Why Use Folder Redirection?
Folder Redirection allows administrators to redirect the path of known user folders (such as Documents, Desktop, and Pictures) to a centralized network location. This ensures that user data is safely backed up on the server, allows users to access their files from any computer in the domain, and significantly reduces the size of roaming user profiles.
Step 1: Create a Shared Network Folder
Before configuring the Group Policy Object (GPO), you must create a shared folder on your file server to host the redirected data. Create a folder (e.g., C:\UserShares), right-click it, and select Properties > Sharing > Advanced Sharing. Share the folder and ensure that the Everyone group has Full Control at the share level. (Security will be managed via NTFS permissions).
Step 2: Set the Correct NTFS Permissions
Switch to the Security tab and configure the NTFS permissions to ensure users can only access their own folders. The standard permissions are:
- CREATOR OWNER: Full Control (Apply to: Subfolders and files only)
- Authenticated Users: Create folders/append data (Apply to: This folder only)
- System/Administrators: Full Control (Apply to: This folder, subfolders and files)
Step 3: Create the GPO
Open the Group Policy Management Console (gpmc.msc) on your domain controller. Right-click the Organizational Unit (OU) containing your users and select Create a GPO in this domain, and Link it here…. Name it “Folder Redirection Policy”.
Step 4: Configure Folder Redirection Settings
Edit the newly created GPO and navigate to:
User Configuration > Policies > Windows Settings > Folder Redirection
Right-click the folder you want to redirect (e.g., Documents) and select Properties. Set the Setting drop-down to Basic – Redirect everyone’s folder to the same location. Under Target folder location, select Create a folder for each user under the root path and enter the UNC path of your shared folder (e.g., \\FileServer\UserShares).
Step 5: Apply and Verify
Click Apply and OK. To verify the configuration, log in to a client machine as a user in the target OU. Open Command Prompt and force a policy update:
gpupdate /force
You may be prompted to log off and log back in. Once logged back in, right-click the Documents folder, select Properties, and check the Location tab—it should now reflect the network path.