Solved

Folder redirection not working SBS 2003

Posted on 2008-06-22
18
1,188 Views
Last Modified: 2011-10-19
I want to redirect some of the domain users My Documents  to a share on the DC.  I did the following:

1: Create network share d:\UserDocs (everyone has full control for now)
2: Share My Documents on XP client system (also everyone has full control for now)
3: Opened Server Management, Advanced Management & GP management
4: Opened Forest - My Business - Users
5: Created a GPO link called RedirectPatrickDOCS at SBSusers
6: For target I selected Advanced  specify locations for various groups
7: root path = \\church-pdc\UserDocs
8: I selected to create a folder for each user under the root path

I chose to use one system & one user as the test case

I logged in/out of the client PC three times but nothing happens.  My expectation was that a folder under \\church-pdc\UserDocs\Patrick would be created and that the My Documents folder on the client PC would be copied to the Server.

Im quite confused.  It seems like it should work. I have included three screen shots of the GPO.

Regards
Lee

GPO-Patrick.doc
0
Comment
Question by:ccampbell15
  • 10
  • 7
18 Comments
 
LVL 10

Expert Comment

by:rynox
Comment Utility
What are the Share AND NTFS permissions that you applied to the UserDocs folder when you created it?

What does the event viewer say on the client computer, there will be at least something in it if the policy was applied, it will either say it was sucessfully redirected or not, and give a reason if it didn't.
0
 
LVL 2

Author Comment

by:ccampbell15
Comment Utility
On the client My Documents Share & NTFS are set to Everyone with Full Control

On the Server the share & NTFS are set the same
0
 
LVL 19

Expert Comment

by:PeteJThomas
Comment Utility
As Rynox said, the first thing to check is whether or not the GPO actually applied at all! From a command prompt, type gpresult and press Enter.

This will tell you what policies are applying to both that user and that computer, and you can check that the GPO you created is actually being applied - You may find it's filtered out or something, in which case the GPO itself is probably configured fine, just needs to be applied/linked properly... :)

Pete
0
 
LVL 2

Author Comment

by:ccampbell15
Comment Utility
It certainly looks like the object is being applied to me. Why it mentions windows200 is a mystery. It's SBS 2003 and all clients are XP po.


USER SETTINGS
--------------
    CN=lee,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=Church,DC
    Last time Group Policy was applied: 6/23/2008 at 4:15:
    Group Policy was applied from:      church-pdc.Church.
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        CHURCH
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        RedirectPatrickDOCS
        Default Domain Policy

    The following GPOs were not applied because they were
    ------------------------------------------------------
        RedirectDOCS
            Filtering:  Not Applied (Empty)

        Small Business Server Lockout Policy
            Filtering:  Disabled (GPO)

        Small Business Server Internet Connection Firewall
            Filtering:  Disabled (GPO)

        Small Business Server Client Computer
            Filtering:  Not Applied (Empty)

        Small Business Server Domain Password Policy
            Filtering:  Not Applied (Empty)

        Small Business Server Update Services Client Compu
            Filtering:  Denied (Security)

        Small Business Server Update Services Server Compu
            Filtering:  Denied (Security)

        Small Business Server Remote Assistance Policy
            Filtering:  Disabled (GPO)

        Local Group Policy
            Filtering:  Not Applied (Empty)

        Small Business Server Update Services Common Setti
            Filtering:  Not Applied (Empty)

        Small Business Server Windows Firewall
            Filtering:  Disabled (GPO)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        BUILTIN\Administrators
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Domain Admins
        SBS Report Users
        Web Workplace Users
        SBS Mobile Users
        Offer Remote Assistance Helpers

C:\Documents and Settings\lee>
0
 
LVL 19

Expert Comment

by:PeteJThomas
Comment Utility
You can also try that same command with the /Z switch (gpresult /Z) which adds super verbose info (i.e. it details individual settings within policies that are being applied too!) This can very useful for troubleshooting problems within GPOs when the GPO appears to be applying successfully.

