Windows Forum

Ask something
Discussion Locked

AD Loopback processing

0 helpful
10 replies

by greg.gotcher

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am having a problem with folder redirection. I have the My Documents folder redirecting to a different \\server\userfiles\%username%\My Documents. Some folders are being redirected and some are staying in the C:\Documents and Settings\%username%\My Documents, the problem is the cache is deleted when the user logs off. That means that their files are disappearing. I am running Windows 2000 Terminal server and have loop back processing turned on. I think that the redirection is not workingbecause I get an Event ID: 1000, that says Windows cannot do loopback processing for downlevel or local users. Loopback processing will be disabled. Any help is greatly appreciated. My users are becoming restless and they will be asking for my head soon.

10 replies

by maxwell edison

I've seen reference to this error when it was due to a trailing blank space in User Profile Path.

This might be the easiest thing to check for first.

Maxwell

by greg.gotcher

Do I need to put quotes around the redirection path? Like so: "\\server\userfiles\%username%\My Documents" or is it fine without them?

by maxwell edison

Folder Redirection is a User group policy. This means that a user for whom you configure folder redirection must have a group policy linked to some folder structure where their user object is subordinate, such as a site, domain, or organizational unit.

Once you create the group policy and link it to the appropriate folder object, an administrator can designate which folders to redirect and where To do this, the administrator needs to navigate to the following location in the Group Policy Object:
User Configuration\Windows Settings\Folder Redirection
In the Properties of the folder, you can choose Basic or Advanced folder redirection, and you can designate the server file system path to which the folder should be redirected.

The%USERNAME% variable may be used as part of the redirection path, thus allowing the system to dynamically create a newly redirected folder for each user to whom the policy object applies.

When you redirect folders to a shared location on a network, users need both read and write access to this location so that the users can read the contents these folders. However, in some scenarios, you may not want to grant read access.

(continued..)

by maxwell edison

To ensure that only the user and the domain administrators have permissions to open a particular redirected folder, do the following:
Select a central location in your environment where you would like to store Folder Redirection, and then share this folder. In this example, FLDREDIR is used.

Set Shared Permissions for the Everyone group to Full Control.

Use the following settings for NTFS Permissions:

Creator owner - Full Control

System - Full Control

Domain Administrators - Full Control

Everyone - Create Folder/Append Data

Configure Folder Redirection Policy as outlined in the Windows 2000 Help File. Use a path similar to \\ server \FLDREDIR\ username to create a folder under the shared folder, FLDREDIR.
Because the Everyone group has the Create Folder/Append Data right, the group members have the proper permissions to create the folder; however, the members are not able to read the data afterwards. The Username group is the name of the user that was logged on when you created the folder. Because the folder is a child of the parent folder, it inherits the permissions that you assigned to FLDREDIR. Also, because the user is creating the folder, the user gains full control of the folder because of the Creator Owner Permission setting.

Maxwell

by greg.gotcher

I am using group policies and I chose basic redirection. I used the path \\server\userfiles\%username%\My Documents

This discussion is closed to new replies.