?
Solved

Ridiculous Group Policy Folder Redirection issue

Posted on 2011-05-05
12
Medium Priority
?
7,635 Views
Last Modified: 2012-05-11
I'm having the weirdest issue.

I just added NewDC to the domain and took OldDC offline. I set up Group Policy on NewDC to do folder redirection. These are the permissions:

Share Permissions:
Everyone – Full Control
Administrators – Full Control
System – Full Control

NTFS Permissions:
Everyone - Create Folder/Append Data (This Folder Only)
Everyone - List Folder/Read Data (This Folder Only)
Everyone - Read Attributes (This Folder Only)
Everyone - Traverse Folder/Execute File (This Folder Only)
CREATOR OWNER - Full Control (Subfolders and Files Only)
System - Full Control (This Folder, Subfolders and Files)
Domain Admins - Full Control (This Folder, Subfolders and Files)

Previously, my profile had been set up to use a network share on OldDC for the Documents Library, always available offline.

For some reason, this group policy isn't taking effect on this machine.

I setup a laptop, and it works perfectly.
I ran GPResult and it is being applied

I  checked event viewer and got the ever so helpful: Windows failed to apply the Folder Redirection settings. Folder Redirection settings might have its own log file. Please click on the "More information" link.

Checking the windows logs > Folder Redirection:

Folder "Documents" has to be redirected.
 Redirection options = 0x1001.
 Parent folder = "{00000000-0000-0000-0000-000000000000}".
 Path = "\\dc1\FolderRedirection\%USERNAME%\Documents".
 Group = s-1-1-0.

next event:

No Folders were previously redirected.


I've tried removing all of the library locations.. nothign seems to get this to work on this machine.

500 points to the winner!
0
Comment
Question by:bustechllc
  • 6
  • 6
12 Comments
 

Author Comment

by:bustechllc
ID: 35700182
Oh, and I might add that it works for a brand new test user on this machine. Go figure.
0
 
LVL 11

Expert Comment

by:remixedcat
ID: 35700588
check permissions on parent folder?
0
 

Author Comment

by:bustechllc
ID: 35700601
They're fine. As evidenced by it's working for my user account on other computers, and all other user accounts on this computer.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 11

Expert Comment

by:remixedcat
ID: 35700640
gpupdate /force  what are the results?
0
 

Author Comment

by:bustechllc
ID: 35700727
Updating Policy...

User Policy update has completed successfully.

The following warnings were encountered during user policy processing:

The Group Policy Client Side Extension Folder Redirection was unable to apply on
e or more settings because the changes must be processed before system startup o
r user logon. The system will wait for Group Policy processing to finish complet
ely before the next startup or logon for this user, and this may result in slow
startup and boot performance.
Computer Policy update has completed successfully.

For more detailed information, review the event log or run GPRESULT /H GPReport.
html from the command line to access information about Group Policy results.

Certain User policies are enabled that can only run during logon.

OK to logoff?. (Y/N)


Results of gpresult /r

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 5/5/2011 at 2:25:47 PM



RSOP data for BUSTECH\acarlyon on BTL1-PC : Logging Mode
---------------------------------------------------------

OS Configuration:            Member Workstation
OS Version:                  6.1.7600
Site Name:                   Fairfield
Roaming Profile:             N/A
Local Profile:               C:\Users\acarlyon
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=BTL1-PC,CN=Computers,DC=bustech,DC=local
    Last time Group Policy was applied: 5/5/2011 at 2:24:38 PM
    Group Policy was applied from:      intranet.bustech.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        BUSTECH
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        Small Business Server Auditing Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

        Folder Redirection
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups
    -------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        SQLServer2005MSSQLUser$BTL1-PC$ACT7
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        This Organization
        BTL1-PC$
        Domain Computers
        CERTSVC_DCOM_ACCESS
        System Mandatory Level
       

USER SETTINGS
--------------
    CN=Andy Carlyon,OU=Users,OU=Business Technology,DC=bustech,DC=local
    Last time Group Policy was applied: 5/5/2011 at 2:24:38 PM
    Group Policy was applied from:      intranet.bustech.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        BUSTECH
    Domain Type:                        Windows 2000
   
    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        Folder Redirection
        Local Group Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Small Business Server Auditing Policy
            Filtering:  Disabled (GPO)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        Netmon Users
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        CONSOLE LOGON
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Accounting
        Domain Admins
        Denied RODC Password Replication Group
        CERTSVC_DCOM_ACCESS
        High Mandatory Level
0
 
LVL 11

Expert Comment

by:remixedcat
ID: 35700788
so it still cannot force the folder redi. .....


Now someone had a similar problem:
http://social.technet.microsoft.com/Forums/en/winserverGP/thread/17234aa8-d935-4864-adf3-b14f8a9d4c05

hope that helps...
0
 
LVL 11

Accepted Solution

by:
remixedcat earned 1500 total points
ID: 35700796
0
 

Author Comment

by:bustechllc
ID: 35700867
Similar, but not exactly the same.

"Hi,
 Do the policy settings include the option to move the contents to the new location? if that's the case, the processing is trying to move the files on login, try setting the policy without the option.


Thanks,
Guy
"

This looks promising though. BRB!
0
 
LVL 11

Expert Comment

by:remixedcat
ID: 35700873
Good luck!
0
 

Author Comment

by:bustechllc
ID: 35701068
500 points to you!!

So, it loosk like if you have that GPO configured and the documents are in a place that is no longer accessible, it wont take effect but will tell you that it did. Nice.

Thanks!
0
 
LVL 11

Expert Comment

by:remixedcat
ID: 35701074
No problem-o ;-)
0
 

Author Closing Comment

by:bustechllc
ID: 35701077
Link helped
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question