Give that a try, and post the relevant results (i.e. the results relating to that particular GPO).

You MAY need to increase the cmd window 'height buffer', as sometimes the results with the /Z are extensive and the cmd window cannot display it all.

To do this, simply open the command prompt, right-click on the title bar, select Properties > Layout tab > and set the 'Height' of the screen buffer size to 9999 or something. :)

Pete
0
 
LVL 2

Author Comment

by:ccampbell15
Comment Utility
Hi,

Here it is.  I took a look/see and don't notice anything out of the ordinary. Hopefullt I just missed something.

R
Lee


Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 6/24/2008 at 1:50:59 AM



RSOP data for CHURCH\lee on CHURCH-PDC : Logging Mode
------------------------------------------------------

OS Type:                     Microsoft(R) Windows(R) Server 2003 for Small Business Server
OS Configuration:            Primary Domain Controller
OS Version:                  5.2.3790
Terminal Server Mode:        Remote Administration
Site Name:                   Default-First-Site-Name
Roaming Profile:            
Local Profile:               C:\Documents and Settings\lee
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=CHURCH-PDC,OU=Domain Controllers,DC=Church,DC=local
    Last time Group Policy was applied: 6/24/2008 at 1:48:01 AM
    Group Policy was applied from:      church-pdc.Church.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        CHURCH
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        Small Business Server Auditing Policy
        Default Domain Controllers Policy
        Small Business Server Domain Password Policy
        Small Business Server Remote Assistance Policy
        Small Business Server Lockout Policy
        Small Business Server Client Computer
        Default Domain Policy
        Small Business Server Update Services Server Computers Policy
        Small Business Server Update Services Common Settings Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        RedirectDOCS
            Filtering:  Not Applied (Empty)

        Small Business Server Internet Connection Firewall
            Filtering:  Disabled (GPO)

        Small Business Server Update Services Client Computers Policy
            Filtering:  Denied (Security)

        Local Group Policy
            Filtering:  Not Applied (Empty)

        Small Business Server Windows Firewall
            Filtering:  Disabled (GPO)

    The computer is a part of the following security groups
    -------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        BUILTIN\Users
        BUILTIN\Pre-Windows 2000 Compatible Access
        Windows Authorization Access Group
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        This Organization
        CHURCH-PDC$
        Domain Controllers
        Exchange Domain Servers
        NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
        Exchange Enterprise Servers
       
    Resultant Set Of Policies for Computer
    ---------------------------------------

        Software Installations
        ----------------------
            N/A

        Startup Scripts
        ---------------
            N/A

        Shutdown Scripts
        ----------------
            N/A

        Account Policies
        ----------------
            GPO: Default Domain Policy
                Policy:            MaxServiceAge
                Computer Setting:  600

            GPO: Default Domain Policy
                Policy:            LockoutBadCount
                Computer Setting:  10

            GPO: Default Domain Policy
                Policy:            MaxTicketAge
                Computer Setting:  10

            GPO: Default Domain Policy
                Policy:            PasswordHistorySize
                Computer Setting:  24

            GPO: Small Business Server Domain Password Policy
                Policy:            MinimumPasswordAge
                Computer Setting:  N/A

            GPO: Small Business Server Domain Password Policy
                Policy:            PasswordHistorySize
                Computer Setting:  24

            GPO: Default Domain Policy
                Policy:            MaximumPasswordAge
                Computer Setting:  4294967295

            GPO: Small Business Server Lockout Policy
                Policy:            LockoutDuration
                Computer Setting:  10

            GPO: Small Business Server Lockout Policy
                Policy:            ResetLockoutCount
                Computer Setting:  10

            GPO: Default Domain Policy
                Policy:            MaxClockSkew
                Computer Setting:  5

            GPO: Default Domain Policy
                Policy:            MinimumPasswordLength
                Computer Setting:  N/A

            GPO: Default Domain Policy
                Policy:            MinimumPasswordAge
                Computer Setting:  N/A

