Joanne Posted January 23, 2018 Posted January 23, 2018 Aight... story time. I have a server - 2008 R2 (Primary DC), it's warranty is coming up and SIMS won't be supported on this. This server also has a 2012 R2 VM on it acting as a DC. Bought a new server. Installed Server 2016. Installed a couple of VMs - One will be the new Primary DC and the other is the SIMS server. Swapped FSMO roles onto new 2016 server. Fine. Been changing over shares slowly, fine. Had SIMS migrated to SIMS server, fine. Installed updates on 2008 R2 last night - my group policies don't seem to be updating. Today I have gone through this: https://blogs.technet.microsoft.com/qzaidi/2012/01/16/quickly-explained-migrate-your-sysvol-replication-from-frs-to-dfsr/ To ensure than all of my group policies are correctly replicated. I have a policy to apply shared drives. It doesn't seem to be working. As a test, I moved my own user area onto the new server and applied the correct re-directs for folders. This doesn't work. Event viewer: "The folder redirection policy hasn't been applied. It's been delayed until the next sign-in because the group policy sign-in optimization is in effect." For the life of me, I can't find where the sign in optimization option is. Any clues? Could the Server 2008 R2 update last night have broken something? I reckon to have checked all of the obvious like security settings and what policies are applied in which OU etc. My brain is about to explode. I will eagerly await responses!!
NB9457 Posted January 23, 2018 Posted January 23, 2018 Have you got the following GPO applied to all PCs: Computer\Policies\Admin Templates\ System/Logon\Always wait for the network at computer startup and logon 2
AJWhite1970 Posted January 23, 2018 Posted January 23, 2018 (edited) You haven't fallen victim to the MS16-072 \ KB3163622 GPO issue by any chance? Although it's dated Summer 2016 it might be that it's suddenly decided to install? https://blogs.technet.microsoft.com/askds/2016/06/22/deploying-group-policy-security-update-ms16-072-kb3163622/ Caused lots of EduGeekers lots of problems when it first came out http://www.edugeek.net/forums/windows-7/171517-windows-update-3159398-issue.html Edited January 23, 2018 by AJWhite1970 2
Joanne Posted January 24, 2018 Author Posted January 24, 2018 Have you got the following GPO applied to all PCs: Computer\Policies\Admin Templates\ System/Logon\Always wait for the network at computer startup and logon Yes I have this enabled
Joanne Posted January 24, 2018 Author Posted January 24, 2018 You haven't fallen victim to the MS16-072 \ KB3163622 GPO issue by any chance? Although it's dated Summer 2016 it might be that it's suddenly decided to install? https://blogs.technet.microsoft.com/askds/2016/06/22/deploying-group-policy-security-update-ms16-072-kb3163622/ Caused lots of EduGeekers lots of problems when it first came out http://www.edugeek.net/forums/windows-7/171517-windows-update-3159398-issue.html Just gonna read through this. I have removed authenticated users.... My re-directs have actually worked this morning along with drive maps, so feeling hopeful.
RobD Posted January 24, 2018 Posted January 24, 2018 Your Sysvol replicating as it should? https://support.microsoft.com/en-us/help/2218556/how-to-force-an-authoritative-and-non-authoritative-synchronization-fo
Joanne Posted January 24, 2018 Author Posted January 24, 2018 Your Sysvol replicating as it should? https://support.microsoft.com/en-us/help/2218556/how-to-force-an-authoritative-and-non-authoritative-synchronization-fo Yeah, I went through all of that yesterday, set it all replicating through DFSR. Scared me!! I'm thinking it might be because I removed the authenticated users in security filtering on my GPOs. Some of them were applying, and they seem to be the ones that had the authenticated users still on there. Changed that then will check it later on.
Joanne Posted January 31, 2018 Author Posted January 31, 2018 OK, still struggling with this. Logged on as a test user in an OU with folder re-direction pointing to the new server. In event viewer it says that can't redirect folder because the network path was not found. I can then go to run and UNC to the same path just fine. What's going on? Could it be because my share name has a space in it? My last share name had a space in it......
the_quick Posted September 23, 2019 Posted September 23, 2019 Hey @Joanne have you found the solution? We having similar issue occasionally, for some user it just doesn't work when they log in , but later documents appear.
Joanne Posted September 23, 2019 Author Posted September 23, 2019 I've since installed a new server currently on 2016 and I think things are working as expected? I mean.... no complaints. How many GPOs do you have? Do you have Verbose messages turned on?
the_quick Posted September 23, 2019 Posted September 23, 2019 Verbose on, we have only 2 policies for folder redirections. And mostly they work fine, but ever so often we have either teacher or students , that when they logon, that policy doesn't work and we see errors in event viewer. That is the main problem for me, it mostly works, but on some occasions it doesn't- it just doesn't make sense
Joanne Posted September 23, 2019 Author Posted September 23, 2019 I sometimes get it where a pupil logs onto a laptop for the first time and they don't get their drives, but if they log off and on they then appear. Are you pointing to full on UNC to the server or a DFS share thing?
the_quick Posted September 23, 2019 Posted September 23, 2019 Thanks @Joanne for you replies We have basic redirection - to redirect users to their home directory and it is defined in AD Users and Computers MMC in profile tab \\servername\studenthome\adminision_year\%username% staff is very similar. We moved to Windows 10 from 7 , September 2018 and had no problems. It started last school year, I think May time, so I think it might have been some Windows Update that caused that. Checked GPOs for Authenticated User permissions and all is fine in there. It is really annoying. As the user don't get their files. We could have 30 kids in the class and only one is affected. Deleting local profile seem to fix it. As we get other error with folder redirection: Failed to apply policy and redirect folder "Documents" to "%HOMESHARE%\Users\username" - so it might totally different to your problem.
Joanne Posted September 23, 2019 Author Posted September 23, 2019 Create a new OU, a new policy and a fresh user and do some testing. When it works move everyone across
the_quick Posted September 23, 2019 Posted September 23, 2019 I guess it is an option. Might try that Cheers
the_quick Posted September 23, 2019 Posted September 23, 2019 I think I might know why I have errors In Windows 7 we use to have Basic redirection and than path %HOMESHARE%%HOMEPATH%\Desktop - when we have error it doesn't like that path. Windows 10 according to MS guid should have Basic redirection with option of Create a folder for each user under the root path and I have added direct root path for the server so it looks like \\servername\StaffHome\Teaching and will create folder underneath for each user. Now the testing phase, works for my dummy user , will move guinea pig teacher and will see if she loses her docs during the day.
Joanne Posted September 23, 2019 Author Posted September 23, 2019 Yeah I created new policies for Windows 10.... hope that has fixed it for you!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now