redirected-redirected folders

Discussion in 'Windows Small Business Server' started by Bitbob, Jan 22, 2006.

  1. Bitbob

    Bitbob Guest

    I have a client that has somehow managed to redirect his redirected folders
    so that they are pointed to another users folder on the server when he logs
    out. The SBS server denies access to these files so his logout sycronization
    always reports errors and stops when it encounters them. I have gone into the
    local workstation and checked the files and folders the syncronization
    applies to and they all point to the correct redirected folders and files. In
    desperation I have copied them to other media and deleted the local copies
    but the logout syncronization still errors out trying to crosslink these
    files that are no longer on the local workstation. Is this process refering
    to a file on the SBS server that still crosslinks those files? The user that
    is having this problem is also set up with a roaming profile. Is this problem
    related to his roaming profile?
     
    Bitbob, Jan 22, 2006
    #1
    1. Advertisements

  2. Dear Customer,

    Thank you for posting to the SBS Newsgroup.

    I am sorry for the delayed response due to the weekend. Please understand
    that the newsgroups are staffed weekdays by Microsoft Support professionals
    to answer your systems and applications questions. Your understanding is
    greatly appreciated!

    I am sorry but I do not have a clear image what exact issue you are
    experiencing. In order to supplement your description, I need your help to
    gather the following information:

    1. Just to double confirm, from your description, it seems that you have
    enabled the Roaming Profile, Folder Redirection and synchronize Offline
    Files. Am I right?

    2. Please explain in detail "somehow managed to redirect his redirected
    folders so that they are pointed to another users folder on the server when
    he logs out".

    a. What is the "redirected folders"? My Documents folder or the other
    folders?
    b. How does the client "somehow managed to redirect his redirected
    folders"? Please fully describe the steps so we can better understand your
    scenario.
    c. Where does the customer redirect the redirected folders? To the SBS
    Server or client workstation?

    3. You mentioned "his logout sycronization always reports errors". What is
    the full error message? Please type the error message word by word the
    Newsgroup.

    4. On the server and the problematic client workstation, run "eventvwr"
    (without quotation marks), check whether there are any errors. If yes,
    double click it, click the Copy button and paste the full content to the
    Newsgroup.

    5. On the problematic client workstation, open a command window, type
    "gpresult /v >c:\gp.txt" (without quotation marks), go to c drive, get the
    gp.txt file and send it to me ().

    Please take your to gather the information for further research. I am
    looking forward to hearing from you!

    Best regards,

    Brandy Nee

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.



    --------------------
     
    Brandy Nee [MSFT], Jan 23, 2006
    #2
    1. Advertisements

  3. Bitbob

    Bitbob Guest

    Brandy here are the answers in order
    1. Yes all are enabled
    2. I don't know how the user managed to do this and was presented with the
    problem after it occured and the user has no idea what caused it.
    3. The reported error is as follows and I think it answers questions 2-b-c.
    User1 is logging off and gets this message which is repeated several time for
    different files but always the same message with different folders in user2s
    redirected data.
    "Offline files(\\SBS server\users-my documents-redirect on SBS server):
    access to 'samplemusic.ink' is denied om \\SBS server\users-my document
    redirect \user2\my documents\my music"
    4. There are no event loggings of errors in the timeframe when this problem
    first occured.
    5.I will send the file shortly.


     
    Bitbob, Jan 24, 2006
    #3
  4. Hello Robert,

    Thank you for posting back!

    I have read through the gpresult you sent to me. It seems the gpresult is
    correct. To further isolate the issue, please see my suggestions:

    1. Robert, I am sorry but from your reply, I am still not very clear what
    exact issue you are experiencing. In your reply, you mentioned "I don't
    know how the user managed to do this and was presented with the problem
    after it occured and the user has no idea what caused it." I need to know:

    a. Who is the "User" managed to do this? User1 or User2?
    b. I suggest that you contact this "User" for detailed steps how he or she
    managed to do this, and what exact goal he or she wants to achieve so we
    can help to do so.

