Folder Redirection & Permission Questions

  • Thread starter Thread starter compsosinc@gmail.com
  • Start date Start date
C

compsosinc@gmail.com

Guest
We are in the test lab right trying to configure Folder Redirection.
Our first goal is to provide the same desktop shortcuts to the the
Terminal Server users and we are having trouble configuring this
correctly. Here is what we did:

1. Created a folder on the Terminal Server called TSUsersFR.
2. Within the TSUsersFR folder, we created a folder called 'Desktop'.
So the path is \\Servername\TsUsersFR\Desktop.
3. We shared the 'TSUserFR' folder with share permissions for
'Everyone' set to Full.
& we set the NTFS (Security) permissions with 'Everyone' set to
Full (for now -we have read that we should set this to read-only but
did not until we get it working) for all subfolders, files.
4. Within the Desktop folder we added a shortcut to 'Wordpad'.
5. We deleted all shortcuts from the 'All Users' folder on the
Terminal Server.
6. In the GPO for the OU linked to the TS, we edited Folder
Redirection> Desktop to:

Basic Redirection & Create a folder for each user under the root
path.

and set the root path to: \\Servername\TsUsersFR\Desktop.

We saw that the complete path would be: \\Servername\TsUsersFR\Desktop
\Username\Desktop but proceeded anyways.

We ended up with no shortcuts on the user's desktop:

So we tried the other choice for Target path to: 'Redirect to the
following location' with the same root path & that worked for
redirecting the icons to the desktop.

However the TS user cannot open Wordpad -get error message for C:
\Program Files\WindowsNT\Accessories\Wordpad.exe:

"Windows cannot access the specified device, path, or profile. You may
not have approriate permissions.."

So for the Sharing & NTFS permissions we gave 'Everyone', Creator,
System, TS User, Ful control of the TsUsersFR\Desktop path and we get
the same error message.

1. Did we use the right settings in the GPO? Looks like we did.
2. What is the proper Sharing/NTFS structure for the TsUsersFR
\Desktop? We read some articles on this but perhaps misunderstood
them...
 
Re: Folder Redirection & Permission Questions

On Mar 5, 5:25 pm, compsos...@gmail.com wrote:
> We are in the test lab right trying to configure Folder Redirection.
> Our first goal is to provide the same desktop shortcuts to the the
> Terminal Server users and we are having trouble configuring this
> correctly. Here is what we did:
>
> 1. Created a folder on the Terminal Server called TSUsersFR.
> 2. Within the TSUsersFR folder, we created a folder called 'Desktop'.
>     So the path is \\Servername\TsUsersFR\Desktop.
> 3. We shared the 'TSUserFR' folder with share permissions for
> 'Everyone' set to Full.
>     & we set the NTFS (Security) permissions with 'Everyone' set to
> Full (for now -we have read that we should set this to read-only but
> did not until we get it working) for all subfolders, files.
> 4. Within the Desktop folder we added a shortcut to 'Wordpad'.
> 5. We deleted all shortcuts from the 'All Users' folder on the
> Terminal Server.
> 6. In the GPO for the OU linked to the TS, we edited Folder
> Redirection> Desktop to:
>
>  Basic Redirection & Create a folder for each user under the root
> path.
>
>    and set the root path to:  \\Servername\TsUsersFR\Desktop.
>
> We saw that the complete path would be: \\Servername\TsUsersFR\Desktop
> \Username\Desktop  but proceeded anyways.
>
> We ended up with no shortcuts on the user's desktop:
>
> So we tried the other choice for Target path to:  'Redirect to the
> following location' with the same root path & that worked for
> redirecting the icons to the desktop.
>
> However the TS user cannot open Wordpad -get error message for C:
> \Program Files\WindowsNT\Accessories\Wordpad.exe:
>
> "Windows cannot access the specified device, path, or profile. You may
> not have approriate permissions.."
>
> So for the Sharing & NTFS permissions we gave 'Everyone', Creator,
> System, TS User, Ful control of the TsUsersFR\Desktop path and we get
> the same error message.
>
> 1. Did we use the right settings in the GPO? Looks like we did.
> 2. What is the proper Sharing/NTFS structure for the TsUsersFR
> \Desktop? We read some articles on this but perhaps misunderstood
> them...

As a note, we do have the TS locked down pretty tight with this Group
Policy --maybe one of the Drive Restrictions...
 
Re: Folder Redirection & Permission Questions

On Mar 5, 5:37 pm, compsos...@gmail.com wrote:
> On Mar 5, 5:25 pm, compsos...@gmail.com wrote:
>
>
>
>
>
> > We are in the test lab right trying to configure Folder Redirection.
> > Our first goal is to provide the same desktop shortcuts to the the
> > Terminal Server users and we are having trouble configuring this
> > correctly. Here is what we did:
>
> > 1. Created a folder on the Terminal Server called TSUsersFR.
> > 2. Within the TSUsersFR folder, we created a folder called 'Desktop'.
> >     So the path is \\Servername\TsUsersFR\Desktop.
> > 3. We shared the 'TSUserFR' folder with share permissions for
> > 'Everyone' set to Full.
> >     & we set the NTFS (Security) permissions with 'Everyone' set to
> > Full (for now -we have read that we should set this to read-only but
> > did not until we get it working) for all subfolders, files.
> > 4. Within the Desktop folder we added a shortcut to 'Wordpad'.
> > 5. We deleted all shortcuts from the 'All Users' folder on the
> > Terminal Server.
> > 6. In the GPO for the OU linked to the TS, we edited Folder
> > Redirection> Desktop to:
>
> >  Basic Redirection & Create a folder for each user under the root
> > path.
>
> >    and set the root path to:  \\Servername\TsUsersFR\Desktop.
>
> > We saw that the complete path would be: \\Servername\TsUsersFR\Desktop
> > \Username\Desktop  but proceeded anyways.
>
> > We ended up with no shortcuts on the user's desktop:
>
> > So we tried the other choice for Target path to:  'Redirect to the
> > following location' with the same root path & that worked for
> > redirecting the icons to the desktop.
>
> > However the TS user cannot open Wordpad -get error message for C:
> > \Program Files\WindowsNT\Accessories\Wordpad.exe:
>
> > "Windows cannot access the specified device, path, or profile. You may
> > not have approriate permissions.."
>
> > So for the Sharing & NTFS permissions we gave 'Everyone', Creator,
> > System, TS User, Ful control of the TsUsersFR\Desktop path and we get
> > the same error message.
>
> > 1. Did we use the right settings in the GPO? Looks like we did.
> > 2. What is the proper Sharing/NTFS structure for the TsUsersFR
> > \Desktop? We read some articles on this but perhaps misunderstood
> > them...
>
> As a note, we do have the TS locked down pretty tight with this Group
> Policy --maybe one of the Drive Restrictions...- Hide quoted text -
>
> - Show quoted text -

Update...we placed the Wordpad icon into the "All Users' folder and
got the same error. We must have something locked down in the GPO but
cannot find it so far. We have removed everything from the Start Menu
except the Logoff and Printer & Faxes, & Windows Secuity. There are no
other icon on the desktop. The taskbar is locked. Cannot explore
through Printers & Faxes, etc

Thanks
 
Re: Folder Redirection & Permission Questions

On Mar 5, 6:00 pm, compsos...@gmail.com wrote:
> On Mar 5, 5:37 pm, compsos...@gmail.com wrote:
>
>
>
>
>
> > On Mar 5, 5:25 pm, compsos...@gmail.com wrote:
>
> > > We are in the test lab right trying to configure Folder Redirection.
> > > Our first goal is to provide the same desktop shortcuts to the the
> > > Terminal Server users and we are having trouble configuring this
> > > correctly. Here is what we did:
>
> > > 1. Created a folder on the Terminal Server called TSUsersFR.
> > > 2. Within the TSUsersFR folder, we created a folder called 'Desktop'.
> > >     So the path is \\Servername\TsUsersFR\Desktop.
> > > 3. We shared the 'TSUserFR' folder with share permissions for
> > > 'Everyone' set to Full.
> > >     & we set the NTFS (Security) permissions with 'Everyone' set to
> > > Full (for now -we have read that we should set this to read-only but
> > > did not until we get it working) for all subfolders, files.
> > > 4. Within the Desktop folder we added a shortcut to 'Wordpad'.
> > > 5. We deleted all shortcuts from the 'All Users' folder on the
> > > Terminal Server.
> > > 6. In the GPO for the OU linked to the TS, we edited Folder
> > > Redirection> Desktop to:
>
> > >  Basic Redirection & Create a folder for each user under the root
> > > path.
>
> > >    and set the root path to:  \\Servername\TsUsersFR\Desktop.
>
> > > We saw that the complete path would be: \\Servername\TsUsersFR\Desktop
> > > \Username\Desktop  but proceeded anyways.
>
> > > We ended up with no shortcuts on the user's desktop:
>
> > > So we tried the other choice for Target path to:  'Redirect to the
> > > following location' with the same root path & that worked for
> > > redirecting the icons to the desktop.
>
> > > However the TS user cannot open Wordpad -get error message for C:
> > > \Program Files\WindowsNT\Accessories\Wordpad.exe:
>
> > > "Windows cannot access the specified device, path, or profile. You may
> > > not have approriate permissions.."
>
> > > So for the Sharing & NTFS permissions we gave 'Everyone', Creator,
> > > System, TS User, Ful control of the TsUsersFR\Desktop path and we get
> > > the same error message.
>
> > > 1. Did we use the right settings in the GPO? Looks like we did.
> > > 2. What is the proper Sharing/NTFS structure for the TsUsersFR
> > > \Desktop? We read some articles on this but perhaps misunderstood
> > > them...
>
> > As a note, we do have the TS locked down pretty tight with this Group
> > Policy --maybe one of the Drive Restrictions...- Hide quoted text -
>
> > - Show quoted text -
>
> Update...we placed the Wordpad icon into the "All Users' folder and
> got the same error. We must have something locked down in the GPO but
> cannot find it so far. We have removed everything from the Start Menu
> except the Logoff and Printer & Faxes, & Windows Secuity. There are no
> other icon on the desktop. The taskbar is locked. Cannot explore
> through Printers & Faxes, etc
>
> Thanks- Hide quoted text -
>
> - Show quoted text -

Another update...if we choose a program shortcut from Microsoft Office
03, which is installed on the server, those program shortcuts work. So
it's one of a couple things I can think of. MS Office was installed in
TS mode, Wordpad was not. And/or Wordpad is located in a directory
that somehow we restricted the TS Users from. While we do not intend
to have TS Users use Wordpad, it would be nice to know why we cannot
currently. Thanks for any comments on any of the above.
 
Re: Folder Redirection & Permission Questions

On Mar 5, 7:40 pm, compsos...@gmail.com wrote:
> On Mar 5, 6:00 pm, compsos...@gmail.com wrote:
>
>
>
>
>
> > On Mar 5, 5:37 pm, compsos...@gmail.com wrote:
>
> > > On Mar 5, 5:25 pm, compsos...@gmail.com wrote:
>
> > > > We are in the test lab right trying to configure Folder Redirection.
> > > > Our first goal is to provide the same desktop shortcuts to the the
> > > > Terminal Server users and we are having trouble configuring this
> > > > correctly. Here is what we did:
>
> > > > 1. Created a folder on the Terminal Server called TSUsersFR.
> > > > 2. Within the TSUsersFR folder, we created a folder called 'Desktop'..
> > > >     So the path is \\Servername\TsUsersFR\Desktop.
> > > > 3. We shared the 'TSUserFR' folder with share permissions for
> > > > 'Everyone' set to Full.
> > > >     & we set the NTFS (Security) permissions with 'Everyone' set to
> > > > Full (for now -we have read that we should set this to read-only but
> > > > did not until we get it working) for all subfolders, files.
> > > > 4. Within the Desktop folder we added a shortcut to 'Wordpad'.
> > > > 5. We deleted all shortcuts from the 'All Users' folder on the
> > > > Terminal Server.
> > > > 6. In the GPO for the OU linked to the TS, we edited Folder
> > > > Redirection> Desktop to:
>
> > > >  Basic Redirection & Create a folder for each user under the root
> > > > path.
>
> > > >    and set the root path to:  \\Servername\TsUsersFR\Desktop.
>
> > > > We saw that the complete path would be: \\Servername\TsUsersFR\Desktop
> > > > \Username\Desktop  but proceeded anyways.
>
> > > > We ended up with no shortcuts on the user's desktop:
>
> > > > So we tried the other choice for Target path to:  'Redirect to the
> > > > following location' with the same root path & that worked for
> > > > redirecting the icons to the desktop.
>
> > > > However the TS user cannot open Wordpad -get error message for C:
> > > > \Program Files\WindowsNT\Accessories\Wordpad.exe:
>
> > > > "Windows cannot access the specified device, path, or profile. You may
> > > > not have approriate permissions.."
>
> > > > So for the Sharing & NTFS permissions we gave 'Everyone', Creator,
> > > > System, TS User, Ful control of the TsUsersFR\Desktop path and we get
> > > > the same error message.
>
> > > > 1. Did we use the right settings in the GPO? Looks like we did.
> > > > 2. What is the proper Sharing/NTFS structure for the TsUsersFR
> > > > \Desktop? We read some articles on this but perhaps misunderstood
> > > > them...
>
> > > As a note, we do have the TS locked down pretty tight with this Group
> > > Policy --maybe one of the Drive Restrictions...- Hide quoted text -
>
> > > - Show quoted text -
>
> > Update...we placed the Wordpad icon into the "All Users' folder and
> > got the same error. We must have something locked down in the GPO but
> > cannot find it so far. We have removed everything from the Start Menu
> > except the Logoff and Printer & Faxes, & Windows Secuity. There are no
> > other icon on the desktop. The taskbar is locked. Cannot explore
> > through Printers & Faxes, etc
>
> > Thanks- Hide quoted text -
>
> > - Show quoted text -
>
> Another update...if we choose a program shortcut from Microsoft Office
> 03, which is installed on the server, those program shortcuts work. So
> it's one of a couple things I can think of. MS Office was installed in
> TS mode, Wordpad was not. And/or Wordpad is located in a directory
> that somehow we restricted the TS Users from. While we do not intend
> to have TS Users use Wordpad, it would be nice to know why we cannot
> currently. Thanks for any comments on any of the above.- Hide quoted text -
>
> - Show quoted text -

Ok, I am still talking to myself but that's ok, I deserve it, because
I actually have the same problem and I have probably wasted alot of
your time.
Here is a recap: We copied a shortcut for the "Microsoft Clip
Organizer" into the 'All Users\Desktop' folder on the TS, it appears
on the TS User's desktop, and the user can open the program. If we
copy the same shortcut to the Redirected folder\desktop we get the
error above. So we must have a permissions/sharing problem in this
path.

Question: Do we share the 'TsUsersFR' folder or the just the'Desktop'
folder within it??

Some more information. If it matters, we do not have another partition
on this Virtual server to experiment with so the redirected folder
resides within the C:\ path.

Thanks for being there..
 
Re: Folder Redirection & Permission Questions

compsosinc@gmail.com wrote on 06 mar 2008 in
microsoft.public.windows.terminal_services:

