devon-lad
asked on
Folder redirection for some users on some computers - SBS 2003
Need to setup folder redirection for one branch of a company. Folders should only redirect between PCs in that branch and for staff that are registered at that branch i.e. in the branch security group.
Folders shouldn't redirect when the staff from this branch use a computer at a different branch. And staff from other branches who visit this branch and use the local PCs shouldn't have their folders redirected.
My plan is to create a GPO with redirection setup for the branch staff only, then link this GPO to an OU containing the PCs at the branch that it should apply to.
Will this work? Just thinking that redirection is a user setting, so maybe linking it to an OU containing just PCs will not stop it from being applied to other PCs that the branch staff login on.
Can someone clarify please.
Thanks
Folders shouldn't redirect when the staff from this branch use a computer at a different branch. And staff from other branches who visit this branch and use the local PCs shouldn't have their folders redirected.
My plan is to create a GPO with redirection setup for the branch staff only, then link this GPO to an OU containing the PCs at the branch that it should apply to.
Will this work? Just thinking that redirection is a user setting, so maybe linking it to an OU containing just PCs will not stop it from being applied to other PCs that the branch staff login on.
Can someone clarify please.
Thanks
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
chqshaitan: Thanks will look at that.
StefanKamp: I'm not familiar with this loopback mode - what exactly is this doing?
StefanKamp: I'm not familiar with this loopback mode - what exactly is this doing?
OK, let's say you have an OU containing users, an OU containing computers and an OU containing laptops.
Imagine you have created a GPO linked to OU=computers, any usersettings created in that GPO are not applied because the OU does not contain any users. But, as in your case, you want to apply usersettings, when a users logs onto a computer which belongs to that OU.
Then you need loopbackmode, because then the usersettings created in that GPO linked to the OU=computers is also applied, even when the useraccounts resides in another OU. In your case, create the GPO in the OU=computers, configure your requirements in the usersettings, enable loopback policy.
When a user logs on to a computer in OU=computers, the user settings is applied. When the same user logons on to a computer in OU=laptops, no usersettings are forced, as it is only configured to be forced in OU=computers. Got it?
Cheers,
Stefan
Imagine you have created a GPO linked to OU=computers, any usersettings created in that GPO are not applied because the OU does not contain any users. But, as in your case, you want to apply usersettings, when a users logs onto a computer which belongs to that OU.
Then you need loopbackmode, because then the usersettings created in that GPO linked to the OU=computers is also applied, even when the useraccounts resides in another OU. In your case, create the GPO in the OU=computers, configure your requirements in the usersettings, enable loopback policy.
When a user logs on to a computer in OU=computers, the user settings is applied. When the same user logons on to a computer in OU=laptops, no usersettings are forced, as it is only configured to be forced in OU=computers. Got it?
Cheers,
Stefan
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
StefanKamp....I've applied this on a test machine and it works i.e. folder direction is applied to users logging into the test machine, but if the same users login to other machines it doesn't work.
However, I can't seem to restrict to a certain user security group. I've added a filter for the particular branch staff group - and then tried with a user who is not part of branch staff group - and folder redirection still takes place.
I've then tried moving the computer out of the OU that the GP is applied to - and the folders are still redirected. Have tried multiple reboots and gpupdate /force - but same result. gpresult shows that the folder redirection GP isn't being applied - but folder redirection is still taking place.
Any idea how I can clear this up?
However, I can't seem to restrict to a certain user security group. I've added a filter for the particular branch staff group - and then tried with a user who is not part of branch staff group - and folder redirection still takes place.
I've then tried moving the computer out of the OU that the GP is applied to - and the folders are still redirected. Have tried multiple reboots and gpupdate /force - but same result. gpresult shows that the folder redirection GP isn't being applied - but folder redirection is still taking place.
Any idea how I can clear this up?
Choose the mode which fits best to your GPO above.
Hope this helps.
Br. Stefan