    2. Who is User1 and who is User2?

    a. I assume User1 is jadesh, am I right?
    b. Also, I assume the problematic client workstation is MAIN, am I right?

    3. If you temporarily disable the offline files on the problematic client
    workstation, will User1 still encounter error message when he trying to log
    off?

    4. Ask User1 to log on the problematic client workstation, right click "My
    Documents", Properties, Target bar, which is the target folder location?

    ==============

    For your information:

    From the error message, it seems the User1 does not have appreciated
    permissions to access User2 folder which locates at \\SBS server\users-my
    document redirect \user2. So you can grant permissions for User1 to test
    the issue again.

    Please take your to perform the steps and gather the information for
    research. I am looking forward to hearing from you!

    Best regards,

    Brandy Nee

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.



    --------------------
     
    Brandy Nee [MSFT], Jan 24, 2006
    #4
  5. Hello Robert,

    Thank you for posting back!

    I am sorry but from your reply, I still cannot understand what exact goal
    or concern jadesh has. In order to supplement your description, I need your
    help to gather the following information:

    1. In your latest reply, you mentioned "The problem is now showing 8 files
    that cause errors, an increase over the original 4 that showed up". I need
    to know:

    a. Did you meet any error messages after you disable the offline files?
    b. If yes, please capture screen shots for each of the error messages and
    send them to the Newsgroup.

    2. Please explain in detail "Jadesh indicated that when the users logged in
    after the Antispam install the Antispam program intercepted the application
    of the user shell elements and asked if the change from user2 to jadesh
    shell should be allowed."

    Does Jadesh encounter any error messages? If yes, what are they? Where does
    Jadesh meet these error messages?

    3. Please explain in detail "This continued to happen anytime a new user
    logged on with the corresponding user shell change from their roaming
    profile". What changes did user make, please?

    Robert, since I will be out of office from 26th Jan to 5th Feb, I strongly
    suggest that you post your issue back to our Newsgroup rather than my
    mailbox so my backup engineers will continue work with you on this issue.

    For your Best convenience, I have pasted your thread web link here:

    http://www.microsoft.com/technet/community/newsgroups/dgbrowser/en-us/defaul
    t.mspx?&query=%22redirected-redirected+folders%22&lang=en&cr=US&guid=&sloc=e
    n-us&dg=microsoft.public.windows.server.sbs&p=1&tid=479b4be5-188c-4357-898c-
    ba84d95b78d7

    Please take your to gather the information. I greatly appreciate your time
    and understanding!

    Best regards,

    Brandy Nee

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.



    --------------------
     
    Brandy Nee [MSFT], Jan 25, 2006
    #5
  6. Bitbob

    Bitbob Guest

    Brandy: 1. As I indicated when offline files is turned off there are no error
    messages!

    2. here is a chronological listing of occurrences



    a. user 2 is logged in and using workstation

    b. user 2 logs off without incident

    c. user1/jadesh logged on and before she could start using the machine
    the Antispam window pops up and asks if they want to allow change from user 1
    shell elements to jadesh shell elements [ yes or no ]!!!

    d. This continued happening each time the different users logged on
    ---Antispam would pop up and ask if they wished to allow a change from the
    last users shell elements to their shell elements [yes or no]!!!!

    e. I arrived on the scene and disabled the parts of Antispam that dealt
    with shell elements and the popup window stopped!!!!

    f. However now jadesh had the logoff offline file synchronization
    error message anytime she logs off!!

    g. All I want to do is get rid of the error messages at her logoff by
    disabling whatever is calling for her data to be synchronized with user2’s
    data--- and no it would be rather counterproductive to allow her data to be
    synchronized with user 2’s data so I will not give offline synchronization
    security clearance to do so!!!!!

    3. Jadesh encounters no other error messages aside from those that occur at
    logoff during synchronization- a sample of which I have already supplied you
    with.

    4. Again the users were making no changes to their various shell elements!!!
    All they were doing was logging on and off the workstation.!!!!!
     
