5

How do I disable the SID security check for folder redirections with Group Policy? This isn't about weakening security, but rather about having Active Directory and Samba play nicely together.

I have a kerberized REALM-trusted Samba server. Users can read and write what they're supposed to be able to read and write to. Users can't read and write what they're not supposed to be able to read and write to. However, if I try to use it for Folder redirection I get errors like the following.

 EventData 

  FromFolder RoamingAppData 
  ToFolder \\samba.example.com\home\username\.AppData 
  Options 0x9219 
  Error Can't create folder "\\samba.example.com\home\username\.AppData" 
  ErrorDetails This security ID may not be assigned as the owner of this object.

The roaming profile does not have the same problem, but I had to enable:

Computuer Configuration \ Administrative Templates \ System \ User Profiles \ Do not check for user ownership of Roaming Profile Folders

Is there an equivelent setting for folder redirection that I have overlooked?

3

You need to clear the "grant exclusive rights" checkbox in the folder redirection settings.

http://technet.microsoft.com/en-us/library/cc785925(v=ws.10).aspx

"If you must create folders for users, make sure that you set the correct permissions. Then, clear the Grant exclusive rights to check box on the Settings tab of the Folder Redirection Properties page. If you do not clear this check box, Folder Redirection first checks preexisting folders to determine if the user is the owner. If the administrator previously created the folder, the check fails, and redirection is cancelled. Folder Redirection logs an event in the Application event log indicating that redirection failed and that the new directories for the redirected folder cannot be created due to not being able to assign a security ID as the owner of the folder (Event ID 101)."

  • Note: The target folder will not be created. If the target does not exist, the same error will be issued. – 84104 Sep 11 '13 at 18:42
0

If i'm not wrong, the folder redirection must be set from User Configuration to the destination you wish.

Maybe this can help you: Folder Redirection

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.