User Profile Manager provides an easy and reliable way to manage user personalization settings in Windows environments (the user’s profile). A user’s profile consists of registry settings (stored in HKEY_CURRENT_USER) along with the files and folders (favorites, My Documents, cookies, Application Data etc). The purpose of this article is to provide an overview and some details around User Profile Manager. This will provide you enough to understand its core propose and for preparation to take a deeper dive into the technology. The Technology Preview is available today for download (go here for links to the download site, Technical FAQ and other related items).
User Profile Manager is a Windows service that monitors the logon and logoff process. That means any user that logs onto a Windows environment with this service will have their profile managed by User Profile Manager. E.g. installing the service on a XenApp server will enable all the users with sessions on that XenApp server to have profiles managed by User Profile Manager.
Let’s start with the core files that are installed. The MSI package (one for 32-bit platforms and one for 64-bit platforms) installs a Windows service (UserProfileManager.exe), two DLLs for Windows XP and Windows Server 2003 (upmHook.dll and upmLogonMonitor.dll) and some supporting files that I will cover a bit later (INI, ADM and ChangeLog.txt). All of these are installed by default to \Program Files\Citrix\User Profile Manager. Once installed, a new service will be listed (in the MMC Services plug-in or in Computer Management under Services) called Citrix User Profile Manager.
The service receives its configuration defining which users and what to manage in these users’ profiles through a Group Policy Object (GPO) or an INI file. The service will first read the GPO for its configuration and then check the INI file for any settings not configured in the GPO. Typically you would use one or the other to manage configurations. INI files are great for simple pilots and evaluations. GPOs will offer better manageability and scale as you move into larger production deployments. If neither the GPO nor INI exists, User Profile Manager will just manage the registry (and thus ignore any files or folders in the profile). Please note that once you install User Profile Manager it will begin working using a default configuration (based on the INI files that were installed).
The INI files are installed in the target directory with an initial configuration. There are two types of INI files installed: v1 (Windows Server 2003 and Windows XP profile) and v2 (Windows Server 2008 and Vista profiles). Also installed in the same directory is the ADM template to be imported into your policies for creating User Profile Manager GPOs.
By virtue of these INI files, User Profile Manager works out of the box with a base configuration (HKEY_CURRENT_USER, My Documents, Favorites, Cookies, Desktop and Application Data etc – just read through the INI files for the full details). This also means that if you choose to use or move your configuration to GPOs, you should delete or rename these INI files to avoid inadvertently having settings applied. These INI files can be used as a starting point for your configuration and as a template for your GPO settings.
Once User Profile Manager is installed and a user logs onto that computer, User Profile Manager will manage the user’s profile (registry settings, files and folders). Within GPO settings the administrator has granular control over which users utilize User Profile Manager through AD Groups. If the user does not belong to the specified AD Group, User Profile Manager will just ignore the user. By default, all users (including local accounts) are managed and administrators are ignored (also can be configured in GPOs).
Upon logoff, any net changes within the profile will be copied back to the central share (and only items that have changed). The user’s settings (DAT files, files and folders) are all centrally stored on the network in their defined HOME directory (which can be configured to be any UNC path). The user now has all their settings and profile data (as defined in the configuration) following them reliably and consistently throughout their sessions.
Stay tuned as I will follow up this article with one that will dig deeper into how the registry settings are handled (NTUSER.DAT) in order to alleviate the ‘last write wins’ challenge. As well as a look at how files and folders can by optimized to mitigate the ‘extra baggage’ challenge creating profile bloat issues (trust me, a bloated profile is not a pretty thing).
I look forward to any and all feedback on your experiences with this Technology Preview.