Re: Citrix and Folder Redirection?

That would explain it,
Glad you found it,
Anthony,
http://www.airdesk.co.uk


"Linn Kubler" <lkubler@xxxxxxxxxxxxxxxxxx> wrote in message
news:%2360p5njyIHA.420@xxxxxxxxxxxxxxxxxxxxxxx
OH! *slaps forehead*... I think I found it. I was comparing my two folder
redirection policies and noticed a difference. The Target Folder Location
on the working policy was set to "Redirect to the user's home directory",
while the non-working policy was set to "Create a folder for each user
under the root path". I changed the non-working policy to "Redirect to
the user's home directory" and it seems to be working now. I'll check
with my users this morning and see how things are going, but it passes all
my testing.

Thanks for the help and for sticking with me, Anthony,
Linn

"Anthony [MVP]" <anthony@xxxxxxxxxxxx> wrote in message
news:Om0y1uIyIHA.5716@xxxxxxxxxxxxxxxxxxxxxxx
Linn,
The Citrix logon should be with a TS profile, so a different My Documents
is being redirected.
The error in the event log of the Citrix server tells you that the policy
is being applied, but failing on permissions.
If you are redirecting into "Users", that does not match the error that
you found.
Anthony,
http://www.airdesk.co.uk




"Linn Kubler" <lkubler@xxxxxxxxxxxxxxxxxx> wrote in message
news:eiwm3Q%23xIHA.4952@xxxxxxxxxxxxxxxxxxxxxxx
Hi Anthony,

Yeah, we are on the same page here, we use a similar folder structure to
what you describe.

It looks like this, \\server\users\%username%$
For example, my personal directory share is \\server\users\lkubler$

It's interesting how my desktop users folder redirection works but not
for my thin client users. I'm wondering now if I'm approaching this
correctly.

Here is what my AD tree looks like:

Domain
- accounts(ou)
- employees(ou) (This is where all the user objects are
located, with the exception of administrator)
- CitrixPS4(ou) (This is where all my Citrix server objects are
located)

I have a Citrix Lockdown Policy linked to CitrixPS4 with security
filtering linked to my Citrix Users group, this is where I set their
folder redirection.
I also have a Folder Redirection Policy linked to the employees OU with
security filtering linked to authenticated users.
I also have a Default Domain Policy linked to the domain with security
filtering on the authenticated users.

I'm wondering now why I can't simply move the folder redirection to the
Default Domain Policy? Oh, wait, because that would also affect my
administrators, don't want that. Wonder why the Folder Redirection
Policy isn't being applied to the Citrix users? They are authenticated
and reside in the employees OU after all.

Sorry, just trying to work this all out in my head hoping someone will
look at it and see something that I'm missing.

Thanks much,
Linn

"Anthony [MVP]" <anthony@xxxxxxxxxxxx> wrote in message
news:uBhZaL7xIHA.4500@xxxxxxxxxxxxxxxxxxxxxxx
Linn,
I think the problem we have is one of folder levels. Redirection
actually moves My Documents out of the profile and puts it somewhere
else (and can be called something different if you want). You need a
Shared folder to redirect the My Document folder into. You can call the
redirected folder %username%$ if you wish, but you still have to
redirect it into something.
In your case it sounds like you already have Shared personal folders,
in the root of a drive. You can't redirect into the root. What you
could do is:
- Share the root of the drive itself as, say, Personal, and then
redirect into \\server\personal. So your target would end up as
\\server\personal\%username%$
- Move everything down a level, so you have a shared folder in the
root, and redirect into that
- Or just change the drive mapping so it maps My Documents instead of
the Home Folder,
Anthony
http://www.airdesk.co.uk





"Linn Kubler" <lkubler@xxxxxxxxxxxxxxxxxx> wrote in message
news:%23xCFZy0xIHA.4500@xxxxxxxxxxxxxxxxxxxxxxx
hmm... well, I gave my test user full control of his directory
structure but that didn't help. I also support desktop users and
their folder redirection works fine. It too is set via group policy.
I would think that if it worked for one configuration it would work
for another, wouldn't you?

The problem I have with the end path being a 'My Documents' directory
is that we want them to access the same directory level either through
the desktop My Documents or mapped drive. That's why I haven't
included it. Would really confuse my users to change now.

