My Documents Flder Redirection glitch

  • Thread starter Thread starter dcraige27
  • Start date Start date
D

dcraige27

Guest
We have our users configured in active directory with their home directories
mapped to \\server\share\username using drive letter P:. We are using the
proile tab of the users' properties. We use the Home folder section of the
profile tab as follows:
Connect P: to \\server\share\username

We also have each users my documents redirected to the P:\My Documents.
When the user browses to the \\server\share, they get access denied if they
try to access another user's home folder, so we have confirmed the
permissions are correct.

We have found 2 users in the past few weeks whose My Documents have
redirected to another user's My documents and they could open the files.
They never received any error message or access denied. If the user logs
off/on, their My Doccuments are mapped correctly.

This situation is very troubling. Is there a reason that this is happening
and how do I resolve it? How is it they do not get the access denied message?

Thanks for you help.

David
 
Re: My Documents Flder Redirection glitch

dcraige27 <dcraige27@discussions.microsoft.com> wrote:
> We have our users configured in active directory with their home
> directories mapped to \\server\share\username using drive letter P:.


OT, but you don't need home directories if you're using folder redirection,
btw. I've stopped doing that. I redirect My Documents, App Data, and Desktop
to subfolders of \\server\share$\%username%\My Documents, \Desktop,
\Application Data. You can still map a drive to My Documents in your login
script

net use p: "\\server\share$\%username%\My Documents"

> We are using the proile tab of the users' properties. We use the
> Home folder section of the profile tab as follows:
> Connect P: to \\server\share\username
>
> We also have each users my documents redirected to the P:\My
> Documents.
> When the user browses to the \\server\share, they get access denied


That's good, but you might as well hide the share to prevent browsing
(append a $)

> if they try to access another user's home folder, so we have
> confirmed the permissions are correct.
>
> We have found 2 users in the past few weeks whose My Documents have
> redirected to another user's My documents and they could open the
> files.


Did you witness this yourself?
Do you have offline files enabled? (I wouldn't).

> They never received any error message or access denied. If the user
> logs off/on, their My Doccuments are mapped correctly.


Event viewer & rsop.msc output might help.... I suspect it's an offline
files issue. I turn that off on my shares, usually - at the very least, turn
it off for desktop users via group policy.
>
> This situation is very troubling. Is there a reason that this is
> happening and how do I resolve it? How is it they do not get the
> access denied message?
>
> Thanks for you help.
>
> David
 
Re: My Documents Flder Redirection glitch

Hi Lanwench,

We do have offline files enabled. These are mobile users who take their
laptops home. They need access to their My Docs when they are disconnected
from our network.


"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...
> dcraige27 <dcraige27@discussions.microsoft.com> wrote:
>> We have our users configured in active directory with their home
>> directories mapped to \\server\share\username using drive letter P:.

>
> OT, but you don't need home directories if you're using folder
> redirection, btw. I've stopped doing that. I redirect My Documents, App
> Data, and Desktop to subfolders of \\server\share$\%username%\My
> Documents, \Desktop, \Application Data. You can still map a drive to My
> Documents in your login script
>
> net use p: "\\server\share$\%username%\My Documents"
>
>> We are using the proile tab of the users' properties. We use the
>> Home folder section of the profile tab as follows:
>> Connect P: to \\server\share\username
>>
>> We also have each users my documents redirected to the P:\My
>> Documents.
>> When the user browses to the \\server\share, they get access denied

>
> That's good, but you might as well hide the share to prevent browsing
> (append a $)
>
>> if they try to access another user's home folder, so we have
>> confirmed the permissions are correct.
>>
>> We have found 2 users in the past few weeks whose My Documents have
>> redirected to another user's My documents and they could open the
>> files.

>
> Did you witness this yourself?
> Do you have offline files enabled? (I wouldn't).
>
>> They never received any error message or access denied. If the user
>> logs off/on, their My Doccuments are mapped correctly.

