I have made some additonal changes to our Terminal Services farm based on MS best practices, and on advice from net forums (mostly Brian Madden, again).
- Implemented Mandatory Profiles on the Terminal Servers, using GPO.
- Installed Hotfix to enable the use of a single profile for all users on a TS via GPO:
- Created a Mandatory Roaming Profile following instructions on how to do this for an XP client:
I copied this profile to C:\Documents and Settings\MANDATORY on one TS, then changed the ACLs to allow Read/Execute ONLY for "Authenticated Users", and used "Robocopy" to replicate this profile WITH PERMISSIONS to the neighboring TS.
- We then edit the GPO for the terminal server as follows:
- Computer Policy->Administrative Templates->Windows Components->Terminal Services->Set Path for Roaming TS Profiles:
"Profile Path" = "C:\Documents and Settings\MANDATORY"
"Do not append the user name to the profile path" = "TRUE"
There actually are lots of web resources on implementing "Flex Profiles" or "Hybrid Profiles", which essentiall combine the speed of Mandatory profiles with the benefits of roaming/local profiles. I am not going to implement this at this time, as it seems more trouble than benefit.
- Used settings recommended in above article – "HP DeskJet 550C" for PCL printers and "HP Color LaserJet 5/5M PS" for PS printers. This seems to generate satisfactory results. I also tested using "HP LaserJet 4", "HP LaserJet 4000 Series", and "HP Color LaserJet" with no better/worse results.
- Installed HP Universal Printer Driver v3.0.0 for PCL 5, PCL 6, and PS. Tried using this as the fallback driver with disasterous results (crashed the print spooler… yuck!). I have kept these drivers installed for use with the wtsuprn.inf mappings file, or if people want to print manually to the installed Universal Printer instances.