mrpicky2000
asked on
GPO - My Documents Folder Redirection won't work
Hello all --
I have a 2000 server here at the school and all student computers are windows 2000 pro. I have setup all of my students under an organizaitional unit called "students". In the Group policy under folder redirection, I selected basic folder redirection and set the path to \\studentserver\%username%
I have a 2000 server here at the school and all student computers are windows 2000 pro. I have setup all of my students under an organizaitional unit called "students". In the Group policy under folder redirection, I selected basic folder redirection and set the path to \\studentserver\%username%
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
have you actually attempted to put a file in my documents and then done a search for that dowcument to see where it physically is?
do each of the students already have a folder with thier username on \\studentserver?
do they have write access to that folder?
are the workstations on the domain?
do each of the students already have a folder with thier username on \\studentserver?
do they have write access to that folder?
are the workstations on the domain?
ASKER
In repose to shard26...
Each student has a directory on the studentserver... for example user jkelley has a folder on the server called jkelley and has full rights to it. The 2000 pro workstations all log into the domain. All of the other policies that I have set for the OU "Students" take effect when I login as jkelley except for the folder redirection.
In response to Debsyl99...
Sounds like that is creating a common folder that all students have access to... I only want students to have access to their folder and no one else's. That would be disasterous here. Seems to me that \\studentserver\%username%
- NK
Each student has a directory on the studentserver... for example user jkelley has a folder on the server called jkelley and has full rights to it. The 2000 pro workstations all log into the domain. All of the other policies that I have set for the OU "Students" take effect when I login as jkelley except for the folder redirection.
In response to Debsyl99...
Sounds like that is creating a common folder that all students have access to... I only want students to have access to their folder and no one else's. That would be disasterous here. Seems to me that \\studentserver\%username%
- NK
Hi
Seriously - The redirection needs to go into a specific folder - otherwise it's just looking at studentserver and wondering - where on earth do I put this???
You try just save any document directly to studentserver - you can't but there's access and there's access if you know what I mean,
Have a read of this, which was referenced in my first link:
How to dynamically create secure redirected folders by using Folder Redirection in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;EN-US;274443
Particularly this bit:
"Create secure redirected folders
To make sure that only the user and the domain administrators have permissions to open a particular redirected folder, do the following:
Select a central location in your environment where you would like to store Folder Redirection, and then share this folder. In this example, FLDREDIR is used.
Set Share Permissions for the Everyone group to Full Control.
Use the following settings for NTFS Permissions:
CREATOR OWNER - Full Control (Apply onto: Subfolders and Files Only)
System - Full Control (Apply onto: This Folder, Subfolders and Files)
Domain Admins - Full Control (Apply onto: This Folder, Subfolders and Files)
Everyone - Create Folder/Append Data (Apply onto: This Folder Only)
Everyone - List Folder/Read Data (Apply onto: This Folder Only)
Everyone - Read Attributes (Apply onto: This Folder Only)
Everyone - Traverse Folder/Execute File (Apply onto: This Folder Only)
Configure Folder Redirection Policy as outlined in Windows Help. Use a path similar to \\server\FLDREDIR\username
Because the Everyone group has the Create Folder/Append Data right, the group members have the proper permissions to create the folder; however, the members are not able to read the data afterwards. The Username group is the name of the user that was logged on when you created the folder. Because the folder is a child of the parent folder, it inherits the permissions that you assigned to FLDREDIR. Also, because the user is creating the folder, the user gains full control of the folder because of the Creator Owner Permission setting."
Deb :))
Seriously - The redirection needs to go into a specific folder - otherwise it's just looking at studentserver and wondering - where on earth do I put this???
You try just save any document directly to studentserver - you can't but there's access and there's access if you know what I mean,
Have a read of this, which was referenced in my first link:
How to dynamically create secure redirected folders by using Folder Redirection in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;EN-US;274443
Particularly this bit:
"Create secure redirected folders
To make sure that only the user and the domain administrators have permissions to open a particular redirected folder, do the following:
Select a central location in your environment where you would like to store Folder Redirection, and then share this folder. In this example, FLDREDIR is used.
Set Share Permissions for the Everyone group to Full Control.
Use the following settings for NTFS Permissions:
CREATOR OWNER - Full Control (Apply onto: Subfolders and Files Only)
System - Full Control (Apply onto: This Folder, Subfolders and Files)
Domain Admins - Full Control (Apply onto: This Folder, Subfolders and Files)
Everyone - Create Folder/Append Data (Apply onto: This Folder Only)
Everyone - List Folder/Read Data (Apply onto: This Folder Only)
Everyone - Read Attributes (Apply onto: This Folder Only)
Everyone - Traverse Folder/Execute File (Apply onto: This Folder Only)
Configure Folder Redirection Policy as outlined in Windows Help. Use a path similar to \\server\FLDREDIR\username
Because the Everyone group has the Create Folder/Append Data right, the group members have the proper permissions to create the folder; however, the members are not able to read the data afterwards. The Username group is the name of the user that was logged on when you created the folder. Because the folder is a child of the parent folder, it inherits the permissions that you assigned to FLDREDIR. Also, because the user is creating the folder, the user gains full control of the folder because of the Creator Owner Permission setting."
Deb :))
ASKER
OK... It works :-). I discovered that students do not have access to other students folders, which is good.
It still baffles me though as to why I can't specify a folder and route to that.
Thanks for all of your help.
It still baffles me though as to why I can't specify a folder and route to that.
Thanks for all of your help.
Folder Redirection Feature in Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;232692
Deb :))