none
Issues with Folder Redirection, drive maps GPOs and profiles

    Question

  • I posted this issue in Windows 8.1 but the support guy there could not find the cause of this so he has asked me to post here as it is related to mainly GPOs. Here is the link to the other post:

    https://social.technet.microsoft.com/Forums/windows/en-US/089d4e62-878f-49d8-81eb-2001c366fe30/issues-with-folder-redirection-profiles-and-shared-folder-access?forum=w8itprogeneral

    I manage a network of about 300 computers and have a Windows Server 2012 R2 file server with Windows 8.1 clients. It has been running fine for last over a year but for last couple of weeks, I am having a terrible time resolving the issues with Folder Redirection, profiles and shared folder access. Too many users are complaining about not being able to access their redirected home folders, profiles not loading and drives not mapping.
    The only change I remember making is patching the servers and the clients but I have rolled back all patches as I thought this will fix the problem but it hasn't. My users are getting very frustrated now as they are not able to do their work. I have tried everything I could do.
    The biggest problem is the the sporadic nature of the problem which means it is affecting only some users and computers at any given time and others do not have any problem but it may affect them next time day. Also, the issue goes away sometimes after restarting the computer or after running gpupdate on the computer but other times this does not fix it.
    These are the error messages I am getting on the client computers-
    Event 1521 (Error)

    Source: Microsoft-Windows-User Profiles Service
    Windows cannot locate the server copy of your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Possible causes of this error include network problems or insufficient security rights. If this problem persists, contact your network administrator.
    DETAIL - Windows cannot find the network path. Verify that the network path is correct and the destination computer is not busy or turned off. If Windows still cannot find the network path, contact your network administrator.
    4098Group Policy Drive Maps2 Occurrences09:32:18
    message string data: user, U:, Student (Users) Preferences-Drive Maps Generic {D508A487-0600-4647-A664-77E4323E4198}, 0x80070035 The network path was not found.
    502Microsoft-Windows-Folder Redirection7 Occurrences10:38:17
    message string data: Downloads, \\Domain\Student\DownloadsFolders\brian.zhang\Downloads, 0x1001, Can't create folder "\\Domain\Student\DownloadsFolders\brian.zhang\Downloads", Access is denied.
    Here are the error messages from Group policy results-
    Event ID 1085
    Windows failed to apply the Folder Redirection settings. Folder Redirection settings might have its own log file. Please click on the "More information" link.
    Event ID 1112
    The Group Policy Client Side Extension Folder Redirection was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
    I would like to resolve it asap and will appreciate if someone can assist me in doing so.
    Thanks in advance.

    Saturday, May 09, 2015 7:35 AM

Answers

  • > You are right we use DFS. Are you able to tell me why it makes things
    > hard to analyze.
     
    If you use DFS, you access a path like \\dfs\share\folder. Under the
    hood, DFS redirects this to \\server\share2\folder2. Additional
    infrastructure component, not visible from an user's perspective...
     
    Since redirected folders usually are available offline, this adds the
    next component that can produce issues.
     
    I'd suggest starting with a thorough DFS infrastructure analysis. Are
    all Namespace servers healthy? All folder targets up and responding? All
    ACLs within DFS (!) and on the target servers properly set? DNS fully
    working? Profiles and Home folders redirected to Namespace folders with
    ONLY ONE active target?
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by Sannaru Friday, May 15, 2015 11:06 PM
    Tuesday, May 12, 2015 10:40 AM

All replies

  • > Windows cannot locate the server copy of your roaming profile and is
    > attempting to log you on with your local profile. Changes to the profile
     
    > create folder "\\Domain\Student\DownloadsFolders\brian.zhang\Downloads",
    > Access is denied.
     
    This is most probably not GP related, but infrastructrure related. Seems
    you use DFS - this makes things really hard to analyze, especially
    through a forum...
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Saturday, May 09, 2015 8:15 AM
  • You are right we use DFS. Are you able to tell me why it makes things hard to analyze. I am ready to give you any information you need. What other options do we have, we do not have any paid support, neither can we afford to get it.
    Tuesday, May 12, 2015 5:49 AM
  • > You are right we use DFS. Are you able to tell me why it makes things
    > hard to analyze.
     
    If you use DFS, you access a path like \\dfs\share\folder. Under the
    hood, DFS redirects this to \\server\share2\folder2. Additional
    infrastructure component, not visible from an user's perspective...
     
    Since redirected folders usually are available offline, this adds the
    next component that can produce issues.
     
    I'd suggest starting with a thorough DFS infrastructure analysis. Are
    all Namespace servers healthy? All folder targets up and responding? All
    ACLs within DFS (!) and on the target servers properly set? DNS fully
    working? Profiles and Home folders redirected to Namespace folders with
    ONLY ONE active target?
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by Sannaru Friday, May 15, 2015 11:06 PM
    Tuesday, May 12, 2015 10:40 AM
  • Thanks a lot Martin.

    You hit the nail right on the head. A DFS dependency service was not running automatically on one of the File servers so DFS was failing to start which caused this.

    I am wondering why did it happen even though I have a redundant DFSN setup so shouldn't workstations contact another server in case of resolution failure.

    Thursday, May 14, 2015 3:01 AM