Group Policy

Posted on 2006-04-25
Last Modified: 2010-03-18
hi Experts,

I have an AD environment, i have an OU for users and an OU for computer, i if create o GP for folder redirection ie My Docs etc and link that GP to the computers OU it will not run, if however i link the gp to the users OU that i created it will run, why is this happening?


Question by:belronan
    LVL 5

    Assisted Solution

    The reason this is happening is that folder redirection is based on a user policy so it only works when a user logs in.

    So what you are doing is saying that when joebloggs logs in you want his my docs to move to x location. But when a computer policy is applied it cannot generalise and say everybodys folder to here so it will skip it.

    Computer policies are only for items that affect the computer itself such as software installation or file permissions or the like.

    Hope this helps


    LVL 15

    Accepted Solution

    Group Policy is processed for both computers and users, but different features work for each.  When you created the Group Policy, you probably noticed that there were two main branchs.  Computer Configuration and User Configuration.

    Computer Configuration Settings get run at startup/shutdown, where User Configuration get processed at login/logout.  The feature you used (folder redirection) is listed under the "user configuration" settings, and therefore only is applied to users and not to computers.

    Fortunately, Microsoft realized the limitations of this and created something called "Loopback Processing" for the situations where you want to apply user policies based on specific computers.

    Loopback Processing of Group Policy
    LVL 6

    Expert Comment

    Folder redirection for my docs is in in HKEY_CURRENT_USER reg key,

    to modify this key the user needs to be logged on, the user based group policy settings are applied when a user is logged into the machine,

    This is why it doesnt work when you set it to the computers OU,

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Downtime reduced, data recovered by utilizing an Experts Exchange Business Account Challenge The United States Marine Corps employs more than 200,000 active-duty Marines with operations in four continents, all requiring complex networking system…
    A common practice in small networks is making file sharing easy which works extremely well when intra-network security is not an issue. In essence, everyone, that is "Everyone", is given access to all of the shared files - often the entire C: drive …
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now