Folder Redirection Best Practices

By Author: iris
Total Articles: 286
Comment this article

The following are the best practices for sy0-201 security implementing folder redirection:
Allow the system to create the folders If you create the folders yourself, they may not have the correct permissions set.
Use fully qualified UNC paths, for example: \\servername\sharename Although paths like C:\Foldername can be used, it is not advisable because the path might not exist on the target computer.

If you use a UNC path with more than 260 characters, folder redirection fails because the path in truncated.
Accept defaults In general, accept the default folder redirection settings.
Place the My Pictures folder in the My Documents folder This is advisable unless there is a compelling reason not to, such as server scalability.
Consider what will happen if the policy is removed Keep in mind the behavior your folder redirection policies will have if the policy is removed, as described in the "Policy Removal Considerations" section.
Do not redirect My Documents to the home folder unless you have already deployed home directories ...
... in your organization Folder redirection to the home directory offers less security than standard folder redirection and is offered comptia security certification only for backward compatibility. If you redirect My Documents to the home directory, and if your users log on to the domain via Terminal Server clients, then don't specify a separate Terminal Services Home Directory.
Enable Offline Files In the event of a network failure or for users who use portable computers, users must be able to access the information in redirected folders.
There are two ways to set up folder redirection:
Redirect special folders to one location for everyone in the site, domain, or OU.Redirect special folders to a location according to security group membership.
The Offline Files feature provides users with access to redirected folders even when they are not connected to the network. If you use redirected folders of any type, it is recommended that you set up Offline Files.
You can also specify items to be synchronized when a computer is idle by using the On Idle tab in the Synchronization Settings dialog box. By choosing when offline items are synchronized, you can better manage the work on your computer and on the network. Finally, you can schedule when synchronization occurs by using the Scheduled Syn?chronization Wizard, available from the Scheduled CCNA exam tab in the Synchronization Settings dialog box.