My Documents Flder Redirection glitch

[Guest dcraige27]

We have our users configured in active directory with their home directories

mapped to \\server\share\username using drive letter P:. We are using the

proile tab of the users' properties. We use the Home folder section of the

profile tab as follows:

Connect P: to \\server\share\username

 

We also have each users my documents redirected to the P:\My Documents.

When the user browses to the \\server\share, they get access denied if they

try to access another user's home folder, so we have confirmed the

permissions are correct.

 

We have found 2 users in the past few weeks whose My Documents have

redirected to another user's My documents and they could open the files.

They never received any error message or access denied. If the user logs

off/on, their My Doccuments are mapped correctly.

 

This situation is very troubling. Is there a reason that this is happening

and how do I resolve it? How is it they do not get the access denied message?

 

Thanks for you help.

 

David

[Guest Lanwench [MVP - Exchange]]

Re: My Documents Flder Redirection glitch

 

dcraige27 <dcraige27@discussions.microsoft.com> wrote:

> We have our users configured in active directory with their home

> directories mapped to \\server\share\username using drive letter P:.

 

OT, but you don't need home directories if you're using folder redirection,

btw. I've stopped doing that. I redirect My Documents, App Data, and Desktop

to subfolders of \\server\share$\%username%\My Documents, \Desktop,

\Application Data. You can still map a drive to My Documents in your login

script

 

net use p: "\\server\share$\%username%\My Documents"

> We are using the proile tab of the users' properties. We use the

> Home folder section of the profile tab as follows:

> Connect P: to \\server\share\username

>

> We also have each users my documents redirected to the P:\My

> Documents.

> When the user browses to the \\server\share, they get access denied

 

That's good, but you might as well hide the share to prevent browsing

(append a $)

> if they try to access another user's home folder, so we have

> confirmed the permissions are correct.

>

> We have found 2 users in the past few weeks whose My Documents have

> redirected to another user's My documents and they could open the

> files.

 

Did you witness this yourself?

Do you have offline files enabled? (I wouldn't).

> They never received any error message or access denied. If the user

> logs off/on, their My Doccuments are mapped correctly.

 

Event viewer & rsop.msc output might help.... I suspect it's an offline

files issue. I turn that off on my shares, usually - at the very least, turn

it off for desktop users via group policy.

>

> This situation is very troubling. Is there a reason that this is

> happening and how do I resolve it? How is it they do not get the

> access denied message?

>

> Thanks for you help.

>

> David

[Guest David]

Re: My Documents Flder Redirection glitch

 

Hi Lanwench,

 

We do have offline files enabled. These are mobile users who take their

laptops home. They need access to their My Docs when they are disconnected

from our network.

 

 

"Lanwench [MVP - Exchange]"

<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message

news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...

> dcraige27 <dcraige27@discussions.microsoft.com> wrote:

>> We have our users configured in active directory with their home

>> directories mapped to \\server\share\username using drive letter P:.

>

> OT, but you don't need home directories if you're using folder

> redirection, btw. I've stopped doing that. I redirect My Documents, App

> Data, and Desktop to subfolders of \\server\share$\%username%\My

> Documents, \Desktop, \Application Data. You can still map a drive to My

> Documents in your login script

>

> net use p: "\\server\share$\%username%\My Documents"

>

>> We are using the proile tab of the users' properties. We use the

>> Home folder section of the profile tab as follows:

>> Connect P: to \\server\share\username

>>

>> We also have each users my documents redirected to the P:\My

>> Documents.

>> When the user browses to the \\server\share, they get access denied

>

> That's good, but you might as well hide the share to prevent browsing

> (append a $)

>

>> if they try to access another user's home folder, so we have

>> confirmed the permissions are correct.

>>

>> We have found 2 users in the past few weeks whose My Documents have

>> redirected to another user's My documents and they could open the

>> files.

>

> Did you witness this yourself?

> Do you have offline files enabled? (I wouldn't).

>

>> They never received any error message or access denied. If the user

>> logs off/on, their My Doccuments are mapped correctly.

>

> Event viewer & rsop.msc output might help.... I suspect it's an offline

> files issue. I turn that off on my shares, usually - at the very least,

> turn it off for desktop users via group policy.

