gpo redirect folder domain user not detecting

hi, I am currently running windows 2008 and have setup a gpo for 'folder redirection' but for some unknown reason a user folder is not being created automatically inside the 'win7redirect' folder.

qn1.  can anyone assist  ?
mikey250Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

VB ITSSpecialist ConsultantCommented:
First place I would check is the both the Share and NTFS permissions. Please check the permissions on your win7redirect folder are in line with those in this article: http://blogs.technet.com/b/migreene/archive/2008/03/24/3019467.aspx

Let me know how you go.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
mikey250Author Commented:
just to let you know I also have another expert assisting me who has also given me numerous advice although not resolved yet as another question spilt over into the gpo when I should have created a separate thread so if I allocate more points in that expert direction somewhat then that will be why, just so I can make it fair.
0
Guy LidbetterCommented:
Hi Mikey,

Just following on from our earlier discussions... If you have created the GPO as suggested (Which you have done, you sent the screen shots) and the permissions have been set as I provided and spoke you through. The policy will definitely work.

As I mentioned in the other thread, you need to log onto the HR desktop with a Domain Account that is located in the HR OU (Where the policy is linked).

The JohnC account that you used to run the GPRESULT was a local user on the desktop, the policy will not apply to a local user. Log back in with a Domain user... i.e.  itservices\JohnC ...  or JohnC@itservices.local.

Regards

Guy
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

VB ITSSpecialist ConsultantCommented:
@mikey250, that's fair as he has a better understanding of your environment (from your previous question).

I'm here if you need any further help.
0
mikey250Author Commented:
hi guy,  I have created a new: ou & group policy and user and now the domain user account folder has been created.

the good thing was I did not have to amend or change any user access permissions in the following:

- e:\win7users

all I did was set 'everyone' - full access

at this stage I did not even have to add the specific user, as I know the gpo has authenticated users in places, so I assume that's why the domain user folder was created.

------------------------------------------------------

initial steps taken:

- created johnc domain user account on master dc & setup redirect profile
- moved johnc to ou folder
- setup gpo for johnc
- logged on to (new) win7 as: johnc - local account
- joined domain using: master dc admin logon details - successful
- logged on to domain successfully via win7 using johnc

I just assumed that method above was ok, although not the normal way I would do things
0
mikey250Author Commented:
thank vb.
0
mikey250Author Commented:
the new domain account I created has appeared as:

- win7roaming\paulf.V2

qns1.  is that correct when it shows as .V2  ?
0
mikey250Author Commented:
hi guy,

in my domain user gpo/edit, I only set:

- documents:

\\fileserver\win7roaming - with 'grant access'.

qns1. but when I logon to my domain user win7 desktop and check the following I only expect to see only: documents, but I also see the below why  ?

- contacts
- desktop
- downloads
- favourites
- links
- my documents
- my music
- my pictures
- my videos
- saved games
- searches
0
VB ITSSpecialist ConsultantCommented:
the new domain account I created has appeared as:

- win7roaming\paulf.V2

qns1.  is that correct when it shows as .V2  ?
The .V2 at the end of the user's folder would indicate that this is actually the roaming profile folder for that user, not the redirected Documents folder.

It sounds like you are trying to redirect the Documents to the same location as the user roaming profile folder. This may explain why your folder redirection policy isn't working as expected.

If you're going to combine roaming profiles with folder redirection then ideally you would set up your folder shares in this structure:

Roaming Profile Path (Profile tab in the user's account Properties in Active Directory Users and Computers):
\\Server\Users\%username%\Profile
Roaming-Profile-Path.pngRedirected My Documents Path:
\\Server\Users\%username%\Documents
Documents-Folder-Redirection.pngIf you don't intend to use roaming profiles in your environment then simply clear the Profile field in AD Users and Computers for that user.
0
mikey250Author Commented:
oh, the redirected folder is working as expected.... even though I have a profile path in place...but yes that must be the reason why I view all those files when I only expected to see: documents...ok I will create another domain user account and try again, but leaving the profile path blank.
0
mikey250Author Commented:
I have created a new domain user account and logged on via same machine and the desktop and wallpaper I set have been detected, but no folder has been created in the following:

