What you need to know
Which assumptions in the Work Folders client setup example must be checked before reuse?
Potentially affected
Administrators testing Work Folders clients in an AD FS and Web Application Proxy deployment.
DSE recommendation
Document which example assumptions match the pilot and which will be replaced by approved production settings.
Source facts
Microsoft’s procedure sets up both domain-member and non-domain Windows clients to test synchronization between their Work Folders. The example installs previously created AD FS and Work Folders certificates in the domain client’s computer certificate store. For the non-domain test client, it changes the hosts file because the example did not create public DNS records. That instruction is explicitly a test-environment assumption. Microsoft documentation.
Applicability
Identify the client join state, actual service names, certificate chain, and name-resolution arrangement. Review the preceding deployment steps before treating this final client step as a complete service installation.
DSE recommendation
Document which example assumptions match the pilot and which will be replaced by approved production settings. Have the identity and network owners confirm the service names and certificate trust path. Keep sample addresses and test-only hosts entries out of the general client rollout instructions.
Verification
Configure representative clients through the approved route, then synchronize a controlled file in each direction. Record the service name contacted, certificate result, and observed file state on both clients. Repeat from the intended network locations, and investigate a DNS or trust exception before calling the client setup complete.
Official references
Microsoft Learn: Deploy Work Folders with AD FS and Web Application Proxy – Step 5, Set Up Clients. Source reviewed September 8, 2026.
Review the official source
Deploy Work Folders with AD FS and Web Application Proxy - Step 5, Set Up Clients · Verified September 8, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE