Ошибка 502 folder redirection

I am testing folder Redirection Domain is 2003.  I receive the following error when the policy is applied:

Log Name:     
Application

Source:       
Microsoft-Windows-Folder Redirection

Date:         
10/21/2013 1:04:23 PM

Event ID:     
502

Task Category: None

Level:        
Error

Keywords:     

User:         
AAMCFoldertest

Computer:     
PC.aamc.org

Description:

Failed to apply policy and redirect folder «Videos» to «\UserShareNameFolderTest$My Videos».

 Redirection options=0x1211.

 The following error occurred: «Failed to copy files from «C:UsersfoldertestVideos» to «\UserShareNameFolderTest$My Videos»».

 Error details: «This function is not supported on this system.

«.

Event Xml:

<Event xmlns=»http://schemas.microsoft.com/win/2004/08/events/event»>

  <System>

    <Provider Name=»Microsoft-Windows-Folder Redirection» Guid=»{7D7B0C39-93F6-4100-BD96-4DDA859652C5}» />

    <EventID>502</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x8000000000000000</Keywords>

    <TimeCreated SystemTime=»2013-10-21T17:04:23.599065700Z» />

    <EventRecordID>6980</EventRecordID>

    <Correlation ActivityID=»{8A8AD491-254D-4ABB-9F82-76B5A0669CCF}» />

    <Execution ProcessID=»504″ ThreadID=»3624″ />

    <Channel>Application</Channel>

    <Computer>PC253-137.aamc.org</Computer>

    <Security UserID=»S-1-5-21-1645522239-861567501-1801674531-62941″ />

  </System>

  <EventData Name=»EVENT_FDEPLOY_FailedToApplyPolicy»>

    <Data Name=»FromFolder»>Videos</Data>

    <Data Name=»ToFolder»>\UserShareNameFolderTest$My Videos</Data>

    <Data Name=»Options»>0x1211</Data>

    <Data Name=»Error»>Failed to copy files from «C:UsersfoldertestVideos» to «\UserShareNameFolderTest$My Videos»</Data>

    <Data Name=»ErrorDetails»>This function is not supported on this system.

</Data>

  </EventData>

</Event>

*******************************************************

It does this for Pictures, Music and Documents.  It will create the folders on the share drive but moves no data.  Any guidance would greatly be appreciated been working this issue for quite some time. 

Client Windows 7 Enterprise

  • Edited by

    Monday, October 21, 2013 7:00 PM

Dear all,

We are finalizing our Windows 7 migration where we migrated 500+ clients. In our enterprise concept we implemented RUP (Roaming User Profiles) and Redirected Folders for all
users. The Redirected Folders have been by enabled by a single GPO which redirects all folders from
AppData to
Searches \servername.domain.namedocuments$%username%.

Problem:
The RUP and Redirected folders solution works fine until a new user wants to logon. This new user has been migrated to RUP and Redirected on another system and
he just wants to work on another workplace or gets a temporary pc. What happens is that redirected folders do not work. The user gets a message that the folder is not reachable and desktop is empty.

Troubleshooting:
Soon I found out that something was being locked. If we used a user account which had working Redirect Folders than this
worked for that user. An event of 10 was logged in OfflineFiles area of EventViewer to reconnect the path which was configured in the GPO.

This is example screenshot. It says «Error on Open Folder. \server.domain.namedocuments$%username%Desktop refers to a location that is unavailable. It could be on a hard disk
on this computer, or a on a network. Check to make sure that the disk is properly inserted, or that you are connected to the Internet or your network, and then try again. If it still cannot be located, the information might have been moved to a different location.»

These symptoms happen randomly and not on all workstations. The pain here is when it happens on a portable computer. For desktop we disabled the «Disable Offline Files’ in «Manage
Offline Files» control panel and then reboot. After the reboot the folders are directed
and it works without these errors… On portable computer we can’t use this work around as they need to work offline.

If I connect to the share without the FQDN like \servernamedocuments$%username%Desktop than this works fine and user can access all folders. When I try the FQDN path which is
configured in the GPO to redirect user to like \servername.domain.namedocuments$%username%Desktop than it fails with this message. I personally think because the C:WindowsCSC database is locked by the previous user who has been logged on this system.

An example of the event generated in the Applications Event viewer part (I removed some username and server path):

Log Name:      Application
Source:        Microsoft-Windows-Folder Redirection
Date:          1-2-2011 17:40:11
Event ID:      502
Task Category: None
Level:         Error
Keywords:     
User:          domainivan
Computer:      computer.domain.name
Description:
Failed to apply policy and redirect folder «Videos» to «\servername.domain.namedocuments$ivanDocumentsMy Videos».
 Redirection options=0x1001.
 The following error occurred: «Can not create folder «\servername.domain.namedocuments$ivanDocumentsMy Videos»».
 Error details: «Access is denied.
«.
Event Xml:
<Event xmlns=»http://schemas.microsoft.com/win/2004/08/events/event»>
  <System>
    <Provider Name=»Microsoft-Windows-Folder Redirection» Guid=»{7D7B0C39-93F6-4100-BD96-4DDA859652C5}» />
    <EventID>502</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime=»2011-02-01T16:40:11.486983400Z» />
    <EventRecordID>2754</EventRecordID>
    <Correlation ActivityID=»{3211E6FB-2801-456D-BE6E-66AAE150A4DC}» />
    <Execution ProcessID=»968″ ThreadID=»5856″ />
    <Channel>Application</Channel>
    <Computer>computer.domain.name</Computer>
    <Security UserID=»S-1-5-21-3705223304-2632712944-1292073641-26755″ />
  </System>
  <EventData Name=»EVENT_FDEPLOY_FailedToApplyPolicy»>
    <Data Name=»FromFolder»>Videos</Data>
    <Data Name=»ToFolder»>\servername.domain.namedocuments$ivanDocumentsMy Videos</Data>
    <Data Name=»Options»>0x1001</Data>
    <Data Name=»Error»>Can not create folder «\servername.domain.namedocuments$ivanDocumentsMy Videos»</Data>
    <Data Name=»ErrorDetails»>Access is denied.
</Data>
  </EventData>
</Event> 

Something like this I see in the Application Eventviewer:

Environment:
Windows 7 Enterprise client with patches until 1-Nov-2010
Windows Server 2008 R2 for the Documents$ share
Windows Server 2003 R2 as the domain controller

I have tried all different option even to rebuild the CSC database but this also was not helping. I hope we are not dealing with a bug.

Any help is much appreciated.


Best regards, Ivan Versluis http://www.networknet.nl

Folder Redirection Fails. Event ID 502 — Access is denied

Issue

Applying folder redirection to Documents and other folders fails when Group Policy is trying to automatically create required folders. Following error is logged in Application Logs on client PCs:

Event ID: 502
Level: Error
Description: Failed to apply policy and redirect folder «Documents» to «\Server-NameRedirecteduser.nameDocuments». Redirection options=0x1021.
The following error occurred: «Can not create folder «\Server-NameRedirecteduser.nameDocuments»».
Error details: «Access is denied.».

As the error explains, this is permission issue. If user’s folder on the server is created manually by an administrator everything works fine.

Redirected folder share and NTFS permissions were setup as per following Microsoft article:
https://blogs.technet.microsoft.com/askds/2008/06/30/automatic-creation-of-user-folders-for-home-roaming-profile-and-redirected-folders/

Resolution

The issue was caused by missing Create Folder/Append Data NTFS permission for Everyone Group that is not mentioned in the above article.

Here is the full list of permissions that had to be setup for automatic redirected folder creation to work correctly (permissions needs to be applied to redirected folder root, i.e. \Server-NameRedirected):

  • Share
    • Everyone
      • Full Control
  • NTFS
    • Administrators (This folder, subfolders and files)
      • Full Control
    • SYSTEM (This folder, subfolders and files)
      • Full Control
    • CREATOR OWNER (Subfolders and files only)
      • Full Control
    • Everyone (This folder only)
      • Traverse Folder/Execute File
      • List Folder/Read Data
      • Read Attributes
      • Read Extended Attributes
      • Create Folder/Append Data
      • Read Permissions

Windows Server 2008
Windows 7 Pro

GPO Folder Redirection Failing after moving FileServers

ISSUE
====

GPO folder redirection not working.

Domain: Windows 2003
Clients: Windows XP, Windows Vista, Windows 7

ERROR
=====

On the client machines:

Log Name:      Application
Source:        Microsoft-Windows-Folder Redirection
Date:
Event ID:      502
Task Category: None
Level:         Error
Keywords:      Classic
User:
Computer:
Description:
Failed to apply policy and redirect folder “Documents” to “NEW SERVERUsersMyDocUSER NAME>My Documents”.
Redirection options=80009211.
The following error occurred: “Failed to build the list of regular subfolders under “OLD SERVERUsersMyDocMy Documents””.
Error details: “Logon Failure: The target account name is incorrect.
“.

And

Log Name:      Application
Source:        Microsoft-Windows-Folder Redirection
Date:
Event ID:      510
Task Category: None
Level:         Warning
Keywords:      Classic
User:
Computer:

Description:
Folder redirection policy application has been delayed until the next logon because the group policy logon optimization is in effect.