Thanks,
Linn

"Anthony [MVP]" <anthony@xxxxxxxxxxxx> wrote in message
news:uODn4H0xIHA.4816@xxxxxxxxxxxxxxxxxxxxxxx
Linn,
The redirection is taking place in the User security context. The
user needs to have full control of the folder where My Documents is
being redirected to. The end path should be
\\cmw-file3\%username%$\My_Documents
Anthony,
http://www.airdesk.co.uk



"Linn Kubler" <lkubler@xxxxxxxxxxxxxxxxxx> wrote in message
news:uhbpfSyxIHA.4892@xxxxxxxxxxxxxxxxxxxxxxx
Hi Anthony

Which log are you referring to and how do I find it? Do you mean
the event log of the Citrix server? The event log shows an error:

Source: Folder Redirection
Category: None
Event ID: 101

Failed to perform redirection of folder My Documents. The new
directories for the redirected folder could not be created. The
folder is configured to be redirected to <\\cmw-file3\%username%$>,
the final expanded path was <\\cmw-file3\lkubler$>. The following
error occured:
This security ID may not be assigned as the owner of this object.

Hmm... why would it need to be the owner? None of my users are the
owners of their related private folders. Or are they referring to
something else? Besides, the folders already exist, they don't need
to be created. I'm confused.

To your second question... I mean, I edit the group policy using the
group policy editor.

Changing the security of the policy had no effect.

Thanks,
Linn

"Anthony [MVP]" <anthony@xxxxxxxxxxxx> wrote in message
news:ue3b%23AVxIHA.420@xxxxxxxxxxxxxxxxxxxxxxx
Linn,
What errors relating to folder redirection do you have in the log?
What do you mean by "go into the GPO and change the server name"?
What result do you get if you change the security of the policy to
Authenticated Users?
Anthony,
http://www.airdesk.co.uk



"Linn Kubler" <lkubler@xxxxxxxxxxxxxxxxxx> wrote in message
news:OPlqbOPxIHA.3680@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I just replaced my file server, new server, new server name. Got
everything working fine for my desktop users, however, my Citrix
Thin Client users aren't fairing so well. When a user connects to
a published desktop on the Thin Client and clicks on My Documents
on the desktop, they get an error indicating that the original
file location is unreachable. Ok, I thought, just go into the GPO
and change the server name, easy enough. But it doesn't work.

Even though I have changed my group policy folder redirection it
isn't taking on the Thin Clients, and further more, when I run
group policy results in the group policy management utility I
don't even see the folder redirection listed. Any ideas why this
would happen?

I have my group policy linked to an OU with my Citrix servers and
in filtering I have the security group my Citrix users belong to.
There is another GPO linked to this OU with loopback processing
enabled and the mode is set to replace.

Any suggestions are greatly appreciated,
Linn




















.

Relevant Pages

  • Re: My Documents on Server?
    ... detailed reports of your folder redirection policy: ... to the folder redirection. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Profiles on Terminal Services
    ... Did you run gpupdate after each change in the policy? ... "Policy Removal" is "Leave the folder in the new location when ... of the profile. ... Group policy is also set with folder redirection for the ...
    (microsoft.public.windows.terminal_services)
  • Re: Citrix and Folder Redirection?
    ... The Citrix logon should be with a TS profile, so a different My Documents is ... The error in the event log of the Citrix server tells you that the policy is ... Yeah, we are on the same page here, we use a similar folder structure to ... It's interesting how my desktop users folder redirection works but not for ...
    (microsoft.public.windows.group_policy)
  • RE: Server based My Documents without My Music, etc.
    ... File Server Resource Manager is a new function included in SBS 2003 R2. ... disable current Folder Redirection group policy. ... Basic-Redirect Everyone's Folder to the same Location. ...
    (microsoft.public.windows.server.sbs)
  • Re: User V Computers
    ... You ROAM profiles, and REDIRECT doc's, start menu, app ... The redirection is only bad the first time, ... What does roaming DO that redirection doesnt?? ... Redirect the Location of the My Documents Folder Outside of the Users ...
    (microsoft.public.windows.server.sbs)
Loading