SBS 2008 and SBS 2011 Folder Redirection To A Separate Server

Besides tweaking the SBS Folder Redirection Policy to point to the standalone server and the share that will be used as base for the user’s root redirected folder, we need to make sure that the permissions on the base folder are set properly before things start to work.

Unfortunately the base NTFS permission set that the SBS server sets to its own folder redirection share will not work when we are dealing with a separate server.

So, what we need to do is the following:

• CREATOR OWNER
• Subfolders and files only: FULL
• 
• Domain Users
• Add: Create Folders/Append Data to the default permissions set
• 
• 

With those permissions set at the NTFS (Share = Everybody: FULL) folder redirection should work without a hitch.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer

SBS - Windows Server 2003 Access-based Enumeration

When there is a need to have folders in the general company share hidden from users with no permission to access them, we use Windows Server 2003 Access-based Enumeration.


This tool installs onto the server, and uses the Security ACL permissions to determine who is allowed to see the folder listed in their Windows Explorer or command line directory listing.


When installing the tool, one has the choice to enable enumeration on all shares, or choose to enable it on individual shares later on. I always choose the manual option.


Once installed, you will find a new tab in your folder properties window.




Once clicked on, you are presented with the option to enable enumeration on the folder.

Once enabled, only those users that have permission to access the folder will see it in their Explorer. This goes for folders listed in the Network Neigbourhood/My Network Places listings on the server.

The documentation can be found here on Microsoft's site.

The actual download can be found here. Note the different downloads for different processor architectures.

Happy SBSing!

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists