Work Folders Overview
Updated: August 15, 2016
Applies To: Windows 10, Windows 7, Windows 8.1, Windows Server 2012 R2
This topic discusses Work Folders, which is a role service for file servers running Windows Server that provides a consistent way for users to access their work files from their PCs and devices.
Did you mean…
With Work Folders users can store and access work files on personal computers and devices, often referred to as bring-your-own device (BYOD), in addition to corporate PCs. Users gain a convenient location to store work files, and they can access them from anywhere. Organizations maintain control over corporate data by storing the files on centrally managed file servers, and optionally specifying user device policies such as encryption and lock-screen passwords.
Work Folders can be deployed with existing deployments of Folder Redirection, Offline Files, and home folders. Work Folders stores user files in a folder on the server called a sync share. You can specify a folder that already contains user data, which enables you to adopt Work Folders without migrating servers and data or immediately phasing out your existing solution.
Administrators can use Work Folders to provide users with access to their work files while keeping centralized storage and control over the organization’s data. Some specific applications for Work Folders include:
Provide a single point of access to work files from a user’s work and personal computers and devices
Access work files while offline, and then sync with the central file server when the PC or device next has Internet or intranet connectivity
Deploy with existing deployments of Folder Redirection, Offline Files, and home folders
Use existing file server management technologies, such as file classification and folder quotas, to manage user data
Specify security policies to instruct user’s PCs and devices to encrypt Work Folders and use a lock screen password
Use Failover Clustering with Work Folders to provide a high-availability solution
Work Folders includes the following functionality.
Work Folders role service in Server Manager
Windows Server 2012 R2
File and Storage Services provides a way to set up sync shares (folders that store user’s work files), monitors Work Folders, and manages sync shares and user access
Work Folders cmdlets
Windows Server 2012 R2
A Windows PowerShell module that contains comprehensive cmdlets for managing Work Folders servers
Work Folders integration with Windows
Windows RT 8.1
Windows 7 (download required)
Work Folders provides the following functionality in Windows computers:
Work Folders app for devices
Apple iPhone and iPad®
An app that allows popular devices to access files in Work Folders
The following table describes some of the major changes in Work Folders.
New or updated?
Faster change replication
Updated in Windows 10
In Windows 8.1, file changes get uploaded to the server once the file is closed, but other devices aren’t notified of the change, and can wait up to 10 minutes to get the change. In Windows 10, the Work Folders server immediately notifies client PCs and devices of the change so that the changes are synced immediately.
Integrated with Enterprise data protection (EDP) policy
Added to Windows 10 in November 2015 update
If an administrator deploys EDP, Work Folders can enforce data protection by encrypting the data on the PC. The encryption is using a key associated with the Enterprise ID, which can be remotely wiped by using a supported mobile device management package such as Microsoft Intune.
Microsoft Office integration
Added to Windows 10 in November 2015 update
In Windows 8.1 you can navigate to Work Folders inside Office apps by clicking or tapping This PC and then navigating to the Work Folders location on your PC. In Windows 10 you can make it even easier to get to Work Folders by adding it to the list of locations that Office shows when saving or opening files. For more info, see Work Folders in Windows 10 and Troubleshooting using Work Folders as a Place in Microsoft Office.
Work Folders has the following software requirements for file servers and your network infrastructure:
A server running Windows Server 2012 R2 for hosting sync shares with user files
A volume formatted with the NTFS file system for storing user files
To enforce password policies on Windows 7 PCs, you must use Group Policy password policies. You also have to exclude the Windows 7 PCs from Work Folders password policies (if you use them).
To enable users to sync across the Internet, there are additional requirements:
A server certificate for each file server that will host Work Folders (plus a server certificate for your reverse proxy server). These certificates should be from a certification authority (CA) that is trusted by your users—ideally a public CA
The ability to make a server accessible from the Internet by creating publishing rules in your organization’s reverse proxy or network gateway
A publicly registered domain name and the ability to create additional public DNS records for the domain
(Optional) An Active Directory Domain Services forest with schema extensions in Windows Server 2012 R2 to support automatically referring PCs and devices to the correct file server when using multiple file servers
(Optional) Active Directory Federation Services (AD FS) infrastructure when using AD FS authentication
Work Folders has the following software requirements for client computers:
PCs and devices must be running one of the following operating systems:
Windows RT 8.1
Android 4.4 KitKat and later
iOS 8 and later
Windows 7 PCs must be running one of the following editions of Windows:
Windows 7 Professional
Windows 7 Ultimate
Windows 7 Enterprise
Windows 7 PCs must be joined to your organization’s domain (they can’t be joined to a workgroup).
Enough free space on a local, NTFS-formatted drive to store all the user’s files in Work Folders, plus an additional 6 GB of free space if Work Folders is located on the system drive, as it is by default. Work Folders uses the following location by default: %USERPROFILE%\Work Folders
However, users can change the location during setup (microSD cards and USB drives formatted with the NTFS file system are supported locations, though sync will stop if the drives are removed).
The maximum size for individual files is 10 GB by default. There is no per-user storage limit, although administrators can use the quotas functionality of File Server Resource Manager to implement quotas.
Work Folders doesn’t support rolling back the virtual machine state of client virtual machines. Instead perform backup and restore operations from inside the client virtual machine by using System Image Backup or another backup app.
The following table discusses how various Microsoft sync technologies are positioned and when to use each.
OneDrive for Business
Syncs files that are stored on a file server with PCs and devices
Syncs files that are stored on a file server with PCs that have access to the corporate network (can be replaced by Work Files)
Syncs files that are stored in Office 365 or in SharePoint with PCs and devices inside or outside a corporate network, and provides document collaboration functionality
Syncs personal files that are stored in OneDrive with PCs, Mac computers, and devices
Intended to provide user access to work files
Internal network servers
File servers running Windows Server 2012 R2
SharePoint server (optional)
PCs, iOS, Android
PCs in a corporate network or connected through DirectAccess, VPNs, or other remote access technologies
PCs, iOS, Android, Windows Phone
PCs, Mac computers, Windows Phone, iOS, Android
In addition to the sync technologies listed in the previous table, Microsoft offers other replication technologies, including DFS Replication, which is designed for server-to-server replication, and BranchCache, which is designed as a branch office WAN acceleration technology. For more information, see DFS Namespaces and DFS Replication Overview and BranchCache Overview
Work Folders is part of the File and Storage Services role. You can install Work Folders by using the Add Roles and Features Wizard or the Install-WindowsFeature cmdlet. Both methods accomplish the following:
Adds the Work Folders page to File and Storage Services in Server Manager
Installs the Windows Sync Shares service, which is used by Windows Server to host sync shares
Installs the SyncShare Windows PowerShell module to manage Work Folders on the server
You can run this Windows Server role service on a virtual machine in Windows Azure. This scenario has been tested with Windows Server 2012 R2.
To learn about how to get started with Windows Azure virtual machines, visit the Windows Azure web site.
For additional related information, see the following resources.