Last night I applied a new policy to redirect user folders.

An example from the policy report:

User Configuration > Windows Settings > Folder Redirection > Application Data
Group: DomainAdmin
Path: \\FileServer\Admin\%USERNAME%\AppData
Grant User exclusive rights...: Enabled
Move the contents of App...: Enabled
Policy Removal Behavior: Leave Contents

This has been mirrored to four other groups, to four other locations, for
App Data, Desktop, My Docs, and Start Menu.

The share has the permissions:
Everyone: Full Control

The folders created for Appdata, Desktop, etc have the permissions:
Admin: Full Control
%USERNAME%: Full Control

I still have the default policies enabled and have scanned through them but
can't see a reason for there to be a conflict or problem.

The problem is, since the change, if you try to run a iexplore shortcut (for
example) from the QuickLaunch bar (effectively AppData folder), from the
Desktop, or from MyDocs, you receive a permissions error:

"C:\Program Files....iexplore.exe"
"Windows cannot access the specified device, path, or file. You may not
have the appropriate permissions to access the item"

This also happen regardless of what you try to execute within the above
listed folders (shortcut, exe, etc).

Shortcuts will run from the start menu however, despite the start menu
folder sharing mirrored policy and permissions as the other 3 folders.

I'm stumped, anyone know what I've done wrong?

Thanks in advance,
Tommy

can you access the folders?

Click Start, Run
Type \\FileServer\Admin\Username\AppData

Does it open or give you the error?

If it gives you the error double check your file/folder permissions and the
share permissions for *Admin*

~Jason


"Tommy Long" <TommyLong> wrote in message
news:2072
[..]

1) Are you letting the client create the appdata and desktop folders? Or
are you creating them and setting the permissions yourself. You *should* be
doing the former.

2) Windows needs permissons on the root folder about the user's folders.
Both on the share and NTFS level
http://technet2.microsoft.com/window....mspx?mfr=true

-Cliff

"Tommy Long" <TommyLong> wrote in message
news:2072
[..]

Hi J,

I did try to reply to this post yesterday but the forms went all buggy on me
and my boss kicked me out of work before I could sort it.

Anyway, yes, I can access any of the created folders using the run command on:
"\\FileServer\Admin\%USERNAME%\AppData"

That quite happily pops up an explorer of that directory.

Thanks for your reply Cliff,

I have been letting the clients create the folders or in some cases move the
folders. When it moved the folders I had to recreate most of the shortcuts
pinned to the start menu which was a pain.

I've had a look through the MSDN article you linked, I'm not at work yet but
I can see some discrepancies in the permissions. One that sticks out, each
user's redirected folder has the user who creates it as full control, admin
inherits full control, but the local system I don't believe has a permission
set at all when I checked them, and according to the article require full
control which I guess makes sense why a user can browse through their folder,
but not run the contents of the folder?

You said I should be creating the folder's for each new user? I had hoped
the policy would be able to do it. With inheritable permissions set to the
folders the policy creates, in the future they should be ok if the above
fixes the problem, right?

Why do you say I should be creating them myself? (I'm not arguing, just
curious). And would it be advisable to set up a script to automate the
folder creation in that case? such as the one found here:
http://www.visualbasicscript.com/m_56578/tm.htm

Thanks for the reply Cliff

Hello Tommy,

Thank you for your post and thanks for Jason and Cliff's reply.
My name is Gary Wang, and it is my pleasure to work with you on this issue!
Please allow me to confirm that my understandings are correct. As I
understand it, the issue is:

After applied Folder Redirection GPO, you are failed to open executable
shortcut with the following error:

"C:\Program Files....iexplore.exe"
"Windows cannot access the specified device, path, or file. You may not
have the appropriate permissions to access the item"

If I have misunderstood your concerns please feel free to let me know.

Suggestion :
==============
Based on my search, this issue can occurs if you install the Inetres.adm
file that is included with Windows Internet Explorer 7. Because the "URL
action" behavior of the Local Machine zone is changed in Internet Explorer
7.

Note: The term "URL action" refers to security settings that control
certain rights. These rights are granted to content that is running in the
Local Machine zone.

To work around this problem, follow these steps on the SBS server:

Method 1: Add the UNC path of the network location to the Trusted sites
zone of Windows Internet Explorer 7

To add the UNC path of a network location to the Trusted sites zone, follow
these steps:

1. Close all active Windows Internet Explorer 7 windows.
2. Start Windows Internet Explorer 7.
3. On the Tools menu, click Internet Options.
4. In the Internet Options dialog box, click the Security tab.
5. On the Security tab, under Select a zone to view or change security
settings, click Trusted sites, and then click Sites.
6. In the Add this website to the zone box, type the UNC path of the
network location, and then click Add. For example, type \\Server\Share.

Note In this example, Server represents the NetBIOS name of the server.
Share represents the shared folder where the file is located.

7. Click Close, and then click OK to close the Internet Options dialog box.

Back to the top

Method 2: Disable the Internet Explorer Enhanced Security Configuration
setting

To disable the Internet Explorer Enhanced Security Configuration setting,
follow these steps:

1. Click Start, click Run, type appwiz.cpl, and then click OK.
2. In the Add or Remove Programs dialog box, click Add/Remove Windows
Components, click Internet Explorer Enhanced Security Configuration, and
then click Details.
3. In the Internet Explorer Enhanced Security Configuration dialog box,
click to clear the For administrator groups check box and the For all other
user groups options check box, and then click OK.
4. Click Next to disable the Internet Explorer Enhanced Security
Configuration setting.

