naj2576
asked on
How do you selectively implement folder redirection and filter which files or folders are redirected?
This is sort of a two part question pertaining to folder redirection on a Windows 2003 Domain.
First off, I want to implement Folder Redirection on my Domain (to redirect the My Documents folder only), but I only want to Redirect users in a particular Security Group. I have read that this is possible, but I'm still unclear on the steps. I have the Group Policy Management Console installed, and I think all I have to do is create a new GPO under the domain and then there should be a place where I can choose which Security Group, or User to apply it to. If someone can please help clarify the procedure I would greatly appreciate it. I do not have any sort of testbed that I can use try this out first, so I want to make sure that I am not going to cripple the network in any way. I want to be able to selectively add folder redirection so that I can apply it to different users one at a time so that the network doesn't get clogged by everyone's files flying to the file server at the same time.
Secondly, I have noticed that a lot of users have files like MP3s and such that I would rather not have taking up space on my file server. Is there a way to filter which files are redirected by file type? I doubt that you can do this, but if anyone has any ideas, I could really use the info. Also, I know you can exclude the "My Pictures" folder from being redirected, but can you do the same with the "My Music" folder as well (this is typically where all the MP3s are stored)?
Thanks in advance.
First off, I want to implement Folder Redirection on my Domain (to redirect the My Documents folder only), but I only want to Redirect users in a particular Security Group. I have read that this is possible, but I'm still unclear on the steps. I have the Group Policy Management Console installed, and I think all I have to do is create a new GPO under the domain and then there should be a place where I can choose which Security Group, or User to apply it to. If someone can please help clarify the procedure I would greatly appreciate it. I do not have any sort of testbed that I can use try this out first, so I want to make sure that I am not going to cripple the network in any way. I want to be able to selectively add folder redirection so that I can apply it to different users one at a time so that the network doesn't get clogged by everyone's files flying to the file server at the same time.
Secondly, I have noticed that a lot of users have files like MP3s and such that I would rather not have taking up space on my file server. Is there a way to filter which files are redirected by file type? I doubt that you can do this, but if anyone has any ideas, I could really use the info. Also, I know you can exclude the "My Pictures" folder from being redirected, but can you do the same with the "My Music" folder as well (this is typically where all the MP3s are stored)?
Thanks in advance.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You cannot apply a POLICY to a security group, but you CAN apply a folder redirect to a security group using the instructions I provided. It's a new feature added to Windows Server 2003 Active Directory structures. In Windows 2000 this was not possible, but I have been redirecting folders based on Security Groups for most of this year, ever since I upgraded my network to 2K3 controllers.
James
James
Keep in mind....all the members of the security group have to be a member of the OU, domain, or site. If you were to add a GPO to the entire domain, but use the steps I provided above, that would enable you apply those redirect changes ONLY to the members of the security group you specified.
James
James
ASKER
Thanks for the help James.
So basically I can apply a new GPO to my domain and then apply it to the security group of the users that need redirection?
Are there any other pitfalls that you can think of that I might need to watch out for? I'm pretty new at dealing with GPOs, and I really don't want to mess anything up.
Thanks again for the help.
So basically I can apply a new GPO to my domain and then apply it to the security group of the users that need redirection?
Are there any other pitfalls that you can think of that I might need to watch out for? I'm pretty new at dealing with GPOs, and I really don't want to mess anything up.
Thanks again for the help.
No pitfalls. It takes some time (sometimes) for the PCs to update the group policy, but it's not usually a problem if they are rebooted. You MAY need to run "gpupdate /force" from the Run prompt to force the change, but it should proliferate fairly quickly.
And yes...you can apply the changes to the domain and only members of those groups will receive the redirects. The great thing about GPOs...if you mess up...delete them, then start over. It's hard to make an irreversable error with group policies.
If you have any trouble...come back here and post to this topic. I'll be happy to help.
James
And yes...you can apply the changes to the domain and only members of those groups will receive the redirects. The great thing about GPOs...if you mess up...delete them, then start over. It's hard to make an irreversable error with group policies.
If you have any trouble...come back here and post to this topic. I'll be happy to help.
James
NOTE: the gpupdate command would need to be run from the CLIENTS, not the server.
ASKER
Awesome stuff.
Thanks a lot!
Thanks a lot!
No....you can not apply group policy to a security group...it doesn't work that way....You can only apply group policy to a site, domain, or an OU. So do as the above post mentioned and move them into different OUs.
You can "filter" group policies so that only certain security groups can read the policy...but for what you are doing...you should make use of OUs.