Unable to redirect "Documents" back to "My Documents"

Posted on 2010-11-16
Last Modified: 2014-03-24
On my server, running Server 2003, I have a GPO that redirects everyone Documents & Desktop to a Home share.

We want to reverse that and have all the Documents direct back to the local machine.  I changed the GPO to "Redirect to local user profile path".  On Windows XP machines, the change works fine and all documents go back to their local "My Documents" folder.

The problem is with all Windows 7 machines.  Since MS was so BRILLIANT to change the name to "Documents", the GPO is trying to create a folder named "Documents" because it doesn't find one.  

The error message we get with all Windows 7 machines is:

Failed to apply policy and redirect folder "Documents" to "C:\Users\bob\Documents".
 Redirection options=0x80009221.
 The following error occurred: "Can not create folder "C:\Users\bob\Documents"".
 Error details: "This security ID may not be assigned as the owner of this object.
Question by:BartowIT
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 2
  • +1

Expert Comment

ID: 34149669
Perhaps creating a separate OU for the users or computers with Windows 7 and those with Windows XP, then just disable the GPO from the windows 7 OU or just block inheritance, depending on where you placed that GPO.

Author Comment

ID: 34149882
That wouldn't apply as the old has been applied and thus now needs reversing.   I believe the problem is with the GPO and the terminology of "Documents" and "My Documents".

Expert Comment

ID: 34150552
try this out... the Vista section should work for your windows 7 machines.

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.


Expert Comment

ID: 34150603
other than that you will more than likely have to do an "in place upgrade" (formerly known as a system repair). Just boot using a windows 7 dvd and do a system repair, that will resolve the issue for sure.
LVL 66

Accepted Solution

johnb6767 earned 500 total points
ID: 34152508
Might need to get around it via Login Script.....

Hold that thought.....

"Error details: "This security ID may not be assigned as the owner of this object. "

Actually, the error above simply means that they are the current owner of the Data on the current My Docs (network), and it is the way that the profiles handle ownership. Ive changed mine from the default, but im pretty sure that a default install is not granted ownership to the User, for C:\Users\%USERNAME%....

If you staged the folder ahead of time (if it is not being created), and perhaps used XCACLS to take ownership of the C:\Users\%USERNAME%\Documents folder....

Manually change an owner to the %Username% on a local My Docs, log them off/on, and see if the redirection occurs..... Then we can confirm thats the problem or not....

Actually it might just be a "Full Control" lack on the local directory even......

Author Comment

ID: 34154632
What I think is the problem is, and according to the error message, the redirect is trying to create a folder named "Documents".  In the folder structure in C:\Users\Bob there is a folder named "My Documents".

Per Johnb6767's advice, I gave "System" full control of the whol user profile directory (and sub directories) which is default on my other Windows 7 PCs.  Tried to re-login and still the same error.  

Author Comment

ID: 34155109
I believe I have found the solution.  I can not say with 100% confidence that this is the fix, as it may be a combination of the advice given here and the final step I did before it worked.

The fix, as simple as it sounds, was to DELETE the local "My Documents" folder.  Because the files hadn't redirected back to the local profile, the Documents folder was emtpy and I felt safe deleting the folder.

Once I deleted the local "My Documents" folder, the user needed to login one additional time and BINGO it started copying the folders from the server share back to the local profile.
LVL 66

Expert Comment

ID: 34161749

Expert Comment

ID: 39951208
We are seeing the same behavior here as well. Has there been any updates or progress on this in the years since the initial post?

Author Comment

ID: 39951344
Our company has moved on to Server 2008, and now server 2012 so we don't have this issue now.  Re-reading my posts, I think deleting the local "My Documents" of on the desktop and letting the group policy create it before copying the files down from the server worked.

A good test would be to take a desktop that a user has NEVER logged into (but has files on the server) and see if their files get re-directed back to the local copy.

Or (and this may be a bit drastic) delete the local profile all together and reboot.  As with any redirect group policy, you sometimes have to log on... wait a minute... log off, and finally back on for the policy to take affect.  

Watch your Event Viewer each time you log on.

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While working, an annoying popup showing below will come and we cannot cancel or close it form the screen. The error message will come again and again.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question