bustechllc
asked on
Ridiculous Group Policy Folder Redirection issue
I'm having the weirdest issue.
I just added NewDC to the domain and took OldDC offline. I set up Group Policy on NewDC to do folder redirection. These are the permissions:
Share Permissions:
Everyone – Full Control
Administrators – Full Control
System – Full Control
NTFS Permissions:
Everyone - Create Folder/Append Data (This Folder Only)
Everyone - List Folder/Read Data (This Folder Only)
Everyone - Read Attributes (This Folder Only)
Everyone - Traverse Folder/Execute File (This Folder Only)
CREATOR OWNER - Full Control (Subfolders and Files Only)
System - Full Control (This Folder, Subfolders and Files)
Domain Admins - Full Control (This Folder, Subfolders and Files)
Previously, my profile had been set up to use a network share on OldDC for the Documents Library, always available offline.
For some reason, this group policy isn't taking effect on this machine.
I setup a laptop, and it works perfectly.
I ran GPResult and it is being applied
I checked event viewer and got the ever so helpful: Windows failed to apply the Folder Redirection settings. Folder Redirection settings might have its own log file. Please click on the "More information" link.
Checking the windows logs > Folder Redirection:
Folder "Documents" has to be redirected.
Redirection options = 0x1001.
Parent folder = "{00000000-0000-0000-0000-
Path = "\\dc1\FolderRedirection\%
Group = s-1-1-0.
next event:
No Folders were previously redirected.
I've tried removing all of the library locations.. nothign seems to get this to work on this machine.
500 points to the winner!
I just added NewDC to the domain and took OldDC offline. I set up Group Policy on NewDC to do folder redirection. These are the permissions:
Share Permissions:
Everyone – Full Control
Administrators – Full Control
System – Full Control
NTFS Permissions:
Everyone - Create Folder/Append Data (This Folder Only)
Everyone - List Folder/Read Data (This Folder Only)
Everyone - Read Attributes (This Folder Only)
Everyone - Traverse Folder/Execute File (This Folder Only)
CREATOR OWNER - Full Control (Subfolders and Files Only)
System - Full Control (This Folder, Subfolders and Files)
Domain Admins - Full Control (This Folder, Subfolders and Files)
Previously, my profile had been set up to use a network share on OldDC for the Documents Library, always available offline.
For some reason, this group policy isn't taking effect on this machine.
I setup a laptop, and it works perfectly.
I ran GPResult and it is being applied
I checked event viewer and got the ever so helpful: Windows failed to apply the Folder Redirection settings. Folder Redirection settings might have its own log file. Please click on the "More information" link.
Checking the windows logs > Folder Redirection:
Folder "Documents" has to be redirected.
Redirection options = 0x1001.
Parent folder = "{00000000-0000-0000-0000-
Path = "\\dc1\FolderRedirection\%
Group = s-1-1-0.
next event:
No Folders were previously redirected.
I've tried removing all of the library locations.. nothign seems to get this to work on this machine.
500 points to the winner!
check permissions on parent folder?
ASKER
They're fine. As evidenced by it's working for my user account on other computers, and all other user accounts on this computer.
gpupdate /force what are the results?
ASKER
Updating Policy...
User Policy update has completed successfully.
The following warnings were encountered during user policy processing:
The Group Policy Client Side Extension Folder Redirection was unable to apply on
e or more settings because the changes must be processed before system startup o
r user logon. The system will wait for Group Policy processing to finish complet
ely before the next startup or logon for this user, and this may result in slow
startup and boot performance.
Computer Policy update has completed successfully.
For more detailed information, review the event log or run GPRESULT /H GPReport.
html from the command line to access information about Group Policy results.
Certain User policies are enabled that can only run during logon.
OK to logoff?. (Y/N)
Results of gpresult /r
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 5/5/2011 at 2:25:47 PM
RSOP data for BUSTECH\acarlyon on BTL1-PC : Logging Mode
--------------------------
OS Configuration: Member Workstation
OS Version: 6.1.7600
Site Name: Fairfield
Roaming Profile: N/A
Local Profile: C:\Users\acarlyon
Connected over a slow link?: No
COMPUTER SETTINGS
------------------
CN=BTL1-PC,CN=Computers,DC
Last time Group Policy was applied: 5/5/2011 at 2:24:38 PM
Group Policy was applied from: intranet.bustech.local
Group Policy slow link threshold: 500 kbps
Domain Name: BUSTECH
Domain Type: Windows 2000
Applied Group Policy Objects
--------------------------
Default Domain Policy
Small Business Server Auditing Policy
The following GPOs were not applied because they were filtered out
--------------------------
Local Group Policy
Filtering: Not Applied (Empty)
Folder Redirection
Filtering: Not Applied (Empty)
The computer is a part of the following security groups
--------------------------
BUILTIN\Administrators
Everyone
SQLServer2005MSSQLUser$BTL
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
This Organization
BTL1-PC$
Domain Computers
CERTSVC_DCOM_ACCESS
System Mandatory Level
USER SETTINGS
--------------
CN=Andy Carlyon,OU=Users,OU=Busine
Last time Group Policy was applied: 5/5/2011 at 2:24:38 PM
Group Policy was applied from: intranet.bustech.local
Group Policy slow link threshold: 500 kbps
Domain Name: BUSTECH
Domain Type: Windows 2000
Applied Group Policy Objects
--------------------------
Default Domain Policy
Folder Redirection
Local Group Policy
The following GPOs were not applied because they were filtered out
--------------------------
Small Business Server Auditing Policy
Filtering: Disabled (GPO)
The user is a part of the following security groups
--------------------------
Domain Users
Everyone
Netmon Users
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
Accounting
Domain Admins
Denied RODC Password Replication Group
CERTSVC_DCOM_ACCESS
High Mandatory Level
User Policy update has completed successfully.
