Hello again; Continuing the new sbs 03 server saga. A couple of questions for any experts out there.
I've configured folder redirection thru the wizard on the sbs 03 server. Tested and it works great! And I just followed the wizard.
1. What if I wanted to allow only some people to have this done? Cause the wizard seems to have a global effect - its turned on for everyone. I would guess that I would have to create and use a gpo?
2. Bigger question. I am in a small office of only 15 or 20 users. Some people log onto other's pcs once in a while. Well as I understand it, when they log into another pc, their "my documents" will be redirected again. Won't that overwrite the "my documents from their own pc? Since it was redirected as well. How can I make it so ONLY "my documents" from their OWN pc is redirected regardless of where else they may log in?
I still need for them to be able to logon to another pc besides their own.
i do believe you could then go into the SBS Redirection GPO and changed the authenticated users panel i think its called that anyhow its the bit with the users and groups in it what i did was deleted that and added each user or required group to it and it applied as i wanted it to
> Hello again; > Continuing the new sbs 03 server saga. > A couple of questions for any experts out there.
> I've configured folder redirection thru the wizard on the sbs 03 > server. Tested and it works great! > And I just followed the wizard.
> 1. What if I wanted to allow only some people to have this done? Cause > the wizard seems to have a global effect - its turned on for everyone. > I would guess that I would have to create and use a gpo?
> 2. Bigger question. I am in a small office of only 15 or 20 users. > Some people log onto other's pcs once in a while. Well as I understand > it, when they log into another pc, their "my documents" will be > redirected again. Won't that overwrite the "my documents from their > own pc? Since it was redirected as well. How can I make it so ONLY > "my documents" from their OWN pc is redirected regardless of where > else they may log in?
> I still need for them to be able to logon to another pc besides their > own.
> Hello again; > Continuing the new sbs 03 server saga. > A couple of questions for any experts out there.
> I've configured folder redirection thru the wizard on the sbs 03 > server. Tested and it works great! > And I just followed the wizard.
> 1. What if I wanted to allow only some people to have this done? Cause > the wizard seems to have a global effect - its turned on for everyone. > I would guess that I would have to create and use a gpo?
> 2. Bigger question. I am in a small office of only 15 or 20 users. > Some people log onto other's pcs once in a while. Well as I understand > it, when they log into another pc, their "my documents" will be > redirected again. Won't that overwrite the "my documents from their > own pc? Since it was redirected as well. How can I make it so ONLY > "my documents" from their OWN pc is redirected regardless of where > else they may log in?
> I still need for them to be able to logon to another pc besides their > own.
>> I've configured folder redirection thru the wizard on the sbs 03 >> server. Tested and it works great! >> And I just followed the wizard.
>> 1. What if I wanted to allow only some people to have this done? Cause >> the wizard seems to have a global effect - its turned on for everyone. >> I would guess that I would have to create and use a gpo?
>> 2. Bigger question. I am in a small office of only 15 or 20 users. >> Some people log onto other's pcs once in a while. Well as I understand >> it, when they log into another pc, their "my documents" will be >> redirected again. Won't that overwrite the "my documents from their >> own pc? Since it was redirected as well. How can I make it so ONLY >> "my documents" from their OWN pc is redirected regardless of where >> else they may log in?
>> I still need for them to be able to logon to another pc besides their >> own.
TravisF <tdqh1...@gmail.com> wrote: > Hello again; > Continuing the new sbs 03 server saga. > A couple of questions for any experts out there.
> I've configured folder redirection thru the wizard on the sbs 03 > server. Tested and it works great! > And I just followed the wizard.
> 1. What if I wanted to allow only some people to have this done? Cause > the wizard seems to have a global effect - its turned on for everyone. > I would guess that I would have to create and use a gpo?
> 2. Bigger question. I am in a small office of only 15 or 20 users. > Some people log onto other's pcs once in a while. Well as I understand > it, when they log into another pc, their "my documents" will be > redirected again. Won't that overwrite the "my documents from their > own pc? Since it was redirected as well. How can I make it so ONLY > "my documents" from their OWN pc is redirected regardless of where > else they may log in?
