GPO settings

[AdminGreg]

I have used Group Policy to redirect everyone's MyDocuments folder to a network drive, well almost everyone at least. I've got one user for whom this policy just doesn't want to be applied. All of the other users in his OU are being redirected without a problem.

Any hints at what might be causing this would be much appreciated.

 

[Roadki11]

I would check the users dns settings. does gpresult show the policy being applied for the user?

RoadKi11

 

[monsterjta]

Generate a RSOP and see if the GPO is being applied to the user.

Hope This Helps,

Good Luck!

 

[mspain]

Was this user's folder pre-created? If so make sure the Grant Exclusive Rights is unchecked in the GPO settings.

 

[AdminGreg]

gpresult shows that the policy has been applied under user settings. DNS settings are also correctly configured on the machine.

 

[monsterjta]

Ok. But take a look at the Policy Events tab within the report. If the GPO is being applied and the user isn't getting the redirect as expected, the event will show up in here.

Hope This Helps,

Good Luck!

 

[AdminGreg]

policy events tab? I was running this in a cmd prompt. Could you explain this a bit more?

Thanks!

 

[monsterjta]

Sure. If you go into the GPMC you can run these RSPO reports. You'll have a Policy Events tab that comes along with the report.

You can also view these redirect policy events within the event viewer on the TS box. Look for 1704, 1521 and 401 events in the Application log.

Hope This Helps,

Good Luck!

 

[drew1701d]

Also verify that the workstation the user uses is not the culprit, test out the account on another workstation to confirm it is indeed a profile group policy issue and not a workstation group policy issue.

"I'm certifiable, not certified. It just means my answers are from experience...not a book

 

[AdminGreg]

thanks for the tip Drew. We had him logon to different machine and sure enough, the redirect worked.

Is there anything I should check on his computer that could be the culprit of this? The only thing I've tried is re-registering the Fdeploy.dll file.

 

[markdmac]

I didn't see anyone suggest running GPUPDATE /FORCE on the machine (assuming it is XP).

If 2000 Pro then execute

secedit /refreshpolicy machine_policy /enforce
secedit /refreshpolicy user_policy /enforce

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[drew1701d]

Do what markdmac says; run gpupdate /force from the command line, check the event logs to see if SceCli returns any errors in the application event log. If it doesnt return errors, have him try logging on again, if that still doesnt fix it, usually a quick way for me to get a machine to co-operate is to remove and rejoin it to the domain.

"I'm certifiable, not certified. It just means my answers are from experience...not a book