Guest dcraige27 Posted September 9, 2008 Posted September 9, 2008 We have our users configured in active directory with their home directories mapped to \\server\share\username using drive letter P:. We are using the proile tab of the users' properties. We use the Home folder section of the profile tab as follows: Connect P: to \\server\share\username We also have each users my documents redirected to the P:\My Documents. When the user browses to the \\server\share, they get access denied if they try to access another user's home folder, so we have confirmed the permissions are correct. We have found 2 users in the past few weeks whose My Documents have redirected to another user's My documents and they could open the files. They never received any error message or access denied. If the user logs off/on, their My Doccuments are mapped correctly. This situation is very troubling. Is there a reason that this is happening and how do I resolve it? How is it they do not get the access denied message? Thanks for you help. David
Guest Lanwench [MVP - Exchange] Posted September 9, 2008 Posted September 9, 2008 Re: My Documents Flder Redirection glitch dcraige27 <dcraige27@discussions.microsoft.com> wrote: > We have our users configured in active directory with their home > directories mapped to \\server\share\username using drive letter P:. OT, but you don't need home directories if you're using folder redirection, btw. I've stopped doing that. I redirect My Documents, App Data, and Desktop to subfolders of \\server\share$\%username%\My Documents, \Desktop, \Application Data. You can still map a drive to My Documents in your login script net use p: "\\server\share$\%username%\My Documents" > We are using the proile tab of the users' properties. We use the > Home folder section of the profile tab as follows: > Connect P: to \\server\share\username > > We also have each users my documents redirected to the P:\My > Documents. > When the user browses to the \\server\share, they get access denied That's good, but you might as well hide the share to prevent browsing (append a $) > if they try to access another user's home folder, so we have > confirmed the permissions are correct. > > We have found 2 users in the past few weeks whose My Documents have > redirected to another user's My documents and they could open the > files. Did you witness this yourself? Do you have offline files enabled? (I wouldn't). > They never received any error message or access denied. If the user > logs off/on, their My Doccuments are mapped correctly. Event viewer & rsop.msc output might help.... I suspect it's an offline files issue. I turn that off on my shares, usually - at the very least, turn it off for desktop users via group policy. > > This situation is very troubling. Is there a reason that this is > happening and how do I resolve it? How is it they do not get the > access denied message? > > Thanks for you help. > > David
Guest David Posted September 9, 2008 Posted September 9, 2008 Re: My Documents Flder Redirection glitch Hi Lanwench, We do have offline files enabled. These are mobile users who take their laptops home. They need access to their My Docs when they are disconnected from our network. "Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl... > dcraige27 <dcraige27@discussions.microsoft.com> wrote: >> We have our users configured in active directory with their home >> directories mapped to \\server\share\username using drive letter P:. > > OT, but you don't need home directories if you're using folder > redirection, btw. I've stopped doing that. I redirect My Documents, App > Data, and Desktop to subfolders of \\server\share$\%username%\My > Documents, \Desktop, \Application Data. You can still map a drive to My > Documents in your login script > > net use p: "\\server\share$\%username%\My Documents" > >> We are using the proile tab of the users' properties. We use the >> Home folder section of the profile tab as follows: >> Connect P: to \\server\share\username >> >> We also have each users my documents redirected to the P:\My >> Documents. >> When the user browses to the \\server\share, they get access denied > > That's good, but you might as well hide the share to prevent browsing > (append a $) > >> if they try to access another user's home folder, so we have >> confirmed the permissions are correct. >> >> We have found 2 users in the past few weeks whose My Documents have >> redirected to another user's My documents and they could open the >> files. > > Did you witness this yourself? > Do you have offline files enabled? (I wouldn't). > >> They never received any error message or access denied. If the user >> logs off/on, their My Doccuments are mapped correctly. > > Event viewer & rsop.msc output might help.... I suspect it's an offline > files issue. I turn that off on my shares, usually - at the very least, > turn it off for desktop users via group policy. >> >> This situation is very troubling. Is there a reason that this is >> happening and how do I resolve it? How is it they do not get the >> access denied message? >> >> Thanks for you help. >> >> David > > >