> I still need for them to be able to logon to another pc besides their > own.
> Thanks; > Travis
Why would you not want all users to make use of folder redirection? This is a must, in my book - at the very least for My Documents.
I generally set this up in my own custom Companyname Desktop Policy - and I do not enable offline file use. I don't use the default/built in GPO for this.
If you have laptops, you can allow them to use offline files - but they should still use folder redirection. Without that, you have no way to ensure that all company data goes on the server where it belongs.
<lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: > TravisF <tdqh1...@gmail.com> wrote: > > Hello again; > > Continuing the new sbs 03 server saga. > > A couple of questions for any experts out there.
> > I've configured folder redirection thru the wizard on the sbs 03 > > server. Tested and it works great! > > And I just followed the wizard.
> > 1. What if I wanted to allow only some people to have this done? Cause > > the wizard seems to have a global effect - its turned on for everyone. > > I would guess that I would have to create and use a gpo?
> > 2. Bigger question. I am in a small office of only 15 or 20 users. > > Some people log onto other's pcs once in a while. Well as I understand > > it, when they log into another pc, their "my documents" will be > > redirected again. Won't that overwrite the "my documents from their > > own pc? Since it was redirected as well. How can I make it so ONLY > > "my documents" from their OWN pc is redirected regardless of where > > else they may log in?
> > I still need for them to be able to logon to another pc besides their > > own.
> > Thanks; > > Travis
> Why would you not want all users to make use of folder redirection? This is > a must, in my book - at the very least for My Documents.
> I generally set this up in my own custom Companyname Desktop Policy - and I > do not enable offline file use. I don't use the default/built in GPO for > this.
> If you have laptops, you can allow them to use offline files - but they > should still use folder redirection. Without that, you have no way to ensure > that all company data goes on the server where it belongs.- Hide quoted text -
> - Show quoted text -
Well I've been playin around with it all day. Doesn't seem to be an issue really. The "my doc" doesn't "overwrite" the other on the server if you logon to a different pc like I thought it might. It just "adds to it" As well someone mentioned in another post that its a security risk on the pc. That doesn't seem to be the case either. If userB logs on after userA, userB does not see a "my doc" under \docs and settings belonging to userA - even if he's (userB) administrator. So it must cache it elsewhere and encrypt it? I did not use efs. Logged in as userB , I searched (even hidden files) and I can find files belonging to userA which I know where there. This is a good thing.
You guys mentioned offline file use. I don't see how they are separated with the use of folder redir - an sbs 03 anyway. I'm using offline with redir because , well if the server goes down, they wouldn't even know it - for "my doc" use anyway. Comments welcomed. Thanks Travis
Personally, I like the sync option. I've tested this with a recently created document, and verified that if the server (network, whatever) goes down shortly after I've created or edited a document, my changes are reflected in the offline cache. A few people have had trouble with offline files, but I've found it to be generally reliable. While acknowledging the views of those who disagree, I think the pros well outweigh the cons on this.
The one negative is the all-or-nothing aspect. We have several shared laptops in our conference rooms, and everyone's redirected documents end up cached on those. You're right that the users can't see each other's cached documents, so I don't really view it as a security or privacy risk, but the drive space issue still applies. You're right that you can encrypt the offline files. Open Windows Explorer and go to Tools -> Folder Options -> Offline Files and check the box.
The cached files are in a super-secret hidden folder, c:\windows\csc, and they're not in the native file formats so you can't read them easily. Since the system controls these (you access them through that page in Explorer that I mentioned earlier), only the Administrators group has any rights on that folder at all.
IMO the one answer to both the question of why would you not want to redirect a given user's documents, and why would you not want to sync, is when you get a user with a ton of data. For example, I've got someone with about 15 GB in his My Docs. I don't redirect him because he's against it (and backs up his data very well without involving me), and I don't want to have to deal with potential issues. I know redirection will work fine with 15 GB of data, but I've got my doubts about sync.
