Filtering Folder Redirection

Question

question

jsargent-5841 asked Apr 12, '22 LimitlessTechnology-2700 answered Apr 20, '22

Filtering Folder Redirection

Working to move environment with poorly folder redirection GPO to use OneDrive KFM (company with a Google university IT person for 10 years). Existing folder redirect GPO is set as follows:

Security Filtering:
Authenticated Users

Delegation:
Authenticated Users: Read
NoRedir security group: Read, Deny Apply Group Policy

Settings:

If attached doesn't work:

"Grant user exclusive rights to Documents Enabled
Move the contents of Documents to the new location Enabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems Disabled
Policy Removal Behavior Restore contents
Configuration Control Group Policy
Primary Computer Evaluation Not evaluated because primary computer policy is not enabled

Pictures
Setting: Follow the Documents folder"

Working with a test account to find viable process to disable. User is added to NoRedir group, does gpupdates and restarts, sees that folder redirection is denied from security policies, but the Documents folder is still being redirected. GPUpdates don't throw errors and there's no loss of data, the redirect is just still applying after it's being filtered. Any thoughts here?

Edit: Test workstation has no Folder Redirection logs in event viewer.

Thanks!

windows-group-policy windows-server-backup

screenshot-2022-04-12-140654.png (24.7 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-04-20T07:06:48.11Z

LimitlessTechnology-2700 answered Apr 20, '22

Hello Jsargent,

It is not unusual that decommision or modification of folder redirection location may have some computers reluctant to change their settings or to overwrite the current settings.

My suggestion would be to check and replace the target at the registry level using the next path to find keys that are related to each redirectable folder

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders

Alternatively, If you can't find the problem, you might try creating a group for those users, create a policy to redirect the folders back to local, and then add them to the policy that redirects to the new location.

Last but not least if you chose to go the investigation path, this article will be of great value:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc759194(v=ws.10)?redirectedfrom=MSDN

--If the reply is helpful, please Upvote and Accept as answer--

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question