• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1290
  • Last Modified:

Folder redirection error for XP workstations on a Server 2003 domain

Hi Experts,

I am having some trouble with an error when documents have been redirected in group policy.  The following error appears multiple times in the event viewer.  When a user clicks on my documents on the desktop (which is redirected to their home share on the network) it displays documents created in the user profile on the C:\Documents and Settings\User\My Documents for example.  Another error appears when accessing my documents on workstations saying that "\\server\user$" is not accessible, the "server" statement meaning the old PDC controller, which has been demoted.  The server has recently been upgraded.
-------------
Event ID: 101

Source: Folder Redirection

Type: Error

Failed to perform redirection of folder My Documents.  The new directories for the redirected folder could not be created.  The folder is configured to be redirected <\\server\%username%$>, the final expanded path was <\\server\username$>.  The following error occured:  This security ID may not be assigned as the owner of this object.

Event ID: 1085

Source: Userenv

The Group Policy client-side extension Folder Redirection failed to execute.  Please look for any errors reported eariler by that extension.
-----------
Our PDC server is running Windows 2003 Standard Edition with service pack 1

Workstations are running Windows XP Pro with service pack 2

In attempt to overcome this error, I have taken the computers off the domain and rejoined, applied a gpupdate /force on the workstations, reimaged machines but with no luck.
0
mgordon-spi
Asked:
mgordon-spi
1 Solution
 
younghvCommented:
Hi,
When you drill down on your share server to the folder that is going to hold these re-directed files, what are the actual permissions?
Have you set the 'everyone' group permissions there?

Vic
0
 
mgordon-spiAuthor Commented:
Hi Vic,

The permissions on the redirected folder include: share permissions = full control for everyone, but NTFS permissions include modify access for the user which is a student class.  It is only certain computers in our lab which this error is happening, around 8 computers with errors.  The folder redirection of my documents does work with no errors on the rest of the workstations in this lab.

Thanks.
0
 
younghvCommented:
mgordon,
Interesting problem.
Do you have any 'deny' permissions set for any user or user group?

I'd have to look it up, but I believe 'modify' is the same as 'Read-Execute' (mumble to self ... look it up Vic)...

If you change the 'student class' to Read-Write-Modify, does it work?

Thanks,

Vic
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
mgordon-spiAuthor Commented:
There are no deny permissions at all for the user or group.  To be honest I don't think it is a permission error, something to do with "This security ID may not be assigned as the owner of this object" prehaps, because the permissions and folder redirection does work perfectly on other machines in the vacinity.  Modify access includes read, write access and is already applied.
0
 
SamuraiCrowCommented:
Does the \\server\username$ file exist for the user in question?  It sounds like it is trying to redirect from the local profile but can't overwrite the existing file.  Rename the \\server\username$ folder to \\server\username.old$ and try it then.

Hope this helps
Crow
0
 
mgordon-spiAuthor Commented:
As far as I know the \\server\username$ exists, I will test this out when I am on site on wednsday, cheers.
0
 
mgordon-spiAuthor Commented:
I have solved this problem by changing the My Documents folder redirection policy removal field from "redirect the folder back to the userprofile location when policy is removed" to "leave the folder in the new location when policy is removed".
0
 
younghvCommented:
Cool Beans!
Request this be closed 'with refund' through the "Support" TA.

Glad you got it worked out.

Vic
0
 
Computer101Commented:
PAQed with points refunded (500)

Computer101
EE Admin
0
 
johannortjeCommented:
FYI - Microsoft Solution on this: http://support.microsoft.com/kb/291087

Event ID 101 and Event ID 1000 Messages May Be Displayed When Folder Redirection Is Set Up with Group Policy
View products that this article applies to.
Article ID : 291087
Last Review : March 1, 2007
Revision : 6.3
This article was previously published under Q291087
SYMPTOMS
The following Event ID 1000 and Event ID 101 messages may be logged in the Application log when the Folder Redirection component of Group Policy is set up:
Event Type: Error
Error Event Source: Userenv
Event Category: None
Event ID: 1000
Date: Date
Time: Time
User: Nt Authority\System
Computer: Computername
Description: The Group Policy client-side extension Folder Redirection was passed flags (0) and returned a failure status code of (1307).
Event Type: Error
Event Source: Folder Redirection
Event Category: None Event ID: 101
Date: Date
Time: Time
User: Domain\User
Computer: Computername
Description: Failed to perform redirection of folder Desktop. The new directories for the redirected folder could not be created. The folder is configured to be redirected to \\Computername\Redirected shared folder, the final expanded path was \\Computername\Redirected shared folder. The following error occurred: This security ID may not be assigned as the owner of this object.
Back to the top

CAUSE
This problem can occur when you use Group Policy to set up its Folder Redirection component. Group Policy has an option to set up the Folder Redirection component as Basic, Advanced, or None. On the Target tab, if you click the Basic setting, and then under Settings, you click to select the Grant the user exclusive rights to the folder name check box, the Folder Redirection component is unsuccessful and event messages can be displayed.
Back to the top

RESOLUTION
To resolve this problem: 1. Load the appropriate Group Policy from the domain.
2. Click User Configuration, click Windows Setting, and then click Folder Redirection.
3. Right-click the appropriate Folder Redirection component, and then click Properties.
4. Click the Basic setting in the Target tab, and then under Settings, click to clear the Grant the user exclusive rights to the folder name check box.
5. Save the settings, and then quit
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now