Method 3: Edit Inetres.adm

1. Make a copy of C:\Windows\inf\Inetres.adm, named it to Inetresadm.old.
You may need this file for restore if there are any exception happens.
2. Open the C:\Windows\inf\Inetres.adm file with notepad.
3. Delete all lines in the Inetres.adm file that contain the number 1806.

For example, delete the following lines:

VALUENAME "1806" VALUE NUMERIC 1
VALUENAME "1806" VALUE DELETE

Hope it helps.

If we cannot resolve the issue after we perform the above steps, please
help me collect some information for further investigation:

Information Need
==============
1. Check event viewer for related information, please help save it to *.evt
and send to me.
2. Please help to capture a screenshot of the exact symptom when the error
occurs, save it to *.jpg files and send to me.

My email address is v-gzwang

I look forward to your reply. Also, if you have any questions or concerns,
please do not hesitate to let me know. I am happy to help. :-)

Thank you for your time and cooperation!

Best regards,

Gary Wang(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

================================================== ===
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ===

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Cliff Galiher" <cgaliher>
| References: <CA04DF0C-1A4C-4749-8444-7F5C14022072>
| In-Reply-To: <CA04DF0C-1A4C-4749-8444-7F5C14022072>
| Subject: Re: GPO Folder Redirect causing Permissions Error
| Date: Thu, 26 Jun 2008 10:34:31 -0600
| Lines: 63
| Message-ID: <11A15C93-EB30-4421-9EC8-CF69A38B62B4>
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="utf-8";
| reply-type=original
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
| X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18000
| X-MS-CommunityGroup-PostID: {11A15C93-EB30-4421-9EC8-CF69A38B62B4}
| X-MS-CommunityGroup-ThreadID: CA04DF0C-1A4C-4749-8444-7F5C14022072
| X-MS-CommunityGroup-ParentID: CA04DF0C-1A4C-4749-8444-7F5C14022072
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:113147
| NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| 1) Are you letting the client create the appdata and desktop folders? Or
| are you creating them and setting the permissions yourself. You *should*
be
| doing the former.
|
| 2) Windows needs permissons on the root folder about the user's folders.
| Both on the share and NTFS level
|
http://technet2.microsoft.com/window...4-708b-4145-83
0a-cadfc003acd31033.mspx?mfr=true
|
| -Cliff
|
| "Tommy Long" <TommyLong> wrote in message
| news:2072
| > Last night I applied a new policy to redirect user folders.
| >
| > An example from the policy report:
| >
| > User Configuration > Windows Settings > Folder Redirection >
Application
| > Data
| > Group: DomainAdmin
| > Path: \\FileServer\Admin\%USERNAME%\AppData
| > Grant User exclusive rights...: Enabled
| > Move the contents of App...: Enabled
| > Policy Removal Behavior: Leave Contents
| >
| > This has been mirrored to four other groups, to four other locations,
for
| > App Data, Desktop, My Docs, and Start Menu.
| >
| > The share has the permissions:
| > Everyone: Full Control
| >
| > The folders created for Appdata, Desktop, etc have the permissions:
| > Admin: Full Control
| > %USERNAME%: Full Control
| >
| > I still have the default policies enabled and have scanned through them
| > but
| > can't see a reason for there to be a conflict or problem.
| >
| > The problem is, since the change, if you try to run a iexplore shortcut
| > (for
| > example) from the QuickLaunch bar (effectively AppData folder), from the
| > Desktop, or from MyDocs, you receive a permissions error:
| >
| > "C:\Program Files....iexplore.exe"
| > "Windows cannot access the specified device, path, or file. You may not
| > have the appropriate permissions to access the item"
| >
| > This also happen regardless of what you try to execute within the above
| > listed folders (shortcut, exe, etc).
| >
| > Shortcuts will run from the start menu however, despite the start menu
| > folder sharing mirrored policy and permissions as the other 3 folders.
| >
| > I'm stumped, anyone know what I've done wrong?
| >
| > Thanks in advance,
| > Tommy
| >
| > --
| > -------------------------------
| > Please respond to my posts via the newsgroup as the e-mail provided is
not
| > monitored.
|
|

I will e-mail you in a few minutes with all the evidence and such I can think
of.

Thankyou in advance

No...you should NOT be creating them yourself (nor should your users!)

Let the client [OS] create the folders.

-Cliff

"Tommy Long" <TommyLong> wrote in message
news:7c90
[..]

Hi Cliff,

I must have mis-read what you posted. Apologies.

Yes, the folder creation is handled solely by the group policy. The folders
created however and their contents appear to be suffering from permission
problems.

If it helps I can send you a copy of the mail I sent to Gary which contains
screenshots of all the various permissions screens, errors, and text
documents of the event log warnings I'm getting.

Otherwise, I've followed your advice and ensured the permissions are set as
layed out the KB link you sent to no avail.

I'm open to more suggestions.

Thanks,
Tommy

Hi Tommy,

Thank you for your information.
First, I am sorry for the delayed response. Please understand the partner
managed newsgroups are staffed weekdays by Microsoft Support professionals.
Our goal is to provide a one business day response to all posts.

