Implementing Folder Redirection using Group Policy
An Overview on Folder Redirection
Folder Redirection is a Group Policy feature which enables you to redirect the system folders containing the profile of a user on the network, through the use of the Folder Redirection node in the Group Policy Object Editor console. This basically makes folder redirection a user configuration option. Through the use of the Folder Redirection feature, you can configure that the system folders’ contents on the user remains the same, irrespective of the particular computer which the user utilizes to log on to the system. The system folders for which you can configure folder redirection are listed below:
- Application Data: This folder contains user configuration files, user specific data utilized by applications, and Public Key Infrastructure files.
- Desktop: This folder holds the shortcuts and files that appear on the desktop of the user.
- My Documents: This folder holds the files and pictures of the user.
- Start Menu: This folder holds the shortcuts and files that appear on the Start menu.
Folder redirection settings are stored in the User Configuration node of the Group Policy Object Editor. The Offline Files feature can be configured to enable users to access redirected folders when no network connection exists. You can use the Offline Folder node in Group Policy to configure this feature.
Folder redirection provides the benefits listed below:
- Redirecting the My Documents folder ensures that users can access their data from any computer. This applies to all other redirected folders as well.
- Because redirected folder data is stored on a network server, you can back up the data to an offline storage media.
- You can use the disk quotas feature to specify the amount of space that each user’s redirected folders are allowed to use.
- By configuring the Offline files feature, you can ensure that users have access to the My Documents folder when the network connection is lost. This capability is useful to individuals that use laptop computers.
- When roaming profiles are utilized for users, the network path to My Documents is included in the roaming user profile. The folder is not included in the profile.
The situations in which you should enable folder redirection for the different types of system folders are summarized below:
- Redirect the My Documents folder when you want a user to access the same documents from any computer on the network.
- Redirect the Application Data folder when applications should operate in the same manner for a user whenever the user utilizes a new system. When the Application Data folder is redirected, the user does not need to be configured again when he/she changes systems.
- Redirect the Desktop folder when users save files that contain data to the desktop.
- Redirect the Start Menu folder in the following situations:
- When a user saves files containing data to icons located on the Start menu.
- When there are consistent software installations through the network.
- When a user needs to access the Favorites and Printers and Faxes folders
If your organization already has home folders, Windows Server 2003 includes an option that allows you to redirect My Documents to the home folder of a user. One requirement though is that the user’s home folder needs a Windows XP Professional client. Windows XP Home Edition, Microsoft Windows 2000 and Windows NT client cannot be utilized.
The manners in which you can configure folder redirection are listed below:
- You can redirect folders to a location, based on membership of the security group
- You can redirect folders to a single location for all users in a site, domain, or OU.
When specifying the location for the redirected folders, the following options exist:
- Create a folder for the user beneath the root path
- Redirect the folders to a location that you specify.
- Redirect the folders to the local profile of the user
- Redirect the folders to the home folder of the user
How to redirect folders to a location based on security group membership
Windows Server 2003 includes additional options for redirecting folders which Windows 2000 Server does not offer. With Windows 2000 Server, you could only specify the location for the target folder location in the one provided text box. Windows Server 2003 offers more options which you can select in the Target Folder Location list.
Use the steps below to redirect folders to a location based on security group membership,
- Open the GPO which is linked to the site, domain, or OU that holds the users for which you want to enable folder redirection.
- Expand the User Configuration node, expand the Windows Settings node, and then expand the Folder Redirection node.
- Right-click the folder which should be redirected and then select Properties from the shortcut menu.
- When the Properties dialog box for the folder which you selected for redirection opens, in the Setting list of the Target tab, choose the Advanced–Specify Locations For Various User Groups option.
- In the Specify Group And Location dialog box opens, click the Browse button in the Security Group Membership area.
- When the Select Group dialog box opens, specify the name of the security group for whom the folder should be redirected. Click OK.
- In the Specify Group And Location dialog box, choose the location for the redirected folder. You can choose one of the options listed below:
- Create A Folder For Each User Under The Root Path, a folder with the name of the user is created under the root path. The option is not available if you selected to redirect the Start Menu folder.
- Redirect To The Following Location, the folder is redirected to a location that you specify.
- Redirect To The Local Userprofile Location, the folder is redirected to the default folder location.
- Redirect To The User’s Home Folder, the folder is redirected to the user’s home directory. The option is available when the My Documents folder is redirected.
- Enter the path to which the folder should be redirected if you selected the Create A Folder For Each User Under The Root Path option or the Redirect To The Following Location option in Step 7. You can enter the UNC path, or a path on the local computer of the user.
- Click OK.
- Click the Settings tab.
- The Grant The User Exclusive Rights To Redirected Folder checkbox is enabled by default. It is recommended to leave this option unchanged.
- The Move The Contents Of User’s Current Folder To The New Location checkbox is enabled by default. It is recommended to also leave this option unchanged.
- In the Policy Removal box of the Settings tab, it is recommended to leave the Leave The Folder In The New Location When Policy Is Removed option selected.
- In the My Pictures Preferences box of the Settings tab, it is recommended to leave the Make My Pictures A Subfolder Of My Documents option enabled. This is the default configuration setting.
- Click OK.
How to redirect folders to a single location for all users in a site, domain, or OU
- Open the GPO which is linked to the site, domain, or OU that holds the users for which you want to enable folder redirection.
- Expand the User Configuration node, expand the Windows Settings node, and then expand the Folder Redirection node.
