Migrate to DFS from UNC file shares? Complications..
-
@ntoxicator said:
You guys make me feel like a f[moderated]ing idiot at times.... simple direction is great or maybe some hand holding at times with my point of view and logic? Its like a pissing contest on here...
You asked for thoughts. I gave mine. if you don't want them, don't ask.
With that kind of reply it sounds like you only wanted someone to say what you already wanted to do. F[moderated] that.
Anyway, I stated that I have never seen user redirection work well. Period. I never said it cannot work or that it is not a viable solution. I know others that use it with no issues at all. @KyleCaminita for one. Still does not change my opinion on the subject.
-
@ntoxicator said:
So What is it that K12 environments use for user profiles and user data? Being that no user files are saved to workstations.
They teach users to save to network drives, and they learn quickly else they lose data. Very few environments have a true need for roaming profiles and they usually suck anyway.
There's also cloud storage type options too own cloud, Pydio etc.
Your over complicating this. Just because someone is getting GPOs applied doesn't mean the server needs to be right there. It's Minimal traffic, and most of those things you mention like printers aren't going to be changing often, it will sync the GPO locally to the computer and apply it, it will only need to update if the GPO gets updated in the domain after that
-
@ntoxicator said:
I've given hard numbers and even a minimal proposal from Scale computing; just so they could get a general idea of numbers. Also obtained server quotes on new hardware to compare against using a new setup on XenServer.
That's a bit over kill for a 20 user temp site even if you needed a server no reason for a scale system. If anything pick up something from xbyte or Dell outlet. But even that isn't really needed
-
It's late, and I'm still not caught up here on ML.. I'll try to post a few suggestions tomorrow.
In the meantime, I just add that I too have been using folder redirection for My Documents since Windows 2000 - they work near flawlessly. I added redirecting Favorites about 2 years ago, again flawless.
I've done a few redirection of Desktop - that that's a whole other story and I've seen many problems with this, mainly because the desktop is not actually local anymore, it's remote on the server, sure it can be cached for offline use, but I have seen many problems with it, many centered around performance.
And roaming profiles - hot damn.. not if I can avoid. Those things corrupt all the time on me.. maybe it's my 100 Mb slow ass network causing that issue?
-
@Dashrender said:
In the meantime, I just add that I too have been using folder redirection for My Documents since Windows 2000 - they work near flawlessly. I added redirecting Favorites about 2 years ago, again flawless.
Folder redirection works great. This main issues are
Sometimes software's hardcode the my documents folder to store data.
And Laptops, Offline Files can break.
-
@Jason said:
@Dashrender said:
In the meantime, I just add that I too have been using folder redirection for My Documents since Windows 2000 - they work near flawlessly. I added redirecting Favorites about 2 years ago, again flawless.
Folder redirection works great. This main issues are
Sometimes software's hardcode the my documents folder to store data.
And Laptops, Offline Files can break.
Yep, both those examples are true, though in 16 years I've rarely run into the software issue, and the Offline situation has greatly improved since Windows 7, 6+ years ago.
-
@ntoxicator said:
Simply would I be able to attach this NAS network drive to the current PDC and then from there create a group policy for this new set of users which points to this new network file path? Then I can copy their user profile folders to this new network path.... keeping their existing user data and settings?
Curious why you would attach the NAS, I'm assuming over the VPN, to the AD back at the main office? A NAS looks just like a Windows Server to a Windows client computer - so you can use your GPOs to push mapped drives, the mapping being something like net use s: \NAS\sharename. Assuming you buy a NAS that supports AD integration (my cheap Buffalo NAS does) you can assign user permissions to the shares, and the files within the file system.
Any file that is accessed primarily by the remote site should be put on that NAS (don't forget your backups).
As JB said earlier, you don't need AD/DNS/DHCP at the remote site. Those features use very little bandwidth and typically work just fine on WAN/VPN connections, so not buying a server and a license for that server would be a cost savings. That said, you could always stand up a Linux AD box - supposedly the AD implementation on Linux will fit right in with Windows, and nothing will be the wiser. So while this wouldn't save you any hardware costs, it would save you an $800 Windows Server license and allow you to have local AD/DNS/DHCP.
-
Thanks for the input
Reason mentioning onsite server was because we have a MAPS account which has server licenses, so cost is $0 right now; as the money has already been spent. (was spent)
So, I would just configure a NAS and present it BACK to the primary domain controller (over VPN UNC share)?
The fact is, CEO and management complaining users are not able to work efficiently enough. As all data right now is going over the VPN tunnel. Looking to mitigate this, so the new users at this remote site will have their folder redirection and roaming profile stored locally at that location.
Then the only data going over VPN would be the AD authentication and GPO's.
so -- the advice is to setup a local NAS, create file shares. Then at the Primary domain controller, attach the UNC share? I thought I couldnt do folder redirection and roaming profiles on network attached storage?
-
@ntoxicator said:
So, I would just configure a NAS and present it BACK to the primary domain controller (over VPN UNC share)?
You keep mentioning this. There is no back. This is no connection of any kind between the NAS and the Domain controller in the main location - unless you map it as a network drive.
Then the only data going over VPN would be the AD authentication and GPO's.
Correct
so -- the advice is to setup a local NAS, create file shares.
Yes
Then at the Primary domain controller,
There is no such thing anymore. PDCs died with Windows NT 4.0. You should drop this from usage as some people will attack you for it. While there are special cases, all Domain controllers are equal and Read/Write, unlike the NT 4.0 and previous days. They are simply called Domain Controllers (DC) or Active Directory Domain Controllers (AD DC).
attach the UNC share? I thought I couldnt do folder redirection and roaming profiles on network attached storage?
You can folder redirect to any SMB share, it doesn't matter where it's hosted. For example, you can use Group Policy to map network shares to Linux or Macs, as long as those platforms have SAMBA shares setup. SAMBA is the Linux implementation of Microsoft's SMB sharing protocol.
-
@Dashrender said:
Thank you
-
@ntoxicator said:
So, I would just configure a NAS and present it BACK to the primary domain controller (over VPN UNC share)?
UNC is like URL. You don't say that you are presenting a website over URL. You present it over HTTP. UNC is the same. There is no such thing as a UNC share. UNC is the name of the address of an SMB Share. If you feel the need to specify that this is an SMB Share instead of an NFS Share, always use SMB (or SMB 3.1 or whatever if you need to be super specific) or just a share to denote that it is a network file system.
-
@ntoxicator said:
I thought I couldnt do folder redirection and roaming profiles on network attached storage?
NAS are file servers. They appear on the network no different to the devices. Anything you can do with one, you can do with the other.
-
I guess when I type I also must be lazy and too vague and not descriptive enough with my definition and usage of UNC
UNC file path location {"\network\location\share"}
Not letting me do 'whack whack'
-
@ntoxicator said:
I guess when I type I also must be lazy and too vague and not descriptive enough with my definition and usage of UNC
UNC file path location {"\network\location\share"}
Not letting me do 'whack whack'
You have to escape the back slashes as they are the escape character. This is pretty standard on different systems. Try triple whacking to get a double whack.
-
lol @ sarcasm.
Was not letting me include the whack whack when replying on this thread. That is what I was saying.
-
@ntoxicator said:
lol @ sarcasm.
Was not letting me include the whack whack when replying on this thread. That is what I was saying.
you can use whack whack though. \\
you just have to type three of them instead of two
\\\= \\ on output -
Understood. I just want to crawl into a hole today, lol. No excuse, but dealing with sinus infection since friday.
-
So, just a thought... and I'll take the beating after the fact.
Have I been doing this all wrong the entire time? meaning, the current setup we've had for 3+ years on our network?
Have a windows 2008 R2 VM (AD, GPO, win time)
On this windows server. I attached local storage (Presented through xenserver).
On this local storage (its local to operating system, but presented through xenserver as a SR -- iSCSI NAS storage).
So on this local storage; I have all the folder/file structures and also shared network locations. Within GPO, I specified the network location path for the User Profile and folder redirection settings...
in best practice scenerio's... or for larger envinronments
Is it best to just have separate network storage and SMB shares for these? rather than it all be saved back to the VM localized storage?
As you've mentioned, and opened my eyes to the NAS idea for this satellite office
Satellite office has ~20 users
Primary office has 100 users at the moment & growing...
So just looking for input on best practice scenario. As our office is using the folder redirection & Roaming profiles....
I dont really see any time that we will get away from this.. I'm trying to see if I would be able to 'draw a line' and get away from it. But our users are not very computer savvy at times (ironic, being that they have to sit at computer entire day to perform billing on behalf of clients).
We would have to re-train the users to save all the files to a specified network drive. But the Roaming profiles (AppData folder) comes in handy as users complain if they lose their Bookmarks in google chrome... and their windows sticky notes...also their outlook .OST (exchange cached). Users rely on outlook. I do not see many users using office365 for 100% of their use. as many users have access to multiple employee inboxes or a corporate inbox. Office365 (to my knowledge) you cannot view more than 1 mailbox. Unless you goto cogwheel and specify view another users box.
**edited and added further details
-
@ntoxicator said:
So, just a thought... and I'll take the beating after the fact.
Have I been doing this all wrong the entire time? meaning, the current setup we've had for 3+ years on our network?
Have a windows 2008 R2 VM (AD, GPO, win time)
On this windows server. I attached local storage (Presented through xenserver).
On this local storage (its local to operating system, but presented through xenserver as a SR -- iSCSI NAS storage).
I don't understand what you have here. Could you show a screen shot?
In my XS I have a VM called UR-Bond I have created to virtual disks assigned to the VM, as seen below
to Windows, they appear as local hard drives, as if everything was physical
If you are matching this, and creating shares on these drives, I'd say you're doing fine, cause that's how I do it.
-
Thats how I do it.
Topology / setup:
Xenserver node --
Within XenServer you specify a SR (storage repository). Here, I setup iSCSI storage. This was 3 years ago at time of initial setup. I now wish I used NFS (more viewability into actually files on stor)
on XS - I added a Virtual Disk to the Virtual Machine. Guest Operating System (Windows Server 2008 R2) Sees this disk as local to it..
Reason I ask if this is best practice.... Is, now if we are to migrate to a new XenServer setup. All this data on the VM and its attached virtual disk will have to be moved. Will take long time over GigE.
So its safe and okay to keep growing storage this way? But I'm sure @scottalanmiller will chime in as well. Even adding another server for SMB network storage location would further complicate. Hence, why to keep all storage localized to physical machines/disks and the DRBD options