For time critical issues (not business down), we encourage you to contact
CSS directly for more immediate assistance:

International Support (non-US/Canada):
http://support.microsoft.com/common/international.aspx

US and Canada:
http://support.microsoft.com/default...;OfferProPhone

And according to your log, I noticed the event ID 3019 is logged. However,
this error message is only informational and can be safely ignored. This
behavior can occur when NetBIOS over TCP/IP (NetBT) attempts to query the
destination device (in this case, the loopback adapter) for network speed.
The loopback adapter does not handle speed negotiation and therefore cannot
negotiate the speed.

For more information, please refer to the following KB article:

Error message: "The redirector failed to determine the connection type"
http://support.microsoft.com//kb/315244

By the way, may I know if the methods in my previous reply make any
progress? If there are any update, please let me know.

Also, could you please help to save the whole event log to *.evt and send
to me for further analysis? We may need the log to narrow down the root
cause, and I will try my best to help you.

Thanks for your time and patience.

Have a nice day :-)

Best regards,

Gary Wang(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

================================================== ===
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ===

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: GPO Folder Redirect causing Permissions Error
| thread-index: AcjYU1Wiombl9Fi0SZ2U1aEAjjh4HA==
| X-WBNR-Posting-Host: 207.46.19.197
| From: =?Utf-8?B?VG9tbXkgTG9uZw==?= <TommyLong>
| References: <CA04DF0C-1A4C-4749-8444-7F5C14022072>
<11A15C93-EB30-4421-9EC8-CF69A38B62B4>
<B6B48345-2A8B-47AA-A25F-683AD57B7C90>
<ABF773DB-A74D-4B59-9BF0-C00F80D2A7C2>
| Subject: Re: GPO Folder Redirect causing Permissions Error
| Date: Fri, 27 Jun 2008 05:43:01 -0700
| Lines: 146
| Message-ID: <A2CEDA8D-EC20-43C6-999D-DADBED758BDF>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:113253
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Cliff,
|
| I must have mis-read what you posted. Apologies.
|
| Yes, the folder creation is handled solely by the group policy. The
folders
| created however and their contents appear to be suffering from permission
| problems.
|
| If it helps I can send you a copy of the mail I sent to Gary which
contains
| screenshots of all the various permissions screens, errors, and text
| documents of the event log warnings I'm getting.
|
| Otherwise, I've followed your advice and ensured the permissions are set
as
| layed out the KB link you sent to no avail.
|
| I'm open to more suggestions.
|
| Thanks,
| Tommy
| --
| -------------------------------
| Please respond to my posts via the newsgroup as the e-mail provided is
not
| monitored.
|
|
| "Cliff Galiher" wrote:
|
| > No...you should NOT be creating them yourself (nor should your users!)
| >
| > Let the client [OS] create the folders.
| >
| > -Cliff
| >
| > "Tommy Long" <TommyLong> wrote in message
| > news:7c90
| > > Thanks for your reply Cliff,
| > >
| > > I have been letting the clients create the folders or in some cases
move
| > > the
| > > folders. When it moved the folders I had to recreate most of the
| > > shortcuts
| > > pinned to the start menu which was a pain.
| > >
| > > I've had a look through the MSDN article you linked, I'm not at work
yet
| > > but
| > > I can see some discrepancies in the permissions. One that sticks
out,
| > > each
| > > user's redirected folder has the user who creates it as full control,
| > > admin
| > > inherits full control, but the local system I don't believe has a
| > > permission
| > > set at all when I checked them, and according to the article require
full
| > > control which I guess makes sense why a user can browse through their
| > > folder,
| > > but not run the contents of the folder?
| > >
| > > You said I should be creating the folder's for each new user? I had
hoped
| > > the policy would be able to do it. With inheritable permissions set
to
| > > the
| > > folders the policy creates, in the future they should be ok if the
above
| > > fixes the problem, right?
| > >
| > > Why do you say I should be creating them myself? (I'm not arguing,
just
| > > curious). And would it be advisable to set up a script to automate
the
| > > folder creation in that case? such as the one found here:
| > > http://www.visualbasicscript.com/m_56578/tm.htm
| > >
| > > Thanks for the reply Cliff
| > > --
| > > -------------------------------
| > > Please respond to my posts via the newsgroup as the e-mail provided
is not
| > > monitored.
| > >
| > >
| > > "Cliff Galiher" wrote:
| > >
| > >> 1) Are you letting the client create the appdata and desktop
folders? Or
| > >> are you creating them and setting the permissions yourself. You
*should*
| > >> be
| > >> doing the former.
| > >>
| > >> 2) Windows needs permissons on the root folder about the user's
folders.
| > >> Both on the share and NTFS level
| > >>
http://technet2.microsoft.com/window...4-708b-4145-83
0a-cadfc003acd31033.mspx?mfr=true
| > >>
| > >> -Cliff
| > >>
| > >> "Tommy Long" <TommyLong> wrote in message
| > >> news:2072
| > >> > Last night I applied a new policy to redirect user folders.
| > >> >
| > >> > An example from the policy report:
| > >> >
| > >> > User Configuration > Windows Settings > Folder Redirection >
| > >> > Application
| > >> > Data
| > >> > Group: DomainAdmin
| > >> > Path: \\FileServer\Admin\%USERNAME%\AppData
| > >> > Grant User exclusive rights...: Enabled
| > >> > Move the contents of App...: Enabled
| > >> > Policy Removal Behavior: Leave Contents
| > >> >
| > >> > This has been mirrored to four other groups, to four other
locations,
| > >> > for
| > >> > App Data, Desktop, My Docs, and Start Menu.
| > >> >
| > >> > The share has the permissions:
| > >> > Everyone: Full Control
| > >> >
| > >> > The folders created for Appdata, Desktop, etc have the permissions:
| > >> > Admin: Full Control
| > >> > %USERNAME%: Full Control
| > >> >
| > >> > I still have the default policies enabled and have scanned through
them
| > >> > but
| > >> > can't see a reason for there to be a conflict or problem.
| > >> >
| > >> > The problem is, since the change, if you try to run a iexplore
shortcut
| > >> > (for
| > >> > example) from the QuickLaunch bar (effectively AppData folder),
from
| > >> > the
| > >> > Desktop, or from MyDocs, you receive a permissions error:
| > >> >
| > >> > "C:\Program Files....iexplore.exe"
| > >> > "Windows cannot access the specified device, path, or file. You
may
| > >> > not
| > >> > have the appropriate permissions to access the item"
| > >> >
| > >> > This also happen regardless of what you try to execute within the
above
| > >> > listed folders (shortcut, exe, etc).
| > >> >
| > >> > Shortcuts will run from the start menu however, despite the start
menu
| > >> > folder sharing mirrored policy and permissions as the other 3
folders.
| > >> >
| > >> > I'm stumped, anyone know what I've done wrong?
| > >> >
| > >> > Thanks in advance,
| > >> > Tommy
| > >> >
| > >> > --
| > >> > -------------------------------
| > >> > Please respond to my posts via the newsgroup as the e-mail
provided is
| > >> > not
| > >> > monitored.
| > >>
| >
|