            GPO: Small Business Server Domain Password Policy
                Policy:            MinimumPasswordLength
                Computer Setting:  6

            GPO: Small Business Server Lockout Policy
                Policy:            LockoutBadCount
                Computer Setting:  50

            GPO: Default Domain Policy
                Policy:            ResetLockoutCount
                Computer Setting:  10

            GPO: Small Business Server Domain Password Policy
                Policy:            MaximumPasswordAge
                Computer Setting:  4294967295

            GPO: Default Domain Policy
                Policy:            LockoutDuration
                Computer Setting:  10

            GPO: Default Domain Policy
                Policy:            MaxRenewAge
                Computer Setting:  7

        Audit Policy
        ------------
            GPO: Default Domain Controllers Policy
                Policy:            AuditPolicyChange
                Computer Setting:  Success

            GPO: Default Domain Controllers Policy
                Policy:            AuditPrivilegeUse
                Computer Setting:  No Auditing

            GPO: Default Domain Controllers Policy
                Policy:            AuditLogonEvents
                Computer Setting:  Success

            GPO: Small Business Server Auditing Policy
                Policy:            AuditDSAccess
                Computer Setting:  No Auditing

            GPO: Default Domain Controllers Policy
                Policy:            AuditAccountLogon
                Computer Setting:  Success

            GPO: Default Domain Controllers Policy
                Policy:            AuditObjectAccess
                Computer Setting:  No Auditing

            GPO: Default Domain Controllers Policy
                Policy:            AuditDSAccess
                Computer Setting:  Success

            GPO: Default Domain Controllers Policy
                Policy:            AuditAccountManage
                Computer Setting:  Success

            GPO: Small Business Server Auditing Policy
                Policy:            AuditLogonEvents
                Computer Setting:  Success, Failure

            GPO: Default Domain Controllers Policy
                Policy:            AuditProcessTracking
                Computer Setting:  No Auditing

            GPO: Default Domain Controllers Policy
                Policy:            AuditSystemEvents
                Computer Setting:  Success

        User Rights
        -----------
            GPO: Default Domain Controllers Policy
                Policy:            MachineAccountPrivilege
                Computer Setting:  Authenticated Users
                                   
            GPO: Default Domain Controllers Policy
                Policy:            DenyNetworkLogonRight
                Computer Setting:  CHURCH\SUPPORT_388945a0
                                   
            GPO: Default Domain Controllers Policy
                Policy:            RestorePrivilege
                Computer Setting:  Administrators
                                   Backup Operators
                                   Server Operators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            TcbPrivilege
                Computer Setting:  N/A

            GPO: Default Domain Controllers Policy
                Policy:            SystemProfilePrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            DenyServiceLogonRight
                Computer Setting:  N/A

            GPO: Default Domain Controllers Policy
                Policy:            ServiceLogonRight
                Computer Setting:  NETWORK SERVICE
                                   
            GPO: Default Domain Controllers Policy
                Policy:            UndockPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            CreatePermanentPrivilege
                Computer Setting:  N/A

            GPO: Default Domain Controllers Policy
                Policy:            AuditPrivilege
                Computer Setting:  LOCAL SERVICE
                                   NETWORK SERVICE
                                   
            GPO: Default Domain Controllers Policy
                Policy:            TakeOwnershipPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            CreatePagefilePrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            EnableDelegationPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            DebugPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            SystemTimePrivilege
                Computer Setting:  LOCAL SERVICE
                                   Administrators
                                   Server Operators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            DenyBatchLogonRight
                Computer Setting:  N/A

            GPO: Default Domain Controllers Policy
                Policy:            BackupPrivilege
                Computer Setting:  Administrators
                                   Backup Operators
                                   Server Operators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            CreateTokenPrivilege
                Computer Setting:  N/A

            GPO: Default Domain Controllers Policy
                Policy:            ChangeNotifyPrivilege
                Computer Setting:  Everyone
                                   Administrators
                                   Authenticated Users
                                   Pre-Windows 2000 Compatible Access
                                   
