none
Folder Redirection Win10 Client - Server 2012

    Question

  • I'm having an issue getting Folder Redirection to apply on a Win10 Client connected to a Server 2012 or 2012 R2 Functional Level Domain.

    Below is a screenshot of group policy settings.  This is the only policy applied to the user, there are no policies applied to the computer.  The user has full control over the their home share folder. The same configuration works on a Win7 computer.

    There are no WMI Filters being used. 


    Tuesday, January 26, 2016 5:32 PM

Answers

  • Turns out the issue was related to the SCCM client.  Even though we have no items defined in User Data and Profiles, our client settings had "Enable User Data and Profiles" set as "Yes" within the Compliance Settings section.

    Once the client setting was applied on the test computer uninstalling the SCCM client would not reverse the effects.

    Setting "Enable User Data and Profiles" to "No" in the client settings corrects the issue for existing and new computers.

    Thanks everyone for your assistance with this issue, very much appreciated.

    Owen

    • Proposed as answer by Rolf Lidvall Thursday, February 11, 2016 2:30 PM
    • Marked as answer by Owen McIntosh Thursday, February 11, 2016 2:31 PM
    Thursday, February 11, 2016 2:03 PM

All replies

  • Hi,
    Have you run gpresult /r on Windows10 to check if group policy applied correctly or not?
    And you could also verify the group policy from registry key under
    HKEY_CURRENT_USER\ Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
    If GPO applied successfully, the related key will correctly updated.

    Detail value setting is in link as below, please take a look:
    https://support.microsoft.com/en-us/kb/931087


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, January 27, 2016 8:59 AM
    Moderator
  • Hi,
     
    Am 26.01.2016 um 18:32 schrieb Owen McIntosh:
    > Below is a screenshot of group policy settings.
     
    Despite of your problem: since Vista you should always redirect into a
    folder beneeth the homedrivepath. e.g. .\Documents
     
    Because otherwise an Administrator will only see "Documents" as a name
    for all %username% folders within the share.
    If the admin is allowed to read inside %username%, the explorer shell
    process will find the desktop.ini file from the redirected documents
    folder and will show the name provided from .ini, which is "Documents"
     
    Have you tried to redirect into a "real" path, \\yourserver\share\
    and set the redirection to "create a folder for every in the base
    directory" (called something like that :-)
     
    I had some trouble in using %homeshare%%hompath%, probably the "\" from
    homepath is not recognized in 10?
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Wednesday, January 27, 2016 10:16 AM
  • Hi Wendy - thanks for your reply.

    Below is the output from gpresult /v on a Win10 client attached to 2012 (R1) Domain.  I've removed our specific domain information.  Folder Redirection is listed as N/A.  I've included a screenshot of the registry location that you mentioned in your response.


    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
    c 2015 Microsoft Corporation. All rights reserved.

    Created on 1/28/2016 at 9:09:25 AM

    RSOP data for fodlertest2 on WIN10TEST : Logging Mode
    ------------------------------------------------------------

    OS Configuration:            Member Workstation
    OS Version:                  10.0.10240
    Site Name:                   N/A
    Roaming Profile:             N/A
    Local Profile:               C:\Users\fodlertest2
    Connected over a slow link?: No


    USER SETTINGS
    --------------
        CN=fodlertest2,OU=FolderRedirectTest,OU=DEV,DC=
        Last time Group Policy was applied: 1/28/2016 at 7:50:26 AM
        Group Policy was applied from:      DC1
        Group Policy slow link threshold:   500 kbps
        Domain Name:                       
        Domain Type:                        Windows 2008 or later
       
        Applied Group Policy Objects
        -----------------------------
            Default Domain Policy
            TST Folder Redirection3
            Local Group Policy

        The user is a part of the following security groups
        ---------------------------------------------------
            Domain Users
            Everyone
            BUILTIN\Users
            NT AUTHORITY\INTERACTIVE
            CONSOLE LOGON
            NT AUTHORITY\Authenticated Users
            This Organization
            LOCAL
            Authentication authority asserted identity
            Medium Mandatory Level
           
        The user has the following security privileges
        ----------------------------------------------