Hi Gary,

Thankyou for getting back to me again.

The event log provided (ID: 3049) is a warning like you said, and I'm quite
happy to ignore it. I just believed it may be of use to you as it is a
warning generated by the faults I am trying to rectify.

The methods/solution you previously gave me do not appear to apply to the
problem. The solution you gave is to fix a problem with iexplore which I do
not believe I have. I only mentioned internet explorer in my initial post as
an example, as the problem is for any program, document, shortcut, etc,
contained within AppData, Desktop, MyDocs, and Start Menu folders.

I have exported copies of the event log and will forward them to your e-mail
address momentarily.

The only mention in the event log is the warning you have already mentioned
(ID: 3019 and more recent similar events). There are a few errors on the
event log that do not apply to this problem, I just haven't got round to
fixing them yet. The server was only turned on for the first time 8 days ago
so there's plenty of things to 'iron out'.

Please consider that in all the previous descriptions, internet explorer is
only being mentioned as an example, it is not the problem. If you believe I
should apply your previous Internet Explorer based solution anyway, please
let me know.

Thanks again,

Tommy

Hi Gary,

Just to let you know, I decided to try the solutions you listed as one of
your solutions appeared in a similar topic.

Mehod 1 (add to trusted sites) was already done, the share was already
trusted.
Method 2 (remove enhanced security) I didn't want to do, so still haven't
done so
Method 3 (remove "1806" from Inetres.adm) I've just sat and removed about
100 lines of code and my arm aches because I did it on a touch screen
terminal. :(

However, method 1 and 3 do not appear to have resolved the problem. I also
took ownership of one of the problem profiles whilst they were logged off and
deleted it to ensure the GPO created a new profile from scratch. Still no
luck.

More suggestions please!? :'(

Thanks,
Tommy

Hi Tommy,

Thanks for your time and cooperation.

I've reviewed your log. However, I have not found any related information.
So I performed more search for this symptom. I understand that this problem
happens on all the executive files but not only iexplore. However, all the
search result are seems related to ie security settings. So I would
recommend that we continue to trouble shooting on this possible cause
before going further. Thanks for your understanding

For now, I would like to suggest that you open IE -> tools-> internet
options-> security settings-> custom settings-> settings - Launching
applications and unsafe files , if it was set to disabled, enable it and
test again.

Hope it helps.

Best regards,

Gary Wang(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

================================================== ===
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ===