The following warnings were encountered during user policy processing:
The Group Policy Client Side Extension Folder Redirection was unable to apply on
e or more settings because the changes must be processed before system startup o
r user logon. The system will wait for Group Policy processing to finish complet
ely before the next startup or logon for this user, and this may result in slow
startup and boot performance.
Computer Policy update has completed successfully.
For more detailed information, review the event log or run GPRESULT /H GPReport.
html from the command line to access information about Group Policy results.
Certain User policies are enabled that can only run during logon.
OK to logoff?. (Y/N)
Results of gpresult /r
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 5/5/2011 at 2:25:47 PM
RSOP data for BUSTECH\acarlyon on BTL1-PC : Logging Mode
--------------------------
OS Configuration: Member Workstation
OS Version: 6.1.7600
Site Name: Fairfield
Roaming Profile: N/A
Local Profile: C:\Users\acarlyon
Connected over a slow link?: No
COMPUTER SETTINGS
------------------
CN=BTL1-PC,CN=Computers,DC
Last time Group Policy was applied: 5/5/2011 at 2:24:38 PM
Group Policy was applied from: intranet.bustech.local
Group Policy slow link threshold: 500 kbps
Domain Name: BUSTECH
Domain Type: Windows 2000
Applied Group Policy Objects
--------------------------
Default Domain Policy
Small Business Server Auditing Policy
The following GPOs were not applied because they were filtered out
--------------------------
Local Group Policy
Filtering: Not Applied (Empty)
Folder Redirection
Filtering: Not Applied (Empty)
The computer is a part of the following security groups
--------------------------
BUILTIN\Administrators
Everyone
SQLServer2005MSSQLUser$BTL
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
This Organization
BTL1-PC$
Domain Computers
CERTSVC_DCOM_ACCESS
System Mandatory Level
USER SETTINGS
--------------
CN=Andy Carlyon,OU=Users,OU=Busine
Last time Group Policy was applied: 5/5/2011 at 2:24:38 PM
Group Policy was applied from: intranet.bustech.local
Group Policy slow link threshold: 500 kbps
Domain Name: BUSTECH
Domain Type: Windows 2000
Applied Group Policy Objects
--------------------------
Default Domain Policy
Folder Redirection
Local Group Policy
The following GPOs were not applied because they were filtered out
--------------------------
Small Business Server Auditing Policy
Filtering: Disabled (GPO)
The user is a part of the following security groups
--------------------------
Domain Users
Everyone
Netmon Users
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
Accounting
Domain Admins
Denied RODC Password Replication Group
CERTSVC_DCOM_ACCESS
High Mandatory Level
so it still cannot force the folder redi. .....
Now someone had a similar problem:
http://social.technet.microsoft.com/Forums/en/winserverGP/thread/17234aa8-d935-4864-adf3-b14f8a9d4c05
hope that helps...
Now someone had a similar problem:
http://social.technet.microsoft.com/Forums/en/winserverGP/thread/17234aa8-d935-4864-adf3-b14f8a9d4c05
hope that helps...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Similar, but not exactly the same.
"Hi,
Do the policy settings include the option to move the contents to the new location? if that's the case, the processing is trying to move the files on login, try setting the policy without the option.
Thanks,
Guy
"
This looks promising though. BRB!
"Hi,
Do the policy settings include the option to move the contents to the new location? if that's the case, the processing is trying to move the files on login, try setting the policy without the option.
Thanks,
Guy
"
This looks promising though. BRB!
Good luck!
ASKER
500 points to you!!
So, it loosk like if you have that GPO configured and the documents are in a place that is no longer accessible, it wont take effect but will tell you that it did. Nice.
Thanks!
So, it loosk like if you have that GPO configured and the documents are in a place that is no longer accessible, it wont take effect but will tell you that it did. Nice.
Thanks!
No problem-o ;-)
ASKER
Link helped
ASKER