        Resultant Set Of Policies for User
        -----------------------------------

            Software Installations
            ----------------------
                N/A

            Logon Scripts
            -------------
                N/A

            Logoff Scripts
            --------------
                N/A

            Public Key Policies
            -------------------
                N/A

            Administrative Templates
            ------------------------
                GPO: Local Group Policy
                    Folder Id: Software\Policies\Microsoft\CCM\UserStateManagement\EnableGroupPolicyClientSideExtension
                    Value:       1, 0, 0, 0
                    State:       Enabled

            Folder Redirection
            ------------------
                N/A

            Internet Explorer Browser User Interface
            ----------------------------------------
                N/A

            Internet Explorer Connection
            ----------------------------
                N/A

            Internet Explorer URLs
            ----------------------
                N/A

            Internet Explorer Security
            --------------------------
                N/A

            Internet Explorer Programs
            --------------------------
                N/A

    Thursday, January 28, 2016 2:24 PM
  • Hi Mark - thanks for your reply.

    I tried your suggestion on Win10 Client connected to 2012 R2 domain and it seems to work.

    This works

    This does not work

    However I cannot get either method to work on a Win10 Client connected to a 2012 (R1) domain.

    Even this does not work on 2012 (R1) domain.

    I'm in the process building a 2012 R1 test environment and will run the test again to rule out something odd in our production 2012 R1 environment.  I'll post my results.

    Owen


    • Edited by Owen McIntosh Thursday, January 28, 2016 3:12 PM Modified screenshots
    Thursday, January 28, 2016 2:44 PM
  • > This works
    > This does not work
     
    All screen shots (suppose these are screen shots) are broken...
     
    Can you run a "gpresult /h report.html" and check for folder redirection
    in the "extension processing" section?
     
     
    Thursday, January 28, 2016 2:57 PM
  • I modified my post above, hopefully the screenshots are available for you now.

    I ran the gpresult /h command.  I didn't see any specific "extension processing" section, but perhaps the information below is what you're looking for.

    TST Folder Redirection3
    [{AF0E0FE1-E55C-4B8F-A1C4-191E3BD8832B}]
    hide
    Link Location local/DEV/FolderRedirectTest
    Extensions Configured Folder Redirection
    Enforced No
    Disabled None
    Security Filters NT AUTHORITY\Authenticated Users
    Revision AD (5), SYSVOL (5)
    WMI Filter

    Thursday, January 28, 2016 3:47 PM
  • > I ran the gpresult /h command.  I didn't see any specific "extension
    > processing" section, but perhaps the information below is what you're
    > looking for.
     
    Ah - it's called "Component status" :-) It also provides a link to the
    GPO eventlog for these extensions.
     
    > TST Folder Redirection3
    > [{AF0E0FE1-E55C-4B8F-A1C4-191E3BD8832B}]hide
    > *Link Location*     local/DEV/FolderRedirectTest
    > *Extensions Configured*     Folder Redirection
     
    So at least this proves that the user applies the GPO and it recognizes
    we have FR settings.
     
    Thursday, January 28, 2016 4:21 PM
  • Here it is.  I didn't see a link to GP eventlog but can look it up if you'd like. 

    Component
    Status
    hide
    Component Name Status Time Taken Last Process Time Event Log
    Group Policy Infrastructure Success   1/28/2016 9:31:27 AM  
    ConfigMgr User State Management Extension. Success   1/27/2016 2:58:07 PM  
    Folder Redirection Success   1/27/2016 2:58:07 PM  
    Registry Success   1/27/2016 2:58:07 PM  
    Thursday, January 28, 2016 4:25 PM
  • Hi,
     
    Am 28.01.2016 um 15:44 schrieb Owen McIntosh:
    > I tried your suggestion on Win10 Client connected to 2012 R2 domain and
    > it seems to work.
     
    Have you tried to use:
    Create a folder for each user under the root path
     
    \\server\share
    is the only thng that needs to be given. %username%\Documents will be
    added automatically.
     