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: GPO Folder Redirect causing Permissions Error
| thread-index: Acja0BiEFOm82JZjRNS5TYxabvx2Hg==
| X-WBNR-Posting-Host: 65.55.21.8
| From: =?Utf-8?B?VG9tbXkgTG9uZw==?= <TommyLong>
| References: <CA04DF0C-1A4C-4749-8444-7F5C14022072>
<11A15C93-EB30-4421-9EC8-CF69A38B62B4>
<Xs6Yi7C2IHA.1788>
| Subject: Re: GPO Folder Redirect causing Permissions Error
| Date: Mon, 30 Jun 2008 09:41:07 -0700
| Lines: 261
| Message-ID: <253F6DAB-D931-4837-910F-5A731B122BAF>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:113495
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Gary,
|
| Just to let you know, I decided to try the solutions you listed as one of
| your solutions appeared in a similar topic.
|
| Mehod 1 (add to trusted sites) was already done, the share was already
| trusted.
| Method 2 (remove enhanced security) I didn't want to do, so still haven't
| done so
| Method 3 (remove "1806" from Inetres.adm) I've just sat and removed about
| 100 lines of code and my arm aches because I did it on a touch screen
| terminal. :(
|
| However, method 1 and 3 do not appear to have resolved the problem. I
also
| took ownership of one of the problem profiles whilst they were logged off
and
| deleted it to ensure the GPO created a new profile from scratch. Still
no
| luck.
|
| More suggestions please!? :'(
|
| Thanks,
| Tommy
|
| --
| -------------------------------
| Please respond to my posts via the newsgroup as the e-mail provided is
not
| monitored.
|
|
| "Guozhen Wang[MSFT]" wrote:
|
| > Hello Tommy,
| >
| > Thank you for your post and thanks for Jason and Cliff's reply.
| > My name is Gary Wang, and it is my pleasure to work with you on this
issue!
| > Please allow me to confirm that my understandings are correct. As I
| > understand it, the issue is:
| >
| > After applied Folder Redirection GPO, you are failed to open executable
| > shortcut with the following error:
| >
| > "C:\Program Files....iexplore.exe"
| > "Windows cannot access the specified device, path, or file. You may
not
| > have the appropriate permissions to access the item"
| >
| > If I have misunderstood your concerns please feel free to let me know.
| >
| > Suggestion :
| > ==============
| > Based on my search, this issue can occurs if you install the
Inetres.adm
| > file that is included with Windows Internet Explorer 7. Because the
"URL
| > action" behavior of the Local Machine zone is changed in Internet
Explorer
| > 7.
| >
| > Note: The term "URL action" refers to security settings that control
| > certain rights. These rights are granted to content that is running in
the
| > Local Machine zone.
| >
| > To work around this problem, follow these steps on the SBS server:
| >
| > Method 1: Add the UNC path of the network location to the Trusted sites
| > zone of Windows Internet Explorer 7
| >
| > To add the UNC path of a network location to the Trusted sites zone,
follow
| > these steps:
| >
| > 1. Close all active Windows Internet Explorer 7 windows.
| > 2. Start Windows Internet Explorer 7.
| > 3. On the Tools menu, click Internet Options.
| > 4. In the Internet Options dialog box, click the Security tab.
| > 5. On the Security tab, under Select a zone to view or change security
| > settings, click Trusted sites, and then click Sites.
| > 6. In the Add this website to the zone box, type the UNC path of the
| > network location, and then click Add. For example, type \\Server\Share.
| >
| > Note In this example, Server represents the NetBIOS name of the server.
| > Share represents the shared folder where the file is located.
| >
| > 7. Click Close, and then click OK to close the Internet Options dialog
box.
| >
| > Back to the top
| >
| > Method 2: Disable the Internet Explorer Enhanced Security Configuration
| > setting
| >
| > To disable the Internet Explorer Enhanced Security Configuration
setting,
| > follow these steps:
| >
| > 1. Click Start, click Run, type appwiz.cpl, and then click OK.
| > 2. In the Add or Remove Programs dialog box, click Add/Remove Windows
| > Components, click Internet Explorer Enhanced Security Configuration,
and
| > then click Details.
| > 3. In the Internet Explorer Enhanced Security Configuration dialog box,
| > click to clear the For administrator groups check box and the For all
other
| > user groups options check box, and then click OK.
| > 4. Click Next to disable the Internet Explorer Enhanced Security
| > Configuration setting.
| >
| > Method 3: Edit Inetres.adm
| >
| > 1. Make a copy of C:\Windows\inf\Inetres.adm, named it to
Inetresadm.old.
| > You may need this file for restore if there are any exception happens.
| > 2. Open the C:\Windows\inf\Inetres.adm file with notepad.