            GPO: Default Domain Controllers Policy
                Policy:            SyncAgentPrivilege
                Computer Setting:  N/A

            GPO: Default Domain Controllers Policy
                Policy:            ProfileSingleProcessPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            LoadDriverPrivilege
                Computer Setting:  Administrators
                                   Print Operators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            InteractiveLogonRight
                Computer Setting:  CHURCH\IUSR_CHURCH-PDC
                                   Administrators
                                   Backup Operators
                                   Account Operators
                                   Server Operators
                                   Print Operators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            RemoteShutdownPrivilege
                Computer Setting:  Administrators
                                   Server Operators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            IncreaseBasePriorityPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            NetworkLogonRight
                Computer Setting:  Everyone
                                   CHURCH\IUSR_CHURCH-PDC
                                   CHURCH\IWAM_CHURCH-PDC
                                   Administrators
                                   Authenticated Users
                                   ENTERPRISE DOMAIN CONTROLLERS
                                   Pre-Windows 2000 Compatible Access
                                   
            GPO: Default Domain Controllers Policy
                Policy:            LockMemoryPrivilege
                Computer Setting:  CHURCH\lee
                                   
            GPO: Default Domain Controllers Policy
                Policy:            ShutdownPrivilege
                Computer Setting:  Administrators
                                   Backup Operators
                                   Server Operators
                                   Print Operators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            SecurityPrivilege
                Computer Setting:  CHURCH\Exchange Enterprise Servers
                                   Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            AssignPrimaryTokenPrivilege
                Computer Setting:  LOCAL SERVICE
                                   NETWORK SERVICE
                                   CHURCH\IWAM_CHURCH-PDC
                                   
            GPO: Default Domain Controllers Policy
                Policy:            SystemEnvironmentPrivilege
                Computer Setting:  Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            IncreaseQuotaPrivilege
                Computer Setting:  LOCAL SERVICE
                                   NETWORK SERVICE
                                   CHURCH\IWAM_CHURCH-PDC
                                   Administrators
                                   
            GPO: Default Domain Controllers Policy
                Policy:            BatchLogonRight
                Computer Setting:  LOCAL SERVICE
                                   CHURCH\IUSR_CHURCH-PDC
                                   CHURCH\IWAM_CHURCH-PDC
                                   CHURCH\IIS_WPG
                                   CHURCH\SUPPORT_388945a0
                                   
            GPO: Default Domain Controllers Policy
                Policy:            DenyInteractiveLogonRight
                Computer Setting:  CHURCH\SBS Remote Operators
                                   CHURCH\SUPPORT_388945a0
                                   CHURCH\SBS STS Worker
                                   
        Security Options
        ----------------
            GPO: Default Domain Policy
                Policy:            TicketValidateClient
                Computer Setting:  Enabled

            GPO: Default Domain Policy
                Policy:            RequireLogonToChangePassword
                Computer Setting:  Not Enabled

            GPO: Small Business Server Domain Password Policy
                Policy:            PasswordComplexity
                Computer Setting:  Not Enabled

            GPO: Default Domain Policy
                Policy:            PasswordComplexity
                Computer Setting:  Not Enabled

            GPO: Default Domain Policy
                Policy:            ForceLogoffWhenHourExpire
                Computer Setting:  Not Enabled

            GPO: Small Business Server Domain Password Policy
                Policy:            ClearTextPassword
                Computer Setting:  Not Enabled

            GPO: Default Domain Policy
                Policy:            ClearTextPassword
                Computer Setting:  Not Enabled

            GPO: Default Domain Controllers Policy
                Policy:            Microsoft network server: Digitally sign communications (if client agrees)
                ValueName:         MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
                Computer Setting:  1

            GPO: Default Domain Controllers Policy
                Policy:            Network security: LAN Manager authentication level
                ValueName:         MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel
                Computer Setting:  2

