locked
Folder Redirection GPO not working on Windows 10 Client RRS feed

  • Domanda

  • The folder redirection GPO from Server 2012R2 Essentials in not being picked up by the Windows 10 Clients.
    Does any one know of a fix, or workaround?

    sabato 1 agosto 2015 16:37

Risposte

  • I had a similar problem.  On my Essentials box the folder redirection comes from a "WSE Group Policy Folder Redirection" GPO.  This GPO uses the "WSE Group Policy WMI Filter" to set the scope.  With it's default setting the filter means the GPO doesn't get applied to windows 10 machines.  Win10 has a version number of "10" and due to the way filters work it thinks 10 is lower than 6 - go figure!

    You have an option.

    a) Remove the filter - this could have unintended consequences unless all the machines on the network are windows 7 or greater.

    b) Amend the filter settings - I amended mine to

    select * from Win32_OperatingSystem where (Version >= "6.1%" or Version like "10.%") and ProductType = "1"

    It now works as expected. Hope that helps

    giovedì 6 agosto 2015 14:50

Tutte le risposte

  • Folder redirection combined with offline files is not working and is preventing access to the home folder.

    Environment:

    1. Home folder is located on a DFS-R share (\\domain.company.com\users\docs\username)
    2. Documents directory redirected to same location as home folder.
    3. Home folder also has a drive mapping. (M:\)
    4. Laptop users have offline files enabled.
    5. Laptop user are connected with DirectAccess

    Symptoms:

    1. Sometimes the Home Folder does not get mapped.
    2. Other drive mappings from GPP do get mapped.
    3. Redirection of Documents folder is not applied.
    4. Files are not accessible via Windows Explorer using \\domain.company.com\users\docs\username but are accessible as \\domain\users\docs\username.
    5. I can browse to \\domain.company.com\ or \\domain\ and see all the DFS shares. The Users share opens but show no sub-folders.

    Is there documentation on Offline files and folder redirection for Windows 10? I am finding very little real documentation for anything Windows 10 so far. Mostly blog posts talking about features but no explaining best practices and how to implement.

    domenica 2 agosto 2015 14:49
  • Update: After changing the homepath to \\domain\users\docs\username it still didn't work, even after a gpupdate /force, sitting all night and a reboot. After my previous post I decided to try one more logout/login and my drive got mapped, folders were redirected and offline files are syncing.

    I still cannot access the files directly using the fqdn unc path \\domain.company.com\users\docs\. I previously found that the fqdn worked better over DirectAccess on Windows 7.

    domenica 2 agosto 2015 15:00
  • I have the same problem. I have find out, that the Problem Comes with the day one patch.

    If you use Win10 Pro/Ent. without this patch (KB3074683-x64), it will work fine. I have this issue with a 2012R2 Domain. the same GPO's work with Windows 7/8/8.1/10(Bulid10240)

    brgds

    Alexander


    lunedì 3 agosto 2015 06:39
  • I had a similar problem.  On my Essentials box the folder redirection comes from a "WSE Group Policy Folder Redirection" GPO.  This GPO uses the "WSE Group Policy WMI Filter" to set the scope.  With it's default setting the filter means the GPO doesn't get applied to windows 10 machines.  Win10 has a version number of "10" and due to the way filters work it thinks 10 is lower than 6 - go figure!

    You have an option.

    a) Remove the filter - this could have unintended consequences unless all the machines on the network are windows 7 or greater.

    b) Amend the filter settings - I amended mine to

    select * from Win32_OperatingSystem where (Version >= "6.1%" or Version like "10.%") and ProductType = "1"

    It now works as expected. Hope that helps

    giovedì 6 agosto 2015 14:50
  • I'm having the same problem, and following along so far, but cannot for the life of me, find where I edit the WMI query that is preventing redirection from working with windows 10 clients.
    lunedì 7 dicembre 2015 19:38
  • awesome - amending the filter worked.
    giovedì 24 dicembre 2015 02:46
  • In my situation is was an SBS 2008 server, but the same situation and basic fix.  Following the suggestion of HSS Advanced in another forum, I used a different filter setting.  I believe this may prevent future issues.

    I modified the Windows SBS Client filter under WMI Filters to:

    select version from Win32_OperatingSystem where not version like "[12345].%" and not version like "6.0.%"

    After forcing the policy udpate and a new login, all is working!

    giovedì 21 gennaio 2016 16:45
  • Thanks for your reply.  Worked for me


    mercoledì 23 marzo 2016 20:52
  • Hi,

    I have Win Server RC2 Standard 2012 and clients workstation with Windows 10 and Windows 8, and have the same problem with configure Offline files using "Folder redirection" in GPO

    From the last post took a long time, if there is any known solution (some MS update/fix?).