| > 3. Delete all lines in the Inetres.adm file that contain the number
1806.
| >
| > For example, delete the following lines:
| >
| > VALUENAME "1806" VALUE NUMERIC 1
| > VALUENAME "1806" VALUE DELETE
| >
| > Hope it helps.
| >
| > If we cannot resolve the issue after we perform the above steps, please
| > help me collect some information for further investigation:
| >
| > Information Need
| > ==============
| > 1. Check event viewer for related information, please help save it to
*.evt
| > and send to me.
| > 2. Please help to capture a screenshot of the exact symptom when the
error
| > occurs, save it to *.jpg files and send to me.
| >
| > My email address is v-gzwang
| >
| > I look forward to your reply. Also, if you have any questions or
concerns,
| > please do not hesitate to let me know. I am happy to help. :-)
| >
| > Thank you for your time and cooperation!
| >
| > Best regards,
| >
| > Gary Wang(MSFT)
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > ================================================== ===
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities...s/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ================================================== ===
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | From: "Cliff Galiher" <cgaliher>
| > | References: <CA04DF0C-1A4C-4749-8444-7F5C14022072>
| > | In-Reply-To: <CA04DF0C-1A4C-4749-8444-7F5C14022072>
| > | Subject: Re: GPO Folder Redirect causing Permissions Error
| > | Date: Thu, 26 Jun 2008 10:34:31 -0600
| > | Lines: 63
| > | Message-ID: <11A15C93-EB30-4421-9EC8-CF69A38B62B4>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | format=flowed;
| > | charset="utf-8";
| > | reply-type=original
| > | Content-Transfer-Encoding: 7bit
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18000
| > | X-MS-CommunityGroup-PostID: {11A15C93-EB30-4421-9EC8-CF69A38B62B4}
| > | X-MS-CommunityGroup-ThreadID: CA04DF0C-1A4C-4749-8444-7F5C14022072
| > | X-MS-CommunityGroup-ParentID: CA04DF0C-1A4C-4749-8444-7F5C14022072
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:113147
| > | NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | 1) Are you letting the client create the appdata and desktop folders?
Or
| > | are you creating them and setting the permissions yourself. You
*should*
| > be
| > | doing the former.
| > |
| > | 2) Windows needs permissons on the root folder about the user's
folders.
| > | Both on the share and NTFS level
| > |
| >
http://technet2.microsoft.com/window...4-708b-4145-83
| > 0a-cadfc003acd31033.mspx?mfr=true
| > |
| > | -Cliff
| > |
| > | "Tommy Long" <TommyLong> wrote in message
| > | news:2072
| > | > Last night I applied a new policy to redirect user folders.
| > | >
| > | > An example from the policy report:
| > | >
| > | > User Configuration > Windows Settings > Folder Redirection >
| > Application
| > | > Data
| > | > Group: DomainAdmin
| > | > Path: \\FileServer\Admin\%USERNAME%\AppData
| > | > Grant User exclusive rights...: Enabled
| > | > Move the contents of App...: Enabled
| > | > Policy Removal Behavior: Leave Contents
| > | >
| > | > This has been mirrored to four other groups, to four other
locations,
| > for
| > | > App Data, Desktop, My Docs, and Start Menu.
| > | >
| > | > The share has the permissions:
| > | > Everyone: Full Control
| > | >
| > | > The folders created for Appdata, Desktop, etc have the permissions:
| > | > Admin: Full Control
| > | > %USERNAME%: Full Control
| > | >
| > | > I still have the default policies enabled and have scanned through
them
| > | > but
| > | > can't see a reason for there to be a conflict or problem.
| > | >
| > | > The problem is, since the change, if you try to run a iexplore
shortcut
| > | > (for
| > | > example) from the QuickLaunch bar (effectively AppData folder),
from the
| > | > Desktop, or from MyDocs, you receive a permissions error:
| > | >
| > | > "C:\Program Files....iexplore.exe"
| > | > "Windows cannot access the specified device, path, or file. You
may not
| > | > have the appropriate permissions to access the item"
| > | >
| > | > This also happen regardless of what you try to execute within the
above
| > | > listed folders (shortcut, exe, etc).
| > | >
| > | > Shortcuts will run from the start menu however, despite the start
menu
| > | > folder sharing mirrored policy and permissions as the other 3
folders.
| > | >
| > | > I'm stumped, anyone know what I've done wrong?
| > | >
| > | > Thanks in advance,
| > | > Tommy
| > | >
| > | > --
| > | > -------------------------------
| > | > Please respond to my posts via the newsgroup as the e-mail provided
is
| > not
| > | > monitored.
| > |
| > |
| >
| >
|