            GPO: Default Domain Controllers Policy
                Policy:            Domain controller: LDAP server signing requirements
                ValueName:         MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrity
                Computer Setting:  1

            GPO: Default Domain Controllers Policy
                Policy:            Domain member: Digitally encrypt or sign secure channel data (always)
                ValueName:         MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal
                Computer Setting:  1

            GPO: Default Domain Controllers Policy
                Policy:            Microsoft network server: Digitally sign communications (always)
                ValueName:         MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature
                Computer Setting:  1

        Event Log Settings
        ------------------
            N/A

        Restricted Groups
        -----------------
            N/A

        System Services
        ---------------
            N/A

        Registry Settings
        -----------------
            N/A

        File System Settings
        --------------------
            N/A

        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Client Computer
                KeyName:     software\policies\microsoft\windows\network connections\NC_AllowNetBridge_NLA
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\RescheduleWaitTime
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Server Computers Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Remote Assistance Policy
                KeyName:     software\policies\microsoft\windows NT\Terminal Services\fAllowUnsolicited
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Remote Assistance Policy
                KeyName:     software\policies\microsoft\windows NT\Terminal Services\RAUnsolicit\CHURCH\Domain Admins
                Value:       67, 0, 72, 0, 85, 0, 82, 0, 67, 0, 72, 0, 92, 0, 68, 0, 111, 0, 109, 0, 97, 0, 105, 0, 110, 0, 32, 0, 65, 0, 100, 0, 109, 0, 105, 0, 110, 0, 115, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Client Computer
                KeyName:     software\microsoft\windows nt\currentversion\winlogon\SyncForegroundPolicy
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUServer
                Value:       104, 0, 116, 0, 116, 0, 112, 0, 58, 0, 47, 0, 47, 0, 67, 0, 72, 0, 85, 0, 82, 0, 67, 0, 72, 0, 45, 0, 80, 0, 68, 0, 67, 0, 58, 0, 56, 0, 53, 0, 51, 0, 48, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\DetectionFrequencyEnabled
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\DetectionFrequency
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\RebootRelaunchTimeoutEnabled
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Client Computer
                KeyName:     software\microsoft\windows\currentversion\policies\explorer\NoWelcomeScreen
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Client Computer
                KeyName:     software\policies\microsoft\windows\network connections\NC_ShowSharedAccessUI
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUStatusServer
                Value:       104, 0, 116, 0, 116, 0, 112, 0, 58, 0, 47, 0, 47, 0, 67, 0, 72, 0, 85, 0, 82, 0, 67, 0, 72, 0, 45, 0, 80, 0, 68, 0, 67, 0, 58, 0, 56, 0, 53, 0, 51, 0, 48, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoRebootWithLoggedOnUsers
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\RescheduleWaitTimeEnabled
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Remote Assistance Policy
                KeyName:     software\policies\microsoft\windows NT\Terminal Services\fAllowUnsolicitedFullControl
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\AUOptions
                Value:       2, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\RebootWarningTimeoutEnabled
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\RebootRelaunchTimeout
                Value:       10, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\AutoInstallMinorUpdates
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\ElevateNonAdmins
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Common Settings Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\RebootWarningTimeout
                Value:       5, 0, 0, 0
                State:       Enabled

            GPO: Small Business Server Update Services Server Computers Policy
                KeyName:     SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\AUOptions
                Value:       3, 0, 0, 0
                State:       Enabled


USER SETTINGS
--------------
    CN=lee,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=Church,DC=local
    Last time Group Policy was applied: 6/24/2008 at 1:41:29 AM
    Group Policy was applied from:      church-pdc.Church.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        CHURCH
    Domain Type:                        Windows 2000
   
    Applied Group Policy Objects
    -----------------------------
        RedirectPatrickDOCS
        Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        RedirectDOCS
            Filtering:  Not Applied (Empty)

        Small Business Server Lockout Policy
            Filtering:  Disabled (GPO)

        Small Business Server Internet Connection Firewall
            Filtering:  Disabled (GPO)

