How to migrate Users Shared Folders from SBS2003 to Server 2012 R2

I am almost finished migrating from our old SBS 2003 server to a new Server 2012 R2 Hyper-V host with multiple Server 2012 R2 VMs. I used robocopy to copy all the shared folders from the SBS2003 to one of the new Server 2012 R2 VMs. It kept all the security stuff, all I had to do was share the new folders. This was pretty simple in the end.
The only share that I still want to move, but have not done, is the 'Users Shared Folders' (\\Server\Users). Because it is SBS, each user's My Documents folder is redirected to  \\Server\Users\username.
I don't mind this concept and was thinking of keeping it on the new server, but I am not sure how to migrate it without having to manually change every users account settings. I can copy the data and security info easy enough (using robocopy) but don't know what to do about the folder re-directions.

Any suggestions?

Cheers,
Greg
gregmiller4itAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

gregmiller4itAuthor Commented:
I've just had a closer look and I can't even work out what actually makes the users' My Documents folder be re-directed in the first place. From memory I thought it was somewhere in the user account settings in ADUC, but I have just checked that out and I can't find it at all. I'm guessing it will have to be somewhere in Group Policy. I'll go digging and see what I can find.
Larry Struckmeyer MVPCommented:
It is a GPO, in the domain default policy.  If you are doing a true migration the folders should come over automagically.  If you are doing all this manually you will likely have to take ownership of the folder tree before you can move it.  If the new server is in the same AD, the security should come over with robocopy.
gregmiller4itAuthor Commented:
Ok thanks. I'll have a look when I'm back on Monday
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

arnoldCommented:
Find the GPO that has the redirect, hopefully it will be a specific GPO rather than included in the settings.
How long before the SBS is retired?

DoubleCheck the folder redirection settings to make sure they are set to copy the data back if the user falls out of hving it apply to them.  
To avoid this issue in the future, you should make sure the new share is using a domain based one.

After the above change (GPO settings) is allowed to apply to the computers/users. Reverse the folder redirection GPO user falls out of it applyoing. The next two logins will copy the data to their profile. At that point, you would apply a new folder redirection GPO to \\domain\Sharedfolders\%Username%\My Documents

........

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
gregmiller4itAuthor Commented:
SBS will be retired as soon as I sort out the last few things that it still does. Hopefully sometime this week.
Your suggestions sound good, I'll be back at the site tomorrow.
Larry Struckmeyer MVPCommented:
Or, from the SBS console, deselect folder redirection for the users which will push all the files back to the stations.  (Be sure you are backed up).  After you have removed the SBS you can choose too enable folder redirection as a GPO for users in the selected OU, or you can manually change the path for users documents on their desktops.
gregmiller4itAuthor Commented:
So, I have found the settings in the GPO....sort of.
The GP is called Small Business Server Folder Redirection...pretty obvious, but I couldn't find the setting in it at first.
If I select the above GP, the summary shows in the right pane and I can expand it down to find this:
User Config/Policies/Windows Settings/Folder Redirection/Documents/Setting: Basic (Redirect everyone's folder to the same location)
Path: \\Server\Users\%USERNAME%\My Documents
And Music, Pictures & Videos are all set to: Follow the  \Documents folder

So that is all in the right-hand pane. However, If I select the GP and right-click and hit Edit, I can drill down to the same place, but there is no entry under Documents (or Pictures, Music or Videos). I eventually discovered that I need to right-click 'Documents' and choose Properties...and then I found it.

So, now my question is:
Can I just change the Root Path in those Properties (under Documents), from \\Server\Users to \\NewServer\Users?
Will that then move the contents from \\Server\Users to \\NewServer\Users?
Would I need to create \\NewServer\Users first?
arnoldCommented:
No you can't.  You first need to have the contents copied back into the profile for the settings to change following the application of a new GPO or alter the shared location and reapply.

I would recommend using a new GPO.
Larry Struckmeyer MVPCommented:
I "think" disabling the policy is all that is necessary to push the files back on to the stations.

It might take as many as three logons to even start the process and if you have a lot of users or files you don't want to do them all at the same time.
arnoldCommented:
Double checking the policy to make sure it is set to reverse when it falls out of applying and allowing time for the change if changes are made.
At times, the redirect is not reverted.
gregmiller4itAuthor Commented:
So, I have disabled the GPO called Small Business Server Folder Redirection. I have got most of the users to log off and back on again. When they log back on, it sits at "Welcome" with the spinning circle for quite a while and eventually logs on. Once a user has logged on and I look at the properties of the 'My Documents' folder, it is in C:\Users\username\Documents.
I would say that the delay is the time it takes to copy the documents folder back to the local PC. It seems as though the redirection has been turned off.
Next step is to put it onto one of the new servers.
arnoldCommented:
Consider using domain based shares for these.  This way should you need to transition again, you can transition the share target server without going through this process.