> On Jun 29, 12:54 pm, "Lanwench [MVP - Exchange]" > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: >> TravisF <tdqh1...@gmail.com> wrote: >> > Hello again; >> > Continuing the new sbs 03 server saga. >> > A couple of questions for any experts out there.
>> > I've configured folder redirection thru the wizard on the sbs 03 >> > server. Tested and it works great! >> > And I just followed the wizard.
>> > 1. What if I wanted to allow only some people to have this done? Cause >> > the wizard seems to have a global effect - its turned on for everyone. >> > I would guess that I would have to create and use a gpo?
>> > 2. Bigger question. I am in a small office of only 15 or 20 users. >> > Some people log onto other's pcs once in a while. Well as I understand >> > it, when they log into another pc, their "my documents" will be >> > redirected again. Won't that overwrite the "my documents from their >> > own pc? Since it was redirected as well. How can I make it so ONLY >> > "my documents" from their OWN pc is redirected regardless of where >> > else they may log in?
>> > I still need for them to be able to logon to another pc besides their >> > own.
>> > Thanks; >> > Travis
>> Why would you not want all users to make use of folder redirection? This >> is >> a must, in my book - at the very least for My Documents.
>> I generally set this up in my own custom Companyname Desktop Policy - and >> I >> do not enable offline file use. I don't use the default/built in GPO for >> this.
>> If you have laptops, you can allow them to use offline files - but they >> should still use folder redirection. Without that, you have no way to >> ensure >> that all company data goes on the server where it belongs.- Hide quoted >> text -
>> - Show quoted text -
> Well I've been playin around with it all day. > Doesn't seem to be an issue really. > The "my doc" doesn't "overwrite" the other on the server if you logon > to a different pc like I thought it might. It just "adds to it" > As well someone mentioned in another post that its a security risk on > the pc. That doesn't seem to be the case either. > If userB logs on after userA, userB does not see a "my doc" under > \docs and settings belonging to userA - even if he's (userB) > administrator. > So it must cache it elsewhere and encrypt it? I did not use efs. > Logged in as userB , I searched (even hidden files) and I can find > files belonging to userA which I know where there. This is a good > thing.
> You guys mentioned offline file use. I don't see how they are > separated with the use of folder redir - an sbs 03 anyway. > I'm using offline with redir because , well if the server goes down, > they wouldn't even know it - for "my doc" use anyway. > Comments welcomed. > Thanks > Travis
<gwdib...@NOSPAM.frontiernet.net> wrote: > Personally, I like the sync option. I've tested this with a recently > created document, and verified that if the server (network, whatever) goes > down shortly after I've created or edited a document, my changes are > reflected in the offline cache. A few people have had trouble with offline > files, but I've found it to be generally reliable. While acknowledging the > views of those who disagree, I think the pros well outweigh the cons on > this.
> The one negative is the all-or-nothing aspect. We have several shared > laptops in our conference rooms, and everyone's redirected documents end up > cached on those. You're right that the users can't see each other's cached > documents, so I don't really view it as a security or privacy risk, but the > drive space issue still applies. You're right that you can encrypt the > offline files. Open Windows Explorer and go to Tools -> Folder Options -> > Offline Files and check the box.
> The cached files are in a super-secret hidden folder, c:\windows\csc, and > they're not in the native file formats so you can't read them easily. Since > the system controls these (you access them through that page in Explorer > that I mentioned earlier), only the Administrators group has any rights on > that folder at all.
> IMO the one answer to both the question of why would you not want to > redirect a given user's documents, and why would you not want to sync, is > when you get a user with a ton of data. For example, I've got someone with > about 15 GB in his My Docs. I don't redirect him because he's against it > (and backs up his data very well without involving me), and I don't want to > have to deal with potential issues. I know redirection will work fine with > 15 GB of data, but I've got my doubts about sync.
