Folder Redirection Permission for Existing Directories

Posted on 2011-10-18
Last Modified: 2012-05-12
There is an existing user directory structure that I want to configure for folder redirection. I know the group policy part. How do I set the permissions so folder redirection works and the users folders remain secure so only domain admins and user have rights?

Folder Structure: \\Data\users\%username%

Question by:AutomationOne
    LVL 57

    Expert Comment

    by:Mike Kline
    You have to make some changes to permissions so that admins have rights by default they don't

    TechNet article here

    We don't do that where I am.  In cases where we do need to go into folders for some reason we can take ownership but we don't need to do that often.


    LVL 21

    Expert Comment

    Just to add, the KB Mike provided didn't include share permissions

    Author Comment

    Thanks you both for your help.

    Folder rediection is working but I have some very strange results with the user directories on the server. See attached file for details.

    Any idea why this is happening?
    LVL 11

    Expert Comment

    Can you please post HTML of your policy?
    Will make more sense to see that.

    Author Comment

    Actually I'm manually changing the folder location for the My Documents folder for testing purposes.

    I found this link on which explains exactly what is happening.;EN-US;947222

    I am just trying the recommended solution and will post results.
    LVL 21

    Expert Comment

    On the GPO you created. Did you set the root path of "Documents" to \\server\share\%username%"?

    Accepted Solution

    Command Line:

    attrib -r E:\Userdata\*.* /s /d

    Author Closing Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    How to sign a powershell script so you can prevent tampering, and only allow users to run authorised Powershell scripts
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now