>
> Event viewer & rsop.msc output might help.... I suspect it's an offline
> files issue. I turn that off on my shares, usually - at the very least,
> turn it off for desktop users via group policy.
>>
>> This situation is very troubling. Is there a reason that this is
>> happening and how do I resolve it? How is it they do not get the
>> access denied message?
>>
>> Thanks for you help.
>>
>> David

>
>
>
 
Re: My Documents Flder Redirection glitch

David <dcraige27**@**verizon**dot**net> wrote:
> Hi Lanwench,
>
> We do have offline files enabled. These are mobile users who take
> their laptops home. They need access to their My Docs when they are
> disconnected from our network.


OK - I actually use third party software and custom GPOs for this, but you
can use offline files. Just don't share laptops amongst users.
>
>
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...
>> dcraige27 <dcraige27@discussions.microsoft.com> wrote:
>>> We have our users configured in active directory with their home
>>> directories mapped to \\server\share\username using drive letter P:.

>>
>> OT, but you don't need home directories if you're using folder
>> redirection, btw. I've stopped doing that. I redirect My Documents,
>> App Data, and Desktop to subfolders of \\server\share$\%username%\My
>> Documents, \Desktop, \Application Data. You can still map a drive
>> to My Documents in your login script
>>
>> net use p: "\\server\share$\%username%\My Documents"
>>
>>> We are using the proile tab of the users' properties. We use the
>>> Home folder section of the profile tab as follows:
>>> Connect P: to \\server\share\username
>>>
>>> We also have each users my documents redirected to the P:\My
>>> Documents.
>>> When the user browses to the \\server\share, they get access denied

>>
>> That's good, but you might as well hide the share to prevent browsing
>> (append a $)
>>
>>> if they try to access another user's home folder, so we have
>>> confirmed the permissions are correct.
>>>
>>> We have found 2 users in the past few weeks whose My Documents have
>>> redirected to another user's My documents and they could open the
>>> files.

>>
>> Did you witness this yourself?
>> Do you have offline files enabled? (I wouldn't).
>>
>>> They never received any error message or access denied. If the user
>>> logs off/on, their My Doccuments are mapped correctly.

>>
>> Event viewer & rsop.msc output might help.... I suspect it's an
>> offline files issue. I turn that off on my shares, usually - at the
>> very least, turn it off for desktop users via group policy.
>>>
>>> This situation is very troubling. Is there a reason that this is
>>> happening and how do I resolve it? How is it they do not get the
>>> access denied message?
>>>
>>> Thanks for you help.
>>>
>>> David
 
Re: My Documents Flder Redirection glitch

none of our users share laptops. We configure the folder redirection and
the offline sync directly on the users' laptops.

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl...
> David <dcraige27**@**verizon**dot**net> wrote:
>> Hi Lanwench,
>>
>> We do have offline files enabled. These are mobile users who take
>> their laptops home. They need access to their My Docs when they are
>> disconnected from our network.

>
> OK - I actually use third party software and custom GPOs for this, but you
> can use offline files. Just don't share laptops amongst users.
>>
>>
>> "Lanwench [MVP - Exchange]"
>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...
>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote:
>>>> We have our users configured in active directory with their home
>>>> directories mapped to \\server\share\username using drive letter P:.
>>>
>>> OT, but you don't need home directories if you're using folder
>>> redirection, btw. I've stopped doing that. I redirect My Documents,
>>> App Data, and Desktop to subfolders of \\server\share$\%username%\My
>>> Documents, \Desktop, \Application Data. You can still map a drive
>>> to My Documents in your login script
>>>
>>> net use p: "\\server\share$\%username%\My Documents"
>>>
>>>> We are using the proile tab of the users' properties. We use the
>>>> Home folder section of the profile tab as follows:
>>>> Connect P: to \\server\share\username
>>>>
>>>> We also have each users my documents redirected to the P:\My
>>>> Documents.
>>>> When the user browses to the \\server\share, they get access denied
>>>
>>> That's good, but you might as well hide the share to prevent browsing
>>> (append a $)
>>>
>>>> if they try to access another user's home folder, so we have
>>>> confirmed the permissions are correct.
>>>>
>>>> We have found 2 users in the past few weeks whose My Documents have
>>>> redirected to another user's My documents and they could open the
>>>> files.
>>>
>>> Did you witness this yourself?
>>> Do you have offline files enabled? (I wouldn't).
>>>
>>>> They never received any error message or access denied. If the user
>>>> logs off/on, their My Doccuments are mapped correctly.
>>>
>>> Event viewer & rsop.msc output might help.... I suspect it's an
>>> offline files issue. I turn that off on my shares, usually - at the
>>> very least, turn it off for desktop users via group policy.
>>>>
>>>> This situation is very troubling. Is there a reason that this is
>>>> happening and how do I resolve it? How is it they do not get the
>>>> access denied message?
>>>>
>>>> Thanks for you help.
>>>>
>>>> David

