Security group / GPO problem Svr 2012 / Win 7

[worcestertech]

Hi everyone.

 

I was on here before (Number6) but haven't posted for a while. Now I can't get into my old account so hence this new one.

 

Anyway,

 

I have a problem that's been bugging me most of the day.

 

I have a brand new 2012 DC on which I've created a folder redirection GPO pointing users docs and desktop to a newly created share. I have created a new global security group for folder redirection users, the group currently contains only me. The GPO scopes to the folder and is applied to the OU containing the user.

 

Now, on a W7 PC logged in as me I have run gpudate /force followed by gpresult. This shows the new policy not applied (Denied: Security). It does not show me as a member of the folder redirection group. Obviously the GPO is denied because I'm not showing as a member of the relevant security group.

 

The same result ensues if I run gpresult on the DC.

 

whoami /groups does not show me in the group also.

 

Simple question. Why am I not showing as a group member?

 

This is completely "doing my head in" and I need to resolve it yesterday, any ideas anyone?

[MordyT]

I am going to bet uac. Has to do with the standard token vs elevated token.

[free780]

For user docs provided its the home drive the user needs to be the owner of the folder.

[SkreeM1980]

Stupid question but have you logged off and back on? Windows only processes your group membership at logon time, and if you created the group and added yourself since then it will not recognise.

[worcestertech]

Yes, I had tried logging off and on several times both on the DC and the workstation.

 

However, the next morning it was OK. No idea why but it just seemed to take ages to propogate.