ccampbell15
asked on
Folder redirection - access denied Server2003 / XP
I have created a GPO to redirect My Documents for domain users to the Server. Its the only server with the following roles: AD,DNS,DHCP,Terminal Services
On a logical drive I created a share with everyone having full control in sharing and NTFS. I can access the folder from a client PC and copy files from the client to the My Documents sub-folder created by Windows on the Server. However when I log into the client PC the files from My Documents are not copied over to the Server. In the applications log I get the following error:
Failed to perform redirection of folder My Documents. The files for the redirected folder
could not be moved to the new location. The folder is configured to be redirected to
<\\dirt-pdc\userdocs\%USER
<C:\Documents and Settings\robin.DIRTWORKS2\
The following error occurred while copying <C:\Documents and Settings\robin.DIRTWORKS2\
to <\\dirt-pdc\userdocs\robin
Access is denied.
The unc path is \\dirt-pdc\userdocs\robin
Robin is the owner and has full ntfs rights
On a logical drive I created a share with everyone having full control in sharing and NTFS. I can access the folder from a client PC and copy files from the client to the My Documents sub-folder created by Windows on the Server. However when I log into the client PC the files from My Documents are not copied over to the Server. In the applications log I get the following error:
Failed to perform redirection of folder My Documents. The files for the redirected folder
could not be moved to the new location. The folder is configured to be redirected to
<\\dirt-pdc\userdocs\%USER
<C:\Documents and Settings\robin.DIRTWORKS2\
The following error occurred while copying <C:\Documents and Settings\robin.DIRTWORKS2\
to <\\dirt-pdc\userdocs\robin
Access is denied.
The unc path is \\dirt-pdc\userdocs\robin
Robin is the owner and has full ntfs rights
ASKER
Hi,
The only reason everyone has full access is because I am having this access denied issue and set it that way for troubleshooting. The user Robin owns userdocs\robin and all sub-folders. Sharing and NTFS are both set to have her and domain admins full access.
I have included screen dumps of share permissions and NTFS.
Regards
Lee
share.pdf
NTFS.pdf
The only reason everyone has full access is because I am having this access denied issue and set it that way for troubleshooting. The user Robin owns userdocs\robin and all sub-folders. Sharing and NTFS are both set to have her and domain admins full access.
I have included screen dumps of share permissions and NTFS.
Regards
Lee
share.pdf
NTFS.pdf
Use advanced->effective permissions to check the effective permissions on the target folder (subfolder).
See technet-article about configuring security for folder redirection:
http://technet.microsoft.com/en-us/library/cc775853.aspx
See technet-article about configuring security for folder redirection:
http://technet.microsoft.com/en-us/library/cc775853.aspx
ASKER
If you log-out from client computer, log-in again, but not in domain, but to "This computer", go to Computer Management -> Local Users And Groups and look into Administrators group: is user DOMAIN\robin among local administrators?
If not, add it and try again.
If not, add it and try again.
ASKER
All domain users are members of the local administrators group on their workstations. I set it up that way when I deployed the network two weeks ago. I did log in and verify as you requested.
R
Lee
R
Lee
Morning :)
Usually Folder Redirection Problems run from a cross between NTFS and Share permissions....
Share should be - Auth Users - FULL CONTROL
There is a specific setting within the folder redirection GPO that says - "grant Users Explicit rights to documents" you need to tick that option which will deal with the NTFS side of things for you....
If no go - maybe post a quick snapshot of your SHARE and NTFS permissions for us to have a look at
J
Usually Folder Redirection Problems run from a cross between NTFS and Share permissions....
Share should be - Auth Users - FULL CONTROL
There is a specific setting within the folder redirection GPO that says - "grant Users Explicit rights to documents" you need to tick that option which will deal with the NTFS side of things for you....
If no go - maybe post a quick snapshot of your SHARE and NTFS permissions for us to have a look at
J
hmmm effective permissions screen shot is interesting....
Why is the Robin Folder Shared?
Share UserDocs and UserDocs - Auth Users full control Share permissions.....to test, give Robin full control in the Security TAB (NTFS perms) and propogate all changes down to all files and folders.....that should get you going...
Why is the Robin Folder Shared?
Share UserDocs and UserDocs - Auth Users full control Share permissions.....to test, give Robin full control in the Security TAB (NTFS perms) and propogate all changes down to all files and folders.....that should get you going...
ASKER
Did that. I can copy files but Windows is doing something odd at login.
Failed to perform redirection of folder My Documents. The files for the redirected folder
could not be moved to the new location. The folder is configured to be redirected to
<\\dirt-pdc\userdocs\%USER
<C:\Documents and Settings\robin.DIRTWORKS2\
The following error occurred while copying <C:\Documents and Settings\robin.DIRTWORKS2\
to <\\dirt-pdc\userdocs\robin
Access is denied.
YET, I can copy files back and forth.
Failed to perform redirection of folder My Documents. The files for the redirected folder
could not be moved to the new location. The folder is configured to be redirected to
<\\dirt-pdc\userdocs\%USER
<C:\Documents and Settings\robin.DIRTWORKS2\
The following error occurred while copying <C:\Documents and Settings\robin.DIRTWORKS2\
to <\\dirt-pdc\userdocs\robin
Access is denied.
YET, I can copy files back and forth.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
what about Share permissions? Go to Properties of the folder, and select tab for Sharing. There you will have Permissions button, and you need to alter those permissions corectly, too.
Resulting permissions are the most restricted combination of NTFS + Share permissions.