Hidden Group Policy?

I recently upgraded Active Directory from Windows 2003 Server to Windows 2008 Server R2.  I removed the file shares from the old server (XXXSVR01) and moved them all to XXXSERVER.  I updated all profiles, login scripts, etc. (I think!),

I have a domain admin account that is trying to redirect the user desktop to the old server.  

I have searched all the defined GPOs, triple checked the profile and login script, but I just cannot seem to find where this setting is coming from.  Whenever I log onto any machine in the domain as this domain admin account, I get the same error.  

Can someone suggest where I forgot to look?

Domain Admin Account Error
Thanks!
sdhoneaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

arnoldCommented:
Folder redirection when the share is server based, requires a two step process to transition to a new share deals with revoking the redirection policy and then creating a new redirection.
The other option after you cleanup the AD metadata of all references to srv01, in DNS create a CNAME for srv01 to point to the new server. Then make an adjustment/transition of the shares to a domain based share.  Domain based shares can have multiple targets (servers hosting the share) such that when you need to transition shares to a different server because of space or other issues, adding the target while slowly adjusting preferences to prefer the new to the old, would make the transition transparent and painless to the user.
0
arnoldCommented:
The setting is from the user profile registry setting.

The folder redirection GPO  is applied on the second login and sets the HKCU\software\microsoft\windows\currentversion\explorer\shell folders\
Unless your GPO preferences at the time were set to removing the redirect if the GPO falls out of applying, the redirect will remain in place even when the GPO is deleted, removed unlinked, or the user is moved from one OU to a new OU.
0
sdhoneaAuthor Commented:
I added the CNAME, added a static WINS entry, renamed the old server, and changed its IP address.  Now I get the following error:
New Error
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

sdhoneaAuthor Commented:
I confirmed that the dhdadmin account has permissions to the folder.
0
arnoldCommented:
The issue is not a permission, but the reference which points to the old server share.

When you copied, what did you use? Robocopy, xcopy with NTFS permisions/attributes?

Check the security tab as well as the share tab permissions.  Sharing authenticated users should have full rights,
0
sdhoneaAuthor Commented:
All of the shares have Everyone - Full Control as the share permission, with Security permissions actually controlling access.
0
sdhoneaAuthor Commented:
And I copied with robocpy and the /sec option
0
arnoldCommented:
Yes, that is the standard.  Check the permissions on the path


See if you can open \\srv\shared\user_files\
Then on the server use cacls to see what the permissions on the directories are.

Since you renamed the old server, compare the cacls results there to the one on your new server.

Unfortunately, you did not answer the question about the method used to copy/transfer the files from the old server to the new server.
0
sdhoneaAuthor Commented:
I used robocopy with the /sec switch
0
arnoldCommented:
More info, are you able to navigate to the share.
Trying to see whether the CNAME based redirect is not accepted.
0
Lionel MMSmall Business IT ConsultantCommented:
type gpresult /Problem-Admin-Username lmm /v
and it will show you what all the gpo settings are applied to this user, which hopefully will help you find where this settings is
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
sdhoneaAuthor Commented:
I also had to to run setspn to clear up some Kerberos issues.  setspn -A host/oldserver newserver

Thanks to all for your help!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.