folder redirectoin policy fails on new users when loging to Windows 7 but work fine on XP
-
Thursday, December 16, 2010 4:12 PM
Hello I have this new problem I noticed.
When crating a new user account and this user logon to the network the first time using a Windows 7 computer, then folder redirection fails.
This is the error message in event viewer application log, there is one for each redirection but they are the same, here are two of them:
Log Name: Application
Source: Microsoft-Windows-Folder Redirection
Date: 07/12/2010 11:59:56
Event ID: 502
Task Category: None
Level: Error
Keywords:
User: STDOMINICS\test2
Computer: Win7test.stdominicsschool.org.uk
Description:
Failed to apply policy and redirect folder "Documents" to "\\dc1\StaffDoc$\test2\My Documents".
Redirection options=0x9000.
The following error occurred: "Failed to build the list of known sub folders".
Error details: "Unspecified error
".
Log Name: Application
Source: Microsoft-Windows-Folder Redirection
Date: 07/12/2010 11:59:56
Event ID: 502
Task Category: None
Level: Error
Keywords:
User: STDOMINICS\test2
Computer: Win7test.stdominicsschool.org.uk
Description:
Failed to apply policy and redirect folder "Start Menu" to "\\dc1\startmenu$".
Redirection options=0x9020.
The following error occurred: "Failed to build the list of known sub folders".
Error details: "Unspecified error
".
The user’s home folder is not being crated at all on the share “StaffDoc$”.
But also redirection for already made folders like the “startmenu$” are not applied.
The same user once he logs in to an XP computers all redirections seems to work fine.
If the user then return to the Windows 7 computer and logon again, it looks as redirection policy works.
I have search the Internet for solution but couldn’t find something that works.
I tried recreating the group policy, but that didn’t help.
I tried the suggestion on www.nebev.net/blog/?=258 but that didn’t help.
I also installed a new Windows 7 enterprise on VMWare for testing and didn’t install any updates but the result were the same.
Regards
All Replies
-
Friday, December 17, 2010 5:59 AMModerator
Hi,
Generally, there are two factors can cause such issue:
1. Incorrect permission settings on the parent folder of the redirected folder.
2. Missing incomplete information in subkeys of the following registry location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions.
Based on the current situation, I would like to suggest you refer to the following Microsoft KB article for how to modify the Sharing and NTFS permissions for the parent folder of the redirected folder.
How to dynamically create security-enhanced redirected folders by using folder redirection in Windows 2000 and in Windows Server 2003
http://support.microsoft.com/kb/274443
If this is not the case, I also would like to suggest you export and import the registry: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions from a working machine.
If the issue persists, please describe how did you configure and apply the Folder Redirection policy in detail so that I can reproduce and analyze the issue.
Please also send me more information for analyzing. For your convenience, I have created a workspace for you. You can upload the information files to the following link. (Please choose "Send Files to Microsoft")
Workspace URL: https://sftasia.one.microsoft.com/choosetransfer.aspx?key=97b1cfcf-653b-4daf-9dcb-dadeb6e3c02b
Password: yII!UtZtvIas%
Note: Due to differences in text formatting with various email clients, the workspace link above may appear to be broken. Please be sure to include all text between '(' and ')' when typing or copying the workspace link into your browser. Meanwhile, please note that files uploaded for more than 72 hours will be deleted automatically. Please ensure to notify me timely after you have uploaded the files. Thank you for your understanding.
Collect GPMC log
==============
1. On domain controller, click Start -> Run, type GPMC.MSC, it will load the GPMC console. If the GPMC snap-in is not installed.
2. Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select the proper user in the wizard)
3. Right click the resulting group policy result and click the "Save Report…" => save report and upload it to the link I provided.
Regards,
Arthur Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.com.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Friday, December 17, 2010 11:27 AM
Hello Arthur,
I checked the permissions and they seems to be just fine, as I said it's work fine on XP the problem is only with Windows 7.
I couldn't transfer the registry from a working computer as the problem appears on all my Windows 7 computers.
I exported the key from the registry and sent it to you.
I also sent the Group policy results as requested, a backup of the GPO in question, and an printed XPS version of the setting in this policy.