Hi Gary,

Thanks yet again for getting back to me.

I checked the settings as you said, it was set to prompt, is now enabled.

I have at last uninstalled enhanced security as it keeps coming up as an
issue, it has again not helped in any of the issues it was supposedly
affecting.

So, I have implemented every solution you have listed and it is still giving
me the same issue. I've had a friend come down from London to look at the
problem, he is stumped. I have the server providers coming in tomorrow but
have no faith in them being able to resolve the problem.

Is there anything that is supposed to be enabled/disabled from a default SBS
setup that it is even slightly possible that I may have neglected to do so
far?

Thanks again,

Tommy

Hi Tommy,

Thanks for your reply.

Could you please check the regedit settings:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Internet
Settings\Zones\1\1806
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet
Settings\Zones\1\1806

Make sure the value is 0 but not 3.

Also, please open services.msc and make sure Secondary Logon service is
enabled and running.

By the way, please reboot your computer after made change, then test again.

Hope it helps.

Best regards,

Gary Wang(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

================================================== ===
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ===

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: GPO Folder Redirect causing Permissions Error
| thread-index: AcjbgX94shYCdAl/SyeMvM3TsdHu3A==
| X-WBNR-Posting-Host: 207.46.19.168
| From: =?Utf-8?B?VG9tbXkgTG9uZw==?= <TommyLong>
| References: <CA04DF0C-1A4C-4749-8444-7F5C14022072>
<11A15C93-EB30-4421-9EC8-CF69A38B62B4>
<Xs6Yi7C2IHA.1788>
<253F6DAB-D931-4837-910F-5A731B122BAF>
<EBYrYy22IHA.5336>
| Subject: Re: GPO Folder Redirect causing Permissions Error
| Date: Tue, 1 Jul 2008 06:51:01 -0700
| Lines: 330
| Message-ID: <770A27B8-DB99-4519-B49A-71E22C3890BB>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:113642
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Gary,
|
| Thanks yet again for getting back to me.
|
| I checked the settings as you said, it was set to prompt, is now enabled.
|
| I have at last uninstalled enhanced security as it keeps coming up as an
| issue, it has again not helped in any of the issues it was supposedly
| affecting.
|
| So, I have implemented every solution you have listed and it is still
giving
| me the same issue. I've had a friend come down from London to look at
the
| problem, he is stumped. I have the server providers coming in tomorrow
but
| have no faith in them being able to resolve the problem.
|
| Is there anything that is supposed to be enabled/disabled from a default
SBS
| setup that it is even slightly possible that I may have neglected to do
so
| far?
|
| Thanks again,
|
| Tommy
| --
| -------------------------------
| Please respond to my posts via the newsgroup as the e-mail provided is
not
| monitored.
|
|
| "Guozhen Wang[MSFT]" wrote:
|
| > Hi Tommy,
| >
| > Thanks for your time and cooperation.
| >
| > I've reviewed your log. However, I have not found any related
information.
| > So I performed more search for this symptom. I understand that this
problem
| > happens on all the executive files but not only iexplore. However, all
the
| > search result are seems related to ie security settings. So I would
| > recommend that we continue to trouble shooting on this possible cause
| > before going further. Thanks for your understanding
| >
| > For now, I would like to suggest that you open IE -> tools-> internet
| > options-> security settings-> custom settings-> settings - Launching
| > applications and unsafe files , if it was set to disabled, enable it
and
| > test again.
| >
| > Hope it helps.
| >
| > Best regards,
| >
| > Gary Wang(MSFT)
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > ================================================== ===
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities...s/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ================================================== ===
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: GPO Folder Redirect causing Permissions Error
| > | thread-index: Acja0BiEFOm82JZjRNS5TYxabvx2Hg==
| > | X-WBNR-Posting-Host: 65.55.21.8
| > | From: =?Utf-8?B?VG9tbXkgTG9uZw==?=
<TommyLong>
| > | References: <CA04DF0C-1A4C-4749-8444-7F5C14022072>
| > <11A15C93-EB30-4421-9EC8-CF69A38B62B4>
| > <Xs6Yi7C2IHA.1788>
| > | Subject: Re: GPO Folder Redirect causing Permissions Error
| > | Date: Mon, 30 Jun 2008 09:41:07 -0700
| > | Lines: 261
| > | Message-ID: <253F6DAB-D931-4837-910F-5A731B122BAF>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:113495
| > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hi Gary,
| > |
| > | Just to let you know, I decided to try the solutions you listed as
one of
| > | your solutions appeared in a similar topic.
| > |
| > | Mehod 1 (add to trusted sites) was already done, the share was
already
| > | trusted.
| > | Method 2 (remove enhanced security) I didn't want to do, so still
haven't
| > | done so
| > | Method 3 (remove "1806" from Inetres.adm) I've just sat and removed
about
| > | 100 lines of code and my arm aches because I did it on a touch screen
| > | terminal. :(
| > |
| > | However, method 1 and 3 do not appear to have resolved the problem.
I
| > also
| > | took ownership of one of the problem profiles whilst they were logged
off
| > and
| > | deleted it to ensure the GPO created a new profile from scratch.
Still
| > no
| > | luck.
| > |
| > | More suggestions please!? :'(
| > |
| > | Thanks,
| > | Tommy
| > |
| > | --
| > | -------------------------------
| > | Please respond to my posts via the newsgroup as the e-mail provided
is
| > not
| > | monitored.
| > |
| > |
| > | "Guozhen Wang[MSFT]" wrote:
| > |
| > | > Hello Tommy,
| > | >
| > | > Thank you for your post and thanks for Jason and Cliff's reply.
| > | > My name is Gary Wang, and it is my pleasure to work with you on
this
| > issue!
| > | > Please allow me to confirm that my understandings are correct. As I
| > | > understand it, the issue is:
| > | >
| > | > After applied Folder Redirection GPO, you are failed to open
executable
| > | > shortcut with the following error:
| > | >
| > | > "C:\Program Files....iexplore.exe"
| > | > "Windows cannot access the specified device, path, or file. You
may
| > not
| > | > have the appropriate permissions to access the item"
| > | >
| > | > If I have misunderstood your concerns please feel free to let me
know.
| > | >
| > | > Suggestion :
| > | > ==============
| > | > Based on my search, this issue can occurs if you install the
