Folder redirection error for XP workstations on a Server 2003 domain

Posted on 2006-11-15
Medium Priority
Last Modified: 2008-05-11
Hi Experts,

I am having some trouble with an error when documents have been redirected in group policy.  The following error appears multiple times in the event viewer.  When a user clicks on my documents on the desktop (which is redirected to their home share on the network) it displays documents created in the user profile on the C:\Documents and Settings\User\My Documents for example.  Another error appears when accessing my documents on workstations saying that "\\server\user$" is not accessible, the "server" statement meaning the old PDC controller, which has been demoted.  The server has recently been upgraded.
Event ID: 101

Source: Folder Redirection

Type: Error

Failed to perform redirection of folder My Documents.  The new directories for the redirected folder could not be created.  The folder is configured to be redirected <\\server\%username%$>, the final expanded path was <\\server\username$>.  The following error occured:  This security ID may not be assigned as the owner of this object.

Event ID: 1085

Source: Userenv

The Group Policy client-side extension Folder Redirection failed to execute.  Please look for any errors reported eariler by that extension.
Our PDC server is running Windows 2003 Standard Edition with service pack 1

Workstations are running Windows XP Pro with service pack 2

In attempt to overcome this error, I have taken the computers off the domain and rejoined, applied a gpupdate /force on the workstations, reimaged machines but with no luck.
Question by:mgordon-spi
LVL 38

Expert Comment

ID: 17951680
When you drill down on your share server to the folder that is going to hold these re-directed files, what are the actual permissions?
Have you set the 'everyone' group permissions there?


Author Comment

ID: 17952449
Hi Vic,

The permissions on the redirected folder include: share permissions = full control for everyone, but NTFS permissions include modify access for the user which is a student class.  It is only certain computers in our lab which this error is happening, around 8 computers with errors.  The folder redirection of my documents does work with no errors on the rest of the workstations in this lab.

LVL 38

Expert Comment

ID: 17952697
Interesting problem.
Do you have any 'deny' permissions set for any user or user group?

I'd have to look it up, but I believe 'modify' is the same as 'Read-Execute' (mumble to self ... look it up Vic)...

If you change the 'student class' to Read-Write-Modify, does it work?


Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.


Author Comment

ID: 17953572
There are no deny permissions at all for the user or group.  To be honest I don't think it is a permission error, something to do with "This security ID may not be assigned as the owner of this object" prehaps, because the permissions and folder redirection does work perfectly on other machines in the vacinity.  Modify access includes read, write access and is already applied.

Expert Comment

ID: 17954045
Does the \\server\username$ file exist for the user in question?  It sounds like it is trying to redirect from the local profile but can't overwrite the existing file.  Rename the \\server\username$ folder to \\server\username.old$ and try it then.

Hope this helps

Author Comment

ID: 17976732
As far as I know the \\server\username$ exists, I will test this out when I am on site on wednsday, cheers.

Author Comment

ID: 18128577
I have solved this problem by changing the My Documents folder redirection policy removal field from "redirect the folder back to the userprofile location when policy is removed" to "leave the folder in the new location when policy is removed".
LVL 38

Expert Comment

ID: 18130078
Cool Beans!
Request this be closed 'with refund' through the "Support" TA.

Glad you got it worked out.


Accepted Solution

Computer101 earned 0 total points
ID: 18410167
PAQed with points refunded (500)

EE Admin

Expert Comment

ID: 21545004
FYI - Microsoft Solution on this: http://support.microsoft.com/kb/291087

Event ID 101 and Event ID 1000 Messages May Be Displayed When Folder Redirection Is Set Up with Group Policy
View products that this article applies to.
Article ID : 291087
Last Review : March 1, 2007
Revision : 6.3
This article was previously published under Q291087
The following Event ID 1000 and Event ID 101 messages may be logged in the Application log when the Folder Redirection component of Group Policy is set up:
Event Type: Error
Error Event Source: Userenv
Event Category: None
Event ID: 1000
Date: Date
Time: Time
User: Nt Authority\System
Computer: Computername
Description: The Group Policy client-side extension Folder Redirection was passed flags (0) and returned a failure status code of (1307).
Event Type: Error
Event Source: Folder Redirection
Event Category: None Event ID: 101
Date: Date
Time: Time
User: Domain\User
Computer: Computername
Description: Failed to perform redirection of folder Desktop. The new directories for the redirected folder could not be created. The folder is configured to be redirected to \\Computername\Redirected shared folder, the final expanded path was \\Computername\Redirected shared folder. The following error occurred: This security ID may not be assigned as the owner of this object.
Back to the top

This problem can occur when you use Group Policy to set up its Folder Redirection component. Group Policy has an option to set up the Folder Redirection component as Basic, Advanced, or None. On the Target tab, if you click the Basic setting, and then under Settings, you click to select the Grant the user exclusive rights to the folder name check box, the Folder Redirection component is unsuccessful and event messages can be displayed.
Back to the top

To resolve this problem: 1. Load the appropriate Group Policy from the domain.
2. Click User Configuration, click Windows Setting, and then click Folder Redirection.
3. Right-click the appropriate Folder Redirection component, and then click Properties.
4. Click the Basic setting in the Target tab, and then under Settings, click to clear the Grant the user exclusive rights to the folder name check box.
5. Save the settings, and then quit

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Sometimes people don't understand why download speed shows differently for Windows than Linux.Specially, this article covers and shows the solution for throughput difference for Windows than a Linux machine. For this, I arranged a test scenario.I…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Watch the video to know the simple way to remove or recover or reset lost or forgotten passwords of Outlook PST file. With Kernel Outlook Password Recovery tool such operation is very easy to perform. It is a freeware with limitation to use with 500…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question