    Bitbob, Jan 25, 2006
    #6
  7. Hi Robert,

    Thanks for your update! I am jenny and I am backup of Brandy for she is now
    taking leave. I will continue work with you. I am sorry for inconvenience
    for that.

    The offline files and roaming profile indeed has some conflicts. Please
    consider the following when implementing roaming profiles:

    1. Do not use Offline Folder caching on roaming user profile shared
    directories.

    It is important to turn off Offline Folder caching for shared directories
    where roaming user profiles are stored. If you do not turn off Offline
    Folder caching for a user''s profile, you might experience synchronization
    problems when both Offline Folders and roaming user profiles try to
    synchronize the files in a user''s profile. This does not affect your
    ability to use Offline Folders with redirected folders such as My
    Documents.

    2. Do not use Encrypted File System (EFS) on files in a roaming user
    profile.

    The Encrypted File System (EFS) is not compatible with roaming user
    profiles. If you encrypt profile folders or files in the user profile using
    EFS, the user''s profile will not roam.

    3. Do not set disk quotas too low for users with roaming user profiles.

    If a user''s disk quotas are set too low, roaming user profile
    synchronization might fail. Make sure enough disk space is allocated to
    allow the system to create a temporary duplicate copy of a user''s profile.
    The temporary profile is created in the user''s context as part of the
    synchronization process, so it debits the user''s quota.

    4. When creating a roaming profile shared directory, limit access to only
    those users that need access.

    - Because a users roaming profile can contain personal information such as
    confidential documents and EFS certificates, care should be taken to
    protect access to the shared directory. Restrict access to the shared
    directory to only those users that need access. You can also create a
    security group for users that have profiles on a particular shared
    directory, and limit access to only those users.

    - Only give users the minimum amount of permissions needed.

    - When creating the shared directory, hide it by putting a $ after the
    share name. This hides the shared directory from casual browsers, and it
    will not be visible in My Network Places.

    5. Use at least Windows 2000 servers to host user roaming profile shared
    directories.

    Because a users roaming profile contains personal information which is
    copied to and from a client computer, and the server hosting the roaming
    profile, it is important to ensure that data is protected as it travels
    over the network. Potential threats to the privacy and integrity of a
    user''s data come from intercepting the data as it passes over the network,
    tampering with the data as it passes over the network, and spoofing the
    server hosting the user''s data. Features such as Kerberos, IPSec, and
    Server Message Block (SMB) signing included in Windows 2000 and the Windows
    Server 2003 family can help to secure a user''s data.

    6. Always use the NTFS file system for volumes holding user''s data.

    Configure servers hosting roaming profiles to use the NTFS File System.
    Unlike FAT, NTFS supports Discretionary access control lists (DACLs) and
    system access control lists (SACLs), which control who can perform
    operations on a file and what events will trigger logging of actions
    performed on a file.

    After verifying above settings, please see if the issue be fixed.

    I appreciate your time! I am happy to be of assistance.

    Have a nice day!

    Sincerely,

    Jenny Wu
    Microsoft CSS Online Newsgroup Support
    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    <btxf5G$>
     
    Jenny wu [MSFT], Jan 26, 2006
    #7
  8. Bitbob

    Bitbob Guest

    Jenny Are you saying that offline file sychronization should be turned off on
    the workstations if I am using folder redirect and roaming profiles????? The
    folders that contain the roaming profiles are on the server where offline
    files are not activated. All of the other conditions you have indicated have
    been met on the server and workstations!!! If I turn off offline
    synchronization the problem will not occur but I must make sure that
    redirected folders and roaming profiles will correctly write data to the
    server at user logoff with that function defeated on the workstation.

     
    Bitbob, Jan 26, 2006
    #8
  9. Hi Robert,

    Thanks for your update.

    For further analyze the issue to find the root cause, we need more
    information. Please kindly help me collect the following information:

    1. What is the exact error message you received? Can you help me collect a
    screen shot when reproduced the issue?
    2. Enable UserENV log on both workstations and send the log files to me.