| > Inetres.adm
| > | > file that is included with Windows Internet Explorer 7. Because
the
| > "URL
| > | > action" behavior of the Local Machine zone is changed in Internet
| > Explorer
| > | > 7.
| > | >
| > | > Note: The term "URL action" refers to security settings that
control
| > | > certain rights. These rights are granted to content that is running
in
| > the
| > | > Local Machine zone.
| > | >
| > | > To work around this problem, follow these steps on the SBS server:
| > | >
| > | > Method 1: Add the UNC path of the network location to the Trusted
sites
| > | > zone of Windows Internet Explorer 7
| > | >
| > | > To add the UNC path of a network location to the Trusted sites
zone,
| > follow
| > | > these steps:
| > | >
| > | > 1. Close all active Windows Internet Explorer 7 windows.
| > | > 2. Start Windows Internet Explorer 7.
| > | > 3. On the Tools menu, click Internet Options.
| > | > 4. In the Internet Options dialog box, click the Security tab.
| > | > 5. On the Security tab, under Select a zone to view or change
security
| > | > settings, click Trusted sites, and then click Sites.
| > | > 6. In the Add this website to the zone box, type the UNC path of
the
| > | > network location, and then click Add. For example, type
\\Server\Share.
| > | >
| > | > Note In this example, Server represents the NetBIOS name of the
server.
| > | > Share represents the shared folder where the file is located.
| > | >
| > | > 7. Click Close, and then click OK to close the Internet Options
dialog
| > box.
| > | >
| > | > Back to the top
| > | >
| > | > Method 2: Disable the Internet Explorer Enhanced Security
Configuration
| > | > setting
| > | >
| > | > To disable the Internet Explorer Enhanced Security Configuration
| > setting,
| > | > follow these steps:
| > | >
| > | > 1. Click Start, click Run, type appwiz.cpl, and then click OK.
| > | > 2. In the Add or Remove Programs dialog box, click Add/Remove
Windows
| > | > Components, click Internet Explorer Enhanced Security
Configuration,
| > and
| > | > then click Details.
| > | > 3. In the Internet Explorer Enhanced Security Configuration dialog
box,
| > | > click to clear the For administrator groups check box and the For
all
| > other
| > | > user groups options check box, and then click OK.
| > | > 4. Click Next to disable the Internet Explorer Enhanced Security
| > | > Configuration setting.
| > | >
| > | > Method 3: Edit Inetres.adm
| > | >
| > | > 1. Make a copy of C:\Windows\inf\Inetres.adm, named it to
| > Inetresadm.old.
| > | > You may need this file for restore if there are any exception
happens.
| > | > 2. Open the C:\Windows\inf\Inetres.adm file with notepad.
| > | > 3. Delete all lines in the Inetres.adm file that contain the
number
| > 1806.
| > | >
| > | > For example, delete the following lines:
| > | >
| > | > VALUENAME "1806" VALUE NUMERIC 1
| > | > VALUENAME "1806" VALUE DELETE
| > | >
| > | > Hope it helps.
| > | >
| > | > If we cannot resolve the issue after we perform the above steps,
please
| > | > help me collect some information for further investigation:
| > | >
| > | > Information Need
| > | > ==============
| > | > 1. Check event viewer for related information, please help save it
to
| > *.evt
| > | > and send to me.
| > | > 2. Please help to capture a screenshot of the exact symptom when
the
| > error
| > | > occurs, save it to *.jpg files and send to me.
| > | >
| > | > My email address is v-gzwang
| > | >
| > | > I look forward to your reply. Also, if you have any questions or
| > concerns,
| > | > please do not hesitate to let me know. I am happy to help. :-)
| > | >
| > | > Thank you for your time and cooperation!
| > | >
| > | > Best regards,
| > | >
| > | > Gary Wang(MSFT)
| > | > Microsoft CSS Online Newsgroup Support
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | >
| > | > ================================================== ===
| > | > This newsgroup only focuses on SBS technical issues. If you have
issues
| > | > regarding other Microsoft products, you'd better post in the
| > corresponding
| > | > newsgroups so that they can be resolved in an efficient and timely
| > manner.
| > | > You can locate the newsgroup here:
| > | > http://www.microsoft.com/communities...s/default.aspx
| > | >
| > | > When opening a new thread via the web interface, we recommend you
check
| > the
| > | > "Notify me of replies" box to receive e-mail notifications when
there
| > are
| > | > any updates in your thread. When responding to posts via your
| > newsreader,
| > | > please "Reply to Group" so that others may learn and benefit from
your
| > | > issue.
| > | >
| > | > Microsoft engineers can only focus on one issue per thread.
Although we
| > | > provide other information for your reference, we recommend you post
| > | > different incidents in different threads to keep the thread clean.
In
| > doing
| > | > so, it will ensure your issues are resolved in a timely manner.
| > | >
| > | > For urgent issues, you may want to contact Microsoft CSS directly.
| > Please
| > | > check http://support.microsoft.com for regional support phone
numbers.
| > | >
| > | > Any input or comments in this thread are highly appreciated.
| > | > ================================================== ===
| > | >
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | > --------------------
| > | > | From: "Cliff Galiher" <cgaliher>
| > | > | References: <CA04DF0C-1A4C-4749-8444-7F5C14022072>
| > | > | In-Reply-To: <CA04DF0C-1A4C-4749-8444-7F5C14022072>
| > | > | Subject: Re: GPO Folder Redirect causing Permissions Error
| > | > | Date: Thu, 26 Jun 2008 10:34:31 -0600
| > | > | Lines: 63
| > | > | Message-ID: <11A15C93-EB30-4421-9EC8-CF69A38B62B4>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain;
| > | > | format=flowed;
| > | > | charset="utf-8";
| > | > | reply-type=original
| > | > | Content-Transfer-Encoding: 7bit
| > | > | X-Priority: 3
| > | > | X-MSMail-Priority: Normal
| > | > | X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18000
| > | > | X-MS-CommunityGroup-PostID: {11A15C93-EB30-4421-9EC8-CF69A38B62B4}
| > | > | X-MS-CommunityGroup-ThreadID: CA04DF0C-1A4C-4749-8444-7F5C14022072
| > | > | X-MS-CommunityGroup-ParentID: CA04DF0C-1A4C-4749-8444-7F5C14022072
| > | > | Newsgroups: microsoft.public.windows.server.sbs
| > | > | Path: TK2MSFTNGHUB02.phx.gbl
| > | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windows.server.sbs:113147
| > | > | NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | > |
| > | > | 1) Are you letting the client create the appdata and desktop
folders?
| > Or
| > | > | are you creating them and setting the permissions yourself. You
| > *should*
|