Configure Folder Redirection

Add a comment May 21st, 2011

Without Folder Redirection, users might/will save data on their local profile on their computer. If they accidentally delete such a file, you don’t have a backup of it (unless you take backups of workstations which I doubt…).

Configuring Folder Redirection is fairly easy, but you should get it configured correctly.

In this step-by-step I will just use a domain controller (DC) to store the user folders. I always strive to keep DCs dedicated and don’t mix other roles to them. If you don’t have the HW or budget I guess you don’t have a choice.

Open up the “Share and Storage Manager” (that came along with Win2008, which in fact is a great tool).

In the Action frame, choose “Provision Share”:

Click “Browse” and “Make new folder”. Give it a meaningful name like “FolderRedir” or similar:

   

  Edit the NTFS permissions:

Remove the inheritance so it don’t get permissions from its parent folder:

Permissions:

Administrators: Full Control, “This folder, subfolders and files”
System: Full Control, “This folder, subfolders and files”
Users (or a group containing the domain users): READ & Execute + “Create folders / Append data”, “
This folder only”
Creator Owner: Full Control, “Subfolders and files only

Give it a share name and make it administrative (add a $ at the end of the share name):

Enable “Access-based enumeration” (optional). This feature will only list folders the user has access to when browsing:

Set the share permissions:

Domain admins: Full Control
Users (or a group containing the domain users): Full Control

If you use DFS, you should consider placing the folder redirection on the DFS for redundancy. If you don’t have it, just click Next:

Hit Next and Create the good stuff.

With the share and NTFS permissions in place, you have to create a Group Policy Object (GPO):

Open the Group Policy Management Consol:

Create a new GPO, and give it an informative name. I.e. “GPO_FolderRedir”.

Navigate to “User Configuration – Windows Settings – Folder Redirection”. You now have to decide what you want to redirect. You can redirect all, or just a few. “Documents”, “Desktop”  and “Favorites” are handsome to pick if you don’t pick all.

If all your users should be on the same share, you should use the “Basic” setting. If you have different shares for different domain groups you can use the “Advanced” setting.

Set “Root Path” = the share path you created earlier.

On the Settings tab, untick the “Grant the users exclusive rights to Documents” if you want domain admins to have access to the redirected folders. If you don’t untick it now and the folders are created, unticking it at a later time will not give domain admins access to the already created folders. You have to take ownership on the folder to gain access. If a user logs on the redirection will not work as the user has to be the owner.

Now you can link the GPO to an OU (not a Container like “Users”) where the users resides.
When the users logs on, the folders are created automatically and the permissions are set correctly. If the user saves i.e. a Word document to My Documents, it’s saved on the file server.

If you have terminal server users, folder redirection in conjunction with Roaming Profiles is a m.u.s.t!

COYS! 
(even though Manchester City bought a Champions League place)

  1. January 28th, 2012 at 18:14 | #1
    GiJeet

    Excellent! This is the only article I’ve seen that uses the Share and Storage Manager and works great! Thanks for this.

  2. May 5th, 2012 at 17:21 | #2

    trackback

  3. March 5th, 2013 at 15:32 | #3
    ira

    10x

  4. June 4th, 2013 at 13:38 | #4

    Please any one can post how we can handle the created profiles on the PC’s and copy them to the shared folders, and how we can sure if its working well.

  5. December 13th, 2013 at 16:53 | #5

    You are a winner! This works perfectly, even for server 2012.
    (in disbelief, I opened the ‘effective permissions’ a second time just to actually see it had worked) Wow! 🙂

  6. July 21st, 2015 at 03:00 | #6

    I like thhe valuable info you provide in your articles.
    I will bookmark your blog and check again here regularly.I’m quite ccertain I will learn a lot of new
    stuff right here! Best of lluck for thhe next!

  7. May 15th, 2016 at 23:31 | #7

    After going over a number of the blog posts on your website, I really appreciate
    your technique of blogging. I book marked it to my bookmark webpage list and will be checking back soon. Please visit my web site as well
    and let me know what you think.

  1. No trackbacks yet.
Comments feed


+ five = 12