>
>
>
 
Re: My Documents Flder Redirection glitch

David <dcraige27**@**verizon**dot**net> wrote:
> none of our users share laptops. We configure the folder redirection
> and the offline sync directly on the users' laptops.


Weird. When the user is seeing the other path, is it showing up as
\\server\share\otherusername when you right-click on the My Documents
shortcut on the desktop? How about in rsop.msc? Do you have "always wait for
network at computer startup and logon" enabled via group policy?

>
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl...
>> David <dcraige27**@**verizon**dot**net> wrote:
>>> Hi Lanwench,
>>>
>>> We do have offline files enabled. These are mobile users who take
>>> their laptops home. They need access to their My Docs when they are
>>> disconnected from our network.

>>
>> OK - I actually use third party software and custom GPOs for this,
>> but you can use offline files. Just don't share laptops amongst
>> users.
>>>
>>>
>>> "Lanwench [MVP - Exchange]"
>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>>> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...
>>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote:
>>>>> We have our users configured in active directory with their home
>>>>> directories mapped to \\server\share\username using drive letter
>>>>> P:.
>>>>
>>>> OT, but you don't need home directories if you're using folder
>>>> redirection, btw. I've stopped doing that. I redirect My Documents,
>>>> App Data, and Desktop to subfolders of
>>>> \\server\share$\%username%\My Documents, \Desktop, \Application
>>>> Data. You can still map a drive to My Documents in your login
>>>> script net use p: "\\server\share$\%username%\My Documents"
>>>>
>>>>> We are using the proile tab of the users' properties. We use the
>>>>> Home folder section of the profile tab as follows:
>>>>> Connect P: to \\server\share\username
>>>>>
>>>>> We also have each users my documents redirected to the P:\My
>>>>> Documents.
>>>>> When the user browses to the \\server\share, they get access
>>>>> denied
>>>>
>>>> That's good, but you might as well hide the share to prevent
>>>> browsing (append a $)
>>>>
>>>>> if they try to access another user's home folder, so we have
>>>>> confirmed the permissions are correct.
>>>>>
>>>>> We have found 2 users in the past few weeks whose My Documents
>>>>> have redirected to another user's My documents and they could
>>>>> open the files.
>>>>
>>>> Did you witness this yourself?
>>>> Do you have offline files enabled? (I wouldn't).
>>>>
>>>>> They never received any error message or access denied. If the
>>>>> user logs off/on, their My Doccuments are mapped correctly.
>>>>
>>>> Event viewer & rsop.msc output might help.... I suspect it's an
>>>> offline files issue. I turn that off on my shares, usually - at the
>>>> very least, turn it off for desktop users via group policy.
>>>>>
>>>>> This situation is very troubling. Is there a reason that this is
>>>>> happening and how do I resolve it? How is it they do not get the
>>>>> access denied message?
>>>>>
>>>>> Thanks for you help.
>>>>>
>>>>> David
 
Re: My Documents Flder Redirection glitch

I never checked the path listed in the properties of the My Docs desktop
shortcut neither did I check the rsop.msc. Didn't think of it but I will if
it happens again.

