Redirected folder names not consistent as viewed by other users

Posted on 2015-02-09
Medium Priority
Last Modified: 2015-02-23
I have seen this issue on many different offices and would really like to have better knowledge on how to handle this situation.

What happens is when a folder is redirected, some people on the network see the folder as the actual folder name.  Where others view the redirected folder as the label of the folder from the workstation that has redirected the folder.  

Here is an example:

- Example assumes that the office wants to share the users documents folders to the rest of the office.
- DC 2012 server called "Server" with share "USERS"
- Workstation with user named "DENISE" and "documents" folder
- When the local profile of "Denise" documents folder location is modified to point to " U:\Users\Denise", everything functions as normal and works just fine.


Some people will see that U:\ folder as "My Documents" and others will see as "Denise".  In another office there are like 8 folders all called "My Documents" where the underlying folders are their specific user names.

Desired is that everyone sees the folder as Denise, but locally on the computer it is still called "documents".  So far the only work around that I have found is to rename the local folder label to like "Denise Docs" so that it is easy to see on the server, and also ok on the workstation. The other option of naming to"denise" is very confusing to the local user but is great for everyone else.  Thus, so far the only solution that I have found is to rename the label to something like "denise Docs".

Please help me better understand this.  I have a feeling that the preference of what and how it is viewed is a workstation specific setting.  Not sure what is causing different computers to see differently with the same OS.  Have seen differences also in the different OS versions when viewing the redirected folder on the server.
Question by:SolutionsHarmony
  • 4
  • 3
LVL 85

Accepted Solution

David Johnson, CD, MVP earned 1500 total points
ID: 40598239
rule #1: only the user should have access to this personal data, other users should not have access to this information.  If it is meant to be department or company-wide it should be saved in the appropriate folder
Cause: you are seeing the results of the desktop.ini
Solution: put an explicit deny on desktop.ini for all but the owner, If you have hundreds of users then you've just added a lot  of unnecessary work for yourself

Author Comment

ID: 40598902
In both the examples discuses the clients have the bad habbit or working from their user folders and not the recommended shared folders. The trust and security if the office is very relaxed so the normal privacy does not apply here.

With that said. I am not following what you mean for the desktop.ini file. Do you mean if I modify the permission of the desktop.ini in each of the user folder to now allow access to others, then the folder name will be the folder name only??

Author Comment

ID: 40627020
I would like to better understand this.  I believe you have the answer but I do not understand.

In other words, in my example where they DO access each other's user folders, you are saying that I remove permission to the "desktop.ini" file to only the owner of the file the issue will be resolved?

Is there a good way to do that in the GPO, do you think the best if to manually change the file permissions in each users folder in question.
Managing Security Policy in a Changing Environment

The enterprise network environment is evolving rapidly as companies extend their physical data centers to embrace cloud computing and software-defined networking. This new reality means that the challenge of managing the security policy is much more dynamic and complex.

LVL 85

Expert Comment

by:David Johnson, CD, MVP
ID: 40627065
no no no remove the permission from OTHERS so that they don't get the desktop.ini but the OWNER needs to have permissions on that file.

Author Comment

ID: 40627143
Ok thank you.  We are on the same page.  Just explained in opposite direction.  

I will remove all the permissions to the desktop.ini except for the backup user and the "Owner" of the file.

I was wondering if there is a way to make a rule with the file security to accomplish the same.  Or you recommend to just manually do in each users directory?  It is only like 30 users, but I would love to have a solution to do for new users also.  Not the end of the world though.

I understand your direction also.  I would LOVE the office to put common files in the shared directories that we have available.  Old habits die hard and I can not say I did not try.  

Thank you for your assistance and helping clear the fog on this strange issue.  Makes sense too where the results are mixed.  The desktop.ini must be different on different versions of Windows and update patches.  IE - Some show as the local folder name on the server and others pick up the "My Documents" label from the users computer.
LVL 85

Expert Comment

by:David Johnson, CD, MVP
ID: 40627168
Better to start the right way and keep these documents personal like they were actually on a users computer.

Author Comment

ID: 40627193
If I could turn back the clock 15 year on the one client, and turn back the clock 5 years on the other client I could implement correctly the first time like how the permissions are intended and redirected folder are done in GPO.

However, as stated they will NOT change their habits and especially to see a folder named different.

I guess I am done asking the same question to you about a better way to implement the permissions on the folders.  I understand that the world is flat and the only way to do things is the right way with no exceptions.  I got the message.

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Feeling responsible for an unfortunate ransomware infection on my parent's network, persistence paid off as I was able to decrypt a strain of ransomware that was not previously (or at least publicly) cracked. I hope this helps others out there affec…
Native ability to set a user account password via AD GPO was removed because the passwords can be easily decrypted by any authenticated user in the domain. Microsoft recommends LAPS as a replacement and I have written an article that does something …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question