Chapter 17 – Folder Redirection

-

 Windows Server Group Policy (GPO) Master Handbook

Chapter 17 – Folder Redirection

Learning Objectives

Configure Folder Redirection through Group Policy to centralize user data, simplify backups, support roaming users, and improve disaster recovery.

1. Folder Redirection Overview

Folder Redirection stores user folders on a network file server instead of the local PC. Users access their files transparently while administrators can back up data centrally.

2. GPO Path

User Configuration → Policies → Windows Settings → Folder Redirection

3. Common Redirected Folders

Desktop, Documents, Pictures, Music, Videos, Favorites, Downloads (where applicable), AppData (use with care).

4. Target Types

Basic – Redirect everyone's folder to one location. Advanced – Redirect based on security group membership.

5. Network Share Design

Example: \\FileServer\Users$\%%USERNAME%%\Documents. Configure NTFS and share permissions carefully before enabling the policy.

6. Offline Files

Use Offline Files for laptops that require access while disconnected. Test synchronization before production deployment.

7. Security & Permissions

Grant users Full Control on their own folder, administrators appropriate administrative access, and use Access-Based Enumeration if available.

8. Migration Options

Choose whether to move existing local files to the new location. Enable exclusive rights only when appropriate for your environment.

9. PowerShell & Verification

gpupdate /force, gpresult /h report.html, Get-SmbShare, Get-Acl, robocopy for migration.

10. Troubleshooting

Verify the network share is accessible, check NTFS/share permissions, confirm DNS and SMB connectivity, review Event Viewer (Folder Redirection), and validate the applied GPO.

11. Best Practices

Use DFS Namespaces where possible, keep user data on dedicated file servers, back up redirected folders regularly, test with a pilot OU, and avoid redirecting AppData unless required.

12. Enterprise Scenario

An organization redirects Documents and Desktop to a highly available file server. User profiles remain small, backups are centralized, and new PCs automatically receive the user's files after sign-in.

13. Interview Questions

What is Folder Redirection? Difference between Folder Redirection and Roaming Profiles? What permissions are required? How do you troubleshoot redirection failures?

14. Practical Lab

Create a shared folder, configure NTFS permissions, create a Folder Redirection GPO for Documents, run gpupdate /force, sign out and back in, and verify files are stored on the file server.

Common Folder Redirection Settings

Folder

Recommendation

Notes

Documents

Redirect

Most common

Desktop

Redirect

Central backup

Pictures

Redirect

Optional

Favorites

Redirect

User preference

AppData

Avoid unless required

Can affect performance

Offline Files

Enable for laptops

Supports disconnected use

Microsoft Learn References

Folder Redirection Overview

Deploy Folder Redirection

Offline Files

Comments

Post a Comment

Popular posts from this blog

IIS Installation and Application configuration windows swerver

-
Image
  1.      Using the Server Manager, select  2 Add roles and features . Figure 4-9 Server Manager – Adding Roles and Features Select  Role-based or feature-based installation , and then click  Next . Choose  Select a server from the server pool . 4.      Select the server you are configuring, and then click  Next . Figure 4-10 Server Manager – Select Server 5.      Expand the  Web Server  role service. Figure 4-11 Server Manager – Web Server Role Services Expand the  Web Server  options and select the following  Common HTTP Features : ·         Default Document ·         ·         HTTP Errors ·         ·         Static Content · ...
Read more

IIS Self Signed

-
Image
  Securing the server with SSL Now we want to secure the cats by adding a SSL certificate to our Server. In your IIS Manager go to your server (The top of the tree to the left)  ➜  Scroll down and double-click Server Certificates. (If your self-signed certificate is already here, jump ahead to the bindings steps) We need to import our self-signed server certificate in order to enable https communication with SSL, so click Import… Click the … and find your .pfx file, fill out the password (the -po parameter in your command batch file) and click OK Your certificate is now added Double-click the newly added cert to verify that it is trusted (Your self-signed certificates were added to the correct stores in my previous post, so again: read it if you are lost right now ;-)) So far, so good! Now we can add the https binding, the same way as before but choose https with port 443, your domain as the host name and find yourself signed certificate in the drop do...
Read more

Here’s a step-by-step guide on configuring WDS on Windows Server

-
Windows Deployment Services (WDS) is a Microsoft tool for network-based installation of Windows operating systems. It enables administrators to deploy Windows images over a network to computers without requiring physical media. Here’s a step-by-step guide on configuring WDS on Windows Server: Prerequisites: A Windows Server machine with WDS role installed. Active Directory, DNS, and DHCP set up and running on the network. An NTFS partition on the server to store images. Step 1: Install WDS Role Open Server Manager and go to Manage > Add Roles and Features . Click Next until you reach the Server Roles page. Select Windows Deployment Services and click Next . Choose WDS Deployment Server and WDS Transport Server and click Next . Complete the wizard to install the role, then restart the server if prompted. Step 2: Configure Windows Deployment Services Open WDS by navigating to Server Manager > Tools > Windows Deployment Services . In the WDS console, right-click on your se...
Read more