Windows 2003 AD and Windows 7 desktop

afreestyle
afreestyle used Ask the Experts™
on
I have a windows 2003 Active Directory Domain Controller. I am setting up roaming profiles and folder redirection.

Client Windows 7 Professional.

I setup folder redirection path to a file share call profiles, I also setup in group policy folder redirection each to seperate file share. I did not get user implicit rights, due to wanting administrator needing to have access.

When I login with test user sometimes the folder redirection works, and you can see this on Windows 7 client, otherr times you can not. Also when folder is created on file share the user rights are not added to folder. I have do this many times before with XP and just can not seem to understand why Windows 7 is having issue.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
Are there any useful events being logged on the client machine?

Author

Commented:
Log Name:      Application
Source:        Microsoft-Windows-Folder Redirection
Date:          10/26/2010 4:47:27 PM
Event ID:      502
Task Category: None
Level:         Error
Keywords:      
User:          FIA-INC\qtester
Computer:      FIAHQ-97001.fia-inc.com
Description:
Failed to apply policy and redirect folder "Documents" to "\\Hq-fia-file01\my_documents\qtester\My Documents".
 Redirection options=0x9001.
 The following error occurred: "Failed to copy files from "C:\Users\qtester\Documents" to "\\Hq-fia-file01\my_documents\qtester\My Documents"".
 Error details: "Cannot create a file when that file already exists.
".
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Folder Redirection" Guid="{7D7B0C39-93F6-4100-BD96-4DDA859652C5}" />
    <EventID>502</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2010-10-26T23:47:27.552511900Z" />
    <EventRecordID>2048</EventRecordID>
    <Correlation ActivityID="{C91A5489-D029-43F0-B4B5-A7C8F5EC6B9E}" />
    <Execution ProcessID="1012" ThreadID="2928" />
    <Channel>Application</Channel>
    <Computer>FIAHQ-97001.fia-inc.com</Computer>
    <Security UserID="S-1-5-21-3265000823-3001954954-742848781-1113" />
  </System>
  <EventData Name="EVENT_FDEPLOY_FailedToApplyPolicy">
    <Data Name="FromFolder">Documents</Data>
    <Data Name="ToFolder">\\Hq-fia-file01\my_documents\qtester\My Documents</Data>
    <Data Name="Options">0x9001</Data>
    <Data Name="Error">Failed to copy files from "C:\Users\qtester\Documents" to "\\Hq-fia-file01\my_documents\qtester\My Documents"</Data>
    <Data Name="ErrorDetails">Cannot create a file when that file already exists.
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Folder Redirection
Date:          10/26/2010 4:47:11 PM
Event ID:      502
Task Category: None
Level:         Error
Keywords:      
User:          FIA-INC\qtester
Computer:      FIAHQ-97001.fia-inc.com
Description:
Failed to apply policy and redirect folder "Music" to "\\Hq-fia-file01\my_documents\qtester\My Documents\My Music".
 Redirection options=0x9001.
 The following error occurred: "Can not create folder "\\Hq-fia-file01\my_documents\qtester\My Documents\My Music"".
 Error details: "Access is denied.
".
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Folder Redirection" Guid="{7D7B0C39-93F6-4100-BD96-4DDA859652C5}" />
    <EventID>502</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2010-10-26T23:47:11.981955000Z" />
    <EventRecordID>2047</EventRecordID>
    <Correlation ActivityID="{C91A5489-D029-43F0-B4B5-A7C8F5EC6B9E}" />
    <Execution ProcessID="1012" ThreadID="2928" />
    <Channel>Application</Channel>
    <Computer>FIAHQ-97001.fia-inc.com</Computer>
    <Security UserID="S-1-5-21-3265000823-3001954954-742848781-1113" />
  </System>
  <EventData Name="EVENT_FDEPLOY_FailedToApplyPolicy">
    <Data Name="FromFolder">Music</Data>
    <Data Name="ToFolder">\\Hq-fia-file01\my_documents\qtester\My Documents\My Music</Data>
    <Data Name="Options">0x9001</Data>
    <Data Name="Error">Can not create folder "\\Hq-fia-file01\my_documents\qtester\My Documents\My Music"</Data>
    <Data Name="ErrorDetails">Access is denied.
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Folder Redirection
Date:          10/26/2010 4:47:11 PM
Event ID:      502
Task Category: None
Level:         Error
Keywords:      
User:          FIA-INC\qtester
Computer:      FIAHQ-97001.fia-inc.com
Description:
Failed to apply policy and redirect folder "Pictures" to "\\Hq-fia-file01\my_documents\qtester\My Documents\My Pictures".
 Redirection options=0x9001.
 The following error occurred: "Can not create folder "\\Hq-fia-file01\my_documents\qtester\My Documents\My Pictures"".
 Error details: "Access is denied.
".
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Folder Redirection" Guid="{7D7B0C39-93F6-4100-BD96-4DDA859652C5}" />