We don't have "always wait for network at computer startup and logon"
enabled via group policy. I've heard of this setting and was concerned it
would slow down our users login time. They complain about how long it takes
to startup their computers when there in the office compared to when they're
at home and not connected to our network. We have a gigabit LAN and all our
clients are 10/100 NICs or better. Will enabling this setting slow them
down considerably at startup?

Thanks for your help! Much appreciated.

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:#cQd4osEJHA.680@TK2MSFTNGP03.phx.gbl...
> David <dcraige27**@**verizon**dot**net> wrote:
>> none of our users share laptops. We configure the folder redirection
>> and the offline sync directly on the users' laptops.

>
> Weird. When the user is seeing the other path, is it showing up as
> \\server\share\otherusername when you right-click on the My Documents
> shortcut on the desktop? How about in rsop.msc? Do you have "always wait
> for network at computer startup and logon" enabled via group policy?
>
>>
>> "Lanwench [MVP - Exchange]"
>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>> message news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl...
>>> David <dcraige27**@**verizon**dot**net> wrote:
>>>> Hi Lanwench,
>>>>
>>>> We do have offline files enabled. These are mobile users who take
>>>> their laptops home. They need access to their My Docs when they are
>>>> disconnected from our network.
>>>
>>> OK - I actually use third party software and custom GPOs for this,
>>> but you can use offline files. Just don't share laptops amongst
>>> users.
>>>>
>>>>
>>>> "Lanwench [MVP - Exchange]"
>>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>>>> message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...
>>>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote:
>>>>>> We have our users configured in active directory with their home
>>>>>> directories mapped to \\server\share\username using drive letter
>>>>>> P:.
>>>>>
>>>>> OT, but you don't need home directories if you're using folder
>>>>> redirection, btw. I've stopped doing that. I redirect My Documents,
>>>>> App Data, and Desktop to subfolders of
>>>>> \\server\share$\%username%\My Documents, \Desktop, \Application
>>>>> Data. You can still map a drive to My Documents in your login
>>>>> script net use p: "\\server\share$\%username%\My Documents"
>>>>>
>>>>>> We are using the proile tab of the users' properties. We use the
>>>>>> Home folder section of the profile tab as follows:
>>>>>> Connect P: to \\server\share\username
>>>>>>
>>>>>> We also have each users my documents redirected to the P:\My
>>>>>> Documents.
>>>>>> When the user browses to the \\server\share, they get access
>>>>>> denied
>>>>>
>>>>> That's good, but you might as well hide the share to prevent
>>>>> browsing (append a $)
>>>>>
>>>>>> if they try to access another user's home folder, so we have
>>>>>> confirmed the permissions are correct.
>>>>>>
>>>>>> We have found 2 users in the past few weeks whose My Documents
>>>>>> have redirected to another user's My documents and they could
>>>>>> open the files.
>>>>>
>>>>> Did you witness this yourself?
>>>>> Do you have offline files enabled? (I wouldn't).
>>>>>
>>>>>> They never received any error message or access denied. If the
>>>>>> user logs off/on, their My Doccuments are mapped correctly.
>>>>>
>>>>> Event viewer & rsop.msc output might help.... I suspect it's an
>>>>> offline files issue. I turn that off on my shares, usually - at the
>>>>> very least, turn it off for desktop users via group policy.
>>>>>>
>>>>>> This situation is very troubling. Is there a reason that this is
>>>>>> happening and how do I resolve it? How is it they do not get the
>>>>>> access denied message?
>>>>>>
>>>>>> Thanks for you help.
>>>>>>
>>>>>> David

>
>
>
 
Re: My Documents Flder Redirection glitch

David <dcraige27**@**verizon**dot**net> wrote:
> I never checked the path listed in the properties of the My Docs
> desktop shortcut neither did I check the rsop.msc. Didn't think of
> it but I will if it happens again.
>
> We don't have "always wait for network at computer startup and logon"
> enabled via group policy. I've heard of this setting and was
> concerned it would slow down our users login time.


It shouldn't. It's part of my standard setup and as far as I'm concerned
should be enabled by default in a domain workstation, but ...

> They complain
> about how long it takes to startup their computers when there in the
> office compared to when they're at home and not connected to our
> network.