>>

>> This situation is very troubling. Is there a reason that this is

>> happening and how do I resolve it? How is it they do not get the

>> access denied message?

>>

>> Thanks for you help.

>>

>> David

>

>

>

[Guest Lanwench [MVP - Exchange]]

Re: My Documents Flder Redirection glitch

 

David <dcraige27**@**verizon**dot**net> wrote:

> Hi Lanwench,

>

> We do have offline files enabled. These are mobile users who take

> their laptops home. They need access to their My Docs when they are

> disconnected from our network.

 

OK - I actually use third party software and custom GPOs for this, but you

can use offline files. Just don't share laptops amongst users.

>

>

> "Lanwench [MVP - Exchange]"

> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...

>> dcraige27 <dcraige27@discussions.microsoft.com> wrote:

>>> We have our users configured in active directory with their home

>>> directories mapped to \\server\share\username using drive letter P:.

>>

>> OT, but you don't need home directories if you're using folder

>> redirection, btw. I've stopped doing that. I redirect My Documents,

>> App Data, and Desktop to subfolders of \\server\share$\%username%\My

>> Documents, \Desktop, \Application Data. You can still map a drive

>> to My Documents in your login script

>>

>> net use p: "\\server\share$\%username%\My Documents"

>>

>>> We are using the proile tab of the users' properties. We use the

>>> Home folder section of the profile tab as follows:

>>> Connect P: to \\server\share\username

>>>

>>> We also have each users my documents redirected to the P:\My

>>> Documents.

>>> When the user browses to the \\server\share, they get access denied

>>

>> That's good, but you might as well hide the share to prevent browsing

>> (append a $)

>>

>>> if they try to access another user's home folder, so we have

>>> confirmed the permissions are correct.

>>>

>>> We have found 2 users in the past few weeks whose My Documents have

>>> redirected to another user's My documents and they could open the

>>> files.

>>

>> Did you witness this yourself?

>> Do you have offline files enabled? (I wouldn't).

>>

>>> They never received any error message or access denied. If the user

>>> logs off/on, their My Doccuments are mapped correctly.

>>

>> Event viewer & rsop.msc output might help.... I suspect it's an

>> offline files issue. I turn that off on my shares, usually - at the

>> very least, turn it off for desktop users via group policy.

>>>

>>> This situation is very troubling. Is there a reason that this is

>>> happening and how do I resolve it? How is it they do not get the

>>> access denied message?

>>>

>>> Thanks for you help.

>>>

>>> David

[Guest David]

Re: My Documents Flder Redirection glitch

 

none of our users share laptops. We configure the folder redirection and

the offline sync directly on the users' laptops.

 

"Lanwench [MVP - Exchange]"

<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message

news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl...

> David <dcraige27**@**verizon**dot**net> wrote:

>> Hi Lanwench,

>>

>> We do have offline files enabled. These are mobile users who take

>> their laptops home. They need access to their My Docs when they are

>> disconnected from our network.

>

> OK - I actually use third party software and custom GPOs for this, but you

> can use offline files. Just don't share laptops amongst users.

>>

>>

>> "Lanwench [MVP - Exchange]"

>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

>> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...

>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote:

>>>> We have our users configured in active directory with their home

>>>> directories mapped to \\server\share\username using drive letter P:.

>>>

>>> OT, but you don't need home directories if you're using folder

>>> redirection, btw. I've stopped doing that. I redirect My Documents,

>>> App Data, and Desktop to subfolders of \\server\share$\%username%\My

>>> Documents, \Desktop, \Application Data. You can still map a drive

>>> to My Documents in your login script

>>>

>>> net use p: "\\server\share$\%username%\My Documents"

>>>

>>>> We are using the proile tab of the users' properties. We use the

>>>> Home folder section of the profile tab as follows:

>>>> Connect P: to \\server\share\username

>>>>

>>>> We also have each users my documents redirected to the P:\My

>>>> Documents.

