As I mentioned in my previous blog post there is a new Group Policy setting called â€œRedirect folders on primary computers onlyâ€. As the descriptions says this â€policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room computer or on a computer in a remote office.â€. Problem is there is no UI in Active Directory Users and Computers to configure a primary computer on a users account. So below I show you how you can configure a primary computer on a users account to allow this setting to work.
Update: Microsoft has now released a blog post about this feature as well at Configuring Primary Computers for Folder Redirection and Roaming Profiles in Windows Server â€œ8â€ Beta
Prerequisite: The Domain must have the Windows Sever 8 Schema applied to you domain for this to work.
Step 1. Launch Active Directory Administrative Console and open the properties of the computer your want to make a â€œPrimary Computerâ€.
Step 2. Click on â€œExtensionsâ€ on the left and then on the â€œAttribute Editorâ€ and then click on â€œdistinguishedNameâ€ then the â€œViewâ€ button and press â€œCTRL-Câ€ or copy the value.
Step 3. Now navigate the user account you want to assign a â€œPrimary Computerâ€ and go to the â€œExtensionsâ€ option and then open the â€œAttribute Editorâ€ select the â€œmsDS-PrimaryComputerâ€ and click â€œEditâ€ then paste the Distinguished Name of the computer you copied in step 2 into the â€œValue to add:â€ field and click â€œAddâ€.
Note: This allows multiple values so the users can be configured to have multiple â€œPrimary Computersâ€.
Now when the user logs onto their primary computer they will get their redirected folder when they logon to the â€œPrimary Computerâ€.
But not when they logon to another computerâ€¦
Note: If you are wondering why folder redirection is (or is not) being applied if this setting is enabled be aware that the Group Policy Results Report will NOT tell you why (or why not) that folder redirection is applied (see below).
Primary Computer with Folder Redirection
Non-Primary Computer without Folder Redirection