> > On Jun 29, 12:54 pm, "Lanwench [MVP - Exchange]" > > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: > >>TravisF<tdqh1...@gmail.com> wrote: > >> > Hello again; > >> > Continuing the new sbs 03 server saga. > >> > A couple of questions for any experts out there.
> >> > I've configured folder redirection thru the wizard on the sbs 03 > >> > server. Tested and it works great! > >> > And I just followed the wizard.
> >> > 1. What if I wanted to allow only some people to have this done? Cause > >> > the wizard seems to have a global effect - its turned on for everyone. > >> > I would guess that I would have to create and use a gpo?
> >> > 2. Bigger question. I am in a small office of only 15 or 20 users. > >> > Some people log onto other's pcs once in a while. Well as I understand > >> > it, when they log into another pc, their "my documents" will be > >> > redirected again. Won't that overwrite the "my documents from their > >> > own pc? Since it was redirected as well. How can I make it so ONLY > >> > "my documents" from their OWN pc is redirected regardless of where > >> > else they may log in?
> >> > I still need for them to be able to logon to another pc besides their > >> > own.
> >> > Thanks; > >> > Travis
> >> Why would you not want all users to make use of folder redirection? This > >> is > >> a must, in my book - at the very least for My Documents.
> >> I generally set this up in my own custom Companyname Desktop Policy - and > >> I > >> do not enable offline file use. I don't use the default/built in GPO for > >> this.
> >> If you have laptops, you can allow them to use offline files - but they > >> should still use folder redirection. Without that, you have no way to > >> ensure > >> that all company data goes on the server where it belongs.- Hide quoted > >> text -
> >> - Show quoted text -
> > Well I've been playin around with it all day. > > Doesn't seem to be an issue really. > > The "my doc" doesn't "overwrite" the other on the server if you logon > > to a different pc like I thought it might. It just "adds to it" > > As well someone mentioned in another post that its a security risk on > > the pc. That doesn't seem to be the case either. > > If userB logs on after userA, userB does not see a "my doc" under > > \docs and settings belonging to userA - even if he's (userB) > > administrator. > > So it must cache it elsewhere and encrypt it? I did not use efs. > > Logged in as userB , I searched (even hidden files) and I can find > > files belonging to userA which I know where there. This is a good > > thing.
> > You guys mentioned offline file use. I don't see how they are > > separated with the use of folder redir - an sbs 03 anyway. > > I'm using offline with redir because , well if the server goes down, > > they wouldn't even know it - for "my doc" use anyway. > > Comments welcomed. > > Thanks > > Travis
Aha ! yes that makes more sense now. Thanks! and it rings a bell about \csc folder - I remember something about that now. So it seems that even if userB is local admin he can't see userA's locally cached files. And so it should work that way as well - I just needed to verify it. What I've done so far is simply used sbs 03's folder redirection wizard for my docs and it works fine. Too bad there's not a way in there to limit how that's done i.e ONLY have userA redirect his \docs and setting on his OWN pc when he logs in. So if he logs in somewhere else, his \docs and setting are NOT redirected unless he wants it that way. Of course most of the time the user will be using his own pc anyway. I guess I could play around with a fancy gpo. But its probably not worth it. So its not a big deal either way. I just wanted to make absolutely sure that if he did logon to the 2nd pc, then his servers' \doc and settings were not overwritten or affected by the 2nd pcs \docs and setting - it would be pretty stupid if that were the case I guess! cause when he logged back onto his own pc, the whole thing would have to start over!
So you think that a large "my docs" (u mentioned 15gb) might be troublesome with syncing? Hmmm I have some people that might be the same. I wonder is there a recommended limit of sorts? I should check I guess. Thanks again!
If you want to research how to get GPOs to apply only on certain computers, that's not something I've ever played with, but the term is "loopback processing." That should give you a starting point if nothing else.
On the 15 GB topic, I just think there are often problems moving that volume of data around. It seems like you'd be inviting trouble - for example, offline file limits don't apply to folders that are synched administratively (as opposed to by a user-initiated setting). So what happens if the guy with 15 GB of data logs in at a PC with 12 GB of free space? And how long is it going to take to sync that volume of data, even assuming plenty of free space?
