Re: GPO Folder Redirect causing Permissions Error

Hi Gary,

Thankyou for getting back to me again.

The event log provided (ID: 3049) is a warning like you said, and I'm quite
happy to ignore it. I just believed it may be of use to you as it is a
warning generated by the faults I am trying to rectify.

The methods/solution you previously gave me do not appear to apply to the
problem. The solution you gave is to fix a problem with iexplore which I do
not believe I have. I only mentioned internet explorer in my initial post as
an example, as the problem is for any program, document, shortcut, etc,
contained within AppData, Desktop, MyDocs, and Start Menu folders.

I have exported copies of the event log and will forward them to your e-mail
address momentarily.

The only mention in the event log is the warning you have already mentioned
(ID: 3019 and more recent similar events). There are a few errors on the
event log that do not apply to this problem, I just haven't got round to
fixing them yet. The server was only turned on for the first time 8 days ago
so there's plenty of things to 'iron out'.

Please consider that in all the previous descriptions, internet explorer is
only being mentioned as an example, it is not the problem. If you believe I
should apply your previous Internet Explorer based solution anyway, please
let me know.

Thanks again,

Tommy

--
-------------------------------
Please respond to my posts via the newsgroup as the e-mail provided is not
monitored.


"Guozhen Wang[MSFT]" wrote:

Hi Tommy,

Thank you for your information.
First, I am sorry for the delayed response. Please understand the partner
managed newsgroups are staffed weekdays by Microsoft Support professionals.
Our goal is to provide a one business day response to all posts.

For time critical issues (not business down), we encourage you to contact
CSS directly for more immediate assistance:

International Support (non-US/Canada):
http://support.microsoft.com/common/international.aspx

US and Canada:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone

And according to your log, I noticed the event ID 3019 is logged. However,
this error message is only informational and can be safely ignored. This
behavior can occur when NetBIOS over TCP/IP (NetBT) attempts to query the
destination device (in this case, the loopback adapter) for network speed.
The loopback adapter does not handle speed negotiation and therefore cannot
negotiate the speed.

For more information, please refer to the following KB article:

Error message: "The redirector failed to determine the connection type"
http://support.microsoft.com//kb/315244

By the way, may I know if the methods in my previous reply make any
progress? If there are any update, please let me know.

Also, could you please help to save the whole event log to *.evt and send
to me for further analysis? We may need the log to narrow down the root
cause, and I will try my best to help you.

Thanks for your time and patience.

Have a nice day :-)