- Right-click the folder which should be redirected and then select Properties from the shortcut menu.
- When the Properties dialog box for the folder which you selected for redirection opens, in the Setting list of the Target tab, choose the Basic–Redirect Everyone’s Folder To The Same Location option.
- Select one of the following options from the Target Folder Location list:
- Create A Folder For Each User Under The Root Path, a folder with the name of the user is created in the root path.
- Redirect To The Following Location, the folder is redirected to a location that you specify.
- Redirect To The Local Userprofile Location, the folder is redirected to the default folder location.
- Redirect To The User’s Home Folder, the folder is redirected to the user’s home directory.
- Enter the path to which the folder should be redirected if you selected the Create A Folder For Each User Under The Root Path option or the Redirect To The Following Location option in the previous step.
- Click the Settings tab.
- It is recommended to leave The Grant The User Exclusive Rights To Redirected Folder checkbox and Move The Contents Of User’s Current Folder To The New Location checkbox enabled or selected. This is the default setting for those two checkboxes.
- In the Policy Removal box of the Settings tab, it is recommended to leave the Leave The Folder In The New Location When Policy Is Removed option enabled.
- In the My Pictures Preferences box of the Settings tab, leave the Make My Pictures A Subfolder Of My Documents option enabled. This is the default configuration setting.
- Click OK.
How to set up the network share for offline files and folders
As mentioned earlier, you can configure the Offline Files feature so that users can still access redirected folders when the network connection is lost. When configured, the Offline Files feature stores any files which are accessed via folder redirection on the local computer’s hard drive. The file is updated locally when the user accesses a file of a redirected folder. When the user logs off the computer, the file is moved to the server and stored.
Configuring the network share for offline files and folders is the initial step in the configuration of the Offline Files feature.
- Navigate to and right-click the shared folder that includes the offline files, and then select Sharing And Security on the shortcut menu.
- Click Offline Settings on the Sharing tab.
- When the Offline Settings dialog box opens, select one of the options listed below:
- Only The Files And Programs That Users Specify Will Be Available Offline, allows users to specify files for offline availability.
- All Files And Programs That Users Open From The Share Will Be Automatically Available Offline, all files which users accesses are available offline.
- Files Or Programs From The Share Will Not Be Available Offline, no files will be available offline.
- Click OK.
How to set up the Offline Files feature for computers and servers
- Proceed to open My Computer.
- Click Folder Options on the Tools menu.
- When the Folder Options dialog box opens, select the Offline Files tab
- Check the Enable Offline Files checkbox.
- The options which you can select for a full synchronization of Offline Files are listed below:
- Synchronize All Offline Files When Logging On checkbox, for a full synchronization of Offline Files at user logon
- Synchronize All Offline Files Before Logging Off checkbox, for a full synchronization of Offline Files when the user logs off.
- You can enable the Display A Reminder Every checkbox so that reminder balloons are displayed when the computer moves to the offline state. The reminder balloons are displayed on the desktop’s notification area. Specify how frequently the reminders should be displayed.
- To display a shortcut to the Offline Files folder on the desktop, you must select the Create An Offline Files Shortcut On The Desktop checkbox.
- To encrypt offline files, you must select the Encrypt Offline Files To Secure Data checkbox.
- Set the amount of disk space to use for temporary offline files by using the slider.
- Click the Advanced Button.
- When the Offline Files–Advanced Settings dialog box opens, choose one of the options listed below:
- Notify Me And Begin Working Offline, enables the user to continue to access files when the network connection is unavailable.
- Never Allow My Computer To Go Offline, prevents the user from accessing files when the network connection is unavailable.
- Click Add to access the Offline Files–Add Custom Action dialog box. This is where you can configure a specific action for a computer so that it is treated differently when another computer loses a network connection.
- Enter the name of the computer in the Computer text box.
- Specify how the computer should be treated, by selecting an option in the When A Network Connection Is Lost area of the dialog box.
- Click OK.
- Click OK in the Offline Files–Advanced Settings dialog box.
- Click OK in the Folder Options dialog box.
How to configure synchronization of offline files and folders
- Click Start, All Programs, Accessories, and click Synchronize.
- Click Setup on the Items To Synchronize dialog box.
- The Synchronization Settings dialog box opens.
- On the Logon/Logoff tab of the dialog box, in the When I Am Using This Network Connection list, select the connection which you want to utilize.
- In the Synchronize The Following Checked Items list, choose the items that should be synchronized.
- Enable the When I Log On To My Computer checkbox if you want synchronization to occur when the user logs on to the computer.
- Enable the When I Log Off My Computer checkbox if you want synchronization to occur when the user logs off the computer.
- If you want a message to be displayed, asking for permission to perform synchronization, enable the Ask Me Before Synchronizing The Items checkbox.
- Click OK.
Best Practices for Implementing Folder Redirection
A few best practices for implementing folder redirection using Group Policy are summarized below:
- It is recommended to accept the default folder redirection settings on the Settings tab when configuring folder redirection.
- It is always best to allow the system to create the folders.
- Because users typically need to access the contents of redirected folders when the network connection is lost, you should enable the Offline Files feature for redirected folders.
- The My Pictures folder should exist within the My Documents folder.
- When specifying the location for redirected folders, use fully qualified UNC paths.
- Only redirect the My Documents folder to the user’ home folder if you have an existing home folder environment.
- The Application Data folder should not be redirected if you are using the Encrypting File System (EFS).
|
|
|
Bookmark Implementing Folder Redirection using Group Policy