- win7roaming\ - but no new domain user folder

qns1. why ?
0
VB ITSSpecialist ConsultantCommented:
Can you post the screenshot of your Folder Redirection settings? Similar to the one I posted earlier:
Documents-Folder-Redirection.png
0
mikey250Author Commented:
my previous domain user account with (also) profile added, which you state should be removed and only have the below set is what I have done.  hence setting up a new domain user with no profile added and 'moved' to save (ou) as the below settings are already set :

it is exactly how your screenshot is for 'folder redirection':

basic - redirect everyones folder to the same location - set

target folder location:

create a folder for each user under the root path - set

root path:

\\fileserver\win7roaming - set
0
VB ITSSpecialist ConsultantCommented:
I believe the issue here is the creation of the user folder in \\fileserver\win7roaming

Have you verified the Share and NTFS permissions on the win7roaming folder so that they are in line with this article?: http://blogs.technet.com/b/migreene/archive/2008/03/24/3019467.aspx
0
Guy LidbetterCommented:
Hi Mikey.. the reason there is no profile in \\fileserver\win7roaming is that you left the profile field empty.

But you should still have the \Win7Redirect user folder created
0
VB ITSSpecialist ConsultantCommented:
Ah yes, of course! Guy is correct in that the user folder still needs to be created beforehand in order for the folder redirection to work.

You can either create the user's folder manually (i.e. \\fileserver\win7roaming\username) or assign it as their Home drive in AD Users and Computers so it gets auto-created.

Good pickup Guy.
0
mikey250Author Commented:
hi

qns1. vb, I thought you said (to remove the domain user profile from ad) because a gpo was already created  ?
0
mikey250Author Commented:
hi vb, as per you previous advice you stated:

"If you don't intend to use roaming profiles in your environment then simply clear the profile field in ad users and computers for that user."
0
VB ITSSpecialist ConsultantCommented:
The main bit to take out of that sentence is If you don't intend to use roaming profiles...

Do you want roaming profiles in your environment? If yes then you should have left the Profile field alone in AD Users and Computers.
0
mikey250Author Commented:
I thought that the gpo redirect folder replaced roaming profiles  ?

right now I do not want roaming profiles.
0
VB ITSSpecialist ConsultantCommented:
Sorry mikey250 but I think you're getting confused here. Let's take roaming profiles out of the equation.

You want to redirect the user's Documents folder right? To do so, the Folder Redirection policy will attempt to create the Documents folder in \\FileServer\Win7Roaming\username\Documents

The problem you are running into with new users is that the \\FileServer\Win7Roaming\newuser folder does not exist, so the Folder Redirection policy cannot create the Documents folder.

The fix is to create the \\FileServer\Win7Roaming\newuser folder manually. After you've created the newuser folder, log in with the new user account and the Documents folder will be able to create itself.
0
mikey250Author Commented:
ok I have set domain user exactly as:

\\FileServer\Win7Roaming\Mikef

when I open 'Mikef' it does show 'documents' folder, but also shows all the below also:

 - contacts
 - desktop
 - downloads
 - favourites
 - links
 - my documents
 - my music
 - my pictures
 - my videos
 - saved games
 - searches
0
VB ITSSpecialist ConsultantCommented:
Then the MikeF account has a roaming profile and his Documents folder is redirected. To confirm this just open up his Documents folder and create a test text file or folder.

Monitor the \\FileServer\Win7Roaming\Mikef\Documents folder - did you see the test text file/folder appear?

May I also suggest you read this article to get a better understanding of the differences between a roaming profile and a redirected folder? https://technet.microsoft.com/en-au/library/hh848267.aspx
0
mikey250Author Commented:
hi vb, yes I will read that link.

but just for clarification yes it appears I have a 'roaming' profile when I wanted a 'redirection' so how come I did not view:

qns1.

\\fileserver\win7roaming\Mikef\documents - only  ?

ignore the name 'roaming' as it is just a test folder and should say:

\\fileserver\win7redirect\Mikef\documents - this is only due to troubleshooting my issue.
0
Guy LidbetterCommented:
Hi Mikey - Can I just add, that as I described previously... If you set the permissions on the parent folder in the way I suggested, you will NOT have to create the folder in advance... the "Everyone - Create Folder/Append Data" will allow the creation and "Creator Owner - Full Control" will assign the user full access permissions to his own folder.
0
mikey250Author Commented:
hi guy,  yes I remember and you said what was set, was already correct.  so in the end I did not change anything as all left at default settings, except that I changed 'everyone' to full access.

I have now deleted all old folder and recreated new the below and change in my gpo and domain profile account:

\\fileserver\win7redirection\paulf

so I did not create the folder in advance as it was created automatically....ie 'documents', but all the other folders still appeared, when I am just trying get the 'documents' to be created by itself, so I know exactly what I am doing.