> On Mar 5, 7:40 pm, compsos...@gmail.com wrote:
>> On Mar 5, 6:00 pm, compsos...@gmail.com wrote:
>>
>>
>>
>>
>>
>> > On Mar 5, 5:37 pm, compsos...@gmail.com wrote:
>>
>> > > On Mar 5, 5:25 pm, compsos...@gmail.com wrote:
>>
>> > > > We are in the test lab right trying to configure Folder
>> > > > Redirection.
>
>> > > > Our first goal is to provide the same desktop shortcuts
>> > > > to the the Terminal Server users and we are having
>> > > > trouble configuring this correctly. Here is what we did:
>>
>> > > > 1. Created a folder on the Terminal Server called
>> > > > TSUsersFR. 2. Within the TSUsersFR folder, we created a
>> > > > folder called 'Desktop'
> .
>> > > >     So the path is \\Servername\TsUsersFR\Desktop.
>> > > > 3. We shared the 'TSUserFR' folder with share permissions
>> > > > for 'Everyone' set to Full.
>> > > >     & we set the NTFS (Security) permissions with
>> > > > 'Everyone' set
> to
>> > > > Full (for now -we have read that we should set this to
>> > > > read-only but
>
>> > > > did not until we get it working) for all subfolders,
>> > > > files. 4. Within the Desktop folder we added a shortcut
>> > > > to 'Wordpad'. 5. We deleted all shortcuts from the 'All
>> > > > Users' folder on the Terminal Server.
>> > > > 6. In the GPO for the OU linked to the TS, we edited
>> > > > Folder Redirection> Desktop to:
>>
>> > > >  Basic Redirection & Create a folder for each user under
>> > > > the root path.
>>
>> > > >    and set the root path to:
>> > > >  \\Servername\TsUsersFR\Desktop.
>>
>> > > > We saw that the complete path would be:
>> > > > \\Servername\TsUsersFR\Deskt
> op
>> > > > \Username\Desktop  but proceeded anyways.
>>
>> > > > We ended up with no shortcuts on the user's desktop:
>>
>> > > > So we tried the other choice for Target path to:
>> > > >  'Redirect to the
>
>> > > > following location' with the same root path & that worked
>> > > > for redirecting the icons to the desktop.
>>
>> > > > However the TS user cannot open Wordpad -get error
>> > > > message for C: \Program
>> > > > Files\WindowsNT\Accessories\Wordpad.exe:
>>
>> > > > "Windows cannot access the specified device, path, or
>> > > > profile. You m
> ay
>> > > > not have approriate permissions.."
>>
>> > > > So for the Sharing & NTFS permissions we gave 'Everyone',
>> > > > Creator, System, TS User, Ful control of the
>> > > > TsUsersFR\Desktop path and we ge
> t
>> > > > the same error message.
>>
>> > > > 1. Did we use the right settings in the GPO? Looks like
>> > > > we did. 2. What is the proper Sharing/NTFS structure for
>> > > > the TsUsersFR \Desktop? We read some articles on this but
>> > > > perhaps misunderstood them...
>>
>> > > As a note, we do have the TS locked down pretty tight with
>> > > this Group Policy --maybe one of the Drive Restrictions...-
>> > > Hide quoted text -
>>
>> > > - Show quoted text -
>>
>> > Update...we placed the Wordpad icon into the "All Users'
>> > folder and got the same error. We must have something locked
>> > down in the GPO but cannot find it so far. We have removed
>> > everything from the Start Menu except the Logoff and Printer
>> > & Faxes, & Windows Secuity. There are no other icon on the
>> > desktop. The taskbar is locked. Cannot explore through
>> > Printers & Faxes, etc
>>
>> > Thanks- Hide quoted text -
>>
>> > - Show quoted text -
>>
>> Another update...if we choose a program shortcut from Microsoft
>> Office 03, which is installed on the server, those program
>> shortcuts work. So it's one of a couple things I can think of.
>> MS Office was installed in TS mode, Wordpad was not. And/or
>> Wordpad is located in a directory that somehow we restricted
>> the TS Users from. While we do not intend to have TS Users use
>> Wordpad, it would be nice to know why we cannot currently.
>> Thanks for any comments on any of the above.- Hide quoted text
> -
>>
>> - Show quoted text -
>
> Ok, I am still talking to myself but that's ok, I deserve it,
> because I actually have the same problem and I have probably
> wasted alot of your time.
> Here is a recap: We copied a shortcut for the "Microsoft Clip
> Organizer" into the 'All Users\Desktop' folder on the TS, it
> appears on the TS User's desktop, and the user can open the
> program. If we copy the same shortcut to the Redirected
> folder\desktop we get the error above. So we must have a
> permissions/sharing problem in this path.
>
> Question: Do we share the 'TsUsersFR' folder or the just
> the'Desktop' folder within it??
>
> Some more information. If it matters, we do not have another
> partition on this Virtual server to experiment with so the
> redirected folder resides within the C:\ path.
>
> Thanks for being there..

This approach was the correct one:

> So we tried the other choice for Target path to:
>  'Redirect to the following location' with the same
> root path & that worked for redirecting the icons to the desktop.

> However the TS user cannot open Wordpad -get error message for
> C: \Program Files\WindowsNT\Accessories\Wordpad.exe:
>
> "Windows cannot access the specified device, path, or profile.
> You may not have approriate permissions.."

This error message is not caused by file or share permissions, it's
your Internet Explorer Enhanced Security settings.

Check this for a solution:

When users start a program, they get a "file download" dialog box,
or an error message: "Windows cannot access the specified device,
path, or file. You may not have the appropriate permissions to
access the item."
http://ts.veranoest.net/ts_faq_user_issues.htm#IEESconfig

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
 
Back
Top