wired my documents problem

[ind13]

Okay everything was fine yesturday,

but came in today and people are complaining that they cant access my documents.

 

if you go to my computer > u:\ drive works fine

if you click my documents on the desktop works fine

 

but

if you open any program, click open or save then click my documents you get access denied

if you click my computer then u:\ drive it works fine

 

please help before i go mad.

[Irazmus]

What a coincidence, we've got something similar, although it only seems to be affecting Office.

My Documents links work fine in all programs except MS Office 2003 where we get

You do not have access to the folder '\\Thor\Non Profile'. See your administrator for access to this folder.

We can bypass by going 'My Computer' > 'U:\', but it's more a temporary workaround than a permanent fix.

 

Any others having/had this problem?

[ind13]

im gonna dial in over the weekend and try a few things ill let you know if i get anywhere

[plexer]

I've got the same but affecting the my documents on the desktop. I've tried setting it to various unc's and also their h:\ but it comes up access denied.

 

Ben

[wesleyw]

If you've set up the UNC path check the share permissions as well see if the user has access?

 

Wes

[Ric_]

I have a similar problem but mine is due to them not being allowed to read the root of the UNC share I think... basically they just have to select H: from the drop down and live with it

[plexer]

My users can all access their h:\ drive fine. This has only happened with the new 2003 server I've installed and moved the user too so something somewhere is not right.

 

Ben

[MkII]

Same here - desktop shortcut access denied. Some newly created users work fine tho' - i've tried profiles and it's not that.

[MkII]

Aargh!

 

Now i'm getting the root of the share mapped as H:, PLUS the desktop icon denies access!

 

My users can access the root, and get into thier home folder. A real PITA tho'. What did I do wrong!

[pete]

What are your naming conventions for home dir shares?

 

we use \\server\username$ and the scripts gpos will map My Documents by looking at username$.

 

If sharename <> username$ saving to My Documents doesn't work in programs, but accessing the drive from the drop-down address bar does.

[MkII]

The home drive shares are at: \\server\usertshome$\%username%

[ajbritton]

Since I've gone over to using \\server\usershare\%username% for home drive and My Docs redirect I've had to add an ACE to the folder which is shared as 'usershare'. I just give Authenticated Users List and limit it to 'this folder only' so it does not propogate to the user folders. This solved my Office access issues.

[tarquel]

\\server\username$

 

Its even easier No problems here

 

Have seen ind13's problem happen here too - in most cases its been a server restart, but its all a little confusing as to why its been happening. Nothing this week tho that I'm aware of.

 

Cheers

Nath

[ind13]

i sorted it, over the weekend

over the summer i changed from \\server\%username%

to \\servername\share\%username%

 

i added auth users > list, same as ajbritton mentioned.

 

tarquel, the reason i changed it is so when i create new users in AD, i just have to put \\server\share\%username% as there home folded and it creates the folder and sets the permissions for you.

[plexer]

Ok I think I've just found the cause of my problem.

 

Make sure that the folder you are trying to redirect to is owned by the user that it's being redirected for so:

 

\\server\bsmith$ -> d:\home\students\bsmith must be owned by bsmith or the redirection will fail.

 

Now just got to reset the ownership on 700+ users home folders.

 

Ben

[plexer]

Looks like a job for a script and subinacl

 

Ben

[MkII]

@Plexer: NTSFix : http://www.wisesoft.co.uk/

 

Mine's fixed too - trailing slash - aargh!

 

With Tarqs method it's nice because there's no lower level to even see, but autocreate missing is a pain.

[plexer]

Looks like a nifty program but also only appears to be doing NTFS permissions and not the ownership of the folder.

 

Cheers,

 

Ben

[ajbritton]

Funny, I've never had a problem with ownership on home folders / redirected MyDocs. I know XP likes to have Full Control when it redirects to the folder, but I almost always pre-create the folders and have never bothered assigning ownership. Sometimes folders owned by 'Administrators' are acceptable..

[MkII]

Mine are working fine with Administrator ownership. How would you do that to a group of folders anyway?

[plexer]

By default, if the redirection target folder already exists, Folder Redirection will check to see if the user is the owner of the folder. If the user is not the owner of the folder, redirection will fail with Event ID 101: "This security ID may not be assigned as the owner of this object." Folder Redirection treats this as an error to protect against a malevolent user pre-creating folders for malicious purposes.

 

To avoid this error:

 

• Do not pre-create the folders; let Folder Redirection create them for you.

 

• If the folders already exist and have data in them, uncheck the "Grant the user exclusive rights to my documents" checkbox on the settings page of the Folder Redirection dialog. This tells Folder Redirection not to do the ownership check and assume the permissions are OK. If you do this, you'll need to make sure to set the permissions correctly.

 

So you must have "Grant the user exclusive rights to my documents" unchecked which is why it works?

 

Ben

[plexer]

Well unchecking that has solved my problems as well. Originally I must have had the ownership correct or that unticked but with all the moving of user folders and rebuilding servers over the summer that got overlooked.

 

Saves me changing ownership on 700+ home folders anyway.

 

Ben

[MkII]

Cwl! So that's all of us happy now