

It was now time to experience a roaming profile problem. Despite activating a roaming profile for a user, I was still receiving the temporary profile warning and the profile directory did not contain anything. It trned out that there was some old profile information being left somewhere. To delete this old data I discovered a VBScript that basically does the same job as delprof.exe (which doesn't work for Vista or Windows 7).

Next it was onto the randomness of the folder re-direction failing to apply every other time somebody logged on. I eventually found an event log entry that mentioned that the 'logon optimization policy' was preventing folder-redirection from working. That's right... Windows optomized the logon by turning all the useful stuff off!

I eventually discovered that this was to do with a change in the way Windows performs 'asynchronous processing and logon optomization'. Long story short... enabling the 'always wait for the network at computer startup and logon' GPO setting immediately cured the problem!

So to summarise... turn on roaming profiles and enable the 'always wait for the network at computer startup and logon' GPO and your life will be much easier!

Migrating from Zimbra to Exchange 2010

Some time ago I switched from using Exchange 2003 to Zimbra to try to reduce the TCO of the school's messaging services. Switching to Zimbra was painless with a handy little tool to copy all the users and their data across.

After several years of admirable service, the time has come to switch back to Exchange so that we can exploit some of its more advanced features and integrate it with our forthcoming OCS implementation. The problem is... how do you migrate all the data to Exchange?

No simple tool seems to exist for the purpose and, short of opening each mailbox and manually copying the mail, I was struggling to find an easy solution.

I stumbled across a post on EduGeek.net where somebody was suffering a similar problem and it gave me two solutions to my dilemma:

  1. Set up an Exchange 2007 server and use Microsoft Transporter Suite for Internet Mailboxes to migrate the mailboxes to Exchange 2007. After this the mailboxes could be migrated to Exchange 2010.

  2. Use IMAPCopy to copy straight to Exchange 2010.

I obviously picked option number two because the first option seemed like hard work.

The whole process seemed to work quite well although I have since discovered that some mail was 'lost' during the bigger batches so it is worth writing the output to a file and double checking it for error messages. You should also be warned that it's not the quickest process in the world and attempting to run multiple copies of IMAPCopy at once simply doesn't work!

Saturday, September 04, 2010

My poor neglected blog

Is it really that long since I last posted on my blog?!? OMG!

It has been super busy at work since November... trying to get things prepared for the Windows 7 and server 2008 R2 rollout. With the little darlings back on Tuesday, I've nearly managed to get everything sorted and I should have a few minutes spare to update my blog.

Watch out for a post about profile pitfalls very soon!