    Additionally, do not make the FR XPkompatible, it should apply to Vista
    up only. And do uncheck "grant exclusive rights".
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Thursday, January 28, 2016 9:57 PM
  • > Component Name     Status     Time Taken     Last Process Time     Event Log
    > Folder Redirection     Success         1/27/2016 2:58:07 PM    
     
    Link to event log should be in the last column. I'm short to giving up
    with this issue - too hard through a forum to analyze properly :()
     
    What I would do now: Process Monitor Boot Logging - the gpsvc.log will
    deliver the exact time where FR should process, the boot log will
    deliver the appropriate events. But I cannot assist in that via a forum.
     
    Friday, January 29, 2016 11:21 AM
  • Hi Martin,

    I was able to locate the event log link, I had to elevate my test account to a local admin before the link was available.  I enabled the GPSVC.log but didn't see too much relevant information.  See below:

    GPSVC(130.9ec) 08:04:56:315 ProcessGPOs(Machine): Processing extension Folder Redirection
    GPSVC(130.9ec) 08:04:56:315 ReadGPOList:++
    GPSVC(130.9ec) 08:04:56:315 CheckGPOs: ReadGPOList count = 0
    GPSVC(130.9ec) 08:04:56:330 CompareGPOLists:  The lists are the same.
    GPSVC(130.9ec) 08:04:56:330 CheckGPOs: No GPO changes but couldn't read extension Folder Redirection's status or policy time.
    GPSVC(130.9ec) 08:04:56:330 ProcessGPOs(Machine): Extension Folder Redirection skipped with flags 0x110057.

    This issue appears to be something with our production environment as I am unable to recreate the issue in the test environments (2012 and 212R2) I created.

    Tuesday, February 02, 2016 1:15 PM
  • Hi Mark,

    Thanks for your suggestions.  Unfortunately I am still unable to get folder redirection to work in my production environment.

    Owen 

    Tuesday, February 02, 2016 1:18 PM
  • > /GPSVC(130.9ec) 08:04:56:330 CompareGPOLists:  The lists are the same./
    > /GPSVC(130.9ec) 08:04:56:330 CheckGPOs: No GPO changes but couldn't read
    > extension Folder Redirection's status or policy time./
     
    Enable http://gpsearch.azurewebsites.net/#324 and check "Apply without
    changes".
     
    Tuesday, February 02, 2016 3:43 PM
  • GPSVC(34c.9d8) 16:07:42:849 ProcessGPOs(User): Processing extension Folder Redirection
    GPSVC(34c.9d8) 16:07:42:849 ReadStatus: Read Extension's Previous status successfully.
    GPSVC(34c.9d8) 16:07:42:849 ReadGPOList:++
    GPSVC(34c.9d8) 16:07:42:849 ReadGPOList: Read Key:0
    GPSVC(34c.9d8) 16:07:42:849 ReadGPOList: Read Key:1
    GPSVC(34c.9d8) 16:07:42:849 ReadGPOList:-- (Result:TRUE)
    GPSVC(34c.9d8) 16:07:42:849 CheckGPOs: ReadGPOList count = 2
    GPSVC(34c.9d8) 16:07:42:849 ReadGPOList:++
    GPSVC(34c.9d8) 16:07:42:849 ReadGPOList: Read Key:0
    GPSVC(34c.9d8) 16:07:42:849 ReadGPOList: Read Key:1
    GPSVC(34c.9d8) 16:07:42:849 ReadGPOList:-- (Result:TRUE)
    GPSVC(34c.9d8) 16:07:42:849 CheckGPOs: ReadGPOList count = 2 for user: S-1-5-21-1100427591-635257695-1848903544-801990
    GPSVC(34c.9d8) 16:07:42:849 CompareGPOLists:  The lists are the same.
    GPSVC(34c.9d8) 16:07:42:849 CompareGPOLists:  The lists are the same.
    GPSVC(34c.9d8) 16:07:42:849 CheckGPOs: No GPO changes but called in force refresh flag or extension Folder Redirection needs to run force refresh in foreground processing
    GPSVC(34c.9d8) 16:07:42:865 GPLockPolicySection: Sid = S-1-5-21-1100427591-635257695-1848903544-801990, dwTimeout = 30000, dwFlags = 0x40
    GPSVC(34c.9d8) 16:07:42:865 SID = S-1-5-21-1100427591-635257695-1848903544-801990
    GPSVC(34c.9d8) 16:07:42:865 bMachine = 0
    GPSVC(34c.9d8) 16:07:42:865 Global Sync Lock Called
    GPSVC(34c.9d8) 16:07:42:865 Writer Lock got immediately.
    GPSVC(34c.9d8) 16:07:42:865 Global Lock taken successfully
    GPSVC(34c.9d8) 16:07:42:865 ProcessGPOList:++ Entering for extension Folder Redirection
    GPSVC(34c.9d8) 16:07:42:865 ProcessGPOList: Passing in the force refresh flag to Extension Folder Redirection
    GPSVC(34c.9d8) 16:07:42:865 LogExtSessionStatus: Successfully logged Extension Session data
    GPSVC(34c.9d8) 16:07:42:865 ProcessGPOList: Extension Folder Redirection returned 0x0.
    GPSVC(34c.9d8) 16:07:42:865 ProcessGPOList: Extension Folder Redirection was able to log data. RsopStatus = 0x0, dwRet = 0, Clearing the dirty bit
    GPSVC(34c.9d8) 16:07:42:865 ProcessGPOList:--
    GPSVC(34c.9d8) 16:07:42:865 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <S-1-5-21-1100427591-635257695-1848903544-801990>
    GPSVC(34c.9d8) 16:07:42:865 Deleting sidString <S-1-5-21-1100427591-635257695-1848903544-801990>
    GPSVC(34c.9d8) 16:07:42:880 ProcessGPOs(User): -----------------------
    GPSVC(34c.9d8) 16:07:42:880 ProcessGPOs(User): -----------------------
    GPSVC(34c.9d8) 16:07:42:880 ProcessGPOs(User): Processing extension MitigationOptions
    Tuesday, February 02, 2016 9:12 PM
  • > /GPSVC(34c.9d8) 16:07:42:849 CheckGPOs: No GPO changes but called in
    > force refresh flag or extension Folder Redirection needs to run force
    > refresh in foreground processing/
     
