Our AD schema is 2012 and we've applied a Folder Redirection GPO which has "Redirect folders on primary computers only" enabled.
We've designated one Windows 8.1 computer as the "primary computer" of a specific user. Checking the AD attributes for the computer and the user, we can verify that the DNs have been saved in the msDS-PrimaryComputer (for the user) and msDS-IsPrimaryComputerFor (for the computer)
On the designated primary computer we can tell that the GPO is being applied successfully and folders are being redirected for this user.
However, when we go to a non-primary computer with this user's account, folders ARE ALSO redirected. (Yes, we even tried doing this on a computer which the user had never logged onto before)
Checking the event logs for both "Folder Redirection" and "User Profile Service" we DO NOT see any indication of whether the primary computer attribute is being evaluated. The following article has examples of what one should see if things are being evaluated correctly: http://blogs.technet.com/b/askds/archive/2012/10/23/digging-a-little-deeper-into-windows-8-primary-computer.aspx
What could cause Windows to not evaluate the primary computer status and to proceed with folder redirection anyway?
We've designated one Windows 8.1 computer as the "primary computer" of a specific user. Checking the AD attributes for the computer and the user, we can verify that the DNs have been saved in the msDS-PrimaryComputer (for the user) and msDS-IsPrimaryComputerFor (for the computer)
On the designated primary computer we can tell that the GPO is being applied successfully and folders are being redirected for this user.
However, when we go to a non-primary computer with this user's account, folders ARE ALSO redirected. (Yes, we even tried doing this on a computer which the user had never logged onto before)
Checking the event logs for both "Folder Redirection" and "User Profile Service" we DO NOT see any indication of whether the primary computer attribute is being evaluated. The following article has examples of what one should see if things are being evaluated correctly: http://blogs.technet.com/b/askds/archive/2012/10/23/digging-a-little-deeper-into-windows-8-primary-computer.aspx
What could cause Windows to not evaluate the primary computer status and to proceed with folder redirection anyway?