Nichewares & Consulting, LLC

My Documents Redirection

Scenario:
Server-1 has dir k:\site1, and this dir is shared as Site1-Data. The perms on the share are
Administrators – Full Control
Site1 - Full Control

The dir has ACL of
Administrators - Full Control (Apply onto this folder, subfolders and files)
CREATOR OWNER - Full Control (Apply onto subfolders and files)
SYSTEM - Full Control (Apply onto this folder, subfolders and files)
Users - Special - Read & Execute (Apply onto this folder, subfolders and files), Create Files/Folders (Apply onto this folder, subfolders and files)

Server-1 also has dir k:\site1\mydocs and this dir has ACL of

Administrators - Full Control (Apply onto this folder, subfolder and files)
System – Full Control (Apply onto this folder, subfolder and files)
CREATOR OWNER – Full Control (Apply onto this folder, subfolder and files)
Enterprise Admins - Full Control (Apply onto this folder, subfolder and files)
Everyone – SPECIAL – Modify (Apply onto this folder only)
Users - Create Folders - Apply onto this folder only

1. Share a dir on a server. The important part here is that the share permissions must be full control for the Site1 group...modify isn't enough.
2. The Everyone group ACL must be at least Modify and applied onto this folder only. This allows users to create his/her own directory in k:\site1\mydocs. This process is actually done automatically via group policy. After the mydoc dir is created, it will only be accessible by the system, enterprise admins, administrators, and the specific user who owns it.
3. Create GPO e.g. Site1 Logon and link it to the Site1 OU. Apply the GPO to the Site1 group only. Make sure all users to be applied are in the Site1 OU.
4. Configure the following options in the GPO:
a. Computer Config > Administrative Templates > System > Logon --- Always wait for the network at computer startup and logon (ENABLED)
This is required to disable the fast/optimized logon under Windows XP to force the GPO to always be applied.
b. User Config > Windows Settings > Folder Redirection > My Documents --- Basic – Redirect everyone's folder to the same location; Create a folder for each user under the root; \\server-1\site1\mydocs
c. the rest of the settings are left at defaults.