Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Unable to redirect "Documents" back to "My Documents"

Posted on 2010-11-16
Medium Priority
Last Modified: 2014-03-24
On my server, running Server 2003, I have a GPO that redirects everyone Documents & Desktop to a Home share.

We want to reverse that and have all the Documents direct back to the local machine.  I changed the GPO to "Redirect to local user profile path".  On Windows XP machines, the change works fine and all documents go back to their local "My Documents" folder.

The problem is with all Windows 7 machines.  Since MS was so BRILLIANT to change the name to "Documents", the GPO is trying to create a folder named "Documents" because it doesn't find one.  

The error message we get with all Windows 7 machines is:

Failed to apply policy and redirect folder "Documents" to "C:\Users\bob\Documents".
 Redirection options=0x80009221.
 The following error occurred: "Can not create folder "C:\Users\bob\Documents"".
 Error details: "This security ID may not be assigned as the owner of this object.
Question by:BartowIT
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 2
  • +1

Expert Comment

ID: 34149669
Perhaps creating a separate OU for the users or computers with Windows 7 and those with Windows XP, then just disable the GPO from the windows 7 OU or just block inheritance, depending on where you placed that GPO.

Author Comment

ID: 34149882
That wouldn't apply as the old has been applied and thus now needs reversing.   I believe the problem is with the GPO and the terminology of "Documents" and "My Documents".

Expert Comment

ID: 34150552
try this out... the Vista section should work for your windows 7 machines.


Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why


Expert Comment

ID: 34150603
other than that you will more than likely have to do an "in place upgrade" (formerly known as a system repair). Just boot using a windows 7 dvd and do a system repair, that will resolve the issue for sure.
LVL 66

Accepted Solution

johnb6767 earned 2000 total points
ID: 34152508
Might need to get around it via Login Script.....

Hold that thought.....

"Error details: "This security ID may not be assigned as the owner of this object. "

Actually, the error above simply means that they are the current owner of the Data on the current My Docs (network), and it is the way that the profiles handle ownership. Ive changed mine from the default, but im pretty sure that a default install is not granted ownership to the User, for C:\Users\%USERNAME%....

If you staged the folder ahead of time (if it is not being created), and perhaps used XCACLS to take ownership of the C:\Users\%USERNAME%\Documents folder....

Manually change an owner to the %Username% on a local My Docs, log them off/on, and see if the redirection occurs..... Then we can confirm thats the problem or not....

Actually it might just be a "Full Control" lack on the local directory even......

Author Comment

ID: 34154632
What I think is the problem is, and according to the error message, the redirect is trying to create a folder named "Documents".  In the folder structure in C:\Users\Bob there is a folder named "My Documents".

Per Johnb6767's advice, I gave "System" full control of the whol user profile directory (and sub directories) which is default on my other Windows 7 PCs.  Tried to re-login and still the same error.  

Author Comment

ID: 34155109
I believe I have found the solution.  I can not say with 100% confidence that this is the fix, as it may be a combination of the advice given here and the final step I did before it worked.

The fix, as simple as it sounds, was to DELETE the local "My Documents" folder.  Because the files hadn't redirected back to the local profile, the Documents folder was emtpy and I felt safe deleting the folder.

Once I deleted the local "My Documents" folder, the user needed to login one additional time and BINGO it started copying the folders from the server share back to the local profile.
LVL 66

Expert Comment

ID: 34161749

Expert Comment

ID: 39951208
We are seeing the same behavior here as well. Has there been any updates or progress on this in the years since the initial post?

Author Comment

ID: 39951344
Our company has moved on to Server 2008, and now server 2012 so we don't have this issue now.  Re-reading my posts, I think deleting the local "My Documents" of on the desktop and letting the group policy create it before copying the files down from the server worked.

A good test would be to take a desktop that a user has NEVER logged into (but has files on the server) and see if their files get re-directed back to the local copy.

Or (and this may be a bit drastic) delete the local profile all together and reboot.  As with any redirect group policy, you sometimes have to log on... wait a minute... log off, and finally back on for the policy to take affect.  

Watch your Event Viewer each time you log on.

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question