    Use Registry Editor to add the following registry value (or modify it, if
    the value already exists):

    Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
    NT\CurrentVersion\Winlogon]

    Value: UserEnvDebugLevel
    Value Type: REG_DWORD
    Value Data: 10002 (Hex)

    After you make this change, restart the computer. The log file is written
    to the %SystemRoot%\Debug\UserMode\Userenv.log file.

    221833 How to Enable User Environment Debug Logging in Retail Builds of
    Windows
    http://support.microsoft.com/?id=221833

    3. Save the texts of the application and system logs for analyze:

    To save a text copy of Application /System log:

    A. Open Event Viewer: Start -> All Programs -> Administrative Tools ->
    Event Viewer.
    B. Right-click on Application/System log and select "Save Log File As?".

    Please compress log files and mail it to mailbox:

    I appreciate your time! Additionally I will be out of office from 28th Jan
    to 5th Feb with limited internet access. The email response will be
    delayed. For Microsoft newsgroup user, please do not hesitate to contact my
    backup engineer, Cliff Zhang at , and he will be glad
    to be of assistance. I am sorry for bring you inconvenience.

    Have a nice day!

    Sincerely,

    Jenny Wu
    Microsoft CSS Online Newsgroup Support
    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    <btxf5G$>
    <>
    <>
     
    Jenny wu [MSFT], Jan 27, 2006
    #9
  10. Hi,

    Thanks for your update.

    For current situation, let us perform the following tests to see if it
    helps.

    1. Please double check the Temp folder's permissions on the TS box, it
    locates in:

    C:\WINDOWS\Temp

    Right click it and open its Properties page, please ensure "Authenticated
    users" entry list here and have the following permissions:

    -- Authenticated users: Read,Write, Read & Execute, list folder contents

    If not, please verify them and restart fax service, please logoff and then
    re-log to fax, how about the result?

    2. Please try to re-install the window fax services component from Add
    Add/Remove Programs and reconfigure the shared fax to see if it helps. Can
    you install it properly? If not, what is the exact error message you
    received.

    3. Where the faxes go? Are they hung in the server fax queue? Let us enable
    activity logging in the shared fax in the server box. The steps:

    a. locate the node: server management console -> Fax
    b. Right-click Fax (Local) and select Properties, click the Activity
    Logging tab, and select the Outgoing log activity check boxes.
    c. Then you can reproduce the problem and mail the OutboxLOG.txt file for
    analyze.

    The file is located in the %alluserprofile%\Application
    Data\Microsoft\Windows NT\MSFax\ActivityLog folder.

    4. Can you find any related event error in the Event Viewer on the server
    box or terminal server box? If yes, please paste the detail error
    information in the newsgroup or save the text copy of Application /System
    log of the TS and the SBS server:

    To save a text copy of Application /System log:

    A. Open Event Viewer: Start -> All Programs -> Administrative Tools ->
    Event Viewer.
    B. Right-click on Application/System log and select "Save Log File As?".

    Please compress log files and mail it to mailbox:

    I appreciate your time! Additionally I will be out of office from 28th Jan
    to 5th Feb with limited internet access. The email response will be
    delayed. For Microsoft newsgroup user, please do not hesitate to contact my
    backup engineer, Cliff Zhang at , and he will be glad
    to be of assistance. I am sorry for bring you inconvenience.

    Have a nice day!

    Sincerely,

    Jenny Wu
    Microsoft CSS Online Newsgroup Support
    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    <btxf5G$>
    <>
    <>
    <>
     
    Jenny wu [MSFT], Jan 27, 2006
    #10
  11. I am sorry for mistake post another issue response here.

    Have a nice day!

    Sincerely,

    Jenny Wu
    Microsoft CSS Online Newsgroup Support
     
    Jenny wu [MSFT], Jan 27, 2006
    #11
  12. Bitbob

    Bitbob Guest

    Jenny: First would you please answer my question!!!!!! Second the error code
    was posted in the message dated 1/23 in point #3.
    Third I will try to follow you instructions the next time I have access to
    the clients single workstation There is only one causing this whole issue as
    indicated in previous notes!!!!!! Thanks for your help
     
    Bitbob, Jan 27, 2006
    #12
  13. Bitbob

    Bitbob Guest

    Cliff: Here is the back and forth of it--Let me know what it is that you
    don"t understand and I will try to clarify!!!!!





