Group Policy Caching for Folder Redirection. Ask Question Asked 4 years, 7 months ago. Gpupdate /force only seems to update policy for logged in users. My first usual suspect would be a bug in the Windows client. GPO's may not be re-applied unless the client detects that they have changed or if not on a slow link.
Hi,I'm having trouble getting folder redirects working using group policy.
I was trying to redirect my My Documents folder as a test before deploying
the setup in a bigger site. I have tested this on Windows 8 and Windows XP SP2.
The Server I'm testing with is Windows Server 2008 and it is the DC and fileserver,
The Server it is going to be deployed on is Server 2012 but I’m currently testing on Sever 2008.
I started by creating an OU in Group Policy Management called 'TestOU'
Then I did 'Create a GPO in this domain, and Link it here...'. I called the GPO 'MyDocRedirect'
(see image OU1.PNG)
It has precedence over the Default Domain Policy and it is enabled
(see image OU2.PNG)
You can also see that the policy should be redirecting onto our server.
---
Policy
I then edited the GPO. Under User Configuration -> Documents -> Properties
Under the Target tab I changed the Setting drop down to 'Basic'
I set the Target folder location to 'Create a folder for each user under the root path
I set the route path to DEITG10UserProfiles
Under the settings Tab I:
Left grant user exclusive rights to Documents unchecked
Move the contents of Documents to the new location checked
Also apply the redirection policy to Windows 2000, Windows 2000 Server,
Windows XP, and Windows Server 2003 operating systems checked
As shown in RedirectPolicy1.PNG and RedirectPolicy2.PNG
Assigned Users
In Active Directory users and computers I had create a 'TestOU' and Added a user to it.
I later also added the computer the user uses although I think this is unnecessary.
See Users.PNG
File Access
The policy was supposed to redirect to an existing share. While debugging I tried using a UNC path,
and mapping the share and using a local path. From the user PC I have no problem accessing the shared folder Read and Write
See FileAccess.PNG
To troubleshoot I tried redirecting the folder manually and got an error saying:
'This network location can't be included because it is not indexed'
I read a recommendation saying to make the folder 'always available off line'. After doing that I
had no trouble redirecting the folder manually but it would not redirect with group policy.
Debugging
I have run GPUpdate /Force numerous times
Computer Policy update has completed successfully.
User Policy update has completed successfully.
The following warnings were encountered during user policy processing:
The Group Policy Client Side Extension Folder Redirection was unable to apply one or more
settings because the changes must be processed before system start-up or user logon. The system will wait for Group Policy processing to finish comple tely before the next start-up or logon for this user, and this may result in slow start-up and boot performance.
For more detailed information, review the event log or run GPRESULT /H GPReport.html from the
command line to access information about Group Policy results.
Certain user policies are enabled that can only run during logon.
OK to log off? (Y/N)
I always select Y
Output from GPResults
PS C:Userskeith loughnane> gpresult /v
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
© 2012 Microsoft Corporation. All rights reserved.
Created on 12/08/2013 at 16:14:56
RSOP data for DEITGKeith Loughnane on DEITG-VAIO : Logging Mode
-----------------------------------------------------------------
OS Configuration: Member Workstation
OS Version: 6.2.9200
Site Name: N/A
Roaming Profile: N/A
Local Profile: C:Userskeith loughnane
Connected over a slow link?: No
USER SETTINGS
--------------
CN=Keith Loughnane,OU=TestOU,DC=DEITG,DC=local
Last time Group Policy was applied: 12/08/2013 at 16:12:44
Group Policy was applied from: deitg10.DEITG.local
Group Policy slow link threshold: 500 kbps
Domain Name: DEITG
Domain Type: Windows 2008 or later
Applied Group Policy Objects
-----------------------------
MyDocRedirect
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Default Domain Policy
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups
---------------------------------------------------
Domain Users
Everyone
BUILTINAdministrators
BUILTINUsers
NT AUTHORITYINTERACTIVE
CONSOLE LOGON
NT AUTHORITYAuthenticated Users
This Organization
LOCAL
High Mandatory Level
The user has the following security privileges
----------------------------------------------
Resultant Set Of Policies for User
-----------------------------------
Software Installations
----------------------
N/A
Logon Scripts
-------------
N/A
Logoff Scripts
--------------
N/A
Public Key Policies
-------------------
N/A
Administrative Templates
------------------------
N/A
Folder Redirection
------------------
N/A
Internet Explorer Browser User Interface
----------------------------------------
N/A
Internet Explorer Connection
----------------------------
N/A
Internet Explorer URLs
----------------------
N/A
Internet Explorer Security
--------------------------
N/A
Internet Explorer Programs
--------------------------
N/A
Like I said, I have tried this on Windows 8 and Windows XP. I read about the possibility for enabling a debug log from the registry but this option didn’t seem available in windows 8 and XP.
Any help would be appreciated.