Limit Offline Files for 1 user account

[Andy_Corrin]

is that administrativley assigned offline folders tho?

[AIT]

is that administrativley assigned offline folders tho?

 

no

 

try these

 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\NetCache\ExclusionErrorSuppressionList

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\NetCache\ExclusionErrorSuppressionList

 

 

File specifications

The file specifications that you add to the new ExclusionErrorSuppressionList keys are Universal Naming Convention (UNC) path strings. These path strings may incorporate a wildcard character (asterisk) to indicate “match any” at that particular position in the specification.

 

Each file specification uses the following format:

\\Server\Share\Folder\Filename.extension

You can include environment variables, such as the variable %username%, in a specification. A variable is expanded at runtime to the equivalent text value.

 

 

 

try this website: Files that you add to the Offline Files folder on a Windows XP-based computer are synchronized when another person uses the computer

 

p.s. my brains beginning to hurt now lol

[Andy_Corrin]

so that should do it then right?

 

lets say for example i have a teacher joe.bloggs..... Their laptop is in an OU called 'teacher_laptops' and it has a GPO attached to that OU that has loop-back enabled (so i can minipulate it based on the computer not user) and also has the setting to not auto sync every redirected folder it encounters. Then on joe.bloggs' actual laptop i can add to the registry (in the containers you posted) the folder '\\server\teacher_drives\joe.bloggs'... that will just sync joe.bloggs and nobody else's right?

 

please tell me thats right haha

[AIT]

so that should do it then right?

 

lets say for example i have a teacher joe.bloggs..... Their laptop is in an OU called 'teacher_laptops' and it has a GPO attached to that OU that has loop-back enabled (so i can minipulate it based on the computer not user) and also has the setting to not auto sync every redirected folder it encounters. Then on joe.bloggs' actual laptop i can add to the registry (in the containers you posted) the folder '\\server\teacher_drives\joe.bloggs'... that will just sync joe.bloggs and nobody else's right?

 

please tell me thats right haha

 

ye i guess so.... good luck

[jsnetman]

Not sure. I have never used loop back processing as I have never fully looked into it.

[Iain.Faulkner]

Stupid me :-( Edited December 10, 2009 by Iain.Faulkner

[Andy_Corrin]

hopefully i'll get chance to try it out somewhere and i'll let you guys know the outcome!

 

Jsnetman, AiT, Iain... 10 scooby snax each for you guys.... You've been most helpful! I'm gonna be askin alot more technical stuff on here from now on (unlucky! haha)

 

Jsnetman, you should defo look into what that loop-back offers.... it's mucho handy being able to set user settings based on the PC a user is sat at rather than just there username.

Edited December 10, 2009 by Andy_Corrin

[jsnetman]

Think I have found the answer to the problem: http://support.microsoft.com/kb/811660

 

Note This list of primary users affects only the Offline Files feature. No other Windows component uses this list, and Microsoft does not support any other use of this list.

 

To apply this feature change, follow these steps:

Click Start, click Run, type regedit, and then click OK.

Locate and click the following registry subkey:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\NetCache

Click Edit, point to New, and then click Key.

Type PrimaryUsers, and then press ENTER to name the new key.

Click PrimaryUsers, click Edit, point to New, and then click DWORD Value.

Use one of the following formats to type a user name:

domain\username

S-1-5-21-397955417-626881126-188441444-2201386

This is a user account security ID (SID) in text form.

Click NetCache, click Edit, point to New, and then click DWORD Value.

Type PurgeNonPrimaryUserFilesAtLogoff, and then press ENTER to name the value.

Double-click PurgeNonPrimaryUserFilesAtLogoff.

In the Value data box, type 1, and then click OK.

Warning You must coordinate the addition of this registry key with the existing PurgeAtLogoff system policy. This policy is activated in Group Policy through the following path:

Computer Configuration\Administrative Templates\Network\Offline Files\At logoff, delete local copy of user’s offline files

 

If you enable this policy, the PurgeNonPrimaryUserFilesAtLogoff registry value is ignored, and files for non-primary users will not be removed.

 

Now the trick would be to enter the reg value automatically for the primary user.

[teejay]

If thats set in GPO.... does that mean i'd have to give each laptop account its own specific GPO? How else will it distinguish which users home drive to Sync and exclude every other user?

 

Appreciate your help alot

 

No, you can do it by setting the security permissions on the Group Policy so that only the members of staff you want to allow to do this can read the policy.

[Andy_Corrin]

jsnetman,

 

That pretty much sounds bob on what we want to happen.... i like the the notion of a 'primary' users.

 

just to clarify a few bits....

 

"Use one of the following formats to type a user name:

domain\username

S-1-5-21-397955417-626881126-188441444-2201386

This is a user account security ID (SID) in text form."

 

so these are 2 methods? either 'domain\username' OR the SID? i think i could work with the 'domain\username' to automate something given enough play-time.

 

I tell you what tho, if these features exists (which it obviously does judging by these regkeys) would it REALLY have been that hard for Microsoft to add a button in GUI to set it up properly???? i mean, c'mon Bill.... sort it out eh??? haha

 

Cheers matey, I'll try your way first!

[Andy_Corrin]

Teejay,

 

The prob with that bud, is all teachers are in the same group membership and all exist in one OU.... i couldnt distinguish one teacher from another with restrictions based on a policy or distribution group.

 

The problem is teachers using other teachers laptops.... not, say, pupils using teachers laptops.

 

Cheers buddy

[jsnetman]

You could use a vb script to write the registry key including pulling the logon name into the script at user logon then use regedit /s to add the key. But the downside is what happens if someone logs on who is not the primary user???

[teejay]

Teejay,

 

The prob with that bud, is all teachers are in the same group membership and all exist in one OU.... i couldnt distinguish one teacher from another with restrictions based on a policy or distribution group.

 

The problem is teachers using other teachers laptops.... not, say, pupils using teachers laptops.

 

Cheers buddy

 

You create a group policy for the setting you want, go to properties, security and remove Authenticated Users from the security list. Then add the Teacher or a secuirty group and give them Read and Apply Group Policy permissions.

 

Edit: Ignore this, having a brain fade & didn't read your post properly !

Edited December 10, 2009 by teejay

[Andy_Corrin]

Yeah,

 

Think i'll just have to get all the right people to log onto their laptops at one particular time to set them as the primary user on their laptops. well worth the effort if it works.