Douglas Phillipson
2006-Feb-17  19:59 UTC
[Samba] Are these still all the recommended settings for using roaming profiles?
I got these several years ago, but we are having problems with Outlook 
with roaming profiles so I want to check and see if something new should 
be added to this list of mods for roaming profiles.
-------------------------------------------------------------------------
Go to Local Computer Policy->Administrative Templates->System->Logon
and
enable:
1) Enable "Do not check for ownership of Roaming Profiles Folders"
2) Enable "Add the Administrators security group to roaming users
profiles"
3) Enable "Delete cached copies of roaming profiles"
4) Enable "Wait for remote user profile"
5) Enable "log users off when roaming profile fails"
Use regedit and search for the following two registry keys:
    RequireSignOrSeal ValueType REG_DWORD = 4
    SignSecureChannel ValueType REG_DWORD = 4
Change them to:
    RequireSignOrSeal ValueType REG_DWORD = 0
    SignSecureChannel ValueType REG_DWORD = 0
-------------------------------------------------------------------------
Thanks
Doug P