    If not, how and where I can do the modification suggested filters "modifi the Windows SBS Client filter under WMI Filters"


    giovedì 16 giugno 2016 08:09
  • I have the same problem...
    In my case, i found setting the command 'gpresult /z' the GPO, appear in 'Applied GPO's'. But in 'result set of policy' show:
    Folder redirection
    -----------------------------------
    N/A

    Someone have the same problem? Have the solution?

    Thank's

    venerdì 17 giugno 2016 13:13
  • I am having the same problem.. Also not seeing any folder redirection settings from gpresult /z (N/A).

    Worked fine in 1507, but not in 1511.

    Running DC on 2012 R2 DC, and the file server on 2008 R2 Std.

    Would anyone know if UNC Hardening is involved when it comes to folder redirection settings? If so - are the defaults different between 1507 and 1511?

    martedì 21 giugno 2016 07:52
  • You tried set the GPO security with group 'Authenticated Users' and 'Domain Computers' to read permission?
    martedì 21 giugno 2016 10:42
  • The policy where my folder redirection settings are located is being applied. It's simply not redirecting the folders (Quick Access menu in the Navigation pane in file explorer) to the user home directory (H:\ mapped to network share).

    I did as you suggested and gave Domain Computers read access to the GPO. Don't know why that would be an issue (considering the policy is being applied and all) and it didn't resolve my situation. Thanks anyway.

    martedì 21 giugno 2016 13:58
  • After the update, in some cases the GPO not apply (without traces in gpresult)...
    In the documentation have the solution:

    Resolution

    To resolve this issue, use the Group Policy Management Console (GPMC.MSC) and follow one of the following steps:
    Add the Authenticated Users group with Read Permissions on the Group Policy Object (GPO).
    If you are using security filtering, add the Domain Computers group with read permission.

    According:
    https://support.microsoft.com/en-us/kb/316362


    • Proposto come risposta Neto Fontes mercoledì 27 luglio 2016 19:32
    • Modificato Neto Fontes mercoledì 27 luglio 2016 19:33
    martedì 21 giugno 2016 14:27
  • I found the cause of my problems. Apparently MS introduced a WMI class for performing folder redirection rather than Group Policy Client Side Extension. This is an option for Windows 8 and newer. You can read more about the class here:

    https://msdn.microsoft.com/en-us/library/windows/desktop/hh830621(v=vs.85).aspx

    Now. With SCCM (at least from 2012 R2 SP1, 5.00.8239.1206) there is a compliance setting in the default client settings called "Enable User Data and Profiles". Having this one set to Yes will replace GPCSE handling of folder redirection with the new WMI way, for Windows 8 and Windows 10 clients.

    If you're using the combination of Windows 10, GPO based folder redirection and SCCM 2012 or Current Branch you have to set this setting to No, or figure out how to set up folder redirection with WMI (for me, that'll be a later project. Perhaps it's not to complicated).

    Here's another discussion but for Windows 8:

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/1050a55d-2fb5-4d63-88f8-5816ca06790f/windows-8-folder-redirection-policy-missing-from-gp-results?forum=winserverGP

    Hope this helps others out there.


    • Modificato pelleswe mercoledì 22 giugno 2016 13:16 formatting
    • Proposto come risposta emnavarro02 mercoledì 14 dicembre 2016 13:06
    mercoledì 22 giugno 2016 09:07
  • Thanx!

    We used security filtering so the policy was applied when  users is are member of a specific group. It was working on Windows 7 + 8 but for Windows 10 we needed to add domain computers with read permission on the policy

    mercoledì 6 luglio 2016 08:20
  • Yes, many thanks! We were having the same problem and I was ready to scream. I added the domain computers with read access and that fixed it. Sheesh, Microsoft, way to shoot your golden child (Windows 10) in the foot.
    mercoledì 6 luglio 2016 21:07
  • I have the same issue where the policy is not being applied and even with the filter the folders are not redirected.
    lunedì 22 agosto 2016 04:16
  • I hope this helps,

    This may not pertain to your specific instance of the issue you are experiencing, but I include it that it may lead you to the correct resolution, with that said...

    I had a similar issue, after many attempts the only resolution for me was to include in the GPO security filtering tab "domain computers", which to me makes no sense as this is a user GPO!?! but it did work and is still working and continues to work, you got me on that one, but it does and has for me.

    So to recap, this originally is a user GPO, applied to users, but in order for it to work I had to add domain computers to the security filtering tab of the GPO,.. weird yes, I hope it helps.

    Things that don't work as they should is an understatement....

    martedì 15 novembre 2016 04:11
  • If you are using SCCM Current Branch you have to disable the User Profile and data or it breaks Folder Redirection. https://support.microsoft.com/en-ca/kb/3060058

    lforbes

    giovedì 8 dicembre 2016 04:29
  • Thank you, this is the only thing that worked for me! Messing with the WMI filters did nothing for me...