 - contacts
  - desktop
  - downloads
  - favourites
  - links
  - my documents
  - my music
  - my pictures
  - my videos
  - saved games
  - searches
0
Guy LidbetterCommented:
OH, I see what you're saying.. But those folders are the normal contents of the documents folder...

You could try changing the settings tab of the redirect in the GPO to not copy folder contents... that may resolve your issue.
0
mikey250Author Commented:
oh ok, I am looking in gpmc redirect folder settings tab and cannot see that when I edit the gpo.
0
Guy LidbetterCommented:
No, but if you log into a normal machine and open documents... that's whats in there.
0
mikey250Author Commented:
im still getting the: newuser.V2.

now im currently working on:

manually created newuser folder on file server:

- \\win7redirection\newuser - only

I have now added on aduc domain user account:

\\fileserver\win7redirection\%username%\Documents

opened gpmc and edited and saved:

\\fileserver\win7redirection\%username%\Documents

logged onto win7 desktop and keep getting temp profile
0
mikey250Author Commented:
I have shared the following folder and not shared the new user account as I think usual anyway:

- \\win7redirection - shared
- \\win7redirection\newuser - not shared new user
0
mikey250Author Commented:
everytime I attempt to correct my gpo issue it still does not give me the required domain folder, which I assume it should look like:

\\fileserver\win7redirection\newuser & not \\fileserver\win7redirection\newuser.v2

--------------------------------------------------------------------

step 1

changed the domain user account in profile tab to the below:

\\fileserver\win7redirection\%username% - not \\fileserver\win7redirection\%username%\ and the outcome was as below:

- newuser.V2 - incorrect as not wishing to use the roaming profile which is what this is with the .v2 is according to advice

step 2

I changed the domain user profile and all it does it create the following by adding this path to the domain account:

\\fileserver\win7redirection\%username%\documents and not \\fileserver\win7redirection\%username%\documents\

but still did not get what I was expecting

qns1.  where am I going wrong  ?
0
mikey250Author Commented:
hi I have followed these url instructions below and did not quite understand what how to edit permissions:

http://www.petenetlive.com/KB/Article/0000467.htm

the above permissions to be set match exactly the previous instructions below:

http://blogs.technet.com/b/migreene/archive/2008/03/24/3019467.aspx

the permissions were already set by default for both url's above and the only user I had to manually add was 'everyone' when setting the specific permissions part which I did successfully

the gpmc at: user configuration\policies\windows settings\folder redirections -  is set to: \\fileserver\win7redirection

win 7 desktop

qns1.  my desktop is detecting 'temp profile'.  ???

my switch is only set to 1 vlan and all can ping each other.
0
mikey250Author Commented:
even though I download updates to each of my servers, prior to setting up my gpo, my internet connection to my asa5505 is currently down until I can resolve gaining my internet access back.  so currently I am directly plugged into my internet connection directly via my laptop for obvious advice.

I am wondering if my servers needs some sort of gpo update and that is the reason why I am having these 'temp profile' issues now.!..!!
0
mikey250Author Commented:
the domain user still shows in my fileserver:

\\fileserver\win7redirection\paulf.V2

what I have been doing when making changes, I have manually deleted 'paulf.V2' from the fileserver and then trying something different.

I have also checked to make sure no old domain profiles have appeared in my win7 desktop users folder, but luckily nothing is in there except for the 'temp' profile.  which I know when I log off it does not save any changes to my profile and deletes everything.
0
mikey250Author Commented:
just to confirm, all my machines can (ping) vice versa as double checked all the time while trying to resolve this 'gpo folder redirection' issue.

my last attempt was to do the following:

master dc:

domain user profile tab:

\\fileserver\win7redirection\%username% - enter

master dc gpmc: browsed to:

\\fileserver\win7redirection\paulf

fileserver:

\\fileserver\win7redirection\paulf - I manually created 'paulf' folder, even if I do not manually create the 'paulf' folder I still see: paulf.V2 and when I logon via win 7 desktop it logs on with a 'temp profile' again.
0
mikey250Author Commented:
please do not delete i will return to this thread.
0
Seth SimmonsSr. Systems AdministratorCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
mikey250Author Commented:
Hi seth,  i have not finished with this thread and am planning on coming back to it. With stuf going on I have not used this site for some time but thats why my subscription is stil being paid for.

This question was not resolved thats why need it open so i can go back over it and resolve the issue i had.

Appreciated.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.