Many thanks
Regards
Ziv
-
Monday, December 20, 2010 2:51 AMModerator
Hi,
I would like to confirm what operating system is installed on DC1? Please export and import the following registry from a working computer with the same operating system edition to DC1.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions
If it does not work, please try to export and import to one of the Windows 7 clients to test the issue. Once it works, you may deploy the registry to all Windows 7 clients via scripts.
If you encounter any difficulties when customizing the scripts, you may submit a new question in The Official Scripting Guys Forum! which is a best resource for scripting related issues.
The Official Scripting Guys Forum!
http://social.technet.microsoft.com/Forums/en/ITCG/threads
For more information, please refer to the following blog:
Folder Redirection Woes
http://www.nebev.net/blog/?tag=group-policy
Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Arthur Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact tngfb@microsoft.com.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Monday, December 20, 2010 1:45 PM
Hello Arthur,
There are 2 DC’s which are 2008R2.
I have tried to export and import the suggested registry from another 2008R2 server to DC1, restarted it. But that didn’t help and also imported it into the Windows 7 computer. Non solved the problem.
May I say that I tested the problem on a completely new installation of Windows 7 enterprise with out any modifications or updates, just a basic installation for the DVD, and the problem is the same.
I also looked at the link you sent me to "nebev" before I logged the case, and it doesn’t solve my problem, also as I said this happens on a new Windows 7 installation with no updates, in the link they are talking about an update that cause this problem.
Many thanks
Ziv
-
Tuesday, December 21, 2010 5:26 AMModerator
Hi,
Please follow the folder redirection steps below in a test environment which works fine for me and compare the steps you performed. If it works, please export and import the registry mentioned above.
1. Install a new Windows Server 2008 R2 computer, name it as WinSvr08R2PC, promote it to a domain controller and DNS server for a new domain.
2. Install a new Windows 7 computer, configure it’s DNS point to Windows Server 2008 R2 DNS server and join the new domain.
3. On Windows Server 2008 R2 domain controller, create a new sharing folder and named it as Test. Assign Everyone group Full control of both Sharing permissions and NTFS permissions.
4. In ADUC, create a new OU, name it as TestOU and create a domain user, TestUser in this TestOU.
5. In GPMC, create a new GPO, name it as TestGPO and link it to TestOU.
6. Right click TestGPO and click Edit.
7. Expend User Configuration\Policies\Windows Settings\Folder Redirection.
8. Right click Desktop, click Properties and follow the settings below:
a) Setting: Basic – Redirect everyone’s folder to the same location
b) Target folder location: Create a folder for each user under the root path
c) Root Path: \\WinSvr08R2PC\Test
9. Click OK.
10. On the Windows 7 client, login the Windows 7 client with TestUser account or run the command: gpupdate /force and re-login to check the result.
What’s the result?
Regards,
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Tuesday, December 21, 2010 5:30 AM
Howdie!
Can you - for testing - create a seperate OU in the domain, move a couple of Win7 machines in there, and create a new Folder Redirection policy? Don't link the current one there, create a new policy with the same settings in there. It may be that for Windows 7 (or Vista+), there are new settings and options deployed.
You might as well use of course the new setup test environment that you've created. Also -- what are the paths used for folder redirection - are they in \\server\path UNC format?
Cheers,
Florian
The views and opinions expressed in my postings do NOT correlate with the ones of my friends, family or my employer. -
Tuesday, December 21, 2010 10:07 AM
Hi Arthur and Florian,
First Florian, as I said in my first post I have already tried to create a new GPO with the same settings, that didn’t help.
The path is a UNC format of course as I have to redirect them to the server.
Arthur,
I created a test VM DC with 2008R2, then joined one of the Win7 clients that I used before into this domain and recreated all the folders, shares, and GPO. It works fine on this new blank domain. I exported the registry for FolderDescriptions, and imported it into Dc1 on my production system. This didn’t make any deference, the folder redirection is still failing, with the same error message.
But works with no problem on all XP computers.
