Windows Folder Redirection

KB ID 0000467 

Problem

Q: What is Folder Redirection?

A: Essentially you can take folders that hold things like your “My documents” or your “Favorites” folder, and put them out on a network server, which is great if you want to back that sort of information up for disaster recovery.

Q: What’s the difference between this and a roaming / roving profile?

A: Folder redirection keeps information on a server and you access it remotely, Roaming profiles are designed to sync that information (and your WHOLE user profile) backwards and forwards to a network share as your users logon and log off.

Q: What folders can be redirected?

A: From Server 2008 onwards, and with Windows 7 clients and above, the following can be redirected.

  • AppData(Roaming)
  • Desktop
  • Start Menu
  • Documents
  • Pictures
  • Music
  • Videos
  • Favorites
  • Contacts
  • Downloads
  • Links
  • Searches
  • Saved Games

Solution

1. On a server create a folder to hold the redirected data, In this case you will notice I’ve called my share Redir$ (The dollar sign just means it’s a hidden share, and can’t be seen if people are network browsing).

hidden share

Folder Redirection: Permissions for the Root Folder

2. Set the share permissions to Everyone: Full Control (Don’t worry we will secure it with NTFS permissions).

redirection share permission

3. On the security tab of the folder click advanced.

redirect permission

4. For Server 2012 / 2016 you should see something like this;

For Server 2008 and older it should look more like this;

ntfs permissions

5. For server 2012 / 2016 Disable Inheritance and select ‘Convert’.

Disable Inheritable Permissions

For 2008 and older, untick “Include Inheritable permissions from this objects parent” > At the warning click “Add”.

inheritable permissions

6. Select each User in turn (You will need to add the Everyone group) > Then Edit the permissions so that they are as follows.

  • CREATOR OWNER – Full Control (Apply onto: Subfolders and Files Only).
  • System – Full Control (Apply onto: This Folder, Subfolders and Files).
  • Domain Admins – Full Control (Apply onto: This Folder, Subfolders and Files).
  • Everyone – Traverse Folder/Execute File (Apply onto: This Folder Only).
  • Everyone – List Folder/Read Data (Apply onto: This Folder Only).
  • Everyone – Read Attributes (Apply onto: This Folder Only).
  • Everyone – Create Folder/Append Data (Apply onto: This Folder Only).

2012 / 2016

Add Everyone

‘Show Advanced Permissions’

Advanced Permissions

Add NTFS Permission Everyone

2008 and older.

folder redirect ntfs permissions

7. Now REMOVE BOTH the entries for USERS > Apply  > OK.

 Remove User Access.png

7. On your domain controller open the Group Policy Management Console, (Under Administrative Tools) and either create a new USER policy of edit one that already linked to the users you want to enforce this policy upon.

new gpo

8. I prefer to create a new policy and call it something sensible so if there’s a problem it’s easy to find in the future.

name gpo

9. Navigate to:

User Configuration > Policies > Windows Settings > Folder Redirection

Locate the folder you want to redirect (In this case its just the documents folder) > Right click > Properties.

redirect folders

10. I’m going to redirect all my users documents to the one folder I created earlier, so I will choose basic.

Note: You can choose “Advanced” and redirect different groups folders to different locations.

Enter the path to the root folder AS A UNC PATH, DONT click the browse button and browse to it.

basic redirection

11. I’m going to accept the defaults on the settings tab, the option I’ve highlighted creates the folders with exclusive rights on the folders for the user in question and SYSTEM, so the domain admin had no access (this is OK, it’s the same way user profiles work, you can still back them up).

grant user exclusive rights

12. Now as your users log on their folders will be redirected to the share you setup.

folderlist

Backing up Redirected Folders

13. Even with exclusive rights you can still back this data up:

backup redirected backup sucessfull

Related Articles, References, Credits, or External Links

Original Article written 22/06/11

Author: Migrated

Share This Post On