Folder Redirection (permission) issue


here's setup:

windows server 2008 r2 - ad , dns server

windows 7 machine (vm) used testing (and it's joined domain)

my own user account (for testing).  i in domain users , domain admin group.  i'm in local admin group on workstation.

i have folder redirection setup on gpo (documents now).  just folder on server shared out.  that gpo isn't applied (denied actually) (i see when run gpresult.exe /h c:\report.html , review report) , when run gpupdate.exe /force, it'll tell me policy wasn't applied , have log off/on take affect, doesn't either).

my gpo called folder redirection has 1 policy in it:

setting: basic (redirect everyone's folder same location) 

path: \\applied\homedir\%username%\documents

options:

grant user exclusive rights documents disabled 

move contents of documents new location enabled 

also apply redirection policy windows 2000, windows 2000 server, windows xp, , windows server 2003 operating systems disabled 

policy removal behavior leave contents 

simple policy - nothing special it.

when view application log, see:

log name:      application
source:        microsoft-windows-folder redirection
date:          3/19/2014 11:56:36 am
event id:      502
task category: none
level:         error
keywords:      
user:          domain\steve
computer:      wc-0.domain.com
description:
failed apply policy , redirect folder "documents" "c:\users\steve\documents".
 redirection options=0x1201.
 the following error occurred: "can not create folder "c:\users\steve\documents"".
 error details: "this security id may not assigned owner of object.
".

not quite sure "this security id may not assigned owner of object" means, related permissions.

going server, have shared folder called "homedir" , right now, have pretty wide open.  everyone set full control.  admins full control, creater/owner full control - on smb , ntfs permissions well.  anyone on network can access folder.  same w/the sub-folder called steve (inside "homedir" folder on server).  my user account on server has (in profile tab):  home folder section.  connect z to:  \\applied\homedir\steve  (applied name of server).

aside permission issues, can't think of else.  my permissions pretty wide open right - full control anyone/everyone - including sub-folders.  not ideal permission solution, i'm testing right now.  iv'e been reading many other forums issue, no solution has worked me.

it's security id thing hangup right now.  i think once resolve this, it'll set me on right course folder redirection finished employees.

very strange, because set client of mine - same server , workstations , gpo, , worked right off bat , i've never had issues.

anyone have suggestions on this?

thank in advance help.

steve

hi,

thanks posting. 

it sounds folder permissions ntfs , share aren't setup correctly. 

the permissions requirements folder redirection work correctly can quite fussy, , it's best follow guide best practice.

http://technet.microsoft.com/en-us/library/cc781907(v=ws.10).aspx

can test , let know. don't create user folder, create root , let policy rest. 

thanks

denis


regards,

denis cooper

mcitp ea - mct

help keep forums tidy, if has helped please mark answer

blog: http://www.windows-support.co.uk  twitter:   linkedin:



Windows Server  >  Group Policy



Comments

Popular posts from this blog

CRL Revocation always failed

Failed to query the results of bpa xpath

0x300000d errors in Microsoft Remote Desktop client