It's nothing I've ever tried, so I'm not sure there would be any problem at all, but I can see a lot of potential issues that call for caution.
BTW, I'm not sure I worded my last post correctly. If user b is a local admin, he can see user a's cached files in the regular View Files interface from Folder Options -> Offline Files.
> On Jun 29, 4:59 pm, "Dave Nickason [SBS MVP]" > <gwdib...@NOSPAM.frontiernet.net> wrote: >> Personally, I like the sync option. I've tested this with a recently >> created document, and verified that if the server (network, whatever) >> goes >> down shortly after I've created or edited a document, my changes are >> reflected in the offline cache. A few people have had trouble with >> offline >> files, but I've found it to be generally reliable. While acknowledging >> the >> views of those who disagree, I think the pros well outweigh the cons on >> this.
>> The one negative is the all-or-nothing aspect. We have several shared >> laptops in our conference rooms, and everyone's redirected documents end >> up >> cached on those. You're right that the users can't see each other's >> cached >> documents, so I don't really view it as a security or privacy risk, but >> the >> drive space issue still applies. You're right that you can encrypt the >> offline files. Open Windows Explorer and go to Tools -> Folder >> Options -> >> Offline Files and check the box.
>> The cached files are in a super-secret hidden folder, c:\windows\csc, and >> they're not in the native file formats so you can't read them easily. >> Since >> the system controls these (you access them through that page in Explorer >> that I mentioned earlier), only the Administrators group has any rights >> on >> that folder at all.
>> IMO the one answer to both the question of why would you not want to >> redirect a given user's documents, and why would you not want to sync, is >> when you get a user with a ton of data. For example, I've got someone >> with >> about 15 GB in his My Docs. I don't redirect him because he's against it >> (and backs up his data very well without involving me), and I don't want >> to >> have to deal with potential issues. I know redirection will work fine >> with >> 15 GB of data, but I've got my doubts about sync.
>> "TravisF" <tdqh1...@gmail.com> wrote in message
>> > On Jun 29, 12:54 pm, "Lanwench [MVP - Exchange]" >> > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: >> >>TravisF<tdqh1...@gmail.com> wrote: >> >> > Hello again; >> >> > Continuing the new sbs 03 server saga. >> >> > A couple of questions for any experts out there.
>> >> > I've configured folder redirection thru the wizard on the sbs 03 >> >> > server. Tested and it works great! >> >> > And I just followed the wizard.
>> >> > 1. What if I wanted to allow only some people to have this done? >> >> > Cause >> >> > the wizard seems to have a global effect - its turned on for >> >> > everyone. >> >> > I would guess that I would have to create and use a gpo?
>> >> > 2. Bigger question. I am in a small office of only 15 or 20 users. >> >> > Some people log onto other's pcs once in a while. Well as I >> >> > understand >> >> > it, when they log into another pc, their "my documents" will be >> >> > redirected again. Won't that overwrite the "my documents from their >> >> > own pc? Since it was redirected as well. How can I make it so ONLY >> >> > "my documents" from their OWN pc is redirected regardless of where >> >> > else they may log in?
>> >> > I still need for them to be able to logon to another pc besides >> >> > their >> >> > own.
>> >> > Thanks; >> >> > Travis
>> >> Why would you not want all users to make use of folder redirection? >> >> This >> >> is >> >> a must, in my book - at the very least for My Documents.
>> >> I generally set this up in my own custom Companyname Desktop Policy - >> >> and >> >> I >> >> do not enable offline file use. I don't use the default/built in GPO >> >> for >> >> this.
