Re: GPO Folder Redirect causing Permissions Error

Hi Tommy,

Thank you for your information.
First, I am sorry for the delayed response. Please understand the partner
managed newsgroups are staffed weekdays by Microsoft Support professionals.
Our goal is to provide a one business day response to all posts.

For time critical issues (not business down), we encourage you to contact
CSS directly for more immediate assistance:

International Support (non-US/Canada):
http://support.microsoft.com/common/international.aspx

US and Canada:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone

And according to your log, I noticed the event ID 3019 is logged. However,
this error message is only informational and can be safely ignored. This
behavior can occur when NetBIOS over TCP/IP (NetBT) attempts to query the
destination device (in this case, the loopback adapter) for network speed.
The loopback adapter does not handle speed negotiation and therefore cannot
negotiate the speed.

For more information, please refer to the following KB article:

Error message: "The redirector failed to determine the connection type"
http://support.microsoft.com//kb/315244

By the way, may I know if the methods in my previous reply make any
progress? If there are any update, please let me know.

Also, could you please help to save the whole event log to *.evt and send
to me for further analysis? We may need the log to narrow down the root
cause, and I will try my best to help you.

Thanks for your time and patience.

Have a nice day :-)

Best regards,

Gary Wang(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: GPO Folder Redirect causing Permissions Error
| thread-index: AcjYU1Wiombl9Fi0SZ2U1aEAjjh4HA==
| X-WBNR-Posting-Host: 207.46.19.197
| From: =?Utf-8?B?VG9tbXkgTG9uZw==?= <TommyLong@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <CA04DF0C-1A4C-4749-8444-7F5C14022072@xxxxxxxxxxxxx>
<11A15C93-EB30-4421-9EC8-CF69A38B62B4@xxxxxxxxxxxxx>
<B6B48345-2A8B-47AA-A25F-683AD57B7C90@xxxxxxxxxxxxx>
<ABF773DB-A74D-4B59-9BF0-C00F80D2A7C2@xxxxxxxxxxxxx>
| Subject: Re: GPO Folder Redirect causing Permissions Error
| Date: Fri, 27 Jun 2008 05:43:01 -0700
| Lines: 146
| Message-ID: <A2CEDA8D-EC20-43C6-999D-DADBED758BDF@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:113253
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Cliff,
|
| I must have mis-read what you posted. Apologies.
|
| Yes, the folder creation is handled solely by the group policy. The
folders
| created however and their contents appear to be suffering from permission
| problems.
|
| If it helps I can send you a copy of the mail I sent to Gary which
contains
| screenshots of all the various permissions screens, errors, and text
| documents of the event log warnings I'm getting.
|
| Otherwise, I've followed your advice and ensured the permissions are set
as
| layed out the KB link you sent to no avail.
|
| I'm open to more suggestions.
|
| Thanks,
| Tommy
| --
| -------------------------------
| Please respond to my posts via the newsgroup as the e-mail provided is
not
| monitored.
|
|
| "Cliff Galiher" wrote:
|
| > No...you should NOT be creating them yourself (nor should your users!)
| >
| > Let the client [OS] create the folders.
| >
| > -Cliff
| >
| > "Tommy Long" <TommyLong@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
| > news:B6B48345-2A8B-47AA-A25F-683AD57B7C90@xxxxxxxxxxxxxxxx
| > > Thanks for your reply Cliff,
| > >
| > > I have been letting the clients create the folders or in some cases
move
| > > the
| > > folders. When it moved the folders I had to recreate most of the
| > > shortcuts
| > > pinned to the start menu which was a pain.
| > >
| > > I've had a look through the MSDN article you linked, I'm not at work
yet
| > > but
| > > I can see some discrepancies in the permissions. One that sticks
out,
| > > each
| > > user's redirected folder has the user who creates it as full control,
| > > admin
| > > inherits full control, but the local system I don't believe has a
| > > permission
| > > set at all when I checked them, and according to the article require
full
| > > control which I guess makes sense why a user can browse through their
| > > folder,
| > > but not run the contents of the folder?
| > >
| > > You said I should be creating the folder's for each new user? I had
hoped
| > > the policy would be able to do it. With inheritable permissions set