        Small Business Server Client Computer
            Filtering:  Not Applied (Empty)

        Small Business Server Domain Password Policy
            Filtering:  Not Applied (Empty)

        Small Business Server Update Services Client Computers Policy
            Filtering:  Denied (Security)

        Small Business Server Update Services Server Computers Policy
            Filtering:  Denied (Security)

        Small Business Server Remote Assistance Policy
            Filtering:  Disabled (GPO)

        Local Group Policy
            Filtering:  Not Applied (Empty)

        Small Business Server Update Services Common Settings Policy
            Filtering:  Not Applied (Empty)

        Small Business Server Windows Firewall
            Filtering:  Disabled (GPO)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        BUILTIN\Administrators
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Domain Admins
        SBS Report Users
        Web Workplace Users
        SBS Mobile Users
        Offer Remote Assistance Helpers
       
    The user has the following security privileges
    ----------------------------------------------

        Bypass traverse checking
        Manage auditing and security log
        Back up files and directories
        Restore files and directories
        Change the system time
        Shut down the system
        Force shutdown from a remote system
        Take ownership of files or other objects
        Debug programs
        Modify firmware environment values
        Profile system performance
        Profile single process
        Increase scheduling priority
        Load and unload device drivers
        Create a pagefile
        Adjust memory quotas for a process
        Remove computer from docking station
        Perform volume maintenance tasks
        Impersonate a client after authentication
        Create global objects
        Enable computer and user accounts to be trusted for delegation
        Add workstations to domain

    Resultant Set Of Policies for User
    -----------------------------------

        Software Installations
        ----------------------
            N/A

        Logon Scripts
        -------------
            N/A

        Logoff Scripts
        --------------
            N/A

        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            N/A

        Folder Redirection
        ------------------
            N/A

        Internet Explorer Browser User Interface
        ----------------------------------------
            N/A

        Internet Explorer Connection
        ----------------------------
            N/A

        Internet Explorer URLs
        ----------------------
            N/A

        Internet Explorer Security
        --------------------------
            N/A

        Internet Explorer Programs
        --------------------------
            N/A
0
 
LVL 19

Expert Comment

by:PeteJThomas
Comment Utility
Well, this concerns me a little -

Folder Redirection
        ------------------
            N/A

Considering your policy is a folder redirection policy, I would imagine there would be something here if it were working!!

For one thing, I'd double check whether ANYthing is happening at all by turning on the 'Show full path in address bar' option in Windows explorer. Then open the My Docs, and double check it's definitely not being redirected somewhere - This will simply establish whether or not the problem is with creating the individual folders for each person, or whether the redirection is simply not happening at all.

Let me know!

Pete

So, I think something must be going wrong somehow... Did you say that you are currently testing this in a separate OU with a new test user account?
0
 
LVL 2

Author Comment

by:ccampbell15
Comment Utility
Yes, I agree. Nothing is going on. I am not using a new test account but rather an existing one with lots of stuff under My Documents. Synctoy works fine so I have some confidence in the network.

When I click on My Document on the client PC it opens it on the local disk.
0
 
LVL 2

Author Comment

by:ccampbell15
Comment Utility
Applied Group Policy Objects
    -----------------------------
        RedirectPatrickDOCS
        Default Domain Policy
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 19

Expert Comment

by:PeteJThomas
Comment Utility
I did see the reference to the GPO applying, but that would be there if the GPO were applying but contained no settings, too. So just knowing that the GPO is applying is not enough, as if it contained some kind of incorrect config for example, it would still show as applying, but would not give the desired effect, which sort of seems to be what's happening.

However in this case I doubt it's an incorrect config, as there's not much that can go wrong with this particular setting. So I think the settings are OK, but something else is stopping the mapping from completing...

Can you try manually redirecting the My Docs for that user to the same location on the network? Just to see if it works - If it fails for some reason, then it would also fail when running through the GPO, which might lead us to our problem...