>>>> When the user browses to the \\server\share, they get access denied

>>>

>>> That's good, but you might as well hide the share to prevent browsing

>>> (append a $)

>>>

>>>> if they try to access another user's home folder, so we have

>>>> confirmed the permissions are correct.

>>>>

>>>> We have found 2 users in the past few weeks whose My Documents have

>>>> redirected to another user's My documents and they could open the

>>>> files.

>>>

>>> Did you witness this yourself?

>>> Do you have offline files enabled? (I wouldn't).

>>>

>>>> They never received any error message or access denied. If the user

>>>> logs off/on, their My Doccuments are mapped correctly.

>>>

>>> Event viewer & rsop.msc output might help.... I suspect it's an

>>> offline files issue. I turn that off on my shares, usually - at the

>>> very least, turn it off for desktop users via group policy.

>>>>

>>>> This situation is very troubling. Is there a reason that this is

>>>> happening and how do I resolve it? How is it they do not get the

>>>> access denied message?

>>>>

>>>> Thanks for you help.

>>>>

>>>> David

>

>

>

[Guest Lanwench [MVP - Exchange]]

Re: My Documents Flder Redirection glitch

 

David <dcraige27**@**verizon**dot**net> wrote:

> none of our users share laptops. We configure the folder redirection

> and the offline sync directly on the users' laptops.

 

Weird. When the user is seeing the other path, is it showing up as

\\server\share\otherusername when you right-click on the My Documents

shortcut on the desktop? How about in rsop.msc? Do you have "always wait for

network at computer startup and logon" enabled via group policy?

>

> "Lanwench [MVP - Exchange]"

> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

> message news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl...

>> David <dcraige27**@**verizon**dot**net> wrote:

>>> Hi Lanwench,

>>>

>>> We do have offline files enabled. These are mobile users who take

>>> their laptops home. They need access to their My Docs when they are

>>> disconnected from our network.

>>

>> OK - I actually use third party software and custom GPOs for this,

>> but you can use offline files. Just don't share laptops amongst

>> users.

>>>

>>>

>>> "Lanwench [MVP - Exchange]"

>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

>>> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...

>>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote:

>>>>> We have our users configured in active directory with their home

>>>>> directories mapped to \\server\share\username using drive letter

>>>>> P:.

>>>>

>>>> OT, but you don't need home directories if you're using folder

>>>> redirection, btw. I've stopped doing that. I redirect My Documents,

>>>> App Data, and Desktop to subfolders of

>>>> \\server\share$\%username%\My Documents, \Desktop, \Application

>>>> Data. You can still map a drive to My Documents in your login

>>>> script net use p: "\\server\share$\%username%\My Documents"

>>>>

>>>>> We are using the proile tab of the users' properties. We use the

>>>>> Home folder section of the profile tab as follows:

>>>>> Connect P: to \\server\share\username

>>>>>

>>>>> We also have each users my documents redirected to the P:\My

>>>>> Documents.

>>>>> When the user browses to the \\server\share, they get access

>>>>> denied

>>>>

>>>> That's good, but you might as well hide the share to prevent

>>>> browsing (append a $)

>>>>

>>>>> if they try to access another user's home folder, so we have

>>>>> confirmed the permissions are correct.

>>>>>

>>>>> We have found 2 users in the past few weeks whose My Documents

>>>>> have redirected to another user's My documents and they could

>>>>> open the files.

>>>>

>>>> Did you witness this yourself?

>>>> Do you have offline files enabled? (I wouldn't).

>>>>

>>>>> They never received any error message or access denied. If the

>>>>> user logs off/on, their My Doccuments are mapped correctly.

>>>>

>>>> Event viewer & rsop.msc output might help.... I suspect it's an

>>>> offline files issue. I turn that off on my shares, usually - at the

>>>> very least, turn it off for desktop users via group policy.

>>>>>

>>>>> This situation is very troubling. Is there a reason that this is

>>>>> happening and how do I resolve it? How is it they do not get the

>>>>> access denied message?

>>>>>

>>>>> Thanks for you help.

>>>>>

>>>>> David

[Guest David]

Re: My Documents Flder Redirection glitch

 

I never checked the path listed in the properties of the My Docs desktop

shortcut neither did I check the rsop.msc. Didn't think of it but I will if

it happens again.

