none
Removal of Folder Redirection Policy

    Question

  • When taking a user out of scope of a Folder Redirection policy where the setting is configured to leave contents on removal we see a huge delay in the next logon.  Is  this likely related to Offline Files clearing down the cache now the folder is no longer redirected by policy?  What is the expected behavior when a policy comes out of scope with these settings?
    Monday, March 02, 2015 3:54 PM

All replies

  • Alan - the delay may actually be the operating system downloading all of the redirected folders and files locally. I saw that behavior when I did this manually on a system (Windows 8.1), where it wanted to merge the files. I'm not sure the default action when done through GPO.

    Did you select relocate the files? That involves scanning the disk.

    Also ask your customers what "slow logon means". Is it 10 seconds? 30 seconds? 5 minutes?


    Entrepreneur, Strategic Technical Advisor, and Sr. Consulting Engineer - Strategic Services and Solutions Check out my book - Powershell 3.0 - WMI: http://amzn.to/1BnjOmo | Mastering PowerShell Coming in April 2015!

    Monday, March 02, 2015 4:08 PM
  • Alan - the delay may actually be the operating system downloading all of the redirected folders and files locally. I saw that behavior when I did this manually on a system (Windows 8.1), where it wanted to merge the files. I'm not sure the default action when done through GPO.

    Did you select relocate the files? That involves scanning the disk.

    Also ask your customers what "slow logon means". Is it 10 seconds? 30 seconds? 5 minutes?


    Entrepreneur, Strategic Technical Advisor, and Sr. Consulting Engineer - Strategic Services and Solutions Check out my book - Powershell 3.0 - WMI: http://amzn.to/1BnjOmo | Mastering PowerShell Coming in April 2015!

    Hi,

    I do not know why it would download them locally when the removal behavior is to leave as is and all the move options are set to not move. e.g.

    Options
    Grant user exclusive rights to Documents Disabled
    Move the contents of Documents to the new location Disabled
    Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems Disabled
    Policy Removal Behavior Leave contents

    A slow logon would be 1 minute or greater.  With a test user simply taking this policy out of scope results in a one time slow logon of up to half an hour (seems to be dependent on the amount of data a user has which makes me wonder what Windows is doing with that data).

    Monday, March 02, 2015 4:11 PM
  • https://4sysops.com/archives/how-to-disable-folder-redirection/  explains it pretty well about the "leave contents" caveats.

    "When a Folder Redirection is created, the move option is checked by default and the Policy Removal is set to, “Leave the folder in the new location when the policy is removed.” If bells and whistles aren’t going off in your head, they should be! If you were to remove the policy right now, Folder Redirection would stay how it is currently configured with the folder(s) redirected… which is probably not what you want to happen. The good news is that new logins by users won’t have folders redirected since the policy is gone, but any computers that the user has logged in to will keep their Folder Redirection.

    You’ll want to set the Policy Removal option to “Redirect the folder back to the local user profile location when policy is removed.” You’ll also want to ensure that “Move the contents of [folder name] to the new location” option is also checked so that the files get moved back to the user’s computer when you change the policy. If these settings needed to be changed, you’ll need to allow enough time for users to get the changes before removing the Folder Redirection completely."


    Entrepreneur, Strategic Technical Advisor, and Sr. Consulting Engineer - Strategic Services and Solutions Check out my book - Powershell 3.0 - WMI: http://amzn.to/1BnjOmo | Mastering PowerShell Coming in April 2015!

    Monday, March 02, 2015 6:56 PM
  • Here is another good article on the group policy definitions:

    https://technet.microsoft.com/en-us/library/cc784630(v=ws.10).aspx

    ^ That one might help you more.


    Entrepreneur, Strategic Technical Advisor, and Sr. Consulting Engineer - Strategic Services and Solutions Check out my book - Powershell 3.0 - WMI: http://amzn.to/1BnjOmo | Mastering PowerShell Coming in April 2015!

    • Proposed as answer by DonPick Monday, March 02, 2015 8:35 PM
    Monday, March 02, 2015 6:58 PM
  • Hi Alan,

    >>When taking a user out of scope of a Folder Redirection policy where the setting is configured to leave contents on removal we see a huge delay in the next logon

    How is it going? Does this situation persist if the user tries to log off and log on again?

    Regarding removal of folder redirection policy, the following article can also be referred to for more information.

    How to stop Folder Redirection in Windows Server 2003 and in Windows 2000 Server

    http://support.microsoft.com/kb/888203

    Best regards,
    Frank Shen


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, March 05, 2015 7:57 AM
    Moderator
  • https://4sysops.com/archives/how-to-disable-folder-redirection/  explains it pretty well about the "leave contents" caveats.

    "When a Folder Redirection is created, the move option is checked by default and the Policy Removal is set to, “Leave the folder in the new location when the policy is removed.” If bells and whistles aren’t going off in your head, they should be! If you were to remove the policy right now, Folder Redirection would stay how it is currently configured with the folder(s) redirected… which is probably not what you want to happen. The good news is that new logins by users won’t have folders redirected since the policy is gone, but any computers that the user has logged in to will keep their Folder Redirection.

    You’ll want to set the Policy Removal option to “Redirect the folder back to the local user profile location when policy is removed.” You’ll also want to ensure that “Move the contents of [folder name] to the new location” option is also checked so that the files get moved back to the user’s computer when you change the policy. If these settings needed to be changed, you’ll need to allow enough time for users to get the changes before removing the Folder Redirection completely."


    Entrepreneur, Strategic Technical Advisor, and Sr. Consulting Engineer - Strategic Services and Solutions Check out my book - Powershell 3.0 - WMI: http://amzn.to/1BnjOmo | Mastering PowerShell Coming in April 2015!

    Hi,

    I don't want to move them back locally, the policy needs to be removed with the setting configured to leave them as they are.  After this folder redirection will be managed by a UEM product (applying the same settings).  But even without getting the UEM product involved the simple unlink of that policy creates a long logon delay whilst Windows does something (it isn't moving them back local)

    Thanks

    Thursday, March 05, 2015 9:14 AM
  • Hi Alan,

    >>When taking a user out of scope of a Folder Redirection policy where the setting is configured to leave contents on removal we see a huge delay in the next logon

    How is it going? Does this situation persist if the user tries to log off and log on again?

    Regarding removal of folder redirection policy, the following article can also be referred to for more information.

    How to stop Folder Redirection in Windows Server 2003 and in Windows 2000 Server

    http://support.microsoft.com/kb/888203

    Best regards,
    Frank Shen


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Basically the first logon after the policy has been removed takes a very long time (at least 3 minutes but often longer, seems to be dependant on amount of data redirected).  On the next logon we get a fast logon and can see that there are no redirection policies being applied or processed.

    I know that the existing folder redirection policy and removal options are stored in the registry so the system knows what to do when the policy in no longer applied.  As all of our redirects are set to leave contents (which it does) I am still at a loss as to what is actually causing this logon delay.  

    The desired behavior is to no longer apply the policy but leave everything as is, then other UEM tools will manage folder redirection from this point on.  This is all working but we are trying to iron out this delay as it means that when a user is migrated away from folder redirection they get a very long logon just the once.

     

    Wednesday, March 25, 2015 4:12 PM