Solved

Folder redirect on SBS 2011 failed to apply policy - cannot create folder - Access is denied

Posted on 2014-02-16
8
911 Views
Last Modified: 2014-03-03
On a fresh 2011 install.  accepted the default redirected folders settings and location for folder redirect.

FailedServer\RedirectedFolders\username\Start Menu".
 Redirection options=0x80009231.
 The following error occurred: "Can not create folder "\\SBSServer\RedirectedFolders\username\Start Menu"".
 Error details: "Access is denied.
folder:  C:\Users\FolderRedirections  Shared by default as 'RedirectedFolders'.
share permissions: All Domain Users have Full control.
NTFS Full control for  domain\Administrator group & SYSTEM.
user folders SYSTEM & Administrator group & domain user have full control.
Currently I am logging in directly to the SBS.
What am I missing.
0
Comment
Question by:sjs
  • 4
  • 3
8 Comments
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39863739
"Currently I am logging in directly to the SBS"

Log onto a client machine as the domain user and make sure you can access the RedirectedFolders share.

Jeff
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39863746
Also, try doing it without redirecting the Start Menu.  I don't really like this option because there may be a bunch of things on the Start Menu which are actually in the Public Start Menu of the workstation, and those won't redirect.  

Jeff
0
 

Author Comment

by:sjs
ID: 39863763
I will join a workstation to the domain tomorrow and try it.
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39863777
Wait a minute -- you haven't joined workstations yet?  

When are you getting the above error then?  Because the subfolders aren't created until the actual user logs in on their workstation at which time the Group Policy creates them.  Administrators do not have access rights to user redirected folders by default.

Jeff
0
 
LVL 22

Assisted Solution

by:Olaf De Ceuster
Olaf De Ceuster earned 100 total points
ID: 39864175
Jeff is 100% correct. Need to join users first (http://connect) to create the folders.
You can test this on your Admin account. You might have to allow folder redirection in the console for the admin.
Add something on the desktop, right click > properties  see if it points at the right folders on the server.
Or change the setting in the group policy: Folder redirection policy>User config>windows settings>Folder redirections > Settings: untick "grant user exclusive rights" on every redirected folder
Hope that helps,
Olaf
0
 

Author Comment

by:sjs
ID: 39898623
Sorry for the delay in responding. I had put it off for few days because I was able to recover the server.  
Jeffrey,  I was testing by logging in to the SBS as a user with administrator permissions. I did not realize that I can't test folder redirect from the SBS itself.
Olaf, by unticking  "grant user exclusive rights" who would have access to the redirected folders other than the user?
I do plan to switch to another machine next week. folder redirect and roaming profiles are not setup on the current server and plan to do so on the replacement hardware.
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 400 total points
ID: 39898978
By unticking the grant user exclusive rights it will allow all users to have access by default.  However, you can remove the entry for "Domain Users" in the parent folder (called Redirected Folders).  This will leave the Administrators entry so that you can still access the folders as an administrator.

You probably do NOT want to implement Roaming Profiles though as its unnecessary.  Folder Redirection will take care of making sure that users have what they need if they log into any workstation.

Jeff
0
 

Author Comment

by:sjs
ID: 39901086
Thanks Jeff
0

Featured Post

Active Directory Webinar

We all know we need to protect and secure our privileges, but where to start? Join Experts Exchange and ManageEngine on Tuesday, April 11, 2017 10:00 AM PDT to learn how to track and secure privileged users in Active Directory.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Dell Poweredge Server - Fault detected 8 247
How do I Shrink the Size of the C:\windows\winsxs     Folder? 9 142
Disable Email Signatures via GPO 25 166
aws pricing 2 61
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question