{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/", "slug": "dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data", "url": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/" }, "title": "Assign primary computers before expanding roaming user data", "summary": "How should primary-computer assignments constrain Folder Redirection and roaming profiles?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:16:31+00:00", "modified_at": "2026-09-08T18:17:14+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 2, "word_count": 233, "potentially_affected": "Use this review when users have designated workstations and the organization wants to limit where roaming data is applied.", "dse_recommendation": "Create a user-to-computer mapping that the business owner can review.", "primary_source": { "name": "Deploy primary computers for Folder Redirection and Roaming User Profiles", "url": "https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-primary-computers", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft describes primary-computer support as a way to control which computers use Folder Redirection and Roaming User Profiles. Administrators designate a user’s primary computers through the msDs-PrimaryComputer attribute using the computers’ distinguished names. For a new deployment, Microsoft recommends establishing this support before enabling the redirection or profile policies, so user data is not first copied to nonprimary computers. Microsoft requires pairing primary-computer support for Roaming User Profiles with primary-computer support for Folder Redirection. Microsoft documentation.

\n

Applicability

\n

Use this review when users have designated workstations and the organization wants to limit where roaming data is applied. Identify users, approved computers, and the owner responsible for changes to those assignments.

\n

DSE recommendation

\n

Create a user-to-computer mapping that the business owner can review. Include shared workstations, replacement devices, and temporary assignments in that decision. Test the intended order of policy deployment before expanding it. Define how support staff will update assignments when hardware changes and how they will recognize a missing or incorrect primary-computer entry.

\n

Verification

\n

Test a representative user on both an assigned primary computer and a deliberately nonprimary one. Compare folder and profile behavior with the approved mapping. Check a controlled device-replacement scenario and record the assignment update. Resolve unexpected data placement before enabling the policy for additional users or retiring their old workstations.

\n

Official references

\n

Microsoft Learn: Deploy primary computers for Folder Redirection and Roaming User Profiles. Source reviewed September 8, 2026.

", "content_text": "Source facts\nMicrosoft describes primary-computer support as a way to control which computers use Folder Redirection and Roaming User Profiles. Administrators designate a user’s primary computers through the msDs-PrimaryComputer attribute using the computers’ distinguished names. For a new deployment, Microsoft recommends establishing this support before enabling the redirection or profile policies, so user data is not first copied to nonprimary computers. Microsoft requires pairing primary-computer support for Roaming User Profiles with primary-computer support for Folder Redirection. Microsoft documentation.\nApplicability\nUse this review when users have designated workstations and the organization wants to limit where roaming data is applied. Identify users, approved computers, and the owner responsible for changes to those assignments.\nDSE recommendation\nCreate a user-to-computer mapping that the business owner can review. Include shared workstations, replacement devices, and temporary assignments in that decision. Test the intended order of policy deployment before expanding it. Define how support staff will update assignments when hardware changes and how they will recognize a missing or incorrect primary-computer entry.\nVerification\nTest a representative user on both an assigned primary computer and a deliberately nonprimary one. Compare folder and profile behavior with the approved mapping. Check a controlled device-replacement scenario and record the assignment update. Resolve unexpected data placement before enabling the policy for additional users or retiring their old workstations.\nOfficial references\nMicrosoft Learn: Deploy primary computers for Folder Redirection and Roaming User Profiles. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nMicrosoft describes primary-computer support as a way to control which computers use Folder Redirection and Roaming User Profiles. Administrators designate a user’s primary computers through the msDs-PrimaryComputer attribute using the computers’ distinguished names. For a new deployment, Microsoft recommends establishing this support before enabling the redirection or profile policies, so user data is not first copied to nonprimary computers. Microsoft requires pairing primary-computer support for Roaming User Profiles with primary-computer support for Folder Redirection. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-primary-computers).\n\n## Applicability\n\nUse this review when users have designated workstations and the organization wants to limit where roaming data is applied. Identify users, approved computers, and the owner responsible for changes to those assignments.\n\n## DSE recommendation\n\nCreate a user-to-computer mapping that the business owner can review. Include shared workstations, replacement devices, and temporary assignments in that decision. Test the intended order of policy deployment before expanding it. Define how support staff will update assignments when hardware changes and how they will recognize a missing or incorrect primary-computer entry.\n\n## Verification\n\nTest a representative user on both an assigned primary computer and a deliberately nonprimary one. Compare folder and profile behavior with the approved mapping. Check a controlled device-replacement scenario and record the assignment update. Resolve unexpected data placement before enabling the policy for additional users or retiring their old workstations.\n\n## Official references\n\n[Microsoft Learn: Deploy primary computers for Folder Redirection and Roaming User Profiles](https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-primary-computers). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/", "url": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Assign primary computers before expanding roaming user data", "item": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/", "url": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/", "headline": "Assign primary computers before expanding roaming user data", "description": "How should primary-computer assignments constrain Folder Redirection and roaming profiles?", "abstract": "How should primary-computer assignments constrain Folder Redirection and roaming profiles?", "articleBody": "Source facts\nMicrosoft describes primary-computer support as a way to control which computers use Folder Redirection and Roaming User Profiles. Administrators designate a user’s primary computers through the msDs-PrimaryComputer attribute using the computers’ distinguished names. For a new deployment, Microsoft recommends establishing this support before enabling the redirection or profile policies, so user data is not first copied to nonprimary computers. Microsoft requires pairing primary-computer support for Roaming User Profiles with primary-computer support for Folder Redirection. Microsoft documentation.\nApplicability\nUse this review when users have designated workstations and the organization wants to limit where roaming data is applied. Identify users, approved computers, and the owner responsible for changes to those assignments.\nDSE recommendation\nCreate a user-to-computer mapping that the business owner can review. Include shared workstations, replacement devices, and temporary assignments in that decision. Test the intended order of policy deployment before expanding it. Define how support staff will update assignments when hardware changes and how they will recognize a missing or incorrect primary-computer entry.\nVerification\nTest a representative user on both an assigned primary computer and a deliberately nonprimary one. Compare folder and profile behavior with the approved mapping. Check a controlled device-replacement scenario and record the assignment update. Resolve unexpected data placement before enabling the policy for additional users or retiring their old workstations.\nOfficial references\nMicrosoft Learn: Deploy primary computers for Folder Redirection and Roaming User Profiles. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:16:31+00:00", "dateModified": "2026-09-08T18:17:14+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Assign primary computers before expanding roaming user data" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 233, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Deploy primary computers for Folder Redirection and Roaming User Profiles", "url": "https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-primary-computers" } } ] } }