    <EventID>502</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2010-10-26T23:47:11.869943800Z" />
    <EventRecordID>2046</EventRecordID>
    <Correlation ActivityID="{C91A5489-D029-43F0-B4B5-A7C8F5EC6B9E}" />
    <Execution ProcessID="1012" ThreadID="2928" />
    <Channel>Application</Channel>
    <Computer>FIAHQ-97001.fia-inc.com</Computer>
    <Security UserID="S-1-5-21-3265000823-3001954954-742848781-1113" />
  </System>
  <EventData Name="EVENT_FDEPLOY_FailedToApplyPolicy">
    <Data Name="FromFolder">Pictures</Data>
    <Data Name="ToFolder">\\Hq-fia-file01\my_documents\qtester\My Documents\My Pictures</Data>
    <Data Name="Options">0x9001</Data>
    <Data Name="Error">Can not create folder "\\Hq-fia-file01\my_documents\qtester\My Documents\My Pictures"</Data>
    <Data Name="ErrorDetails">Access is denied.
</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        Microsoft-Windows-Folder Redirection
Date:          10/26/2010 4:47:11 PM
Event ID:      502
Task Category: None
Level:         Error
Keywords:      
User:          FIA-INC\qtester
Computer:      FIAHQ-97001.fia-inc.com
Description:
Failed to apply policy and redirect folder "Videos" to "\\Hq-fia-file01\my_documents\qtester\My Documents\My Videos".
 Redirection options=0x9001.
 The following error occurred: "Can not create folder "\\Hq-fia-file01\my_documents\qtester\My Documents\My Videos"".
 Error details: "Access is denied.
".
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Folder Redirection" Guid="{7D7B0C39-93F6-4100-BD96-4DDA859652C5}" />
    <EventID>502</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2010-10-26T23:47:11.767933600Z" />
    <EventRecordID>2045</EventRecordID>
    <Correlation ActivityID="{C91A5489-D029-43F0-B4B5-A7C8F5EC6B9E}" />
    <Execution ProcessID="1012" ThreadID="2928" />
    <Channel>Application</Channel>
    <Computer>FIAHQ-97001.fia-inc.com</Computer>
    <Security UserID="S-1-5-21-3265000823-3001954954-742848781-1113" />
  </System>
  <EventData Name="EVENT_FDEPLOY_FailedToApplyPolicy">
    <Data Name="FromFolder">Videos</Data>
    <Data Name="ToFolder">\\Hq-fia-file01\my_documents\qtester\My Documents\My Videos</Data>
    <Data Name="Options">0x9001</Data>
    <Data Name="Error">Can not create folder "\\Hq-fia-file01\my_documents\qtester\My Documents\My Videos"</Data>
    <Data Name="ErrorDetails">Access is denied.
</Data>
  </EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-GroupPolicy
Date:          10/26/2010 4:47:38 PM
Event ID:      1085
Task Category: None
Level:         Warning
Keywords:      
User:          FIA-INC\qtester
Computer:      FIAHQ-97001.fia-inc.com
Description:
Windows failed to apply the Folder Redirection settings. Folder Redirection settings might have its own log file. Please click on the "More information" link.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
    <EventID>1085</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>1</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2010-10-26T23:47:38.528609400Z" />
    <EventRecordID>5188</EventRecordID>
    <Correlation ActivityID="{C91A5489-D029-43F0-B4B5-A7C8F5EC6B9E}" />
    <Execution ProcessID="1012" ThreadID="2928" />
    <Channel>System</Channel>
    <Computer>FIAHQ-97001.fia-inc.com</Computer>
    <Security UserID="S-1-5-21-3265000823-3001954954-742848781-1113" />
  </System>
  <EventData>
    <Data Name="SupportInfo1">1</Data>
    <Data Name="SupportInfo2">3961</Data>
    <Data Name="ProcessingMode">1</Data>
    <Data Name="ProcessingTimeInMilliseconds">28314</Data>
    <Data Name="ErrorCode">1003</Data>
    <Data Name="ErrorDescription">Cannot complete this function. </Data>
    <Data Name="DCName">\\hq-fia-dom01.fia-inc.com</Data>
    <Data Name="ExtensionName">Folder Redirection</Data>
    <Data Name="ExtensionId">{25537BA6-77A8-11D2-9B6C-0000F8080861}</Data>
  </EventData>
</Event>

Commented:
There are a couple of errors there about files already existing, and access denied.

I'd suggest having a quick look over the data on the server, and the client machines, and check that full control is allowed for the profile owner on the server.

Author

Commented:
The server has full control over the shared folder. Isn't the server supposed to create a folder with proper permissions.

The folders are being created, but no pemissions placed on sub folder \username

This should happen automatically when created.?????
Commented:
Yeah, that's right, the permissions should be set when the profile is first created.

I can't explain why the permissions may not be correct, but if you assign ownership to the user who owns the profile, and then force the permissions down, it should be fine (obviously, consider if the user(s) has/have set up custom ACL's, as you will overwrite them if you force inheritance down)

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial