1
00:00:03,030 --> 00:00:03,810
All right.

2
00:00:04,770 --> 00:00:08,790
So let's go ahead and implement some folder redirection policy here.

3
00:00:09,690 --> 00:00:16,710
So I've created a GPO called Folder Redirection Policy and I'm going to go ahead and edit it and drill

4
00:00:16,710 --> 00:00:21,090
into policies, Windows Settings, folder redirection, and you'll notice that there are a bunch of

5
00:00:21,090 --> 00:00:22,890
folders that can be redirected.

6
00:00:23,760 --> 00:00:29,340
Now keep in mind that this is a server 2012 or two box that I'm editing on, or if it were a Windows

7
00:00:29,340 --> 00:00:31,650
eight box, it'd be the same situation.

8
00:00:32,510 --> 00:00:36,650
But all of these folders are not the same if you're, let's say, on an XP box.

9
00:00:36,770 --> 00:00:39,860
There's a subset of folders that you can actually redirect.

10
00:00:40,740 --> 00:00:43,800
But let's go ahead and redirect the documents folder.

11
00:00:44,690 --> 00:00:48,980
And then here we can define, as I mentioned, basic or advanced redirection.

12
00:00:49,820 --> 00:00:55,130
If we were to just look at advanced redirection, you can go in here and you can choose a security group,

13
00:00:56,000 --> 00:00:57,200
let's say sales.

14
00:00:57,200 --> 00:00:59,630
And I've got a sales users group I'll choose.

15
00:01:00,550 --> 00:01:05,800
And you can have that user redirected to that group or members of that group redirected to a path,

16
00:01:05,980 --> 00:01:07,900
let's say server and a share.

17
00:01:08,830 --> 00:01:10,990
So let's say it's sales users.

18
00:01:11,880 --> 00:01:17,600
And then essentially each user would be redirected to this path that it shows here underneath that share.

19
00:01:17,610 --> 00:01:22,890
And if I had a different group, I could redirect to a different share all within the same GPO.

20
00:01:23,700 --> 00:01:28,620
What I'm actually going to do here, though, for the purposes of this demo, is to just do a basic

21
00:01:28,620 --> 00:01:31,260
redirection, which gives me a number of options.

22
00:01:32,150 --> 00:01:37,730
I can redirect to the user's home directory to a folder under the root path that I specify for each

23
00:01:37,730 --> 00:01:38,210
user.

24
00:01:39,140 --> 00:01:41,630
Redirect to a particular location.

25
00:01:42,530 --> 00:01:47,660
So for example, I've used this in the past when I've redirected a folder to a like a shared location

26
00:01:47,660 --> 00:01:48,780
that everyone shares.

27
00:01:48,800 --> 00:01:51,320
Like, maybe the favorites are shared by all users.

28
00:01:52,220 --> 00:01:55,910
That's where this kind of area or this particular option comes in handy.

29
00:01:56,790 --> 00:02:01,950
Everyone goes to the same location and it might end up being a read only shared that the user can actually

30
00:02:01,950 --> 00:02:02,560
write to.

31
00:02:02,610 --> 00:02:06,900
But they all share the same sets of files or shortcuts or whatever it happens to be.

32
00:02:07,730 --> 00:02:12,470
And then, of course, you can redirect back to the local profile if you choose to do so.

33
00:02:13,340 --> 00:02:17,930
So let's go ahead and choose this one to create a folder for each user under the root path.

34
00:02:18,880 --> 00:02:22,720
So I'm going to type in the name of a DFS share that I created.

35
00:02:23,620 --> 00:02:26,920
So R to test titled user backslash user data.

36
00:02:26,920 --> 00:02:31,780
And you'll notice here that what it's going to do is it's going to automatically create a folder under

37
00:02:31,780 --> 00:02:37,180
user data for the user's name and then a document subfolder because we're reconnecting documents.

38
00:02:38,050 --> 00:02:41,890
And one thing I did want to mention, going to my Active Directory accounts.

39
00:02:42,790 --> 00:02:46,180
Under the user account, you'll notice in folder redirection.

40
00:02:46,180 --> 00:02:49,300
I had the option to redirect to the user's home directory.

41
00:02:50,190 --> 00:02:54,570
But that's talking about is any home path that might be defined on the user account.

42
00:02:55,500 --> 00:03:00,150
So if I had a home path defined here, that's where it would end up redirecting the user.

43
00:03:01,110 --> 00:03:06,510
I'll also point out that this particular user has a path specified in this profile path option, and

44
00:03:06,510 --> 00:03:08,400
that's to a different DFS path.

45
00:03:09,300 --> 00:03:12,630
That actually is what enables rolling profiles for the user.

46
00:03:13,520 --> 00:03:19,850
Well, I'm not talking specifically about rolling profiles in this since they do kind of dovetail into

47
00:03:19,850 --> 00:03:23,960
the ability to roam user settings and data as folder redirection does.

48
00:03:24,890 --> 00:03:30,410
This is relevant and this is how you define for a given user that they have a roaming profile by entering

49
00:03:30,410 --> 00:03:32,870
a path where their profile gets copied up to.

