It is possible to implement this policy on computer accounts as well.
You set User GPO settings on a GPO that is on a Computers OU, then when
a user logs into that PC it will apply the User GPO settings. We do this
with Folder redirection, but we redirect to the users home drive (which
is set in the user profile). That helps us since then it doesn't matter
what computer they log into.

Phil 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric
Sent: Monday, January 31, 2005 7:12 PM
To: [email protected]
Subject: RE: [ActiveDir] Sites and Folder Redirection

Noah,

 

The policy that you want to implement (folder redirection) is a user
based policy, so implementing it against the file servers (or an OU that
contains one or more of the file servers to be more accurate) will not
have the affect you want.  If you want a policy to be implemented based
on where the user is (currently), ensure that your site topology is
up-to-date, and implement you GPOs based on sites.

 

For users that roam from one site to another, this becomes a little more
complex.  If they move from Site A to Site B, the policies (if
implemented against sites) will redirect them to a different server.
This new location would of course not contain any data - which may (I
suspect) or may not be a bad thing.  This potential problem can be over
come by replicating the home directory data between locations.  Of
course this process is not without its own issues:

 

1.      Is there any organization issue (i.e. security, policy, etc.)
with having this data replicated?
2.      How will the data be replicated? (i.e. underlying storage
infrastructure, third party data replication product, home grown
process, etc.)
3.      How much data is there?  Have quotas been implemented?
4.      Is there capacity for all data at each location?
5.      Often should data be replicated between sites? How often do
users roam between locations?
6.      Is there enough available bandwidth to support replication at
the scheduled times?
7.      How will conflicts be resolved during the replication process?

 

You could throw something like DFS on top of this to provide a common
namespace and reduce the number of policies implemented.

 

If you want your notebook users to be able to access their redirected
folders when they have no access to the file server then offline files
will be required.

 

Some food for thought I suppose....

 

 

Aric

 

________________________________

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Noah Eiger
Sent: Monday, January 31, 2005 3:29 PM
To: [email protected]
Subject: [ActiveDir] Sites and Folder Redirection

 

Hello:

 

Say I have three sites: Site1, Site2, Site3 (all properly defined in
Sites & Services). Each site has a file server with a home directory
share: \\server1\home$ <file:///\\server1\home$> , \\server2\home$
<file:///\\server2\home$> , and \\server3\home$ , respectively. I want
to redirect My Documents to these home directories using a GPO that
creates the subfolders and assigns tight permissions (as per MSKB
274443). 

 

Where is the best place to create these GPOs (a separate one for each
server)? Obviously, it needs to apply to the users only at that site.
So, I could place it at the Site level. However, then when a user from
Site 1 logs in at Site 2 will they get a new home directory created on
server2? I could create separate OUs that parallel the site structure
and place users in those OUs and then apply the GPO there. However, that
becomes a bit of an administrative hassle when users move around.
Finally, how do either of these configurations affect laptop users that
move from site to site?

 

Slight aside: XP automatically sets these redirected folders to be
available offline. Do people generally leave this enabled?

 

Thanks.

 

-- nme

 

 

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to