{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/", "slug": "dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection", "url": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/" }, "title": "Review file-server role placement before deploying Folder Redirection", "summary": "How does Remote Desktop Services cohosting affect a Folder Redirection deployment review?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:16:03+00:00", "modified_at": "2026-09-08T18:20:22+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 1, "word_count": 219, "potentially_affected": "Use this review when preparing a traditional Folder Redirection deployment.", "dse_recommendation": "Have the desktop and server owners agree on whether RDS cohosting is part of the design before configuring the shares.", "primary_source": { "name": "Deploy Folder Redirection with Offline Files", "url": "https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-folder-redirection", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft’s procedure covers deploying Folder Redirection together with Offline Files and controlling access to redirected data. When the file server also hosts Remote Desktop Services, Microsoft requires different share permissions and advance creation of new-user folders with specific permissions. For every configuration, Microsoft calls for limiting administrative access to the file server to the required IT administrators. Microsoft documentation.

\n

Applicability

\n

Use this review when preparing a traditional Folder Redirection deployment. Identify the actual server roles, administrative users, redirected data, and client population. Follow the source branch that matches the server’s role placement.

\n

DSE recommendation

\n

Have the desktop and server owners agree on whether RDS cohosting is part of the design before configuring the shares. Record the required administrative access and review the intended share permissions through the documented procedure. Pilot with selected users and define both connected and disconnected file-access checks. Preserve the current folder location and recovery plan before moving user data.

\n

Verification

\n

Inspect server roles, administrative access, and the resulting policy on a pilot client. Verify that representative files reach the intended location and remain usable under the approved Offline Files test. Record both access failures and unexpected access. Resolve a role-placement or permission mismatch before expanding the deployment to additional users.

\n

Official references

\n

Microsoft Learn: Deploy Folder Redirection with Offline Files. Source reviewed September 8, 2026.

", "content_text": "Source facts\nMicrosoft’s procedure covers deploying Folder Redirection together with Offline Files and controlling access to redirected data. When the file server also hosts Remote Desktop Services, Microsoft requires different share permissions and advance creation of new-user folders with specific permissions. For every configuration, Microsoft calls for limiting administrative access to the file server to the required IT administrators. Microsoft documentation.\nApplicability\nUse this review when preparing a traditional Folder Redirection deployment. Identify the actual server roles, administrative users, redirected data, and client population. Follow the source branch that matches the server’s role placement.\nDSE recommendation\nHave the desktop and server owners agree on whether RDS cohosting is part of the design before configuring the shares. Record the required administrative access and review the intended share permissions through the documented procedure. Pilot with selected users and define both connected and disconnected file-access checks. Preserve the current folder location and recovery plan before moving user data.\nVerification\nInspect server roles, administrative access, and the resulting policy on a pilot client. Verify that representative files reach the intended location and remain usable under the approved Offline Files test. Record both access failures and unexpected access. Resolve a role-placement or permission mismatch before expanding the deployment to additional users.\nOfficial references\nMicrosoft Learn: Deploy Folder Redirection with Offline Files. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nMicrosoft’s procedure covers deploying Folder Redirection together with Offline Files and controlling access to redirected data. When the file server also hosts Remote Desktop Services, Microsoft requires different share permissions and advance creation of new-user folders with specific permissions. For every configuration, Microsoft calls for limiting administrative access to the file server to the required IT administrators. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-folder-redirection).\n\n## Applicability\n\nUse this review when preparing a traditional Folder Redirection deployment. Identify the actual server roles, administrative users, redirected data, and client population. Follow the source branch that matches the server’s role placement.\n\n## DSE recommendation\n\nHave the desktop and server owners agree on whether RDS cohosting is part of the design before configuring the shares. Record the required administrative access and review the intended share permissions through the documented procedure. Pilot with selected users and define both connected and disconnected file-access checks. Preserve the current folder location and recovery plan before moving user data.\n\n## Verification\n\nInspect server roles, administrative access, and the resulting policy on a pilot client. Verify that representative files reach the intended location and remain usable under the approved Offline Files test. Record both access failures and unexpected access. Resolve a role-placement or permission mismatch before expanding the deployment to additional users.\n\n## Official references\n\n[Microsoft Learn: Deploy Folder Redirection with Offline Files](https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-folder-redirection). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/", "url": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Review file-server role placement before deploying Folder Redirection", "item": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/", "url": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/", "headline": "Review file-server role placement before deploying Folder Redirection", "description": "How does Remote Desktop Services cohosting affect a Folder Redirection deployment review?", "abstract": "How does Remote Desktop Services cohosting affect a Folder Redirection deployment review?", "articleBody": "Source facts\nMicrosoft’s procedure covers deploying Folder Redirection together with Offline Files and controlling access to redirected data. When the file server also hosts Remote Desktop Services, Microsoft requires different share permissions and advance creation of new-user folders with specific permissions. For every configuration, Microsoft calls for limiting administrative access to the file server to the required IT administrators. Microsoft documentation.\nApplicability\nUse this review when preparing a traditional Folder Redirection deployment. Identify the actual server roles, administrative users, redirected data, and client population. Follow the source branch that matches the server’s role placement.\nDSE recommendation\nHave the desktop and server owners agree on whether RDS cohosting is part of the design before configuring the shares. Record the required administrative access and review the intended share permissions through the documented procedure. Pilot with selected users and define both connected and disconnected file-access checks. Preserve the current folder location and recovery plan before moving user data.\nVerification\nInspect server roles, administrative access, and the resulting policy on a pilot client. Verify that representative files reach the intended location and remain usable under the approved Offline Files test. Record both access failures and unexpected access. Resolve a role-placement or permission mismatch before expanding the deployment to additional users.\nOfficial references\nMicrosoft Learn: Deploy Folder Redirection with Offline Files. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:16:03+00:00", "dateModified": "2026-09-08T18:20:22+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-068-review-file-server-role-placement-before-deploying-folder-redirection/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Review file-server role placement before deploying Folder Redirection" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 219, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Deploy Folder Redirection with Offline Files", "url": "https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-folder-redirection" } } ] } }