Guest Lanwench [MVP - Exchange] Posted September 9, 2008 Posted September 9, 2008 Re: My Documents Flder Redirection glitch David <dcraige27**@**verizon**dot**net> wrote: > Hi Lanwench, > > We do have offline files enabled. These are mobile users who take > their laptops home. They need access to their My Docs when they are > disconnected from our network. OK - I actually use third party software and custom GPOs for this, but you can use offline files. Just don't share laptops amongst users. > > > "Lanwench [MVP - Exchange]" > <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in > message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl... >> dcraige27 <dcraige27@discussions.microsoft.com> wrote: >>> We have our users configured in active directory with their home >>> directories mapped to \\server\share\username using drive letter P:. >> >> OT, but you don't need home directories if you're using folder >> redirection, btw. I've stopped doing that. I redirect My Documents, >> App Data, and Desktop to subfolders of \\server\share$\%username%\My >> Documents, \Desktop, \Application Data. You can still map a drive >> to My Documents in your login script >> >> net use p: "\\server\share$\%username%\My Documents" >> >>> We are using the proile tab of the users' properties. We use the >>> Home folder section of the profile tab as follows: >>> Connect P: to \\server\share\username >>> >>> We also have each users my documents redirected to the P:\My >>> Documents. >>> When the user browses to the \\server\share, they get access denied >> >> That's good, but you might as well hide the share to prevent browsing >> (append a $) >> >>> if they try to access another user's home folder, so we have >>> confirmed the permissions are correct. >>> >>> We have found 2 users in the past few weeks whose My Documents have >>> redirected to another user's My documents and they could open the >>> files. >> >> Did you witness this yourself? >> Do you have offline files enabled? (I wouldn't). >> >>> They never received any error message or access denied. If the user >>> logs off/on, their My Doccuments are mapped correctly. >> >> Event viewer & rsop.msc output might help.... I suspect it's an >> offline files issue. I turn that off on my shares, usually - at the >> very least, turn it off for desktop users via group policy. >>> >>> This situation is very troubling. Is there a reason that this is >>> happening and how do I resolve it? How is it they do not get the >>> access denied message? >>> >>> Thanks for you help. >>> >>> David
Guest David Posted September 9, 2008 Posted September 9, 2008 Re: My Documents Flder Redirection glitch none of our users share laptops. We configure the folder redirection and the offline sync directly on the users' laptops. "Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl... > David <dcraige27**@**verizon**dot**net> wrote: >> Hi Lanwench, >> >> We do have offline files enabled. These are mobile users who take >> their laptops home. They need access to their My Docs when they are >> disconnected from our network. > > OK - I actually use third party software and custom GPOs for this, but you > can use offline files. Just don't share laptops amongst users. >> >> >> "Lanwench [MVP - Exchange]" >> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in >> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl... >>> dcraige27 <dcraige27@discussions.microsoft.com> wrote: >>>> We have our users configured in active directory with their home >>>> directories mapped to \\server\share\username using drive letter P:. >>> >>> OT, but you don't need home directories if you're using folder >>> redirection, btw. I've stopped doing that. I redirect My Documents, >>> App Data, and Desktop to subfolders of \\server\share$\%username%\My >>> Documents, \Desktop, \Application Data. You can still map a drive >>> to My Documents in your login script >>> >>> net use p: "\\server\share$\%username%\My Documents" >>> >>>> We are using the proile tab of the users' properties. We use the >>>> Home folder section of the profile tab as follows: >>>> Connect P: to \\server\share\username >>>> >>>> We also have each users my documents redirected to the P:\My >>>> Documents. >>>> When the user browses to the \\server\share, they get access denied >>> >>> That's good, but you might as well hide the share to prevent browsing >>> (append a $) >>> >>>> if they try to access another user's home folder, so we have >>>> confirmed the permissions are correct. >>>> >>>> We have found 2 users in the past few weeks whose My Documents have >>>> redirected to another user's My documents and they could open the >>>> files. >>> >>> Did you witness this yourself? >>> Do you have offline files enabled? (I wouldn't). >>> >>>> They never received any error message or access denied. If the user >>>> logs off/on, their My Doccuments are mapped correctly. >>> >>> Event viewer & rsop.msc output might help.... I suspect it's an >>> offline files issue. I turn that off on my shares, usually - at the >>> very least, turn it off for desktop users via group policy. >>>> >>>> This situation is very troubling. Is there a reason that this is >>>> happening and how do I resolve it? How is it they do not get the >>>> access denied message? >>>> >>>> Thanks for you help. >>>> >>>> David > > >
Guest Lanwench [MVP - Exchange] Posted September 9, 2008 Posted September 9, 2008 Re: My Documents Flder Redirection glitch David <dcraige27**@**verizon**dot**net> wrote: > none of our users share laptops. We configure the folder redirection > and the offline sync directly on the users' laptops. Weird. When the user is seeing the other path, is it showing up as \\server\share\otherusername when you right-click on the My Documents shortcut on the desktop? How about in rsop.msc? Do you have "always wait for network at computer startup and logon" enabled via group policy? > > "Lanwench [MVP - Exchange]" > <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in > message news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl... >> David <dcraige27**@**verizon**dot**net> wrote: >>> Hi Lanwench, >>> >>> We do have offline files enabled. These are mobile users who take >>> their laptops home. They need access to their My Docs when they are >>> disconnected from our network. >> >> OK - I actually use third party software and custom GPOs for this, >> but you can use offline files. Just don't share laptops amongst >> users. >>> >>> >>> "Lanwench [MVP - Exchange]" >>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in >>> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl... >>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote: >>>>> We have our users configured in active directory with their home >>>>> directories mapped to \\server\share\username using drive letter >>>>> P:. >>>> >>>> OT, but you don't need home directories if you're using folder >>>> redirection, btw. I've stopped doing that. I redirect My Documents, >>>> App Data, and Desktop to subfolders of >>>> \\server\share$\%username%\My Documents, \Desktop, \Application >>>> Data. You can still map a drive to My Documents in your login >>>> script net use p: "\\server\share$\%username%\My Documents" >>>> >>>>> We are using the proile tab of the users' properties. We use the >>>>> Home folder section of the profile tab as follows: >>>>> Connect P: to \\server\share\username >>>>> >>>>> We also have each users my documents redirected to the P:\My >>>>> Documents. >>>>> When the user browses to the \\server\share, they get access >>>>> denied >>>> >>>> That's good, but you might as well hide the share to prevent >>>> browsing (append a $) >>>> >>>>> if they try to access another user's home folder, so we have >>>>> confirmed the permissions are correct. >>>>> >>>>> We have found 2 users in the past few weeks whose My Documents >>>>> have redirected to another user's My documents and they could >>>>> open the files. >>>> >>>> Did you witness this yourself? >>>> Do you have offline files enabled? (I wouldn't). >>>> >>>>> They never received any error message or access denied. If the >>>>> user logs off/on, their My Doccuments are mapped correctly. >>>> >>>> Event viewer & rsop.msc output might help.... I suspect it's an >>>> offline files issue. I turn that off on my shares, usually - at the >>>> very least, turn it off for desktop users via group policy. >>>>> >>>>> This situation is very troubling. Is there a reason that this is >>>>> happening and how do I resolve it? How is it they do not get the >>>>> access denied message? >>>>> >>>>> Thanks for you help. >>>>> >>>>> David
Guest David Posted September 10, 2008 Posted September 10, 2008 Re: My Documents Flder Redirection glitch I never checked the path listed in the properties of the My Docs desktop shortcut neither did I check the rsop.msc. Didn't think of it but I will if it happens again. We don't have "always wait for network at computer startup and logon" enabled via group policy. I've heard of this setting and was concerned it would slow down our users login time. They complain about how long it takes to startup their computers when there in the office compared to when they're at home and not connected to our network. We have a gigabit LAN and all our clients are 10/100 NICs or better. Will enabling this setting slow them down considerably at startup? Thanks for your help! Much appreciated. "Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message news:#cQd4osEJHA.680@TK2MSFTNGP03.phx.gbl... > David <dcraige27**@**verizon**dot**net> wrote: >> none of our users share laptops. We configure the folder redirection >> and the offline sync directly on the users' laptops. > > Weird. When the user is seeing the other path, is it showing up as > \\server\share\otherusername when you right-click on the My Documents > shortcut on the desktop? How about in rsop.msc? Do you have "always wait > for network at computer startup and logon" enabled via group policy? > >> >> "Lanwench [MVP - Exchange]" >> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in >> message news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl... >>> David <dcraige27**@**verizon**dot**net> wrote: >>>> Hi Lanwench, >>>> >>>> We do have offline files enabled. These are mobile users who take >>>> their laptops home. They need access to their My Docs when they are >>>> disconnected from our network. >>> >>> OK - I actually use third party software and custom GPOs for this, >>> but you can use offline files. Just don't share laptops amongst >>> users. >>>> >>>> >>>> "Lanwench [MVP - Exchange]" >>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in >>>> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl... >>>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote: >>>>>> We have our users configured in active directory with their home >>>>>> directories mapped to \\server\share\username using drive letter >>>>>> P:. >>>>> >>>>> OT, but you don't need home directories if you're using folder >>>>> redirection, btw. I've stopped doing that. I redirect My Documents, >>>>> App Data, and Desktop to subfolders of >>>>> \\server\share$\%username%\My Documents, \Desktop, \Application >>>>> Data. You can still map a drive to My Documents in your login >>>>> script net use p: "\\server\share$\%username%\My Documents" >>>>> >>>>>> We are using the proile tab of the users' properties. We use the >>>>>> Home folder section of the profile tab as follows: >>>>>> Connect P: to \\server\share\username >>>>>> >>>>>> We also have each users my documents redirected to the P:\My >>>>>> Documents. >>>>>> When the user browses to the \\server\share, they get access >>>>>> denied >>>>> >>>>> That's good, but you might as well hide the share to prevent >>>>> browsing (append a $) >>>>> >>>>>> if they try to access another user's home folder, so we have >>>>>> confirmed the permissions are correct. >>>>>> >>>>>> We have found 2 users in the past few weeks whose My Documents >>>>>> have redirected to another user's My documents and they could >>>>>> open the files. >>>>> >>>>> Did you witness this yourself? >>>>> Do you have offline files enabled? (I wouldn't). >>>>> >>>>>> They never received any error message or access denied. If the >>>>>> user logs off/on, their My Doccuments are mapped correctly. >>>>> >>>>> Event viewer & rsop.msc output might help.... I suspect it's an >>>>> offline files issue. I turn that off on my shares, usually - at the >>>>> very least, turn it off for desktop users via group policy. >>>>>> >>>>>> This situation is very troubling. Is there a reason that this is >>>>>> happening and how do I resolve it? How is it they do not get the >>>>>> access denied message? >>>>>> >>>>>> Thanks for you help. >>>>>> >>>>>> David > > >