Look at DFS and DFS replication.
gregmiller4itAuthor Commented:
Sorry guys, I've been away for a few days, but back now and will try to get this finished up pretty quickly
gregmiller4itAuthor Commented:
So, I looked into some doco on DFS and have created a domain-based share to put all the users' My Documents folders into.
I created a new GPO pointing all users' My Documents folders to \\DOMAIN\Public\UserDocs\username\Documents. I left Music, Pictures and Videos on the users' local drive.
I linked the GPO to the domain and tried logging on with a test user account.  It worked perfectly, but there was almost nothing in the test user's documents folder.
I have since logged my own account on and off a bunch of times, restarted, shutdown, ran "gpudate /force"...all to no avail: my documnets folder appears to be securely sticking to C:\Users\username.....

Am I missing something here? Is there a way to force the copy to happen?
arnoldCommented:
You first must revert the existing redirect but before doing this make sure the current redirect GPO is set to copy data back when the policy no longer applies. You can not redirect a redirected folder.
arnoldCommented:
Double check where the files are.  It takes two logins to revert and two to apply the new redirect.
gregmiller4itAuthor Commented:
Thanks Arnold, I have successfully moved all the users data back onto their local hard drives; I made sure the setting was correct in the original (SBS ) GPO to copy the data back when the policy no longer applies. So my data was originally at \\Server\Users\username\documents. It is now at C:\Users\username\documents.

The test user was the same as above originally and then locally. Now, since I've added the new GPO, the test user's data is sitting in \\Domain\Public\UserDocs\username\documents, but no other user's data has been redirected to the new domain-based share.

I have logged off/on numerous times....

Any further thoughts?
arnoldCommented:
Did you gave to make changes to the original GPO to make sure the sata will be copied back?
If do, did you allow enough time to pass for the old GPO changes to apply before unlinking it?
Check the user profile to see whether it gas folder redirection.  Hkcu\software\microsoft\...shell folders
Relink the old GPO and wait for the refresh.
gregmiller4itAuthor Commented:
I didn't have to make changes to the original GPO, it was already set to copy the data back if the policy was removed. Once I unlinked the original GPO it took a couple of logons to copy the data back, but eventually they all got copied back to their user's local drives. I left it like that for about 3 weeks until yesterday when I created the new GPO.
The unusual thing is that the test user (with almost nothing in the documents folder) changed instantly to the new redirected location. My account has not changed and when I view the new UserDocs folder the only username folder in there is the test account, so no other users' data has been redirected yet.

I tried to find 'Hkcu\software\microsoft\...shell folders' in the registry on my account and couldn't locate it. If you think that is important can you give me the specific location to check?

I don't really want to relink the old GPO because it effectively locked out a few users who had large documents folders. Those users are all members of the Executive and I need to keep them happy!
arnoldCommented:
Double check the path you use exists as well as have write writes by the user's you are redirecting.
The issue might related to the user lacking write rights
gregmiller4itAuthor Commented:
That was it! I had read-only rights assigned to 'Authenticated Users' I changed that to 'Modify' rights and logged off and on. It took a minute or so longer to logon and an extra user account appeared in the network folders. I checked the location of my documents folder and it is now in the network drive where I wanted it to go.
Thanks heaps.
Cheers,
Greg
arnoldCommented:
Are you only redirecting documents?

Often all four documents, desktop, appdata, and start menu and with the newer version where favorites can be redirected as well.

Usually the redirect path is \\domain\userfolders\%username%
Often that is also configured as the user's home dir and mapped to drive letter through aduc.
That all led to using aduc to point the homedir to that location in the proces the user's director is created with the correct permissions.

You should make sure to limit who can access such that user1 does not have rights to access user2 files.
gregmiller4itAuthor Commented:
At this stage I am only redirecting Documents, not Music, Pictures or Videos.
If the Documents folder is redirected, I don't see why a user would need to even have a home folder...but maybe I am overlooking something.

I was considering setting up Roaming Profiles; I thought that would redirect desktop, appdata, etc. Is that correct?

All users have modify rights to the \\domain\public\UserDocs\ folder. Once the system creates ....\username\documents folder, only the specific user appears to have access to it. I can't even view it as a Domain Admin (unless I took ownership I guess).
arnoldCommented:
Roaming go,der will transfer the profile to a shared location.  The amount of data in desktop, appdata and start menu could've ad to slow logins.
Redirecting all four is often common to minimize the size of the profile thus resulting in faster logins while maintaining uniform access to certain things whether using workstations or RDP in ...

The home sir is nothing more than a top directory where the user has documents, appdata, desktop and start menu.
\\domain\sharename\%username%\
   Documents
   Desktop
   AppData
   Start Menu
Possibly _favorites.


Shared folder are possibly something else.....
gregmiller4itAuthor Commented:
So, are you suggesting that I could redirect desktop, appdata and start menu...to the same username folder as documents?
And then still use roaming profiles, but the profiles would be smaller???

And by using home folders, it would redirect all of them as above?
arnoldCommented:
Yes to the first, the homedir is an ADUC user setting within the profile tab deals with login script and homedir as an auto mapped drive to the share where those folders are redirected using folder redirection GPO.
The setup of the home folder does not redirect any folder it merely provides a mapped drive ....
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.