Re: Roaming Profiles, Folder Redirection, .OST Files and Security
- From: "Lanwench [MVP - Exchange]" <lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 4 May 2009 09:45:12 -0400
AndyTC@xxxxxxxxxxxxxxxx wrote:
Lanwench [MVP - Exchange] wrote:
AndyTC@xxxxxxxxxxxxxxxx wrote:
Hello,
I am setting up a new Microsoft network in a remote location. This
location is located in a hazardous and dangerous area.
I have setup a file server for all the users - I plan to use group
policy to redirect the four folders onto the server
-Application Data
-Desktop
-My Documents
-Start Menu
This will allow centralized backups and keep that data off the
laptops. If I am correct, the .OST file is NOT in any of these
folders, and
will still be on the local computer.
Correct.
So the only other way around
this would be roaming profiles.
No - not relevant. They wouldn't roam.
OST files are designed to be local - that's their purpose. If you
don't want them at all, don't use cached mode.
So my issue is exchange - all Users will be running exchanged cached
mode, on outlook 2007, to exchange server 2007.
I have a concern about the .OST file being on the local laptop. From
what I've read, using exchanged cached mode and roaming profiles is
NOT supported configuration.
Of course it is.
en
Also, simply redirecting the .OST file
to a network share is also not supported.
I don't know whether it's supported or not - it probably isn't - but
it's pointless.
So my question is, what other solutions are there? There is not an
exchange server on site - it is accessed over a slow VPN WAN link.
My concern is that if one of these laptops gets stolen or lost, the
.OST file could be pulled off the laptop and converted to .PST and
read using many of the free tools available.
Is there a way to encrypt/secure the local .OST file if I can't
relocate it? Do I need to build an exchange server onsite and get
rid of cache mode? (note this won't be an option for a while)
You can encrypt the hard drives on the laptop.
OK - So I'm stuck using either a 3rd party encryption software, or
setting up a Windows PKI and generating certificates,etc, correct?
Thanks
Check out http://support.microsoft.com/kb/223316 - you might want to post in
a Windows OS group for more help with this, though. Be careful with the
certificates as encryption really does work.
.
- References:
- Roaming Profiles, Folder Redirection, .OST Files and Security
- From: AndyTC@xxxxxxxxxxxxxxxx
- Re: Roaming Profiles, Folder Redirection, .OST Files and Security
- From: Lanwench [MVP - Exchange]
- Re: Roaming Profiles, Folder Redirection, .OST Files and Security
- From: AndyTC@xxxxxxxxxxxxxxxx
- Roaming Profiles, Folder Redirection, .OST Files and Security
- Prev by Date: Re: install the daylight savings fix for service pack 2
- Next by Date: Re: Certificates
- Previous by thread: Re: Roaming Profiles, Folder Redirection, .OST Files and Security
- Next by thread: Re: Roaming Profiles, Folder Redirection, .OST Files and Security
- Index(es):
Relevant Pages
|