 

We don't have "always wait for network at computer startup and logon"

enabled via group policy. I've heard of this setting and was concerned it

would slow down our users login time. They complain about how long it takes

to startup their computers when there in the office compared to when they're

at home and not connected to our network. We have a gigabit LAN and all our

clients are 10/100 NICs or better. Will enabling this setting slow them

down considerably at startup?

 

Thanks for your help! Much appreciated.

 

"Lanwench [MVP - Exchange]"

<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message

news:#cQd4osEJHA.680@TK2MSFTNGP03.phx.gbl...

> David <dcraige27**@**verizon**dot**net> wrote:

>> none of our users share laptops. We configure the folder redirection

>> and the offline sync directly on the users' laptops.

>

> Weird. When the user is seeing the other path, is it showing up as

> \\server\share\otherusername when you right-click on the My Documents

> shortcut on the desktop? How about in rsop.msc? Do you have "always wait

> for network at computer startup and logon" enabled via group policy?

>

>>

>> "Lanwench [MVP - Exchange]"

>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

>> message news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl...

>>> David <dcraige27**@**verizon**dot**net> wrote:

>>>> Hi Lanwench,

>>>>

>>>> We do have offline files enabled. These are mobile users who take

>>>> their laptops home. They need access to their My Docs when they are

>>>> disconnected from our network.

>>>

>>> OK - I actually use third party software and custom GPOs for this,

>>> but you can use offline files. Just don't share laptops amongst

>>> users.

>>>>

>>>>

>>>> "Lanwench [MVP - Exchange]"

>>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

>>>> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...

>>>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote:

>>>>>> We have our users configured in active directory with their home

>>>>>> directories mapped to \\server\share\username using drive letter

>>>>>> P:.

>>>>>

>>>>> OT, but you don't need home directories if you're using folder

>>>>> redirection, btw. I've stopped doing that. I redirect My Documents,

>>>>> App Data, and Desktop to subfolders of

>>>>> \\server\share$\%username%\My Documents, \Desktop, \Application

>>>>> Data. You can still map a drive to My Documents in your login

>>>>> script net use p: "\\server\share$\%username%\My Documents"

>>>>>

>>>>>> We are using the proile tab of the users' properties. We use the

>>>>>> Home folder section of the profile tab as follows:

>>>>>> Connect P: to \\server\share\username

>>>>>>

>>>>>> We also have each users my documents redirected to the P:\My

>>>>>> Documents.

>>>>>> When the user browses to the \\server\share, they get access

>>>>>> denied

>>>>>

>>>>> That's good, but you might as well hide the share to prevent

>>>>> browsing (append a $)

>>>>>

>>>>>> if they try to access another user's home folder, so we have

>>>>>> confirmed the permissions are correct.

>>>>>>

>>>>>> We have found 2 users in the past few weeks whose My Documents

>>>>>> have redirected to another user's My documents and they could

>>>>>> open the files.

>>>>>

>>>>> Did you witness this yourself?

>>>>> Do you have offline files enabled? (I wouldn't).

>>>>>

>>>>>> They never received any error message or access denied. If the

>>>>>> user logs off/on, their My Doccuments are mapped correctly.

>>>>>

>>>>> Event viewer & rsop.msc output might help.... I suspect it's an

>>>>> offline files issue. I turn that off on my shares, usually - at the

>>>>> very least, turn it off for desktop users via group policy.

>>>>>>

>>>>>> This situation is very troubling. Is there a reason that this is

>>>>>> happening and how do I resolve it? How is it they do not get the

>>>>>> access denied message?

>>>>>>

>>>>>> Thanks for you help.

>>>>>>

>>>>>> David

>

>

>

[Guest Lanwench [MVP - Exchange]]

Re: My Documents Flder Redirection glitch

 

David <dcraige27**@**verizon**dot**net> wrote:

> I never checked the path listed in the properties of the My Docs

> desktop shortcut neither did I check the rsop.msc. Didn't think of

> it but I will if it happens again.

>

> We don't have "always wait for network at computer startup and logon"

> enabled via group policy. I've heard of this setting and was

> concerned it would slow down our users login time.

