2.2.1.2 Per-Profile Sections

For each redirection options key-value pair present in the Folder Status section with neither the Follow Parent Folder nor the Redirection Not Specified flags set, the file MUST contain an additional section, called a Per-Profile Folder section, whose SectionID is the same as the key of the redirection options key-value pair. The SectionID identifies which user profile folder  SHOULD<4> be redirected. The corresponding key in the Folder Status section identifies the flags to be applied to the redirection of that user profile folder.

Each Per-Profile Folder section MUST contain zero or more key-value pairs called security group mappings. Each key MUST be the string representation of a security group security identifier (SID) (as specified in [MS-DTYP] section 2.4.2.1), and each value MUST be a Universal Naming Convention (UNC) path indicating the destination path to which the indicated user profile folder is redirected. The client-side plug-in MUST determine what destination path to pass to the folder redirection subsystem by determining what security group the user belongs to. If the user belongs to more than one security group, the client-side plug-in MUST use the first matching securitygGroup mapping that appears in the section.

Note The security group SID MUST begin with either a lowercase or uppercase S and MUST be treated as case-insensitive by the client-side and administrative-side plug-ins.