Solved

Unable to redirect "Documents" back to "My Documents"

Posted on 2010-11-16
10
1,526 Views
Last Modified: 2014-03-24
On my server, running Server 2003, I have a GPO that redirects everyone Documents & Desktop to a Home share.

We want to reverse that and have all the Documents direct back to the local machine.  I changed the GPO to "Redirect to local user profile path".  On Windows XP machines, the change works fine and all documents go back to their local "My Documents" folder.

The problem is with all Windows 7 machines.  Since MS was so BRILLIANT to change the name to "Documents", the GPO is trying to create a folder named "Documents" because it doesn't find one.  

The error message we get with all Windows 7 machines is:

Failed to apply policy and redirect folder "Documents" to "C:\Users\bob\Documents".
 Redirection options=0x80009221.
 The following error occurred: "Can not create folder "C:\Users\bob\Documents"".
 Error details: "This security ID may not be assigned as the owner of this object.
0
Comment
Question by:BartowIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 2
  • +1
10 Comments
 
LVL 4

Expert Comment

by:bhartwell
ID: 34149669
Perhaps creating a separate OU for the users or computers with Windows 7 and those with Windows XP, then just disable the GPO from the windows 7 OU or just block inheritance, depending on where you placed that GPO.
0
 

Author Comment

by:BartowIT
ID: 34149882
That wouldn't apply as the old has been applied and thus now needs reversing.   I believe the problem is with the GPO and the terminology of "Documents" and "My Documents".
0
 
LVL 4

Expert Comment

by:bhartwell
ID: 34150552
try this out... the Vista section should work for your windows 7 machines.

http://support.microsoft.com/kb/313222/

0
Get Actionable Data from Your Monitoring Solution

Your communication platform is only as good as the relevance of the information you send. Ensure your alerts get to the right people every time with actionable responses. Create escalation rules that ensure everyone follows the process and nothing is left to chance.

 
LVL 4

Expert Comment

by:bhartwell
ID: 34150603
other than that you will more than likely have to do an "in place upgrade" (formerly known as a system repair). Just boot using a windows 7 dvd and do a system repair, that will resolve the issue for sure.
0
 
LVL 66

Accepted Solution

by:
johnb6767 earned 500 total points
ID: 34152508
Might need to get around it via Login Script.....

Hold that thought.....

"Error details: "This security ID may not be assigned as the owner of this object. "

Actually, the error above simply means that they are the current owner of the Data on the current My Docs (network), and it is the way that the profiles handle ownership. Ive changed mine from the default, but im pretty sure that a default install is not granted ownership to the User, for C:\Users\%USERNAME%....

If you staged the folder ahead of time (if it is not being created), and perhaps used XCACLS to take ownership of the C:\Users\%USERNAME%\Documents folder....

Manually change an owner to the %Username% on a local My Docs, log them off/on, and see if the redirection occurs..... Then we can confirm thats the problem or not....

Actually it might just be a "Full Control" lack on the local directory even......
0
 

Author Comment

by:BartowIT
ID: 34154632
What I think is the problem is, and according to the error message, the redirect is trying to create a folder named "Documents".  In the folder structure in C:\Users\Bob there is a folder named "My Documents".

Per Johnb6767's advice, I gave "System" full control of the whol user profile directory (and sub directories) which is default on my other Windows 7 PCs.  Tried to re-login and still the same error.  
0
 

Author Comment

by:BartowIT
ID: 34155109
I believe I have found the solution.  I can not say with 100% confidence that this is the fix, as it may be a combination of the advice given here and the final step I did before it worked.

The fix, as simple as it sounds, was to DELETE the local "My Documents" folder.  Because the files hadn't redirected back to the local profile, the Documents folder was emtpy and I felt safe deleting the folder.

Once I deleted the local "My Documents" folder, the user needed to login one additional time and BINGO it started copying the folders from the server share back to the local profile.
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 34161749
Interesting......
0
 
LVL 2

Expert Comment

by:CanalIns
ID: 39951208
We are seeing the same behavior here as well. Has there been any updates or progress on this in the years since the initial post?
0
 

Author Comment

by:BartowIT
ID: 39951344
Our company has moved on to Server 2008, and now server 2012 so we don't have this issue now.  Re-reading my posts, I think deleting the local "My Documents" of on the desktop and letting the group policy create it before copying the files down from the server worked.

A good test would be to take a desktop that a user has NEVER logged into (but has files on the server) and see if their files get re-directed back to the local copy.

Or (and this may be a bit drastic) delete the local profile all together and reboot.  As with any redirect group policy, you sometimes have to log on... wait a minute... log off, and finally back on for the policy to take affect.  

Watch your Event Viewer each time you log on.
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question