50
00:03:33,650 --> 00:03:34,430
Okay.

51
00:03:35,270 --> 00:03:38,360
So getting back to my folder redirection policy.

52
00:03:39,270 --> 00:03:40,740
I've got the path to find.

53
00:03:40,770 --> 00:03:42,570
Now I wanted to find my settings.

54
00:03:43,500 --> 00:03:49,410
Remember I mentioned Grant exclusive means that when they when the folder gets created, only that user

55
00:03:49,410 --> 00:03:50,430
has access to it.

56
00:03:51,330 --> 00:03:53,520
So we'll go ahead and leave that alone.

57
00:03:54,420 --> 00:03:55,800
Make that the default.

58
00:03:56,750 --> 00:04:02,120
I'm going to say if the user has any content data existing in the documents folder, I want to move

59
00:04:02,120 --> 00:04:03,380
it up to the server share.

60
00:04:04,230 --> 00:04:09,270
And if I had any down level clients that needed to process this policy, I would need to check this

61
00:04:09,270 --> 00:04:09,720
box.

62
00:04:10,640 --> 00:04:11,720
I'm not going to that.

63
00:04:11,840 --> 00:04:15,290
But I could use that if I had still some XP in my environment.

64
00:04:16,160 --> 00:04:21,380
And then on policy removal, I wanted to redirect the folder back to the local profile.

65
00:04:22,280 --> 00:04:24,230
So now I've defined my policy.

66
00:04:25,130 --> 00:04:29,360
It's asking if I'm sure I don't have any down level clients and I'll say sure.

67
00:04:30,200 --> 00:04:32,420
And now let's go to my Windows client.

68
00:04:33,320 --> 00:04:37,520
This is Joe Sales, who's currently logged into this Windows client machine.

69
00:04:38,390 --> 00:04:43,280
And I'm going to just click on documents and you'll see that this user has a bunch of files in here.

70
00:04:44,150 --> 00:04:48,620
And I'm just going to go back up one level and verify that the files are all local.

71
00:04:48,650 --> 00:04:50,540
It's in the user's local profile.

72
00:04:51,400 --> 00:04:56,680
In this case, my documents is undersea colon backslash users backslash j sales.

73
00:04:57,610 --> 00:05:04,030
Now what I'm going to do as I did before with software installation policy, I'm going to do a quick

74
00:05:04,540 --> 00:05:05,680
update on this guy.

75
00:05:06,580 --> 00:05:12,460
So I'm going to say pop date slash target user because I only need to update the pre user configuration

76
00:05:12,460 --> 00:05:13,000
settings.

77
00:05:13,900 --> 00:05:15,580
And it's going to do the update.

78
00:05:15,580 --> 00:05:16,240
And now.

79
00:05:17,080 --> 00:05:22,720
And actually the one thing that I forgot to do before I can do the processing of the policy, I actually

80
00:05:22,720 --> 00:05:24,070
have to link the GPO.

81
00:05:24,940 --> 00:05:30,100
So let's go back to PMC and we are going to link this to the users o u under sales.

82
00:05:31,030 --> 00:05:35,290
Now what I can do is go back to my one client and do that update again.

83
00:05:36,130 --> 00:05:42,430
And now you'll notice that it's telling me that folder redirection requires a foreground refresh, so

84
00:05:42,430 --> 00:05:43,720
it couldn't complete that.

85
00:05:44,620 --> 00:05:47,830
So now what I want to do, I'm going to go ahead and log off.

86
00:05:48,740 --> 00:05:53,870
And now I'm logging back into the Windows client machine and you'll see it's applying folder redirection

87
00:05:53,870 --> 00:05:54,530
policy.

88
00:05:55,370 --> 00:06:00,080
And once that completes, we'll go in and take a look at what's going on with the documents folder.

89
00:06:01,010 --> 00:06:08,570
So if I bring up documents and I right click on it, right click on documents, you'll notice that now

90
00:06:08,570 --> 00:06:14,840
it's pointing to that DFS share and it's available as a shared document up on on the server.

91
00:06:15,710 --> 00:06:19,850
And if I go in under any of my documents, you'll notice that they're all there.

92
00:06:20,780 --> 00:06:23,000
So they're all copied up to the server.

93
00:06:23,860 --> 00:06:27,100
And you'll also notice that they've been made available offline.

94
00:06:27,970 --> 00:06:30,490
That's the offline folders feature that I mentioned.

95
00:06:30,490 --> 00:06:33,760
That automatically happens when folder redirection occurs.

96
00:06:34,630 --> 00:06:40,420
And if I go back to my server and if I bring up the folder where my data is, where my user data resides,

97
00:06:40,540 --> 00:06:45,520
and I click in under user data, you'll see that's created a folder for sales.

98
00:06:45,520 --> 00:06:50,330
And under there are the documents and I don't have permission because I check that grant exclusive option.

99
00:06:50,350 --> 00:06:51,940
So I don't have permission to that.

100
00:06:52,840 --> 00:06:58,690
So essentially what I've done is to create that folder redirection policy and deliver it to my client.