Link to home
Start Free TrialLog in
Avatar of Alan Bryant
Alan BryantFlag for United States of America

asked on

GPO Folder Redirection Not Working

I have two Windows Server 2008 R2 domain controllers. The domain & forest are at server 2008 r2 functionality. I have mostly windows xp workstations, but a few windows 7 also. We are also using windows 2003 terminal services.

I have set up folder redirection in GPO, but it is not taking.

I get the following when I do a gpupdate:
Windows failed to apply the Folder Redirection settings. Folder Redirection settings might have its own log file. Please click on the "More information" link.
Computer Policy update has completed successfully.

Open in new window

When I check the Event Log, I see the following:
Log Name: Application
Source: Microsoft-Windows-Folder Redirection
Date: 4/12/2012 2:44:37 PM
Event ID: 511
Task Category: None
Level: Error
Keywords: 
User: RCMHOSPITAL\\abryant
Computer: RCMHwsIT.rcmhospital.local
Description:
Failed to process policy info.
Error details: "The system cannot find the file specified.
".
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"&gt;
<System>
<Provider Name="Microsoft-Windows-Folder Redirection" Guid="{7D7B0C39-93F6-4100-BD96-4DDA859652C5}" />
<EventID>511</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-04-12T19:44:37.703171200Z" />
<EventRecordID>8428</EventRecordID>
<Correlation ActivityID="{E7DE2150-1E48-4B0B-A65E-AAB55BEADB6D}" />
<Execution ProcessID="240" ThreadID="3508" />
<Channel>Application</Channel>
<Computer>RCMHwsIT.rcmhospital.local</Computer>
<Security UserID="S-1-5-21-3460913004-1748156335-2774183333-1220" />
</System>
<EventData Name="EVENT_FDEPLOY_FailedToProcessPolicyInfo">
<Data Name="ErrorDetails">The system cannot find the file specified.
</Data>
</EventData>
</Event>

Open in new window

I'm not sure what file it is looking for and cannot find. Let me know what other information is need to figure this out. I'mj realitively new to GPO, AD, & Windows servers in general.

I have attached the result of a GP Modeling run on the domain.

I have also attached a file with the output from gpresult /v
rcmhospital-on-rcmhospital.htm
gpo.log
Avatar of Geodash
Geodash
Flag of United States of America image

Is the policy not working on all clients or just windows XP or Windows 7? If its just XP, do you have the client side extensions installed, to pull GP's from 2008 DC?
Avatar of Alan Bryant

ASKER

It is both XP & 7. But, yes, I do have the client side extensions installed.
You get the same error doing a gpupdate /force from both XP and W7?
It says that under "Denied GPO's" that it is disabled on the Folder Redirection Policy

The 5th one down
Then the one under that - looks like a broken SID - {73F9C678-D10D-406F-90F9-E5DDC9C86463}

It says inaccessible

But the main Folder Redirect policy says it is disabled.
Yeah, I saw that, but I assumed that since it was on the Computer Configuration part that it didn't have any effect, is that not correct?

Also, if it is in fact disabled, I don't know how I did it, or how to undo it.

Is there any way to find out what the broken SID might be?
Ok, disable Computer Configuration settings was checked on the Folder Redirection GPO, not sure how that happened. I have unchecked it and will try again.
Here is the result of gpupdate /force after removing the disabled bit.
gpo-force.log
Here is gpresult /v after removing the disabled bit:
gpo-notdisabled.log
It says it applied - have you tested it to see? For future and for your safety, I would hide your domain name before posting on here. Just my opinion to make sure you are safe...



USER SETTINGS
--------------
    CN=Alan Bryant,CN=Users,DC=rcmhospital,DC=local
    Last time Group Policy was applied: 4/12/2012 at 4:28:40 PM
    Group Policy was applied from:      RCMHDC01.rcmhospital.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        
    Domain Type:                        Windows 2000
   
    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        Drives & Shortcuts
        Automatic Updates
        Folder Redirection
Are you running Windows 2000 DC's?

Your gpo log said you are running Windows 2000 Domain  -

Domain Type:                        Windows 2000

But you are running w2k8r2 servers. What level is your domain running out. I am not sure if the log is just reporting incorrectly or not.
No, it does not work even though it says it is being applied. Nothing is created on the share that I have set up in the GPO properties, and yes, the permissions are correct according to Technet.

I'm thinking the problem may be related to the bad SID. It references it being inaccessible, and the error in Event Log references a file not available.

I just don't know how to find out anything about the SID, if you can.
Here is the report for the folder redirection GPO if this helps.
Folder-Redirection.htm
Do you have a test domain or is all of your testing have to be done in production?
Following a link in this thread (http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/4e145bc8-c77b-4f01-8b99-88408caebcd0/), I did a little more digging.

In this article, it says that you should find the file "fdeploy.ini" in the directory User\Documents & Settings under the GPO GUID, so SYSVOL\{GPO GUID}\User\Documents & Settings\fdeploy.ini.

Once I found the GUID of my FOlder Redirection GPO, I looked there and that file is not there. Is this the problem?

I have tried with several different GPO's and the result is the same.

I have verified that the inaccessible GUID is not the FOlder Redirection GPO, I am not sure what it is. All of my other GPO's are working as expected.
Yes I believe the file should be there. Have you tried disabling that current policy and creating a whole new one from scratch with a different name? Maybe name it with Test in front of it, just to see if the actually GP is causing it or the container
Ok, so I actually found in another GPO that there had been some Folder Redirection Settings set for a specific group that no longer existed. I have removed that GPO, and any reference to Folder Redirection in ALL GPO's is set to not configured like the default settings.



The odd thing is that I am still getting the following in a gpupdate
Updating Policy...
User Policy update has completed successfully.

The following warnings were encountered during user policy processing:
Windows failed to apply the Folder Redirection settings. Folder Redirection settings might have its own log file. Please click on the "More information" link.
Computer Policy update has completed successfully.

For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

Open in new window


I am going to try with a new GPO and see if it works.
ASKER CERTIFIED SOLUTION
Avatar of Geodash
Geodash
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Just so I remember, the policy is not working on any PC you log in to correct?
That is correct.

Meanwhile, I don't have much in Group Policy defined, and what I do, I can easily add back later. I removed all custom GPO's and I followed the instructions in the link you last provided (I re-created the Default GPO's) and now the error for the Folder Redirection is gone.

I have added back my WSUS settings and still looking good.

I'm going to add back my Drive Mappings next. If all is still good, I will try Folder Redirection again and update this thread.
It is working now!!

I wonder if it was not the conflict of two sets of Folder Redirection applying that somehow corrupted my Group Policy? It is odd how only Folder Redirection was affected.

Thank you Geodash for all your help, it is much appreciated!
No problem at all, and awesome news! I am glad it is working now!