Re: GPO Folder Redirect causing Permissions Error

1) Are you letting the client create the appdata and desktop folders? Or are you creating them and setting the permissions yourself. You *should* be doing the former.

2) Windows needs permissons on the root folder about the user's folders. Both on the share and NTFS level
http://technet2.microsoft.com/windowsserver/en/library/a1b7ce04-708b-4145-830a-cadfc003acd31033.mspx?mfr=true

-Cliff

"Tommy Long" <TommyLong@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:CA04DF0C-1A4C-4749-8444-7F5C14022072@xxxxxxxxxxxxxxxx
Last night I applied a new policy to redirect user folders.

An example from the policy report:

User Configuration > Windows Settings > Folder Redirection > Application Data
Group: DomainAdmin
Path: \\FileServer\Admin\%USERNAME%\AppData
Grant User exclusive rights...: Enabled
Move the contents of App...: Enabled
Policy Removal Behavior: Leave Contents

This has been mirrored to four other groups, to four other locations, for
App Data, Desktop, My Docs, and Start Menu.

The share has the permissions:
Everyone: Full Control

The folders created for Appdata, Desktop, etc have the permissions:
Admin: Full Control
%USERNAME%: Full Control

I still have the default policies enabled and have scanned through them but
can't see a reason for there to be a conflict or problem.

The problem is, since the change, if you try to run a iexplore shortcut (for
example) from the QuickLaunch bar (effectively AppData folder), from the
Desktop, or from MyDocs, you receive a permissions error:

"C:\Program Files....iexplore.exe"
"Windows cannot access the specified device, path, or file. You may not
have the appropriate permissions to access the item"

This also happen regardless of what you try to execute within the above
listed folders (shortcut, exe, etc).

Shortcuts will run from the start menu however, despite the start menu
folder sharing mirrored policy and permissions as the other 3 folders.

I'm stumped, anyone know what I've done wrong?

Thanks in advance,
Tommy

--
-------------------------------
Please respond to my posts via the newsgroup as the e-mail provided is not
monitored.

.

Relevant Pages

  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)
  • RE: ISA 2004 REPORT FAILURE
    ... Did as you suggested and turned auditing on for the system and folders ... that is setting the wrong permissions of the folders ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO Folder Redirect causing Permissions Error
    ... Anyway, yes, I can access any of the created folders using the run command on: ... Please respond to my posts via the newsgroup as the e-mail provided is not ... If it gives you the error double check your file/folder permissions and the ... The problem is, since the change, if you try to run a iexplore shortcut ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 REPORT FAILURE
    ... the ISA Reports still fail because ... I can change the permissions manually ... on the ISALogs and ISASummaries folders ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Personal Media Drive
    ... > much more knowledgeable about Windows than I am. ... You restrict access by assigning permissions to drives, folders and files. ...
    (microsoft.public.windows.mediacenter)
Loading