Guest Lanwench [MVP - Exchange] Posted September 11, 2008 Posted September 11, 2008 Re: My Documents Flder Redirection glitch David <dcraige27**@**verizon**dot**net> wrote: > I never checked the path listed in the properties of the My Docs > desktop shortcut neither did I check the rsop.msc. Didn't think of > it but I will if it happens again. > > We don't have "always wait for network at computer startup and logon" > enabled via group policy. I've heard of this setting and was > concerned it would slow down our users login time. It shouldn't. It's part of my standard setup and as far as I'm concerned should be enabled by default in a domain workstation, but ... > They complain > about how long it takes to startup their computers when there in the > office compared to when they're at home and not connected to our > network. Event viewer may give you a clue there. You should get your hands on one of the laptops and test this yourself, tho. > We have a gigabit LAN and all our clients are 10/100 NICs > or better. Will enabling this setting slow them down considerably at > startup? I really don't think it should. But you should play with this yourself on a laptop to see. > > Thanks for your help! Much appreciated. You're most welcome; hope it helps. > > "Lanwench [MVP - Exchange]" > <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in > message news:#cQd4osEJHA.680@TK2MSFTNGP03.phx.gbl... >> David <dcraige27**@**verizon**dot**net> wrote: >>> none of our users share laptops. We configure the folder >>> redirection and the offline sync directly on the users' laptops. >> >> Weird. When the user is seeing the other path, is it showing up as >> \\server\share\otherusername when you right-click on the My Documents >> shortcut on the desktop? How about in rsop.msc? Do you have "always >> wait for network at computer startup and logon" enabled via group >> policy? >>> >>> "Lanwench [MVP - Exchange]" >>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in >>> message news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl... >>>> David <dcraige27**@**verizon**dot**net> wrote: >>>>> Hi Lanwench, >>>>> >>>>> We do have offline files enabled. These are mobile users who take >>>>> their laptops home. They need access to their My Docs when they >>>>> are disconnected from our network. >>>> >>>> OK - I actually use third party software and custom GPOs for this, >>>> but you can use offline files. Just don't share laptops amongst >>>> users. >>>>> >>>>> >>>>> "Lanwench [MVP - Exchange]" >>>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote >>>>> in message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl... >>>>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote: >>>>>>> We have our users configured in active directory with their home >>>>>>> directories mapped to \\server\share\username using drive letter >>>>>>> P:. >>>>>> >>>>>> OT, but you don't need home directories if you're using folder >>>>>> redirection, btw. I've stopped doing that. I redirect My >>>>>> Documents, App Data, and Desktop to subfolders of >>>>>> \\server\share$\%username%\My Documents, \Desktop, \Application >>>>>> Data. You can still map a drive to My Documents in your login >>>>>> script net use p: "\\server\share$\%username%\My Documents" >>>>>> >>>>>>> We are using the proile tab of the users' properties. We use >>>>>>> the Home folder section of the profile tab as follows: >>>>>>> Connect P: to \\server\share\username >>>>>>> >>>>>>> We also have each users my documents redirected to the P:\My >>>>>>> Documents. >>>>>>> When the user browses to the \\server\share, they get access >>>>>>> denied >>>>>> >>>>>> That's good, but you might as well hide the share to prevent >>>>>> browsing (append a $) >>>>>> >>>>>>> if they try to access another user's home folder, so we have >>>>>>> confirmed the permissions are correct. >>>>>>> >>>>>>> We have found 2 users in the past few weeks whose My Documents >>>>>>> have redirected to another user's My documents and they could >>>>>>> open the files. >>>>>> >>>>>> Did you witness this yourself? >>>>>> Do you have offline files enabled? (I wouldn't). >>>>>> >>>>>>> They never received any error message or access denied. If the >>>>>>> user logs off/on, their My Doccuments are mapped correctly. >>>>>> >>>>>> Event viewer & rsop.msc output might help.... I suspect it's an >>>>>> offline files issue. I turn that off on my shares, usually - at >>>>>> the very least, turn it off for desktop users via group policy. >>>>>>> >>>>>>> This situation is very troubling. Is there a reason that this is >>>>>>> happening and how do I resolve it? How is it they do not get >>>>>>> the access denied message? >>>>>>> >>>>>>> Thanks for you help. >>>>>>> >>>>>>> David
Recommended Posts