Solved

Folder Redirection policy application never applied completely

Posted on 2009-07-09
8
17,953 Views
Last Modified: 2012-05-07
I have a Windows 2008 TS server that uses folder redirection group policy to redirect all user's folders to a file server.  All other servers / domain is on Windows Server 2003.

I have been seeing the warning event 510 appearing on the application log on TS server and here is what it says:
"Folder redirection policy application has been delayed until the next logon because the group policy logon optimization is in effect."

From what I understand, folder redirection sometime requires up to three logons to get applied completely.  The problem I have is that I keep seeing that event appearing.  In the mean time I can confirm all user's folders were redirected properly to the server shares, users have been accessing the redirection locations fine without problem.

Turned on the folder redirection debug logging by using the registry suggested by Microsoft does give me a lot more details about the application but nothing indicates problem somewhere, all I can see from the details logs are informative.

Here is the key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics\FdeployDebugLevel REG_DWORD value=oxf

What would be the issue here?
0
Comment
Question by:JohnmenZ
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
8 Comments
 
LVL 1

Expert Comment

by:ForsakenSA
ID: 24819072
The message is expected. This behave is by design.  Folder Redirection and Software Installation Policies require the synchronous policy application. The gpupdate /force start a asynchronous policy refresh, the system sets a flag that indicates that the application of Folder Redirection or a software installation policy is required. The flag forces synchronous application of the policy at the users next logon.

http://technet.microsoft.com/en-us/library/cc787939(WS.10).aspx
0
 
LVL 5

Author Comment

by:JohnmenZ
ID: 24819170
What you are saying is technically correct, but that doesn't answer my question why the event 510 keeps appearing while users are working fine with redirected folders.

I wanted to find out if there is problem lying around somewhere, and if so it apparently doesn't impact user's redirected folder from userland somehow, why is that?
0
 
LVL 5

Author Comment

by:JohnmenZ
ID: 24820077
Further investigation reveals that the actual situation is not what I thought.  There are 13 folders needed to be redirected, 12 of them redirected fine except one: Links.

We use a read-only share \\server\Links$, and redirects all user's Links folder to that place.  That way we centrally control what to be displayed on the Links folder, user have no write access to it.  Apparently the Links folder didn't get redirected hence warning 510 returned.

The problem could be cause by these two conflicting conditions:
1. \\server\Links$ is read-only
2. Folder redirection settings for Links folder have "Move all contents in this folder to the new location" enabled.

I think folder redirection client side extension was trying to move whatever is in user's Links folder to the \\server\Links$ then error out since the share is not writable.  However, I do need the setting "Move all contents in this folder to the new location" to be enabled to avoid showing two same name Links folder on User's Windows Explorer.  If that settings is disabled, user will see two folders with the same name of Links in Windows explorer, one points to C: drive, one points to \\server\Links$.  That is a known bug of Vista / Windows 2008 (detailed in http://vistavitals.blogspot.com/2007/11/folder-redirection-duplicate-user-files.html).

I need something to sort out this Links folder redirection.
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 5

Author Comment

by:JohnmenZ
ID: 24820097
I discovered that the \\server\Links$ share allows offline files, which will cause problem to folder redirection according to this link (http://vistavitals.blogspot.com/2007/11/folder-redirection-misbehaves-after.html).  I just turned it off and will see how it goes now.
0
 
LVL 5

Accepted Solution

by:
JohnmenZ earned 0 total points
ID: 24820185
I think the problem is resolved, by making sure offline files is not enabled on all roaming / redirected shared folders.  I have started seeing correct behaviours from two of my test accounts now, will try it on real users.
0
 
LVL 5

Author Comment

by:JohnmenZ
ID: 24855775
Just a side note, folder redireciton requires correct permissions to be configured on the target folder, otherwise it can easily fail when you have exclusive right granting or moving contents options enabled.  Consult Microsoft technet documents for correct permission settings.
0
 

Expert Comment

by:Om Joshi
ID: 34205013
Hi, JohnmenZ,

which document are you referring to? please could you get the link on this....

Reason for asking :

i have shared users folder and i think i'm facing the same issue.

many thanks,
om.
0
 
LVL 5

Author Comment

by:JohnmenZ
ID: 34208014
Security Considerations when Configuring Folder Redirection (http://technet.microsoft.com/en-us/library/cc775853(WS.10).aspx)
0

Featured Post

Why You Need a DevOps Toolchain

IT needs to deliver services with more agility and velocity. IT must roll out application features and innovations faster to keep up with customer demands, which is where a DevOps toolchain steps in. View the infographic to see why you need a DevOps toolchain.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Want Win 10 Pro to search like Server 2010 or 2012 27 160
How to secure access to a folder on windows server 2008 R2 6 121
Restore a DC asap 11 66
FTP servers in Windows 2008 5 96
We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question