Regards
Ziv
-
Wednesday, January 19, 2011 9:01 AMModerator
unspecified error
It could be due to some variables defined under HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Good test will be the following
Create a new user in Active Directory
Move this user to a new Test OU and BLOCK INHERITANCE on this OU ==> Very Important
Move one Windows 7 machine to a Test OU and BLOCK INHERITANCE on this OU ==> Very Important
Link ONLY the Folder Redirection Policy to this Test User OULog on as this user to that one Windows 7 machine - Log off - Log back in again
What are the results?If the above results in getting the Folder Redirection correctly, then we need the following
1) From a non working machine, log on as the user who does not get Folder Redirection and import the following key and send us
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders2) Run a GPRESULT /Z >Gpresult.txt and send us the Gpresult.txt file
If the above test does not result in getting Folder Redirection correctly. then we need the following from the test machine with the test user logged on1) Import and send us HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
2) Run a GPRESULT /Z >Gpresult.txt and send us the Gpresult.txt file
3) Open event viewer and expand Application and services logs - Microsoft - Windows and go to Folder Redirection - Operational and save this log and send it to us
KetanT | Microsoft -
Friday, January 21, 2011 12:29 PM
Hello KetanT,
I followed you instructions but can't upload the files as the work space created earlier is not working any more.
Could you please let me know how to upload the files?
It was very difficult to run Regedit and CMD as it looks that standard users in Win7 don't have the right to do it. But I managed at the end.
I did exactly what you told me, and the results are strange.
The first time the user logged on, the “Document” link on the start menu didn’t work it would just do nothing at all when clicked.
If you click on the username (libraries) then you could see the Documents link there clicking on that would take you to the right place on the server.
In event viewer it was still reporting errors with folder redirection in the Application log.
I logged of and logged in again as the same test user, and it was exactly the same.
I then created all the registry files, log files that you asked me and saved them in c:\users\tstaff2\download then log off and log in again as the same user.
Now not only the Documents link in the start menu doesn’t work. But also if you click the username (libraries) then there is no link to Documents over there. So basically there is no way to access the user’s Documents area on the server as the user.
Regards
-
Saturday, January 22, 2011 7:02 AMModerator
Hi
Please send email to blrforum@microsoft.com and I'll send you workspace information where you can upload the files.
KetanT | Microsoft -
Monday, January 24, 2011 3:26 PM
Hi,
I uploaded all the files including the application log where you can see the errors.
Regards
-
Thursday, January 27, 2011 2:31 AMModerator
You did not run gpresult /z as a user who is member of an administrator group. Could you logon as an domain admin on the windows 7 machine and run gpresult /z and send the new file
KetanT | Microsoft -
Thursday, January 27, 2011 9:47 AM
Hi,
Sorry but I wasn't told to do it as domain admin. I have now done the gpresult /z as domain admin and sent the file to the work space.
Regards
-
Thursday, January 27, 2011 10:04 AMModeratorHi Ziv,Open gpedit.msc on one windows 7 machine as an administrator and check:Computer Configuration-Administrative templates- Windows Components- Windows Explorer- Verify old and new Folder Redirection targets point to the same share before redirectingSET THIS TO DISABLEDreboot and check.
KetanT | Microsoft -
Thursday, January 27, 2011 4:25 PM
Hi,
I followed your insturctions, but it doesn't make any difference.
Looking foreward to hear if you have any other idea.
Thanks
-
Thursday, February 03, 2011 2:50 PMHi Ketan,It doesn't take your command.That is what i get.Argument '-ets' is unknown.
Argument 'p' is not allowed with the other arguments specified.Error:
The parameter is incorrect.Regards
Hi Zivsh,
Please collect this etl file:
log on as administrator and run the following:
logman start fr -p {2955e23c-4e0b-45ca-a181-6ee442ca1fc0} 0x1f 4 –ets
Switch user and try to logon as the user who has the issue with Folder redirection
Once the issue is reproduced, switch user and logon back as administrator
logman stop -n fr -ets
collect the fr.etl log and upload it to the workspace
Ketan
-
Friday, February 04, 2011 1:44 AMModerator
Hi Zivsh,
Before you start that trace, here is something interesting came up that we needed clarified:
· The error you now seem to be getting as per the logs sent is
The following error occurred: "Failed to redirect because the destination directory "\\dc1\staffDoc$\tstaff2\Application Data" is offline".
Error details: "The network path was not found.
· This is not the error what you got before!
· Need to check what permissions does authenticated users group have on staffdoc$ share folder
· Sharing permissions should have authenticated users FC
· Security permissions should have Authenticated Users with Traverse Folder and Execute file", "List folder/read data" and "Read Attributes
· Confirm on the actual error now as it has changed and get the permissions checked and revert please
KetanT | Microsoft -
Friday, February 04, 2011 11:15 AM
Hi KetanT,
All the permission are build according to
http://support.microsoft.com/kb/274443
This is working fine with windows XP so I guess it is not a permission problem.
I think it is that another group policy disturbe the redirection policy only on Win7 computers, becuase when puting the user in a clean OU with only the redirection policy it works fine (at least for beginning).
Only after saving a few files on the users download area in c:\users... then the redirection stopped working and then probably this error was logged in event viewer.
The problem I can see the latest is (notice this is a different user):
Log Name: Application
Source: Microsoft-Windows-Folder Redirection
Date: 31/01/2011 16:06:40
Event ID: 502
Task Category: None
Level: Error
Keywords:
User: STDOMINICS\tstaff
Computer: Build-PC.stdominicsschool.org.uk
Description:
Failed to apply policy and redirect folder "RoamingAppData" to "\\dc1\staffDoc$\tstaff\Application Data".
Redirection options=0x9001.
The following error occurred: "Failed to build the list of known sub folders".
Error details: "Unspecified error
".This user is in the standard Staff OU and all staff gpo are applied to it.
Regards
-
Saturday, February 05, 2011 5:03 AMModerator
Hi,
Please collect the traces as suggested earlier.
Why you got the error earlier while running the command is because you might have copied and pasted the entire command in CMD and this way it will not work. Please type the entire command and you can just copy\paste the GUID {2955e23c-4e0b-45ca-a181-6ee442ca1fc0} .
Here is the command again:
logman start fr -p {2955e23c-4e0b-45ca-a181-6ee442ca1fc0} 0x1f 4 -ets
Reproduce the issue
logman stop -n fr -ets
KetanT | Microsoft -
Tuesday, February 08, 2011 2:27 PM
Hi KetanT,
I have sent the fr.etl file to my work space.
The user experiancing this problem is called tstaff.
Thanks
-
Wednesday, February 09, 2011 3:00 PM
Hi Ketan,
I have uploaded the reg file to the work space.
Please notice that earlier in this post I have tried replacing this specific registry part on the workstation and on the server but it didn't help.
Regards
Can I get an export of HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions as .REG file to check ASAP?
Thanks.
ketan. -
Thursday, February 10, 2011 5:08 PM
Hi Ketan,
I have uploaded the reg file to the work space.
Please notice that earlier in this post I have tried replacing this specific registry part on the workstation and on the server but it didn't help.
Regards
Can I get an export of HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions as .REG file to check ASAP?
Thanks.
ketan.
Hi Ketan,I also have the same problem in my Event Viewer.
I really appreciate you taking out the time & helping out. I am very looking forward for the solution.
Keep up the great job.
B
-
Friday, February 11, 2011 12:41 PMModerator
Hi B,
please send email to blrforum-at-microsoft.com, I'll send you the workspace info where you can upload trace files.
Zivsh: The next step for you is ideally getting microsoft on call, however, we have some more data collection possible and lets make sure you can do that.
Download Procmon from http://technet.microsoft.com/en-us/sysinternals/bb896645
1. Log on to Windows 7 machine as an ADMINISTRATOR
2. Start procmon and SWITCH USER and logon as user who gets the error for Folder Redirection “unspecified error”
3. One the user has logged on and the error is there, SWITCH USER and logon back as Administrator and stop the PROCMON and save as .PML file and upload to the workspace along with the username which has the problem
Download Disk2VHD from http://technet.microsoft.com/en-us/sysinternals/ee656415
1. Logon as Administrator on one of the affected Windows 7 machine and run the Disk2vhd to make a .VHD file – We just need the C: drive which has the Windows installation so he can uncheck other drives before running the Disk2vhd
2. Logon to one of your domain Controller as a domain administrator and create a user Mstest and make him a domain admin member and let us know the password you set for this test user
3. On the domain controller, run the Disk2vhd to make a .VHD file – We just need the C: drive which has the Windows installation and SYSVOL so he can uncheck other drives before running the Disk2vhd
4. If the size of the .VHD files is very huge, please use 7 ZIP (http://www.7-zip.org) Third party tool – use at your own risk! – Zip the VHD files and upload it to the workspace.
KetanT | Microsoft -
Friday, February 11, 2011 1:09 PM
Hi Ketan,
The mail address bounced back?
B
-
Monday, February 14, 2011 3:54 PM
Hi Ketan,
I uploaded the .pml file to my workspace.