    Bitbob: I have a client that has somehow managed to redirect his redirected
    folders
    so that they are pointed to another users folder on the server when he logs
    out. The SBS server denies access to these files so his logout sycronization
    always reports errors and stops when it encounters them. I have gone into the
    local workstation and checked the files and folders the syncronization
    applies to and they all point to the correct redirected folders and files. In
    desperation I have copied them to other media and deleted the local copies
    but the logout syncronization still errors out trying to crosslink these
    files that are no longer on the local workstation. Is this process refering
    to a file on the SBS server that still crosslinks those files? The user that
    is having this problem is also set up with a roaming profile. Is this problem
    related to his roaming profile?

    Brandy: am sorry but I do not have a clear image what exact issue you are
    experiencing. In order to supplement your description, I need your help to
    gather the following information:

    1. Just to double confirm, from your description, it seems that you have
    enabled the Roaming Profile, Folder Redirection and synchronize Offline
    Files. Am I right?

    2. Please explain in detail "somehow managed to redirect his redirected
    folders so that they are pointed to another users folder on the server when
    he logs out".

    a. What is the "redirected folders"? My Documents folder or the other
    folders?
    b. How does the client "somehow managed to redirect his redirected
    folders"? Please fully describe the steps so we can better understand your
    scenario.
    c. Where does the customer redirect the redirected folders? To the SBS
    Server or client workstation?

    3. You mentioned "his logout sycronization always reports errors". What is
    the full error message? Please type the error message word by word the
    Newsgroup.

    4. On the server and the problematic client workstation, run "eventvwr"
    (without quotation marks), check whether there are any errors. If yes,
    double click it, click the Copy button and paste the full content to the
    Newsgroup.

    5. On the problematic client workstation, open a command window, type
    "gpresult /v >c:\gp.txt" (without quotation marks), go to c drive, get the
    gp.txt file and send it to me ().

    Please take your to gather the information for further research. I am
    looking forward to hearing from you!

    bitbob: 1. Yes all are enabled
    2. I don't know how the user managed to do this and was presented with the
    problem after it occured and the user has no idea what caused it.
    3. The reported error is as follows and I think it answers questions 2-b-c.
    User1 is logging off and gets this message which is repeated several time for
    different files but always the same message with different folders in user2s
    redirected data.
    "Offline files(\\SBS server\users-my documents-redirect on SBS server):
    access to 'samplemusic.ink' is denied om \\SBS server\users-my document
    redirect \user2\my documents\my music"
    4. There are no event loggings of errors in the timeframe when this problem
    first occured.
    5.I will send the file shortly.

    Brandy:1. Robert, I am sorry but from your reply, I am still not very clear
    what
    exact issue you are experiencing. In your reply, you mentioned "I don't
    know how the user managed to do this and was presented with the problem
    after it occured and the user has no idea what caused it." I need to know:

    a. Who is the "User" managed to do this? User1 or User2?
    b. I suggest that you contact this "User" for detailed steps how he or she
    managed to do this, and what exact goal he or she wants to achieve so we
    can help to do so.

    2. Who is User1 and who is User2?

    a. I assume User1 is jadesh, am I right?
    b. Also, I assume the problematic client workstation is MAIN, am I right?

    3. If you temporarily disable the offline files on the problematic client
    workstation, will User1 still encounter error message when he trying to log
    off?

    4. Ask User1 to log on the problematic client workstation, right click "My
    Documents", Properties, Target bar, which is the target folder location?
    Brandee:1. In your latest reply, you mentioned "The problem is now showing 8
    files
    that cause errors, an increase over the original 4 that showed up". I need
    to know:

    a. Did you meet any error messages after you disable the offline files?
    b. If yes, please capture screen shots for each of the error messages and
    send them to the Newsgroup.