    This log is from a manual gpupdate, I assume? Then FR will do
    _nothing_... You need to logon.
     
    Wednesday, February 03, 2016 10:54 AM
  • PSVC(35c.69c) 08:00:15:935 ProcessGPOs(User): Processing extension Folder Redirection
    GPSVC(35c.69c) 08:00:15:935 ReadStatus: Read Extension's Previous status successfully.
    GPSVC(35c.69c) 08:00:15:935 ReadGPOList:++
    GPSVC(35c.69c) 08:00:15:935 ReadGPOList: Read Key:0
    GPSVC(35c.69c) 08:00:15:935 ReadGPOList: Read Key:1
    GPSVC(35c.69c) 08:00:15:935 ReadGPOList:-- (Result:TRUE)
    GPSVC(35c.69c) 08:00:15:935 CheckGPOs: ReadGPOList count = 2
    GPSVC(35c.69c) 08:00:15:935 ReadGPOList:++
    GPSVC(35c.69c) 08:00:15:935 ReadGPOList: Read Key:0
    GPSVC(35c.69c) 08:00:15:935 ReadGPOList: Read Key:1
    GPSVC(35c.69c) 08:00:15:935 ReadGPOList:-- (Result:TRUE)
    GPSVC(35c.69c) 08:00:15:935 CheckGPOs: ReadGPOList count = 2 for user: S-1-5-21-1100427591-635257695-1848903544-801990
    GPSVC(35c.69c) 08:00:15:935 CompareGPOLists:  The lists are the same.
    GPSVC(35c.69c) 08:00:15:935 CompareGPOLists:  The lists are the same.
    GPSVC(35c.69c) 08:00:15:935 GPLockPolicySection: Sid = S-1-5-21-1100427591-635257695-1848903544-801990, dwTimeout = 30000, dwFlags = 0x0
    GPSVC(35c.69c) 08:00:15:951 SID = S-1-5-21-1100427591-635257695-1848903544-801990
    GPSVC(35c.69c) 08:00:15:951 bMachine = 0
    GPSVC(35c.69c) 08:00:15:951 Global Sync Lock Called
    GPSVC(35c.69c) 08:00:15:951 Writer Lock got immediately.
    GPSVC(35c.69c) 08:00:15:951 Global Lock taken successfully
    GPSVC(35c.69c) 08:00:15:951 ProcessGPOList:++ Entering for extension Folder Redirection
    GPSVC(35c.69c) 08:00:15:951 UserPolicyCallback: Setting status UI to Applying Folder Redirection policy
    GPSVC(35c.69c) 08:00:15:951 ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
    GPSVC(35c.69c) 08:00:16:013 ProcessGPOList: Extension Folder Redirection returned 0x0.
    GPSVC(35c.69c) 08:00:16:013 ProcessGPOList: Extension Folder Redirection status was not updated because there was no changes and no transition or rsop wasn't enabled
    GPSVC(35c.69c) 08:00:16:013 ProcessGPOList:--
    GPSVC(35c.69c) 08:00:16:013 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <S-1-5-21-1100427591-635257695-1848903544-801990>
    GPSVC(35c.69c) 08:00:16:013 Deleting sidString <S-1-5-21-1100427591-635257695-1848903544-801990>
    GPSVC(35c.69c) 08:00:16:029 ProcessGPOs(User): -----------------------
    GPSVC(35c.69c) 08:00:16:029 ProcessGPOs(User): -----------------------
    Wednesday, February 03, 2016 1:07 PM
  • > GPSVC(35c.69c) 08:00:16:013 ProcessGPOList: Extension Folder Redirection
    > status was not updated because there was no changes and no transition or
    > rsop wasn't enabled
     