Pete
0
 
LVL 2

Author Comment

by:ccampbell15
Comment Utility
I setup a new account called testcase. I logged into a workstation. I made the testcase account a member of LaptopUsers so the GPO will pertain and changed the profile tab. My documents (right clcik start) still shows the local path so it appears that the object is not being applied at all. I think I need to start pulling out only the grey hairs.
0
 
LVL 19

Expert Comment

by:PeteJThomas
Comment Utility
Ok, once you've checked if manually redirecting works, I would set up the following -

Create a new OU called TestPolicy or whatever in AD. Stick your testcase user object in there. Block policy inheritance to that OU completely, and then link ONLY the RedirectPatrickDOCS GPO directly to that OU.

Wait about an hour or so, as sometimes changes like this can take a while to take effect. Then try logging on as the testcase user, and report back what happens... :)

Pete
0
 
LVL 2

Author Comment

by:ccampbell15
Comment Utility
I can change the target of My Documents and it move to the server or a different folder on the workstation
0
 
LVL 19

Expert Comment

by:PeteJThomas
Comment Utility
Ok, so provided you can successfully copy things etc between the network location and the client (it should be the same target location you're using in the GPO) then we know there are no obvious problems outside of the GPO.

So if you now follow my previous posts suggestions, and let me know the results.

Thanks,

Pete
0
 
LVL 2

Author Comment

by:ccampbell15
Comment Utility
I'm waiting on access to another network that runs standard. I am going to setup the same object there and also try your suggestion of a new OU. With SBS I need to use the wizards or the SBS police will come get me.  I;ll create the new OU using computer management.
0
 
LVL 19

Expert Comment

by:PeteJThomas
Comment Utility
No problem (I think, I've never used SBS before??) - As long as the result is a brand new OU with only 1 object in it (being the test user), and most importantly that GPO ineritance is BLOCKED to that OU. Then link the ONE RedirectPatrickDOCS GPO to that new OU, and test. :)

Pete
0
 
LVL 2

Author Comment

by:ccampbell15
Comment Utility
I finally got access to one network running Standard 2003 and another running SBS 2003. The network running Standard has similar issues with folder redirection.  I assume this to be a minor Lee Campbell at this point.

I did the following:

1: Change the profile for brittany to a roaming one with the pathname of \\10.10.179.12\UserDocs\brittany
2: Created a GPO for file redirection of My Documents point to everyone in the security officeusers to
\\10.10.179.12\%USERNAME%My Documents. Actually the GPO did this.


3: Upon the first logoff from \\brittany a folder called brittany was created under UserDocs but not even domain admins had rights to it.

4: Change sharing and ntfs permissions to full control for brittany and domain admins.

Upon logging off I get the following error:

Windows cannot copy file C:\Documents and Settings\Brittany.HEALTH\Start Menu\Programs\Administrative Tools\ to location \\10.10.179.12\UserDocs\brittany\Start Menu\Programs\Administrative Tools\. Possible causes of this error include network problems or insufficient security rights. If this problem persists, contact your network administrator.

 DETAIL - Access is denied.



Windows cannot update your roaming profile. Possible causes of this error include network problems or insufficient security rights. If this problem persists, contact your network administrator.

 DETAIL - Access is denied.


I can however right to this folder since I saved this doc there.  In the way of troubleshooting I have done the following:

1: Drop the firewall on both the DC and the workstation \\brittany
2: Change brittany to a domain admin

#1 did nothing but #2 did the trick and now I am really confused.
As a standard user brittany was the owner of the sub-folder called brittany under UserDocs. UserDocs had sharing and NTFS permission set for everyone = full control. The folder brittany had full control for domain admins and brittany.  I don't understand why there is a difference.
0
 
LVL 2

Accepted Solution

by:
ccampbell15 earned 0 total points
Comment Utility
Turns out that the folder that My Documents will live in nees to be owned byt the user. I has set it up with my account as the owner but with each user having full control in both NTFS and sharing. Why the actual ownership matters I do not understand.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now