    2. Please explain in detail "Jadesh indicated that when the users logged in
    after the Antispam install the Antispam program intercepted the application
    of the user shell elements and asked if the change from user2 to jadesh
    shell should be allowed."

    Does Jadesh encounter any error messages? If yes, what are they? Where does
    Jadesh meet these error messages?

    3. Please explain in detail "This continued to happen anytime a new user
    logged on with the corresponding user shell change from their roaming
    profile". What changes did user make, please?

    Bitbob:Brandy: 1. As I indicated when offline files are turned off there are
    no error
    messages!

    2. here is a chronological listing of occurrences



    a. user 1 is logged in and using workstation

    b. user 1 logs off without incident

    c. user2/jadesh logged on and before she could start using the machine
    the Antispam window pops up and asks if they want to allow change from user 1
    shell elements to jadesh shell elements [ yes or no ]!!!

    d. This continued happening each time the different users logged on
    ---Antispam would pop up and ask if they wished to allow a change from the
    last users shell elements to their shell elements [yes or no]!!!!

    e. I arrived on the scene and disabled the parts of Antispam that dealt
    with shell elements and the popup window stopped!!!!

    f. However now jadesh had the logoff offline file synchronization
    error message anytime she logs off!!

    g. All I want to do is get rid of the error messages at her logoff by
    disabling whatever is calling for her data to be synchronized with user2’s
    data--- and no it would be rather counterproductive to allow her data to be
    synchronized with user 2’s data so I will not give offline synchronization
    security clearance to do so!!!!!

    3. Jadesh encounters no other error messages aside from those that occur at
    logoff during synchronization- a sample of which I have already supplied you
    with.

    4. Again the users were making no changes to their various shell elements!!!
    All they were doing was logging on and off the workstation.!!!!!


    Brandy:Hi Robert,

    Thanks for your update! I am jenny and I am backup of Brandy for she is now
    taking leave. I will continue work with you. I am sorry for inconvenience
    for that.

    The offline files and roaming profile indeed has some conflicts. Please
    consider the following when implementing roaming profiles:

    1. Do not use Offline Folder caching on roaming user profile shared
    directories.

    It is important to turn off Offline Folder caching for shared directories
    where roaming user profiles are stored. If you do not turn off Offline
    Folder caching for a user''s profile, you might experience synchronization
    problems when both Offline Folders and roaming user profiles try to
    synchronize the files in a user''s profile. This does not affect your
    ability to use Offline Folders with redirected folders such as My
    Documents.

    2. Do not use Encrypted File System (EFS) on files in a roaming user
    profile.

    The Encrypted File System (EFS) is not compatible with roaming user
    profiles. If you encrypt profile folders or files in the user profile using
    EFS, the user''s profile will not roam.

    3. Do not set disk quotas too low for users with roaming user profiles.

    If a user''s disk quotas are set too low, roaming user profile
    synchronization might fail. Make sure enough disk space is allocated to
    allow the system to create a temporary duplicate copy of a user''s profile.
    The temporary profile is created in the user''s context as part of the
    synchronization process, so it debits the user''s quota.

    4. When creating a roaming profile shared directory, limit access to only
    those users that need access.

    - Because a users roaming profile can contain personal information such as
    confidential documents and EFS certificates, care should be taken to
    protect access to the shared directory. Restrict access to the shared
    directory to only those users that need access. You can also create a
    security group for users that have profiles on a particular shared
    directory, and limit access to only those users.

    - Only give users the minimum amount of permissions needed.

    - When creating the shared directory, hide it by putting a $ after the
    share name. This hides the shared directory from casual browsers, and it
    will not be visible in My Network Places.