    Did you follow my advice from above?
     
    Wednesday, February 03, 2016 3:10 PM
  • Yes I did.

    Here is a snippet from Gpresults /v

            Administrative Templates
            ------------------------
                GPO: TST Folder Redirect Processing
                    Folder Id: Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}\NoGPOListChanges
                    Value:       0, 0, 0, 0
                    State:       Enabled

    Wednesday, February 03, 2016 3:18 PM
  • > Yes I did.
     
    Then I'm stuck again... :(
     
    Wednesday, February 03, 2016 4:24 PM
  • Okay, thanks for your help.  I appreciate it.  What I do know is that if I install Win10 from ISO the folder redirection works as expected.  When I install from SCCM OSD Task Sequence it does not.  So I'm thinking my next step is to install from ISO and then manually run through the steps in the task sequence and rule out any additional software (App-V Client, SCCM client, MS Office, etc.).
    Wednesday, February 03, 2016 4:34 PM
  • > I install Win10 from ISO the folder redirection works as expected.  When
    > I install from SCCM OSD Task Sequence it does not.  So I'm thinking my
     
    Ah - hold on, there's a new option since Win8 to configure FR not only
    via Group Policy, but via SCCM, too. But I never dug into that. Check
    with your SCCM guys...
     
    Wednesday, February 03, 2016 4:43 PM
  • From what I can see Folder Redirection is done using User Data and Profiles under Compliance Settings.  In our environment this is not being used.  Just to be safe I uninstalled the SCCM client, rebooted, deleted the cached profile for test account, rebooted and tried again.... still no folder redirection.
    Wednesday, February 03, 2016 5:21 PM
  • Turns out the issue was related to the SCCM client.  Even though we have no items defined in User Data and Profiles, our client settings had "Enable User Data and Profiles" set as "Yes" within the Compliance Settings section.

    Once the client setting was applied on the test computer uninstalling the SCCM client would not reverse the effects.

    Setting "Enable User Data and Profiles" to "No" in the client settings corrects the issue for existing and new computers.

    Thanks everyone for your assistance with this issue, very much appreciated.

    Owen

    • Proposed as answer by Rolf Lidvall Thursday, February 11, 2016 2:30 PM
    • Marked as answer by Owen McIntosh Thursday, February 11, 2016 2:31 PM
    Thursday, February 11, 2016 2:03 PM
  • > Setting "Enable User Data and Profiles" to "No" in the client settings
    > corrects the issue for existing and new computers.
     
    Thanks for feedback.
     
    > Thanks everyone for your assistance with this issue, very much appreciated.
     
    Reviewing the contributions above, seems this "everyone" includes me :)
     
    Thursday, February 18, 2016 2:46 PM