On the Server:

Event Type: Error
Event Source: Folder Redirection
Event Category: None
Event ID: 103
Date:
Time: 16:46:17
User: N/A
Computer:
Description:
Failed to perform redirection of folder . The fully expanded paths for the folder could not be determined. The following error occurred:
The system could not find the environment option that was entered.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

ISSUE
====

One of the main reasons for the group policy folder redirection failing is  due to the existing folder redirection. What appears to happen is that the system determines if the users folder redirection was already enabled, if the folder was already being redirect it will access the old share and then migrate all of the data to the new share, in this example the file server no longer existed.

SOLUTION
========

Create a new group policy, for example called “Apply Folder Redirect Reg”

Link the GPO to the relevant OU’s, where folder redirection is failing

with in the ou create a new logon script (under the user container)

create a batch file in the following location DOMAIN CONTROLLERNETLOGONPolicy_Reg.bat

batch file to contain the following


REG ADD "HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerUser Shell Folders" /v Personal /t REG_EXPAND_SZ /d "NEW SERVERUsersMyDoc%USERNAME%My documents" /f

REG ADD "HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerShell Folders" /v Personal /t REG_SZ /d "NEW SERVERUsersMyDoc%USERNAME%My documents" /f

REG ADD "HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerUser Shell Folders" /v "My Pictures" /t REG_EXPAND_SZ /d NEW SERVERUsersMyDoc%username%My documentsMy Pictures" /f

REG ADD "HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerShell Folders" /v "My Pictures" /t REG_SZ /d "NEW SERVERUsersMyDoc%username%My documentsMy Pictures" /f

REG ADD "HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerUser Shell Folders" /v "My Video" /t REG_EXPAND_SZ /d "NEW SERVERUsersMyDoc%username%My documentsMy Video" /f

REG ADD "HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerShell Folders" /v "My Video" /t REG_SZ /d "NEW SERVERUsersMyDoc%username%My documentsMy Video" /f

REG ADD "HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerUser Shell Folders" /v "My Music" /t REG_EXPAND_SZ /d "NEW SERVERUsersMyDoc%username%My documentsMy Music" /f

REG ADD "HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerShell Folders" /v "My Video" /t REG_SZ /d "NEW SERVERUsersMyDoc%username%My documentsMy Music" /f

Under AD Site and Service replicate settings to all servers.
Run Gpupdate /force on the DC where the GPO was created
Get your users to log off and then log back in again.

Unlink the GPO once you know all users have been updated

I am redirecting several folders using Group Policy. Everything works as expected on Windows XP clients, but on a Windows Vista client, some of the folders redirect, and some of them fail to redirect. For the ones that fail, the following event (with identifying information altered) is logged:

Log Name:      Application
Source:        Microsoft-Windows-Folder Redirection
Date:          5/14/2009 2:34:38 PM
Event ID:      502
Task Category: None
Level:         Error
Keywords:      Classic
User:          CORPusername
Computer:      machinename.corp.mycompany.com
Description:
Failed to apply policy and redirect folder "Desktop" to "\corp.mycompany.comnetusersdesktopusername".
 Redirection options=1001.
 The following error occurred: "Can not create folder "\corp.mycompany.comnetusersdesktopusername"".
 Error details: "This file is currently not available for use on this computer.
".

I have made sure that there is no pre-existing folder with the name in question, so that I can be sure that Windows creates the folder with the permissions that it wants. I set up my permissions on the parent folder using TechNet’s guidance, and I can manually create the folder in question using the command prompt while logged on as the user in question.

Why is this failing? What possible causes should I look for?

EDIT: I tried Zoredache’s suggestions, and the alternate test GPO and redirected folder share worked. I then switched back to my original location, turned on auditing, and monitored with ProcMon on the client side, and everything worked fine. Our file server that hosts redirected folders is a virtual machine, and I turned off a couple of other virtual machines on the same host at the same time that I switched to the new redirected folder share. This was foolish, because now I don’t know if there was a resource issue on the virtual machine host that was causing the problem, or if there is a Heisenbug—a bug that disappears when I audit and monitor the redirected folder-creation process. Although I do not have any evidence that Zoredache’s suggestion resolved my particular issue, I recognize that it is excellent advice, and I am going to mark it as the accepted answer.

Понравилась статья? Поделить с друзьями:
  • Ошибка 502 exel
  • Ошибка 502 error что значит
  • Ошибка 502 epic games
  • Ошибка 501 ваз 2112
  • Ошибка 501 аристон эгис плюс