Solved

Folder redirection for some users on some computers  - SBS 2003

Posted on 2010-09-15
6
608 Views
Last Modified: 2012-05-10
Need to setup folder redirection for one branch of a company.  Folders should only redirect between PCs in that branch and for staff that are registered at that branch i.e. in the branch security group.

Folders shouldn't redirect when the staff from this branch use a computer at a different branch.  And staff from other branches who visit this branch and use the local PCs shouldn't have their folders redirected.

My plan is to create a GPO with redirection setup for the branch staff only, then link this GPO to an OU containing the PCs at the branch that it should apply to.

Will this work?  Just thinking that redirection is a user setting, so maybe linking it to an OU containing just PCs will not stop it from being applied to other PCs that the branch staff login on.

Can someone clarify please.

Thanks
0
Comment
Question by:devon-lad
  • 3
  • 2
6 Comments
 
LVL 5

Assisted Solution

by:chqshaitan
chqshaitan earned 100 total points
ID: 33682900
Hi,

As you say, since the folder redirection is a user setting it will only apply to users who are in OU that the gpo is set on. putting a gpo that has users settings wont apply if only pc's are in the OU.

The easiest way to achieve what you want is to modify the GPO so it will only allow when the users are in their own site. This can be done by using the WMI filter.

have a read below for more info :

http://waynes-world-it.blogspot.com/2008/03/wmi-filter-for-subnet-filtered-group.html
0
 
LVL 5

Expert Comment

by:StefanKamp
ID: 33682942
Create a GPO in the OU containing the computers which should apply folderredirection, in that same GPO the usersettings for folderredirection and set "User Group Policy Loopback mode" to enabled, which can be found in [computer configuration] [administrative templates] [system/group policy].

Choose the mode which fits best to your GPO above.

Hope this helps.
Br. Stefan
0
 
LVL 1

Author Comment

by:devon-lad
ID: 33693796
chqshaitan: Thanks will look at that.

StefanKamp: I'm not familiar with this loopback mode - what exactly is this doing?
0
New My Cloud Pro Series - organize everything!

With space to keep virtually everything, the My Cloud Pro Series offers your team the network storage to edit, save and share production files from anywhere with an internet connection. Compatible with both Mac and PC, you're able to protect your content regardless of OS.

 
LVL 5

Expert Comment

by:StefanKamp
ID: 33694216
OK, let's say you have an OU containing users, an OU containing computers and an OU containing laptops.

Imagine you have created a GPO linked to OU=computers, any usersettings created in that GPO are not applied because the OU does not contain any users. But, as in your case, you want to apply usersettings, when a users logs onto a computer which belongs to that OU.

Then you need loopbackmode, because then the usersettings created in that GPO linked to the OU=computers is also applied, even when the useraccounts resides in another OU. In your case, create the GPO in the OU=computers, configure your requirements in the usersettings, enable loopback policy.

When a user logs on to a computer in OU=computers, the user settings is applied. When the same user logons on to a computer in OU=laptops, no usersettings are forced, as it is only configured to be forced in OU=computers. Got it?

Cheers,
Stefan
0
 
LVL 5

Accepted Solution

by:
StefanKamp earned 400 total points
ID: 33694231
Here a link to Microsoft's explaination; much better than mine :)
http://support.microsoft.com/kb/231287
0
 
LVL 1

Author Comment

by:devon-lad
ID: 33737788
StefanKamp....I've applied this on a test machine and it works i.e. folder direction is applied to users logging into the test machine, but if the same users login to other machines it doesn't work.

However, I can't seem to restrict to a certain user security group.  I've added a filter for the particular branch staff group - and then tried with a user who is not part of branch staff group - and folder redirection still takes place.

I've then tried moving the computer out of the OU that the GP is applied to - and the folders are still redirected.  Have tried multiple reboots and gpupdate /force - but same result.  gpresult shows that the folder redirection GP isn't being applied - but folder redirection is still taking place.

Any idea how I can clear this up?
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Many functions in Excel can make decisions. The most simple of these is the IF function: it returns a value depending on whether a condition you describe is true or false. Once you get the hang of using the IF function, you will find it easier to us…

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

27 Experts available now in Live!

Get 1:1 Help Now