    5. Use at least Windows 2000 servers to host user roaming profile shared
    directories.

    Because a users roaming profile contains personal information which is
    copied to and from a client computer, and the server hosting the roaming
    profile, it is important to ensure that data is protected as it travels
    over the network. Potential threats to the privacy and integrity of a
    user''s data come from intercepting the data as it passes over the network,
    tampering with the data as it passes over the network, and spoofing the
    server hosting the user''s data. Features such as Kerberos, IPSec, and
    Server Message Block (SMB) signing included in Windows 2000 and the Windows
    Server 2003 family can help to secure a user''s data.

    6. Always use the NTFS file system for volumes holding user''s data.

    Configure servers hosting roaming profiles to use the NTFS File System.
    Unlike FAT, NTFS supports Discretionary access control lists (DACLs) and
    system access control lists (SACLs), which control who can perform
    operations on a file and what events will trigger logging of actions
    performed on a file.

    After verifying above settings, please see if the issue be fixed.

    Bitbob:Jenny Are you saying that offline file sychronization should be
    turned off on
    the workstations if I am using folder redirect and roaming profiles????? The
    folders that contain the roaming profiles are on the server where offline
    files are not activated. All of the other conditions you have indicated have
    been met on the server and workstations!!! If I turn off offline
    synchronization the problem will not occur but I must make sure that
    redirected folders and roaming profiles will correctly write data to the
    server at user logoff with that function defeated on the workstation.

    Jenny:1. What is the exact error message you received? Can you help me
    collect a
    screen shot when reproduced the issue?
    2. Enable UserENV log on both workstations and send the log files to me.

    Use Registry Editor to add the following registry value (or modify it, if
    the value already exists):

    Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
    NT\CurrentVersion\Winlogon]

    Value: UserEnvDebugLevel
    Value Type: REG_DWORD
    Value Data: 10002 (Hex)

    After you make this change, restart the computer. The log file is written
    to the %SystemRoot%\Debug\UserMode\Userenv.log file.

    221833 How to Enable User Environment Debug Logging in Retail Builds of
    Windows
    http://support.microsoft.com/?id=221833

    3. Save the texts of the application and system logs for analyze:

    To save a text copy of Application /System log:

    A. Open Event Viewer: Start -> All Programs -> Administrative Tools ->
    Event Viewer.
    B. Right-click on Application/System log and select "Save Log File As?".

    Please compress log files and mail it to mailbox:

    I appreciate your time! Additionally I will be out of office from 28th Jan
    to 5th Feb with limited internet access. The email response will be
    delayed. For Microsoft newsgroup user, please do not hesitate to contact my
    backup engineer, Cliff Zhang at , and he will be glad
    to be of assistance. I am sorry for bring you inconvenience.

    Bitbob:Jenny: First would you please answer my question!!!!!! Second the
    error code
    was posted in the message dated 1/23 in point #3.
    Third I will try to follow you instructions the next time I have access to
    the clients single workstation There is only one causing this whole issue as
    indicated in previous notes!!!!!! Thanks for your help


     
    Bitbob, Jan 30, 2006
    #13
  14. Dear Customer,

    Thank you for posting back! I am Cliff, the owner of this newsgroup and I am Jenny's backup during her leave. I have review the thread and I understand that the issue
    has costed a lot of time and it is getting complex. To save your time I suggest you call Microsoft CSS Phone Call Support so that you will be served in a more timely and
    efficient manner. You can find our contact numders here:

    http://support.microsoft.com/common/international.aspx

    Please understand that we don't mean to bounce you backup and forth between supports but such an issue is not suitable to be handled here. Thank you for your
    understanding and cooperation!

    Sincerely,

    Cliff Zhang
    Microsoft Online Partner Support
    MCSE 2000/2003


    When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue.

    =====================================================

    Business-Critical Phone Support (BCPS) provides you with technical phone support at no charge during critical LAN outages or "business down" situations. This benefit is
    available 24 hours a day, 7 days a week to all Microsoft technology partners in the United States and Canada.


    This and other support options are available here:

    BCPS: https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469

    Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/


    If you are outside the United States, please visit our International Support page: http://support.microsoft.com/default.aspx?scid=/international.aspx.

    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Cliff Zhang [MSFT], Jan 30, 2006
    #14
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.