    Server 2012 R2 Datacenter in a pure Windows 10 Pro environment. 

    sabato 10 dicembre 2016 09:18
  • Thanks,

    I had the same problem with Windows 10 Enterprise machines and this solution worked for me.


    -- emnavarro02

    mercoledì 14 dicembre 2016 13:06
  • Thanks for me to, this was the only solution!!

    venerdì 14 aprile 2017 05:02
  • All these answers look really great, if you're on Server 2012. They don't work so good on Server 2016. I followed every one of the suggestions, 2016 does not have WMI filters, and still, not one single time will it redirect a valid domain user on a valid domain computer, who is an authenticated user, to the redirected folder. Nothing changes.

    This is brand new, patched, 2016 Server Standard Edition, with 70 CAL, it authenticates as expected, I can create user accounts and policies all day long. Not a single one of the policies work. If I MANUALLY, at the workstation, relocate a folder to the server/NAS, that works just great. Do it from a login however, one giant failure.

    So, any suggestions? Or do I ditch this thing and go with SAMBA on a Linux box, and ask for my money back?

    Thanks!

    mercoledì 16 agosto 2017 17:41
  • What does the Folder Redirection Event Log say on the workstations? It will tell you if it is applying or why not. Did you do an RSOP to see applied policies? You can do an mmc snapin on the local machine and add the RSOP and see what is applying. There could be a thousand reasons why it is not working. All of our Servers are 2016 and do folder redirection just fine. Note that User Policies only apply to OU's users are in unless you have loopback enabled.  How are your home directories in the user profile path? Are the using DFS \\domain.local\usershare\%username%. What did you put for Folder Redirection? Redirect to user home profile location (that is the best one).

    lforbes

    sabato 19 agosto 2017 23:08
  • Talk english dude ? select * from Win32_OperatingSystem where (Version >= "6.1%" or Version like "10.%") and ProductType = "1"

    IS Win32_OperatingSystem a folder must this be done in CMD prompt you need to give more info if you want to assist.

    mercoledì 20 settembre 2017 10:05
  • Talk english dude ? select * from Win32_OperatingSystem where (Version >= "6.1%" or Version like "10.%") and ProductType = "1"

    IS Win32_OperatingSystem a folder must this be done in CMD prompt you need to give more info if you want to assist.


    This is referencing a WMI Group Policy Filter. It is the way it is filtered. Google setting wmi filters on GPO's. I have no issues with Folder Redirection and Windows 10 but we only use laptop wmi filters.

    lforbes


    • Modificato lforbes mercoledì 20 settembre 2017 15:48
    mercoledì 20 settembre 2017 15:48
  • I hope this helps,

    This may not pertain to your specific instance of the issue you are experiencing, but I include it that it may lead you to the correct resolution, with that said...

    I had a similar issue, after many attempts the only resolution for me was to include in the GPO security filtering tab "domain computers", which to me makes no sense as this is a user GPO!?! but it did work and is still working and continues to work, you got me on that one, but it does and has for me.

    So to recap, this originally is a user GPO, applied to users, but in order for it to work I had to add domain computers to the security filtering tab of the GPO,.. weird yes, I hope it helps.

    Things that don't work as they should is an understatement....


    Microsoft introduced a security KB3163622 MS16-072 last year which processes ALL Group Policies in the system context. Therefore for any User GPO's filtered on a GROUP of Users has to have Domain Comouters = Read or it won't apply.

    lforbes

    mercoledì 20 settembre 2017 15:53
  • Not for me. Didn't do anything.
    giovedì 2 novembre 2017 02:50
  • Adding read permision on the policy for W10 computers works great!
    giovedì 25 gennaio 2018 19:42
  • salve a tutti,

    sto configurando dc windows 2016 con client windows 10, come sopra  non funzionano i criteri per il reindirizzare le cartelle, ho seguito tutto quanto sopra, inserito i permessi, ma continua a non funzionare.

    per impostazione predefinita non ho nessun non ho nessun filtro WMI, deve essere inserito necessariamente per funzionare windows 10 e 7.



    mercoledì 2 maggio 2018 18:30
  • Thanks,

    I had the same problem with Windows 10 Enterprise machines and this solution worked for me.


    -- emnavarro02

    Which one?

    /* Server Support Specialist */

    martedì 4 dicembre 2018 03:06
  • Thanx!

    We used security filtering so the policy was applied when  users is are member of a specific group. It was working on Windows 7 + 8 but for Windows 10 we needed to add domain computers with read permission on the policy

    OK, The Folder Redirection Policy is applied to User not Computer:

    User Configuration (Enabled) | Policies | Windows Settings | Folder Redirection | Documents | Setting: Basic (Redirect everyone's folder to the same location) Path: '\\FILESERVER\%USERNAME%\My Documents'

    Do you still require to add Domain Computers Allowed Permissions: READ?


    /* Server Support Specialist */

    martedì 4 dicembre 2018 03:08