Event viewer may give you a clue there. You should get your hands on one of
the laptops and test this yourself, tho.

> We have a gigabit LAN and all our clients are 10/100 NICs
> or better. Will enabling this setting slow them down considerably at
> startup?


I really don't think it should. But you should play with this yourself on a
laptop to see.
>
> Thanks for your help! Much appreciated.


You're most welcome; hope it helps.
>
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:#cQd4osEJHA.680@TK2MSFTNGP03.phx.gbl...
>> David <dcraige27**@**verizon**dot**net> wrote:
>>> none of our users share laptops. We configure the folder
>>> redirection and the offline sync directly on the users' laptops.

>>
>> Weird. When the user is seeing the other path, is it showing up as
>> \\server\share\otherusername when you right-click on the My Documents
>> shortcut on the desktop? How about in rsop.msc? Do you have "always
>> wait for network at computer startup and logon" enabled via group
>> policy?
>>>
>>> "Lanwench [MVP - Exchange]"
>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>>> message news:evi4fErEJHA.3616@TK2MSFTNGP02.phx.gbl...
>>>> David <dcraige27**@**verizon**dot**net> wrote:
>>>>> Hi Lanwench,
>>>>>
>>>>> We do have offline files enabled. These are mobile users who take
>>>>> their laptops home. They need access to their My Docs when they
>>>>> are disconnected from our network.
>>>>
>>>> OK - I actually use third party software and custom GPOs for this,
>>>> but you can use offline files. Just don't share laptops amongst
>>>> users.
>>>>>
>>>>>
>>>>> "Lanwench [MVP - Exchange]"
>>>>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote
>>>>> in message news:eoXyxbpEJHA.4492@TK2MSFTNGP05.phx.gbl...
>>>>>> dcraige27 <dcraige27@discussions.microsoft.com> wrote:
>>>>>>> We have our users configured in active directory with their home
>>>>>>> directories mapped to \\server\share\username using drive letter
>>>>>>> P:.
>>>>>>
>>>>>> OT, but you don't need home directories if you're using folder
>>>>>> redirection, btw. I've stopped doing that. I redirect My
>>>>>> Documents, App Data, and Desktop to subfolders of
>>>>>> \\server\share$\%username%\My Documents, \Desktop, \Application
>>>>>> Data. You can still map a drive to My Documents in your login
>>>>>> script net use p: "\\server\share$\%username%\My Documents"
>>>>>>
>>>>>>> We are using the proile tab of the users' properties. We use
>>>>>>> the Home folder section of the profile tab as follows:
>>>>>>> Connect P: to \\server\share\username
>>>>>>>
>>>>>>> We also have each users my documents redirected to the P:\My
>>>>>>> Documents.
>>>>>>> When the user browses to the \\server\share, they get access
>>>>>>> denied
>>>>>>
>>>>>> That's good, but you might as well hide the share to prevent
>>>>>> browsing (append a $)
>>>>>>
>>>>>>> if they try to access another user's home folder, so we have
>>>>>>> confirmed the permissions are correct.
>>>>>>>
>>>>>>> We have found 2 users in the past few weeks whose My Documents
>>>>>>> have redirected to another user's My documents and they could
>>>>>>> open the files.
>>>>>>
>>>>>> Did you witness this yourself?
>>>>>> Do you have offline files enabled? (I wouldn't).
>>>>>>
>>>>>>> They never received any error message or access denied. If the
>>>>>>> user logs off/on, their My Doccuments are mapped correctly.
>>>>>>
>>>>>> Event viewer & rsop.msc output might help.... I suspect it's an
>>>>>> offline files issue. I turn that off on my shares, usually - at
>>>>>> the very least, turn it off for desktop users via group policy.
>>>>>>>
>>>>>>> This situation is very troubling. Is there a reason that this is
>>>>>>> happening and how do I resolve it? How is it they do not get
>>>>>>> the access denied message?
>>>>>>>
>>>>>>> Thanks for you help.
>>>>>>>
>>>>>>> David
 
Back
Top