folder redirection and user restrictions using ad