Server 2012 R2 Folder Redirection

Hi all -

I am getting ready to deploy a domain with several servers and am currently working on initial configurations in a testing environment. The servers are all Hyper-V guest O/Ss (Server 2012 R2 Datacenter Edition w/ GUI) running on very robust Server 2012 R2 Datacenter Edition hosts (w/ no GUI). Among my VMs, there are 2 domain controllers, a file server, and 4 RDS session hosts for hosting various apps and databases. The file server and the session hosts are members of the domain. I am having a number of very quirky issues and will be posting other questions about some of them here over the next few days - but, for now, my question is in regard to folder redirection.

I setup folder redirection in the Default Domain Policy. I am using basic settings to redirect the Documents, Pictures, Music, and Videos folders to a share on the file server (\\FS1\users). As I understand it, this should create a sub-folder for each user under that share, the name of which derives from the username, and place their Documents, etc. inside. When I log in locally to one of my RDS session hosts, the folder redirection policy works perfectly. It also works via Remote Desktop (mstsc) when I log on as the domain Administrator. But, it does not work when I login as a standard user via Remote Desktop. This would seem to be a permissions issue, but I can't figure out what permissions to adjust,

The shared folder itself has the proper NTFS and Share permissions as far as I can tell (otherwise this probably wouldn't work at all even when users log in locally). Also, I have checked under the Delegation tab in the policy and Authenticated Users have Read and Apply permissions. I have also added the RDS session host computer with Read permission under the Delegation tab.

Can anyone suggest what else I might look at?

I appreciate any help you can provide.

Thanks much!  :-)
Chris CollinsOwnerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Lee W, MVPTechnology and Business Process AdvisorCommented:
First, I recommend you NEVER mess with the default domain policy.  Create new policies and apply them.  Even if they are to apply to all users or computers, NEW GPOs!

Second, setup a DFS namespace to point folder redirection to - do not share off the server directly.  That just creates a mess later when you want to upgrade/replace the server (and you can setup DFS replication to potentially replicate the data to other sites/etc if that becomes a need.

I would recommend you create restore the Default Domain Policy, setup a new Group Policy for redirection, and then start troubleshooting using tools like GPRESULT and the event logs to track down what's going on.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Cliff GaliherCommented:
RDS and folder redirection can get a little complex because of how RDS profiles and things work.  Set up UPDs to minimize that impact.
0
Chris CollinsOwnerAuthor Commented:
Lee - that's sound advice. I will definitely give your suggestions a try.

Cliff - Forgive my ignorance. What are UPDs?
0
Cliff GaliherCommented:
User profile disks.
0
Chris CollinsOwnerAuthor Commented:
I did as Lee suggested and started from the ground up by creating GPO and linking it. After a GPUPDATE on the app server, all is working well. Thanks much!  :-)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.