+ Post New Thread
Results 1 to 4 of 4
Windows Server 2012 Thread, Folder Redirection - Secure Root/Parent Folder in Technical; Hello, I want to redirect Users folders to a Fileserver, and also prevent them from browsing the root folder share. ...
  1. #1
    AAJ
    AAJ is offline

    Join Date
    Dec 2013
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Folder Redirection - Secure Root/Parent Folder

    Hello,

    I want to redirect Users folders to a Fileserver, and also prevent them from browsing the root folder share.

    \\Domain\Share$\HR\UserName

    According to MS, users only needs (List Folder/Read Data, Create Folders/Append Data) permissions on (HR) for the GPO to work and create their folders dynamically.


    But the problem is, without the (Read Attributes) permission, they can't access the redirected folders (Documents, Music, Pictures ...) through Libraries or their User Folder:









    Even though they have full access on their parent folder (UserName), and they can access it directly by typing the full UNC:








    If I give them (Read Attributes) permission, then everything works fine, but they can browse and create folders in the root share (HR) easily.

    any suggestions?


    Setup:
    - Share/NTFS Permissions MS LINK
    - Share is located on a FileServer Failover Cluster, accessed through a Domain DFS namespace.
    - Roaming profile in a similar share, but works without problems.
    - Event viewer show that the Folder redirection applied correctly.
    - Enabling/Disabling "Access-Based Enumeration" doesn't change anything.
    - Pointing to the Share Directly doesn't fix it.

    OS:
    Server 2012 DC
    Windows 7 ENT

  2. #2
    cromertech's Avatar
    Join Date
    Dec 2007
    Location
    Cromer by the coast
    Posts
    731
    Thank Post
    177
    Thanked 109 Times in 97 Posts
    Rep Power
    54
    There is a way of preventing access to anything that is typed into the address bar of explorer, unless you need that functionality for something. GPO location user settings/admin templates/start menu and taskbar/remove run from start menu.

    this also prevents typing unc paths into explorer

  3. #3

    Join Date
    Apr 2010
    Posts
    2,054
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84

  4. #4
    AAJ
    AAJ is offline

    Join Date
    Dec 2013
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hello cromertech,
    Unfortunately, I can't do that, thanks for the reply.


    Hello edutech4schools,
    I've seen that link before, and it doesn't help.

    Note that I'm not worried about them accessing other users files or even seeing them, since DACL and ABE will stop them.
    The problem is that they can create (with ease) as many folders in the root directory as they wish, which will render our Quota Management useless.

SHARE:
+ Post New Thread

Similar Threads

  1. GPO User Folder Redirection -Win 7 - Duplicate Folders?
    By crouchy221 in forum Windows Server 2008 R2
    Replies: 6
    Last Post: 24th September 2013, 04:12 PM
  2. Folder Redirection Failed to create folder
    By apeo in forum Windows 7
    Replies: 1
    Last Post: 17th May 2013, 10:24 AM
  3. Random Folder Redirection Problems
    By ken_kaniff in forum Windows
    Replies: 8
    Last Post: 4th January 2006, 05:18 PM
  4. Folder redirection no desktop??
    By mullet_man in forum Wireless Networks
    Replies: 4
    Last Post: 6th December 2005, 10:34 AM
  5. Replies: 8
    Last Post: 2nd November 2005, 12:25 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •