Errors Doing Folder Redirection via GPO

[MR-KEN]

Windows 2000 SP4 as the Client

On some users computers, when they are added to a GPO that redirects their
My Documents folder to a file server and moves any items already in their
local My Documents folders, the following errors are reported in the Event
Viewers Application Log:

Event Type: Error
Event Source: Folder Redirection
Event Category: None
Event ID: 102
Date: 4/10/2004
Time: 12:35:32 PM
User: CORP\DTONG
Computer: DTONG
Description:
Failed to perform redirection of folder My Documents. The files for the
redirected folder could not be moved to the new location. The folder is
configured to be redirected to \\naca1\home\%username%\private. Files were
being moved from C:\Documents and Settings\DTong\My Documents to
\\naca1\home\DTONG\private. The following error occurred:
Data error (cyclic redundancy check).


Event Type: Error
Event Source: Folder Redirection
Event Category: None
Event ID: 102
Date: 4/10/2004
Time: 1:07:26 PM
User: CORP\DTONG
Computer: DTONG
Description:
Failed to perform redirection of folder My Documents. The files for the
redirected folder could not be moved to the new location. The folder is
configured to be redirected to \\naca1\home\%username%\private. Files were
being moved from C:\Documents and Settings\DTong\My Documents to
\\naca1\home\DTONG\private. The following error occurred:
The security descriptor structure is invalid.

The first error listed looks as though it may have been a hard drive problem
on the local computer as files were being redirected, however, I don't know
what the second error indicates (this second error has also happened on an
XP SP1 machine as well).

The work around, is to manually copy the users local data to the server and
remove any items in the local My Documents directory; then reboot. On other
users computers, this process works fine.

I have found no KB articles to these general looking errors. Any ideas?

 

[Terry Liu [MSFT]]

Hi,

It seems that the issue is caused by permission settings on the server
side.

In order to resolve this issue, here are two suggestions:

1. Grant the user ownership and full permissions to the folder on the
server that is storing their My Documents contents and any subfolders of
that folder.

, OR (and a much better solution)

2. Grant the System account full control to the folder on the server that
is storing their My Documents contents and any subfolders of that folder.

By default, if there does not exist a folder to store the user's My
Documents contents on the server, it is created and both the user has
ownership and System is granted full control permissions. These
permissions then flow to any subfolders created on the server. If the user
is not the owner of the folders, or System does not have full control
permissions, then the errors are generated.

In order to narrow down the issue, you can create a new user on the
problematic machine to check the issue again. This should be documented in
the ON-online help, as well as the white paper at the following location:

http://www.microsoft.com/windows2000/techinfo/administration/management/sett
ings.asp

Excerpt from the white paper:

Table 10. NTFS Permissions for Folder Redirection Root Folder
User Account Minimum permissions required
Creator/Owner Full Control, Subfolders And Files Only
Administrator None
Security group of users needing to put data on share. List Folder/Read
Data,
Create Folders/Append Data - This Folder Only
Everyone No Permissions
Local System Full Control, This Folder, Subfolders And Files

Table 11. Share level (SMB) Permissions for Folder Redirection Share
User Account Default Permissions Minimum permissions required
Everyone Full Control No Permissions
Security group of users needing to put data on share. N/A Full Control,

Table 12. NTFS Permissions for Each User's Redirected Folder
User Account Default Permissions Minimum permissions required
%Username% Full Control, Owner Of Folder Full Control, Owner Of Folder
Local System Full Control Full Control
Administrators No Permissions No Permissions
Everyone No Permissions No Permissions

I hope that this address your concern.

Best regards,

Terry Liu
MCSE 2K MCSA MCDBA CCNA
Microsoft Online Support Engineer

Get Secure! - <www.microsoft.com/security>
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[MR-KEN]

Thank you for the information. I'll review the information and give it a
try. BTW: The user directories are being created manually, so I think this
simplifies the permissions required. I have been giving the user all check
boxed permissions except Full, so I will try that first (perhaps this is
necessary in certain circumstances which is why some user redirects work
fine).

 

[Terry Liu [MSFT]]

Thank you for posting back!

If you need any further assistance, please don't hesitate to post back!

Best regards,

Terry Liu
MCSE 2K MCSA MCDBA CCNA
Microsoft Online Support Engineer

Get Secure! - <www.microsoft.com/security>
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.