>> >> If you have laptops, you can allow them to use offline files - but >> >> they >> >> should still use folder redirection. Without that, you have no way to >> >> ensure >> >> that all company data goes on the server where it belongs.- Hide >> >> quoted >> >> text -
>> >> - Show quoted text -
>> > Well I've been playin around with it all day. >> > Doesn't seem to be an issue really. >> > The "my doc" doesn't "overwrite" the other on the server if you logon >> > to a different pc like I thought it might. It just "adds to it" >> > As well someone mentioned in another post that its a security risk on >> > the pc. That doesn't seem to be the case either. >> > If userB logs on after userA, userB does not see a "my doc" under >> > \docs and settings belonging to userA - even if he's (userB) >> > administrator. >> > So it must cache it elsewhere and encrypt it? I did not use efs. >> > Logged in as userB , I searched (even hidden files) and I can find >> > files belonging to userA which I know where there. This is a good >> > thing.
>> > You guys mentioned offline file use. I don't see how they are >> > separated with the use of folder redir - an sbs 03 anyway. >> > I'm using offline with redir because , well if the server goes down, >> > they wouldn't even know it - for "my doc" use anyway. >> > Comments welcomed. >> > Thanks >> > Travis
> Aha ! yes that makes more sense now. Thanks! and it rings a bell about > \csc folder - I remember something about that now. > So it seems that even if userB is local admin he can't see userA's > locally cached files. And so it should work that way as well - I just > needed to verify it. > What I've done so far is simply used sbs 03's folder redirection > wizard for my docs and it works fine. > Too bad there's not a way in there to limit how that's done i.e ONLY > have userA redirect his \docs and setting on his OWN pc when he logs > in. So if he logs in somewhere else, his \docs and setting are NOT > redirected unless he wants it that way. Of course most of the time the > user will be using his own pc anyway. I guess I could play around with > a fancy gpo. But its probably not worth it. > So its not a big deal either way. I just wanted to make absolutely > sure that if he did logon to the 2nd pc, then his servers' \doc and > settings were not overwritten or affected by the 2nd pcs \docs and > setting - it would be pretty stupid if that were the case I guess! > cause when he logged back onto his own pc, the whole thing would have > to start over!
> So you think that a large "my docs" (u mentioned 15gb) might be > troublesome with syncing? > Hmmm I have some people that might be the same. I wonder is there a > recommended limit of sorts? I should check I guess. Thanks again!
I'm half asleep and I forgot my glasses. Anyway, I just woke up to the fact that we've got two conversations going on this topic. See my post in the other thread about local admins being able to see everyone's cached files. Short answer - as Les said, admins can see everything.
> On Jun 29, 4:59 pm, "Dave Nickason [SBS MVP]" > <gwdib...@NOSPAM.frontiernet.net> wrote: >> Personally, I like the sync option. I've tested this with a recently >> created document, and verified that if the server (network, whatever) >> goes >> down shortly after I've created or edited a document, my changes are >> reflected in the offline cache. A few people have had trouble with >> offline >> files, but I've found it to be generally reliable. While acknowledging >> the >> views of those who disagree, I think the pros well outweigh the cons on >> this.
>> The one negative is the all-or-nothing aspect. We have several shared >> laptops in our conference rooms, and everyone's redirected documents end >> up >> cached on those. You're right that the users can't see each other's >> cached >> documents, so I don't really view it as a security or privacy risk, but >> the >> drive space issue still applies. You're right that you can encrypt the >> offline files. Open Windows Explorer and go to Tools -> Folder >> Options -> >> Offline Files and check the box.
>> The cached files are in a super-secret hidden folder, c:\windows\csc, and >> they're not in the native file formats so you can't read them easily. >> Since >> the system controls these (you access them through that page in Explorer >> that I mentioned earlier), only the Administrators group has any rights >> on >> that folder at all.
>> IMO the one answer to both the question of why would you not want to >> redirect a given user's documents, and why would you not want to sync, is >> when you get a user with a ton of data. For example, I've got someone >> with >> about 15 GB in his My Docs. I don't redirect him because he's against it >> (and backs up his data very well without involving me), and I don't want >> to >> have to deal with potential issues. I know redirection will work fine >> with >> 15 GB of data, but I've got my doubts about sync.