to
| > > the
| > > folders the policy creates, in the future they should be ok if the
above
| > > fixes the problem, right?
| > >
| > > Why do you say I should be creating them myself? (I'm not arguing,
just
| > > curious). And would it be advisable to set up a script to automate
the
| > > folder creation in that case? such as the one found here:
| > > http://www.visualbasicscript.com/m_56578/tm.htm
| > >
| > > Thanks for the reply Cliff
| > > --
| > > -------------------------------
| > > Please respond to my posts via the newsgroup as the e-mail provided
is not
| > > monitored.
| > >
| > >
| > > "Cliff Galiher" wrote:
| > >
| > >> 1) Are you letting the client create the appdata and desktop
folders? Or
| > >> are you creating them and setting the permissions yourself. You
*should*
| > >> be
| > >> doing the former.
| > >>
| > >> 2) Windows needs permissons on the root folder about the user's
folders.
| > >> Both on the share and NTFS level
| > >>
http://technet2.microsoft.com/windowsserver/en/library/a1b7ce04-708b-4145-83
0a-cadfc003acd31033.mspx?mfr=true
| > >>
| > >> -Cliff
| > >>
| > >> "Tommy Long" <TommyLong@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
| > >> news:CA04DF0C-1A4C-4749-8444-7F5C14022072@xxxxxxxxxxxxxxxx
| > >> > Last night I applied a new policy to redirect user folders.
| > >> >
| > >> > An example from the policy report:
| > >> >
| > >> > User Configuration > Windows Settings > Folder Redirection >
| > >> > Application
| > >> > Data
| > >> > Group: DomainAdmin
| > >> > Path: \\FileServer\Admin\%USERNAME%\AppData
| > >> > Grant User exclusive rights...: Enabled
| > >> > Move the contents of App...: Enabled
| > >> > Policy Removal Behavior: Leave Contents
| > >> >
| > >> > This has been mirrored to four other groups, to four other
locations,
| > >> > for
| > >> > App Data, Desktop, My Docs, and Start Menu.
| > >> >
| > >> > The share has the permissions:
| > >> > Everyone: Full Control
| > >> >
| > >> > The folders created for Appdata, Desktop, etc have the permissions:
| > >> > Admin: Full Control
| > >> > %USERNAME%: Full Control
| > >> >
| > >> > I still have the default policies enabled and have scanned through
them
| > >> > but
| > >> > can't see a reason for there to be a conflict or problem.
| > >> >
| > >> > The problem is, since the change, if you try to run a iexplore
shortcut
| > >> > (for
| > >> > example) from the QuickLaunch bar (effectively AppData folder),
from
| > >> > the
| > >> > Desktop, or from MyDocs, you receive a permissions error:
| > >> >
| > >> > "C:\Program Files....iexplore.exe"
| > >> > "Windows cannot access the specified device, path, or file. You
may
| > >> > not
| > >> > have the appropriate permissions to access the item"
| > >> >
| > >> > This also happen regardless of what you try to execute within the
above
| > >> > listed folders (shortcut, exe, etc).
| > >> >
| > >> > Shortcuts will run from the start menu however, despite the start
menu
| > >> > folder sharing mirrored policy and permissions as the other 3
folders.
| > >> >
| > >> > I'm stumped, anyone know what I've done wrong?
| > >> >
| > >> > Thanks in advance,
| > >> > Tommy
| > >> >
| > >> > --
| > >> > -------------------------------
| > >> > Please respond to my posts via the newsgroup as the e-mail
provided is
| > >> > not
| > >> > monitored.
| > >>
| >
|

.

Relevant Pages

  • RE: DCOM Process Launcher hung
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... | Thread-Topic: DCOM Process Launcher hung ...
    (microsoft.public.windows.server.sbs)
  • RE: Roaming Profiles prevent Folder redirect from working
    ... Step 2: Check the group policy. ... 38069059-Roaming Profiles prevent Folder redirect from working. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Help & Support
    ... I will be here waitting for your updates. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Monitoring and Alerts
    ... A suggestion would be to contact Microsoft Product Support Services via ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... |> Regarding CEICW, do you mean you can not run CEICW successfully now? ...
    (microsoft.public.windows.server.sbs)
  • Re: Publishing folders on companyweb
    ... library some kind of virtual folder which would be redirected to folder on ... we can make the documents accessible from Internet. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)