# Assign primary computers before expanding roaming user data

> How should primary-computer assignments constrain Folder Redirection and roaming profiles?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-08T18:16:31+00:00
- Modified: 2026-09-08T18:17:14+00:00
- Last reviewed by DSE: 2026-09-08
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 2 minutes

## What you need to know

How should primary-computer assignments constrain Folder Redirection and roaming profiles?

## Potentially affected

Use this review when users have designated workstations and the organization wants to limit where roaming data is applied.

## DSE recommendation

Create a user-to-computer mapping that the business owner can review.

## Article

## Source facts

Microsoft describes primary-computer support as a way to control which computers use Folder Redirection and Roaming User Profiles. Administrators designate a user’s primary computers through the msDs-PrimaryComputer attribute using the computers’ distinguished names. For a new deployment, Microsoft recommends establishing this support before enabling the redirection or profile policies, so user data is not first copied to nonprimary computers. Microsoft requires pairing primary-computer support for Roaming User Profiles with primary-computer support for Folder Redirection. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-primary-computers).

## Applicability

Use this review when users have designated workstations and the organization wants to limit where roaming data is applied. Identify users, approved computers, and the owner responsible for changes to those assignments.

## DSE recommendation

Create a user-to-computer mapping that the business owner can review. Include shared workstations, replacement devices, and temporary assignments in that decision. Test the intended order of policy deployment before expanding it. Define how support staff will update assignments when hardware changes and how they will recognize a missing or incorrect primary-computer entry.

## Verification

Test a representative user on both an assigned primary computer and a deliberately nonprimary one. Compare folder and profile behavior with the approved mapping. Check a controlled device-replacement scenario and record the assignment update. Resolve unexpected data placement before enabling the policy for additional users or retiring their old workstations.

## Official references

[Microsoft Learn: Deploy primary computers for Folder Redirection and Roaming User Profiles](https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-primary-computers). Source reviewed September 8, 2026.

## Primary reference

- Name: Deploy primary computers for Folder Redirection and Roaming User Profiles
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-primary-computers
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Assign primary computers before expanding roaming user data,” DSE Security, https://update.dsesecurity.com/updates/dse-20260908-040-assign-primary-computers-before-expanding-roaming-user-data/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.