Best regards,

Gary Wang(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: GPO Folder Redirect causing Permissions Error
| thread-index: AcjYU1Wiombl9Fi0SZ2U1aEAjjh4HA==
| X-WBNR-Posting-Host: 207.46.19.197
| From: =?Utf-8?B?VG9tbXkgTG9uZw==?= <TommyLong@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <CA04DF0C-1A4C-4749-8444-7F5C14022072@xxxxxxxxxxxxx>
<11A15C93-EB30-4421-9EC8-CF69A38B62B4@xxxxxxxxxxxxx>
<B6B48345-2A8B-47AA-A25F-683AD57B7C90@xxxxxxxxxxxxx>
<ABF773DB-A74D-4B59-9BF0-C00F80D2A7C2@xxxxxxxxxxxxx>
| Subject: Re: GPO Folder Redirect causing Permissions Error
| Date: Fri, 27 Jun 2008 05:43:01 -0700
| Lines: 146
| Message-ID: <A2CEDA8D-EC20-43C6-999D-DADBED758BDF@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:113253
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Cliff,
|
| I must have mis-read what you posted. Apologies.
|
| Yes, the folder creation is handled solely by the group policy. The
folders
| created however and their contents appear to be suffering from permission
| problems.
|
| If it helps I can send you a copy of the mail I sent to Gary which
contains
| screenshots of all the various permissions screens, errors, and text
| documents of the event log warnings I'm getting.
|
| Otherwise, I've followed your advice and ensured the permissions are set
as
| layed out the KB link you sent to no avail.
|
| I'm open to more suggestions.
|
| Thanks,
| Tommy
| --
| -------------------------------
| Please respond to my posts via the newsgroup as the e-mail provided is
not
| monitored.
|
|
| "Cliff Galiher" wrote:
|
| > No...you should NOT be creating them yourself (nor should your users!)
| >
| > Let the client [OS] create the folders.
| >
| > -Cliff
| >
| > "Tommy Long" <TommyLong@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
| > news:B6B48345-2A8B-47AA-A25F-683AD57B7C90@xxxxxxxxxxxxxxxx
| > > Thanks for your reply Cliff,
| > >
| > > I have been letting the clients create the folders or in some cases
move
| > > the
| > > folders. When it moved the folders I had to recreate most of the
| > > shortcuts
| > > pinned to the start menu which was a pain.
| > >
| > > I've had a look through the MSDN article you linked, I'm not at work
yet
| > > but
| > > I can see some discrepancies in the permissions. One that sticks
out,
| > > each
| > > user's redirected folder has the user who creates it as full control,
| > > admin
| > > inherits full control, but the local system I don't believe has a
| > > permission
| > > set at all when I checked them, and according to the article require
full
| > > control which I guess makes sense why a user can browse through their
| > > folder,
| > > but not run the contents of the folder?
| > >
| > > You said I should be creating the folder's for each new user? I had
hoped
| > > the policy would be able to do it. With inheritable permissions set
to
| > > the
| > > folders the policy creates, in the future they should be ok if the
above
| > > fixes the problem, right?
| > >
| > > Why do you say I should be creating them myself? (I'm not arguing,
just
| > > curious). And would it be advisable to set up a script to automate
the
| > > folder creation in that case? such as the one found here:
| > > http://www.visualbasicscript.com/m_56578/tm.htm
| > >
| > > Thanks for the reply Cliff
| > > --
| > > -------------------------------
| > > Please respond to my posts via the newsgroup as the e-mail provided
is not
| > > monitored.
| > >
| > >
| > > "Cliff Galiher" wrote:
| > >
| > >> 1) Are you letting the client create the appdata and desktop
folders? Or
| > >> are you creating them and setting the permissions yourself. You
*should*
| > >> be
| > >> doing the former.
| > >>
| > >> 2) Windows needs permissons on the root folder about the user's
folders.
| > >> Both on the share and NTFS level
| > >>
http://technet2.microsoft.com/windowsserver/en/library/a1b7ce04-708b-4145-83
0a-cadfc003acd31033.mspx?mfr=true
| > >>
| > >> -Cliff
| > >>
| > >> "Tommy Long" <TommyLong@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
| > >> news:CA04DF0C-1A4C-4749-8444-7F5C14022072@xxxxxxxxxxxxxxxx
| > >> > Last night I applied a new policy to redirect user folders.
| > >> >
| > >> > An example from the policy report:
| > >> >
| > >> > User Configuration > Windows Settings > Folder Redirection >
| > >> > Application
| > >> > Data
| > >> > Group: DomainAdmin
| > >> > Path: \\FileServer\Admin\%USERNAME%\AppData
| > >> > Grant User exclusive rights...: Enabled
| > >> > Move the contents of App...: Enabled
| > >> > Policy Removal Behavior: Leave Contents
| > >> >
| > >> > This has been mirrored to four other groups, to four other
locations,
| > >> > for
| > >> > App Data, Desktop, My Docs, and Start Menu.
| > >> >
| > >> > The share has the permissions:
| > >> > Everyone: Full Control
| > >> >
| > >> > The folders created for Appdata, Desktop, etc have the permissions:
| > >> > Admin: Full Control
| > >> > %USERNAME%: Full Control
| > >> >
| > >> > I still have the default policies enabled and have scanned through
them
| > >> > but
| > >> > can't see a reason for there to be a conflict or problem.
| > >> >
| > >> > The problem is, since the change, if you try to run a iexplore
shortcut
| > >> > (for
| > >> > example) from the QuickLaunch bar (effectively AppData folder),
from
| > >> > the
| > >> > Desktop, or from MyDocs, you receive a permissions error:
| > >> >
| > >> > "C:\Program Files....iexplore.exe"
| > >> > "Windows cannot access the specified device, path, or file. You
may
| > >> > not
| > >> > have the appropriate permissions to access the item"
| > >> >
| > >> > This also happen regardless of what you try to execute within the
above
| > >> > listed folders (shortcut, exe, etc).
| > >> >
| > >> > Shortcuts will run from the start menu however, despite the start
menu
| > >> > folder sharing mirrored policy and permissions as the other 3
folders.
| > >> >
| > >> > I'm stumped, anyone know what I've done wrong?
| > >> >
| > >> > Thanks in advance,
| > >> > Tommy
| > >> >
| > >> > --
| > >> > -------------------------------
| > >> > Please respond to my posts via the newsgroup as the e-mail
provided is
| > >> > not
| > >> > monitored.
| > >>
| >
|


.

Relevant Pages

  • RE: Sharepoint upload question
    ... Distributed File System (DFS) allows administrators to group shared folders ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 REPORT FAILURE
    ... Did as you suggested and turned auditing on for the system and folders ... that is setting the wrong permissions of the folders ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Outlook 2003
    ... files by ticking the option "Show hidden files and folders". ... Then please test to see if you can find the .nk2 file. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Offline Files and Folders
    ... open a file from a network location ... Microsoft CSS Online Newsgroup Support ... <Thread-Topic: Offline Files and Folders ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 REPORT FAILURE
    ... directory (and all sub folders) and it remained there ... Do you mean the NETWORK SERVICES permissions are still missing from the ISA ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
Loading