 

It shouldn't. It's part of my standard setup and as far as I'm concerned

should be enabled by default in a domain workstation, but ...

> They complain

> about how long it takes to startup their computers when there in the

> office compared to when they're at home and not connected to our

> network.

 

Event viewer may give you a clue there. You should get your hands on one of

the laptops and test this yourself, tho.

> We have a gigabit LAN and all our clients are 10/100 NICs

> or better. Will enabling this setting slow them down considerably at

> startup?

 

I really don't think it should. But you should play with this yourself on a

laptop to see.

>

> Thanks for your help! Much appreciated.

 

You're most welcome; hope it helps.

>

> "Lanwench [MVP - Exchange]"

> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

> message news:#cQd4osEJHA.680@TK2MSFTNGP03.phx.gbl...

>> David <dcraige27**@**verizon**dot**net> wrote:

>>> none of our users share laptops. We configure the folder

>>> redirection and the offline sync directly on the users' laptops.

>>

>> Weird. When the user is seeing the other path, is it showing up as

>> \\server\share\otherusername when you right-click on the My Documents

>> shortcut on the desktop? How about in rsop.msc? Do you have "always

>> wait for network at computer startup and logon" enabled via group

>> policy?

>>>

>>> "Lanwench [MVP - Exchange]"

>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

>>> message news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl...

>>>> David <dcraige27**@**verizon**dot**net> wrote:

>>>>> Hi Lanwench,

>>>>>

>>>>> We do have offline files enabled. These are mobile users who take

>>>>> their laptops home. They need access to their My Docs when they

>>>>> are disconnected from our network.

>>>>

>>>> OK - I actually use third party software and custom GPOs for this,

>>>> but you can use offline files. Just don't share laptops amongst

>>>> users.

>>>>>

>>>>>

>>>>> "Lanwench [MVP - Exchange]"

>>>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote

>>>>> in message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...

>>>>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote:

>>>>>>> We have our users configured in active directory with their home

>>>>>>> directories mapped to \\server\share\username using drive letter

>>>>>>> P:.

>>>>>>

>>>>>> OT, but you don't need home directories if you're using folder

>>>>>> redirection, btw. I've stopped doing that. I redirect My

>>>>>> Documents, App Data, and Desktop to subfolders of

>>>>>> \\server\share$\%username%\My Documents, \Desktop, \Application

>>>>>> Data. You can still map a drive to My Documents in your login

>>>>>> script net use p: "\\server\share$\%username%\My Documents"

>>>>>>

>>>>>>> We are using the proile tab of the users' properties. We use

>>>>>>> the Home folder section of the profile tab as follows:

>>>>>>> Connect P: to \\server\share\username

>>>>>>>

>>>>>>> We also have each users my documents redirected to the P:\My

>>>>>>> Documents.

>>>>>>> When the user browses to the \\server\share, they get access

>>>>>>> denied

>>>>>>

>>>>>> That's good, but you might as well hide the share to prevent

>>>>>> browsing (append a $)

>>>>>>

>>>>>>> if they try to access another user's home folder, so we have

>>>>>>> confirmed the permissions are correct.

>>>>>>>

>>>>>>> We have found 2 users in the past few weeks whose My Documents

>>>>>>> have redirected to another user's My documents and they could

>>>>>>> open the files.

>>>>>>

>>>>>> Did you witness this yourself?

>>>>>> Do you have offline files enabled? (I wouldn't).

>>>>>>

>>>>>>> They never received any error message or access denied. If the

>>>>>>> user logs off/on, their My Doccuments are mapped correctly.

>>>>>>

>>>>>> Event viewer & rsop.msc output might help.... I suspect it's an

>>>>>> offline files issue. I turn that off on my shares, usually - at

>>>>>> the very least, turn it off for desktop users via group policy.

>>>>>>>

>>>>>>> This situation is very troubling. Is there a reason that this is

>>>>>>> happening and how do I resolve it? How is it they do not get

>>>>>>> the access denied message?

>>>>>>>

>>>>>>> Thanks for you help.

>>>>>>>

>>>>>>> David