Solved

Document folder redirection GPO not working on new Win7 machines when migrating XP users.

Posted on 2011-02-28
7
4,248 Views
Last Modified: 2012-05-11
I'm having problems getting the existing document folder redirection policy to apply to existing users who have moved from XP to Windows 7. The policy works perfectly when they are on XP. It works perfectly when a new user is given a Windows 7 machine. When I created a test user, and logged him onto an XP machine which created the folders on the fileserver for his documents, and then logged that same user onto a Win 7 machine, the redirection still works perfectly. But when any of my existing users, who originally got their GPO applied to their Windows XP machines before the WS2008 machine was installed and this whole migration process began and who have established folder structures and files on their documents folder on the server, are given a Windows 7 box, the policy does not apply. Running gpupdate /force on the user machine results in the generic error below:

The Group Policy Client Side Extension Folder Redirection was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
Computer Policy update has completed successfully.

Obviously this happens no matter how many times I log off and reboot.

When I model the GP against the  2008 DC, the model shows successful application. See attached screenshot  "GPModel-ramiroe~smsf08.png"

When I model it against the 2003 DC, I get the message "An Unknown error occurred while data was gathered for this extension: Details: Not Found"

I've installed the Group Policy Preference Client Side Extensions for Windows Server 2003 (KB943729) per the troubleshooting I tried following this EE thread: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_26469902.html?sfQueryTermInfo=1+10+2003+30+7+gpo+server+window

I'm stumped and and this is turning into a massive time sink. Can anyone help?

GPModel-ramiroe-smsf01.png
0
Comment
Question by:tlawrence-ssit
  • 4
  • 3
7 Comments
 

Author Comment

by:tlawrence-ssit
ID: 34998900
Screenshot of modeled policy
0
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 35010069
It's been a while since I did an XP-to-Vista/Win7 migration, but I don't remember encountering this problem.  It could, however, be caused by the difference in the folder naming conventions between the two OS's and the way your GP is configured. Could you post a screen capture or GP report output of the actual settings that you're using in your group policy for folder redirection?
0
 

Author Comment

by:tlawrence-ssit
ID: 35013343
@Hypercat- here it is. Thanks for your help, I've been pulling my hair out here.
GP-Settings.png
0
Do email signature updates give you a headache?

Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 35018553
That looks OK as far as I can tell.  Let's look at some other things.

First of all, let's be sure that the group policy central store has been created. Is the Windows 2008 machine a DC? Do you also have a Windows 2003 DC on the domain? Do you see the folder \%systemroot%\sysvol\sysvol\[domain]\Policies\PolicyDefinitions on all of your DCs? And are there a bunch of .ADMX files in that folder as well as a folder named "EN-US"?

Also, check the event log on one of the Win 7 workstations after logging on when folder redirection fails. Post any errors you find from the User Profile Service, Folder Redirection or SceCli sources.

Another question - when the folder redirection fails, does a "My Documents" folder actually exist in the .V2 profile for that user?
0
 

Author Comment

by:tlawrence-ssit
ID: 35020205
Yes, the WS2008 machine is a DC, and there is also a WS2003 DC in the domain. They both contain the folder you mentioned, and both have 294 .admx files and a folder called en-US containing 147 .adml files.

There is no .V2 folder created on the fileserver. Each user has a folder with the same name as their username. Including the new user I created, "GPOuser", whose documents redirect perfectly on W7 and WXP machines. However, we do not setup roaming profiles... only documents folder redirection.

On the Win7 workstation, I get the following error attached error - see w7clent-event502documents.png. Identical errors occur for Pictures, Music, and Videos. In the system log, I also get a Warning - Event 1085, GroupPolicy "Windows failed to apply the Folder Redirection settings. Folder Redirection settings might have its own log file. Please click on the 'More information' link."

 Folder Redirection Error in Application Log on W7 machine
0
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 500 total points
ID: 35020813
From the error message it looks like it is a permissions issue. I was thinking you were doing both profiles and documents redirection - but no matter. The question I really meant to ask is whether the My Documents folder exists at the redirected network location.  From the error message, it appears that the group policy is trying to create a new folder with that name.  If the folder doesn't already exist, then you would need to create a folder in the user's network shared folder named "My Documents."
The user must be the owner of the folder plus have Full Control permissions on that folder. If you need to change the permissions on an existing My Documents folder, make sure that you force down the permissions to the subfolders and files as well if there are already existing documents, etc., there.
0
 

Author Closing Comment

by:tlawrence-ssit
ID: 35022772
That was it. For whatever reason, Administrator was the owner of all the user folders. Probably occurred during the recent migration from a NAS based solution. Unfortunately, I have to go manually change owner on all 200 folders... but at least I don't have to feel like I'm nuts anymore! Thank you so much for your help here!
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Learn about cloud computing and its benefits for small business owners.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now