I can't upload the VHD files as workspace is limited for 1.93Gb, my VHD files that been compressed to .zip are about 8Gb each.
Please let me know how I can upload them.
Regards
-
Monday, February 14, 2011 3:57 PM
This from the workspace site.
Send Standard
Usage
File size can not exceed 1.93 GB
Use when you can not install ActiveX controls
System Requirements
Need to have this website added to Trusted Sites list -
Monday, February 14, 2011 4:20 PMModerator
Hi,
I just sent you workspace details where you can upload larger files.
KetanT | Microsoft -
Sunday, March 06, 2011 8:02 AMModerator
updating the thread:
You have a GPO called “Cookies Favorutes Redirect” which is setting the following:
User settings\Administrative Templates\Windows Components\Inter Explorer\Location of Internet Explorer Favorites:
Redirect Cookies is enabled with the setting as %HOMESHARE%\Cookies
If you go ahead and unlink this policy or disable this policy link and then try to logon with a new user on a Windows 7 machine, Folder Redirection should work as expected.
For existing users who have ever attempted to logon to a Windows 7 machine and got the “unspecified error” once, you will need to delete their existing profile from the machine and then try to logon to make this work. This is because the above setting is not stored in policies keys and thus considered a preference. So even if you remove the policy, for users who have an existing profile on the machine, this setting will remain and you need to delete their existing profile. Do NOT just go ahead and delete profiles from the C:\Users folder, but go to :
My Computer\Properties\Advanced System Settings\User ProfilesèSettings and delete the profiles from there and then check again. Note deleting the profile means you are deleting any data a user stored in it! You might want to back up the data if needed.
This should hopefully fix it. Thanks!
KetanT | Microsoft- Marked As Answer by KetanT_Microsoft Employee, Moderator Wednesday, March 16, 2011 6:31 AM
-
Wednesday, March 09, 2011 10:24 AM
The problem that I am still facing is that when you click on the user name from the Start menu, (personal folders), you get links to local libraries on C: drive as well for ones that are redirected to the server.
For example “my documents” point to the server, but at the same place “documents” points to c:\users\username.
Of course there is a big list of these libraries there beside these two.
I can’t see the point way would you like to point users to save their files in to the local drive? This might be good in a home environment but cause problem in a domain, business.
I would like to know if there is a way to cancel all these local, C drive, direction to the user’s libraries. A solution that is easy to implement for all users and all computers across the network.
At the end I would like all the user data to be saved to their network user space and nothing to default or point to the C: drive.
Many thanks
-
Friday, March 11, 2011 5:05 PMModerator
Hi,
There is no Group policy to achieve it and you should consider one of the plans suggested earlier.
if you use attrib hide\unhide folders, does it meet the purpose?
KetanT | Microsoft -
Saturday, March 12, 2011 12:05 PM
Hi Ketan,
Changing the attribute of any of the local libraries folder to hidden doesn't make it disappear from the Personal folders view.
So this solution is not working.
Thanks
-
Saturday, March 12, 2011 12:28 PM
Sorry, it looks like it does work but you need to log off and on.
I don't know what script can I use for it, as I need to point every time to the user's local area. What variabel could I use?
I also found this suggestion http://social.technet.microsoft.com/Forums/en/w7itproui/thread/86fdc4c5-3340-4517-a410-b9996572b8e9
Maybe this one will be better, I will need to test it.
Thanks
-
Wednesday, March 23, 2011 11:39 AM
At the end I decided to remove personal folders from the start menu.
It is a shame that Microsfot doesn't have a group policy to disable local personal folders. Even if you create a group policy to redirect all of these personal folders to your network area, you still have in the list the local ones, which is very confusing.
I don't see why in a busines, you would like your users to save their data into the C: drive. So a request from Microsoft will be to have a group policy to hide or remove local personal folders.
I used this policy to remove the personal folders from the start menu:
user configuration--preferences -- control panel -- start menu (start menu vista and later)
And cofigure not to have personal folders.
I then set this option:
user configuraton -- administrative templates -- start menu and taskbar
prevent changes to task and start menu - enabledThis stopps the users from adding the personal folders back.
The problem, now it is very diffcult to see how is logged on to the computer, as before you could know it by the personal folders in the start menu that use to be the user's display name.
.png)
