How can I erase the traces of Folder Redirection from the Default Domain Policy
- by bruor
I've taken over from an IT outsourcer and have found a struggle now that we're starting a migration to windows 7. Someone decided that they would setup Folder redirection in the Default Domain Policy. I've since configured redirection in another policy at an OU level.
No matter what I do, the windows 7 systems pick up the Default Domain Policy folder redirection settings only. I keep getting entries in the event log showing that the previously redirected folders "need to be redirected" with a status of 0x80000004. From what I can tell this just means that it's redirecting them locally.
Is there a way I can wipe that section of the GPO clean so it's no longer there? I'm hesitant to try to reset the default domain policy to complete defaults.
***UPDATE 6-26
I found that the following condition occurred and was causing the grief here. I've already implemented the new policies for clients, and for some reason, XP was working great, 7 was refusing to process. The DDP was enforced. Because of this, and the fact that the folder redirection policies were set to redirect back to the local profile upon removal, it was forcing clients to pick up it's "redirect to local" settings.
Requirements for to recreate the issue.
-Create a new test OU and policy.
-Create some folder redirection settings, set them to redirect to local upon removal
-Remove settings on that GPO
-Refresh your view of the GPO and check the settings.
-You'll notice that the settings show "not configured" entries for folder redirection.
-Enforce this GPO
-Create another sub-OU
-Create a GPO linked to this sub-ou and configure some folder redirection settings.
-Watch as the enforced GPOs "not configured" setting overrides the policy you just defined.
I've had to relink the DDP to all OU's that have "block inheritance" enabled, and disable the "enforced" option on the DDP as a workaround. I'd love to re-enable enforcement of the DDP, but until I can erase the traces of folder redirection settings from the DDP, I think I'm stuck.