>> "TravisF" <tdqh1...@gmail.com> wrote in message
>> > On Jun 29, 12:54 pm, "Lanwench [MVP - Exchange]" >> > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: >> >>TravisF<tdqh1...@gmail.com> wrote: >> >> > Hello again; >> >> > Continuing the new sbs 03 server saga. >> >> > A couple of questions for any experts out there.
>> >> > I've configured folder redirection thru the wizard on the sbs 03 >> >> > server. Tested and it works great! >> >> > And I just followed the wizard.
>> >> > 1. What if I wanted to allow only some people to have this done? >> >> > Cause >> >> > the wizard seems to have a global effect - its turned on for >> >> > everyone. >> >> > I would guess that I would have to create and use a gpo?
>> >> > 2. Bigger question. I am in a small office of only 15 or 20 users. >> >> > Some people log onto other's pcs once in a while. Well as I >> >> > understand >> >> > it, when they log into another pc, their "my documents" will be >> >> > redirected again. Won't that overwrite the "my documents from their >> >> > own pc? Since it was redirected as well. How can I make it so ONLY >> >> > "my documents" from their OWN pc is redirected regardless of where >> >> > else they may log in?
>> >> > I still need for them to be able to logon to another pc besides >> >> > their >> >> > own.
>> >> > Thanks; >> >> > Travis
>> >> Why would you not want all users to make use of folder redirection? >> >> This >> >> is >> >> a must, in my book - at the very least for My Documents.
>> >> I generally set this up in my own custom Companyname Desktop Policy - >> >> and >> >> I >> >> do not enable offline file use. I don't use the default/built in GPO >> >> for >> >> this.
>> >> If you have laptops, you can allow them to use offline files - but >> >> they >> >> should still use folder redirection. Without that, you have no way to >> >> ensure >> >> that all company data goes on the server where it belongs.- Hide >> >> quoted >> >> text -
>> >> - Show quoted text -
>> > Well I've been playin around with it all day. >> > Doesn't seem to be an issue really. >> > The "my doc" doesn't "overwrite" the other on the server if you logon >> > to a different pc like I thought it might. It just "adds to it" >> > As well someone mentioned in another post that its a security risk on >> > the pc. That doesn't seem to be the case either. >> > If userB logs on after userA, userB does not see a "my doc" under >> > \docs and settings belonging to userA - even if he's (userB) >> > administrator. >> > So it must cache it elsewhere and encrypt it? I did not use efs. >> > Logged in as userB , I searched (even hidden files) and I can find >> > files belonging to userA which I know where there. This is a good >> > thing.
>> > You guys mentioned offline file use. I don't see how they are >> > separated with the use of folder redir - an sbs 03 anyway. >> > I'm using offline with redir because , well if the server goes down, >> > they wouldn't even know it - for "my doc" use anyway. >> > Comments welcomed. >> > Thanks >> > Travis
> Aha ! yes that makes more sense now. Thanks! and it rings a bell about > \csc folder - I remember something about that now. > So it seems that even if userB is local admin he can't see userA's > locally cached files. And so it should work that way as well - I just > needed to verify it. > What I've done so far is simply used sbs 03's folder redirection > wizard for my docs and it works fine. > Too bad there's not a way in there to limit how that's done i.e ONLY > have userA redirect his \docs and setting on his OWN pc when he logs > in. So if he logs in somewhere else, his \docs and setting are NOT > redirected unless he wants it that way. Of course most of the time the > user will be using his own pc anyway. I guess I could play around with > a fancy gpo. But its probably not worth it. > So its not a big deal either way. I just wanted to make absolutely > sure that if he did logon to the 2nd pc, then his servers' \doc and > settings were not overwritten or affected by the 2nd pcs \docs and > setting - it would be pretty stupid if that were the case I guess! > cause when he logged back onto his own pc, the whole thing would have > to start over!
> So you think that a large "my docs" (u mentioned 15gb) might be > troublesome with syncing? > Hmmm I have some people that might be the same. I wonder is there a > recommended limit of sorts? I should check I guess. Thanks again!
|
