Solved

Unable to redirect "Documents" back to "My Documents"

Posted on 2010-11-16
10
1,521 Views
Last Modified: 2014-03-24
On my server, running Server 2003, I have a GPO that redirects everyone Documents & Desktop to a Home share.

We want to reverse that and have all the Documents direct back to the local machine.  I changed the GPO to "Redirect to local user profile path".  On Windows XP machines, the change works fine and all documents go back to their local "My Documents" folder.

The problem is with all Windows 7 machines.  Since MS was so BRILLIANT to change the name to "Documents", the GPO is trying to create a folder named "Documents" because it doesn't find one.  

The error message we get with all Windows 7 machines is:

Failed to apply policy and redirect folder "Documents" to "C:\Users\bob\Documents".
 Redirection options=0x80009221.
 The following error occurred: "Can not create folder "C:\Users\bob\Documents"".
 Error details: "This security ID may not be assigned as the owner of this object.
0
Comment
Question by:BartowIT
  • 4
  • 3
  • 2
  • +1
10 Comments
 
LVL 4

Expert Comment

by:bhartwell
ID: 34149669
Perhaps creating a separate OU for the users or computers with Windows 7 and those with Windows XP, then just disable the GPO from the windows 7 OU or just block inheritance, depending on where you placed that GPO.
0
 

Author Comment

by:BartowIT
ID: 34149882
That wouldn't apply as the old has been applied and thus now needs reversing.   I believe the problem is with the GPO and the terminology of "Documents" and "My Documents".
0
 
LVL 4

Expert Comment

by:bhartwell
ID: 34150552
try this out... the Vista section should work for your windows 7 machines.

http://support.microsoft.com/kb/313222/

0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 4

Expert Comment

by:bhartwell
ID: 34150603
other than that you will more than likely have to do an "in place upgrade" (formerly known as a system repair). Just boot using a windows 7 dvd and do a system repair, that will resolve the issue for sure.
0
 
LVL 66

Accepted Solution

by:
johnb6767 earned 500 total points
ID: 34152508
Might need to get around it via Login Script.....

Hold that thought.....

"Error details: "This security ID may not be assigned as the owner of this object. "

Actually, the error above simply means that they are the current owner of the Data on the current My Docs (network), and it is the way that the profiles handle ownership. Ive changed mine from the default, but im pretty sure that a default install is not granted ownership to the User, for C:\Users\%USERNAME%....

If you staged the folder ahead of time (if it is not being created), and perhaps used XCACLS to take ownership of the C:\Users\%USERNAME%\Documents folder....

Manually change an owner to the %Username% on a local My Docs, log them off/on, and see if the redirection occurs..... Then we can confirm thats the problem or not....

Actually it might just be a "Full Control" lack on the local directory even......
0
 

Author Comment

by:BartowIT
ID: 34154632
What I think is the problem is, and according to the error message, the redirect is trying to create a folder named "Documents".  In the folder structure in C:\Users\Bob there is a folder named "My Documents".

Per Johnb6767's advice, I gave "System" full control of the whol user profile directory (and sub directories) which is default on my other Windows 7 PCs.  Tried to re-login and still the same error.  
0
 

Author Comment

by:BartowIT
ID: 34155109
I believe I have found the solution.  I can not say with 100% confidence that this is the fix, as it may be a combination of the advice given here and the final step I did before it worked.

The fix, as simple as it sounds, was to DELETE the local "My Documents" folder.  Because the files hadn't redirected back to the local profile, the Documents folder was emtpy and I felt safe deleting the folder.

Once I deleted the local "My Documents" folder, the user needed to login one additional time and BINGO it started copying the folders from the server share back to the local profile.
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 34161749
Interesting......
0
 
LVL 2

Expert Comment

by:CanalIns
ID: 39951208
We are seeing the same behavior here as well. Has there been any updates or progress on this in the years since the initial post?
0
 

Author Comment

by:BartowIT
ID: 39951344
Our company has moved on to Server 2008, and now server 2012 so we don't have this issue now.  Re-reading my posts, I think deleting the local "My Documents" of on the desktop and letting the group policy create it before copying the files down from the server worked.

A good test would be to take a desktop that a user has NEVER logged into (but has files on the server) and see if their files get re-directed back to the local copy.

Or (and this may be a bit drastic) delete the local profile all together and reboot.  As with any redirect group policy, you sometimes have to log on... wait a minute... log off, and finally back on for the policy to take affect.  

Watch your Event Viewer each time you log on.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question