Assign primary computers before expanding roaming user data

Source facts

Microsoft describes primary-computer support as a way to control which computers use Folder Redirection and Roaming User Profiles. Administrators designate a user’s primary computers through the msDs-PrimaryComputer attribute using the computers’ distinguished names. For a new deployment, Microsoft recommends establishing this support before enabling the redirection or profile policies, so user data is not first copied to nonprimary computers. Microsoft requires pairing primary-computer support for Roaming User Profiles with primary-computer support for Folder Redirection. Microsoft documentation.

Applicability

Use this review when users have designated workstations and the organization wants to limit where roaming data is applied. Identify users, approved computers, and the owner responsible for changes to those assignments.

DSE recommendation

Create a user-to-computer mapping that the business owner can review. Include shared workstations, replacement devices, and temporary assignments in that decision. Test the intended order of policy deployment before expanding it. Define how support staff will update assignments when hardware changes and how they will recognize a missing or incorrect primary-computer entry.

Verification

Test a representative user on both an assigned primary computer and a deliberately nonprimary one. Compare folder and profile behavior with the approved mapping. Check a controlled device-replacement scenario and record the assignment update. Resolve unexpected data placement before enabling the policy for additional users or retiring their old workstations.

Official references

Microsoft Learn: Deploy primary computers for Folder Redirection and Roaming User Profiles. Source reviewed September 8, 2026.