[gptalk] Re: Folder redirection

  • From: "Cruz, Jerome L" <jerome.l.cruz@xxxxxxxxxx>
  • To: "gptalk@xxxxxxxxxxxxx" <gptalk@xxxxxxxxxxxxx>
  • Date: Wed, 25 Jun 2008 13:07:02 -0500

Once the "client" devices receive the setting, then I believe that, "if" you 
delete the server-side folders, then the clients will create new ones with the 
correct permissions....

HOWEVER.... Test, Test, TEST!!!!  You absolutely DO NOT want user's to lose 
data.

Example You blow away a user's profile folder on the server (to get the correct 
permissions on the server folder the next time), said End User's device goes to 
get re-imaged, user logs on, and "where's my Data?...WHERE???? Got blown away, 
you say? Well, where's the backup?

BE CAREFUL OUT THERE!

Jerry Cruz | Group Policies Product Manager | Windows Infrastructure 
Architecture (http://wia.web.boeing.com<http://wia.web.boeing.com/>) | Boeing IT
Office 425-865-6755 | Mobile 425-591-6491

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Dave Palombi
Sent: Tuesday, June 24, 2008 1:04 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Folder redirection

Now that I have added this, if I were to delete the folders, would these 
permission apply or would I have some issues?

On Tue, Jun 24, 2008 at 3:42 PM, Cruz, Jerome L 
<jerome.l.cruz@xxxxxxxxxx<mailto:jerome.l.cruz@xxxxxxxxxx>> wrote:

For Roaming Profiles, if you have not already done so, configure the following 
setting:



Computer Configuration | Administrative Templates | System | User Profiles | 
Add the Administrators security group  to roaming user profiles



That 'will not' fix the permissions of those that have already deployed, but 
will catch all the new ones.



Jerry Cruz | Group Policies Product Manager | Windows Infrastructure 
Architecture (http://wia.web.boeing.com<http://wia.web.boeing.com/>) | Boeing IT

Office 425-865-6755 | Mobile 425-591-6491



From: gptalk-bounce@xxxxxxxxxxxxx<mailto:gptalk-bounce@xxxxxxxxxxxxx> 
[mailto:gptalk-bounce@xxxxxxxxxxxxx<mailto:gptalk-bounce@xxxxxxxxxxxxx>] On 
Behalf Of Dave Palombi
Sent: Tuesday, June 24, 2008 11:24 AM

To: gptalk@xxxxxxxxxxxxx<mailto:gptalk@xxxxxxxxxxxxx>
Subject: [gptalk] Re: Folder redirection



Hey guys,

I finally got it working!  However, I do have an issue.  When I am on the 
server as a domain admin, I can not view the folders.  Is there some 
permissions I am missing.  We are having the same issues with roaming profiles.

Thanks in advance,

Dave

On Tue, Jun 24, 2008 at 11:55 AM, Nelson, Jamie 
<Jamie.Nelson@xxxxxxx<mailto:Jamie.Nelson@xxxxxxx>> wrote:

Good information. I'll have to bookmark that one. Thanks Hendrikus. :)



Jamie Nelson | Infrastructure Consultant | BI&T Operations | Devon Energy | 
Work: 405.552.8054 | http://www.dvn.com<http://www.dvn.com/>



From: gptalk-bounce@xxxxxxxxxxxxx<mailto:gptalk-bounce@xxxxxxxxxxxxx> 
[mailto:gptalk-bounce@xxxxxxxxxxxxx<mailto:gptalk-bounce@xxxxxxxxxxxxx>] On 
Behalf Of HENDRIKUS Terwint (Ext) [SEDIRSI]
Sent: Tuesday, June 24, 2008 10:42 AM
To: gptalk@xxxxxxxxxxxxx<mailto:gptalk@xxxxxxxxxxxxx>
Subject: [gptalk] Re: Folder redirection



You may also want to check this article :



http://technet2.microsoft.com/windowsserver/en/library/2b24872a-05ca-41be-9887-33acc87a20561033.mspx?mfr=true

(which also contains a link to "Security Recommendations for Folder 
Redirection")



In the GPO just use \\server\share  -- that will do - if you save it, you'll 
see it automatically adds "%USERNAME%\Mes documents" to it (which makes 
\\server\share\%USERNAME%\Mes documents\ )



Allow Folder Redirection to create folders for you. When setting redirection 
policy for a group, use the path to the share, such as \\server\share. Folder 
Redirection then appends the user name and the folder name when the policy is 
applied



Another element to consider is your user account: is the user account in the 
same domain? What has been configured in the user account?



Regards,

Hendrikus



De : gptalk-bounce@xxxxxxxxxxxxx<mailto:gptalk-bounce@xxxxxxxxxxxxx> 
[mailto:gptalk-bounce@xxxxxxxxxxxxx<mailto:gptalk-bounce@xxxxxxxxxxxxx>] De la 
part de Nelson, Jamie
Envoyé : jeudi 19 juin 2008 16:55
À : gptalk@xxxxxxxxxxxxx<mailto:gptalk@xxxxxxxxxxxxx>
Objet : [gptalk] Re: Folder redirection



Are the user folders already present in that location? If not, you have to make 
sure users have the ability to create a folders there. Make sure you check both 
NTFS and share permissions.



Jamie Nelson | Infrastructure Consultant | BI&T Operations | Devon Energy | 
Work: 405.552.8054 | http://www.dvn.com<http://www.dvn.com/>



From: gptalk-bounce@xxxxxxxxxxxxx<mailto:gptalk-bounce@xxxxxxxxxxxxx> 
[mailto:gptalk-bounce@xxxxxxxxxxxxx<mailto:gptalk-bounce@xxxxxxxxxxxxx>] On 
Behalf Of Dave Palombi
Sent: Thursday, June 19, 2008 9:49 AM
To: gptalk@xxxxxxxxxxxxx<mailto:gptalk@xxxxxxxxxxxxx>
Subject: [gptalk] Folder redirection



Hello,

I have a GP in place to move the my documents folder to a folder specifed.

However, this does not work.

What I have configured is user configuration/ windows settings/ folder 
redirection/ my documents/ setting: Basic (redirect everyone's folder to the 
same location)
path:\\servername\share$\%username%

Under

user configuration/ windows settings/ folder redirection/ options

grant user exclusive rights to my documents - enabled
move the contents of my documents to the new location - enabled
policy removal behavior - leave contents.

I do not know why this is not working.  The GP has been applied successfully 
but the path in the my document folder does not work.


Dave

________________________________

Confidentiality Warning: This message and any attachments are intended only for 
the use of the intended recipient(s), are confidential, and may be privileged. 
If you are not the intended recipient, you are hereby notified that any review, 
retransmission, conversion to hard copy, copying, circulation or other use of 
all or any portion of this message and any attachments is strictly prohibited. 
If you are not the intended recipient, please notify the sender immediately by 
return e-mail, and delete this message and any attachments from your system.



Other related posts: