1. On a domain controller, In AD Users and Computers, create a group for all users that will have folder redirection.

  2. Go onto your other server and install File and Storage Services.

  3. On your file server, go to server manager. Select File and Storage Services > Volumes > Shares. Select Tasks > New Share.

  4. In the Profile select SMB Share - Quick.

  5. Name the file share “Users$”

  6. On Other settings, select Enable access-based enumeration and Encrypt data access.

  7. Permissions > Customize Permissions > Disable Inheritance > Convert inherited permissions into explicit permissions on this object.

  8. Set permissions as show on the right.

  9. Create the share.

  10. Go back to the Domain Controller and select Group Policy Management.

  11. Create a GPO in this domain, and link it here at the top of the domain.

  12. Right click the GPO and clear Link Enabled.

  13. Click the GPO and in Scope > Security Filtering, remove authorized users. Add Folder Redirection Users group.

  14. In Delegation, add authenticated users with read permissions.

  15. Edit the GPO and go to Users Configurations > Windows Settings > Folder Redirection.

  16. Select folders you want redirected and right click the folder > properties.

  17. Setting is set to Basic.

  18. Target Folder Location is set to Create a folder for each user under the root path.

  19. Root Path will be the location of the share created in step 3. (i.e. \\FS01\Users$).

  20. In the settings page, deselect Grant the user exclusive rights to the desktop.

  21. Under Policy Removal, select Redirect the folder back to the local userprofile location when policy is removed.

  22. Select the GPO created and right click it and select Link Enabled.

  23. Confirm folder redirection by signing into a user account on a computer and running gpupdate /force in the command prompt