Folder Redirection GPO not working on Windows 10 Client

Question

_{Saturday, August 1, 2015 4:37 PM}

The folder redirection GPO from Server 2012R2 Essentials in not being picked up by the Windows 10 Clients.
Does any one know of a fix, or workaround?

All replies (33)

_{Thursday, August 6, 2015 2:50 PM ✅Answered | 8 votes}

I had a similar problem.  On my Essentials box the folder redirection comes from a "WSE Group Policy Folder Redirection" GPO.  This GPO uses the "WSE Group Policy WMI Filter" to set the scope.  With it's default setting the filter means the GPO doesn't get applied to windows 10 machines.  Win10 has a version number of "10" and due to the way filters work it thinks 10 is lower than 6 - go figure!

You have an option.

a) Remove the filter - this could have unintended consequences unless all the machines on the network are windows 7 or greater.

b) Amend the filter settings - I amended mine to

select * from Win32_OperatingSystem where (Version >= "6.1%" or Version like "10.%") and ProductType = "1"

It now works as expected. Hope that helps

_{Sunday, August 2, 2015 2:49 PM}

Folder redirection combined with offline files is not working and is preventing access to the home folder.

Environment:

1. Home folder is located on a DFS-R share (\domain.company.com\users\docs\username)
2. Documents directory redirected to same location as home folder.
3. Home folder also has a drive mapping. (M:\
4. Laptop users have offline files enabled.
5. Laptop user are connected with DirectAccess

Symptoms:

1. Sometimes the Home Folder does not get mapped.
2. Other drive mappings from GPP do get mapped.
3. Redirection of Documents folder is not applied.
4. Files are not accessible via Windows Explorer using \domain.company.com\users\docs\username but are accessible as \domain\users\docs\username.
5. I can browse to \domain.company.com\ or \domain\ and see all the DFS shares. The Users share opens but show no sub-folders.

Is there documentation on Offline files and folder redirection for Windows 10? I am finding very little real documentation for anything Windows 10 so far. Mostly blog posts talking about features but no explaining best practices and how to implement.

_{Sunday, August 2, 2015 3:00 PM}

Update: After changing the homepath to \domain\users\docs\username it still didn't work, even after a gpupdate /force, sitting all night and a reboot. After my previous post I decided to try one more logout/login and my drive got mapped, folders were redirected and offline files are syncing.

I still cannot access the files directly using the fqdn unc path \domain.company.com\users\docs\ I previously found that the fqdn worked better over DirectAccess on Windows 7.

_{Monday, August 3, 2015 6:39 AM | 1 vote}

I have the same problem. I have find out, that the Problem Comes with the day one patch.

If you use Win10 Pro/Ent. without this patch (KB3074683-x64), it will work fine. I have this issue with a 2012R2 Domain. the same GPO's work with Windows 7/8/8.1/10(Bulid10240)

brgds

Alexander

_{Monday, December 7, 2015 7:38 PM}

I'm having the same problem, and following along so far, but cannot for the life of me, find where I edit the WMI query that is preventing redirection from working with windows 10 clients.

_{Thursday, December 24, 2015 2:46 AM}

awesome - amending the filter worked.

_{Thursday, January 21, 2016 4:45 PM | 1 vote}

In my situation is was an SBS 2008 server, but the same situation and basic fix.  Following the suggestion of HSS Advanced in another forum, I used a different filter setting.  I believe this may prevent future issues.

I modified the Windows SBS Client filter under WMI Filters to:

select version from Win32_OperatingSystem where not version like "[12345].%" and not version like "6.0.%"

After forcing the policy udpate and a new login, all is working!

_{Wednesday, March 23, 2016 8:52 PM}

Thanks for your reply.  Worked for me

_{Thursday, June 16, 2016 8:09 AM}

Hi,

I have Win Server RC2 Standard 2012 and clients workstation with Windows 10 and Windows 8, and have the same problem with configure Offline files using "Folder redirection" in GPO

From the last post took a long time, if there is any known solution (some MS update/fix?).

If not, how and where I can do the modification suggested filters "modifi the Windows SBS Client filter under WMI Filters"

_{Friday, June 17, 2016 1:13 PM}

I have the same problem...
In my case, i found setting the command 'gpresult /z' the GPO, appear in 'Applied GPO's'. But in 'result set of policy' show:
Folder redirection

N/A

Someone have the same problem? Have the solution?

Thank's

_{Tuesday, June 21, 2016 7:52 AM}

I am having the same problem.. Also not seeing any folder redirection settings from gpresult /z (N/A).

Worked fine in 1507, but not in 1511.

Running DC on 2012 R2 DC, and the file server on 2008 R2 Std.

Would anyone know if UNC Hardening is involved when it comes to folder redirection settings? If so - are the defaults different between 1507 and 1511?

_{Tuesday, June 21, 2016 10:42 AM | 1 vote}

You tried set the GPO security with group 'Authenticated Users' and 'Domain Computers' to read permission?

_{Tuesday, June 21, 2016 1:58 PM}

The policy where my folder redirection settings are located is being applied. It's simply not redirecting the folders (Quick Access menu in the Navigation pane in file explorer) to the user home directory (H:\ mapped to network share).

I did as you suggested and gave Domain Computers read access to the GPO. Don't know why that would be an issue (considering the policy is being applied and all) and it didn't resolve my situation. Thanks anyway.

_{Tuesday, June 21, 2016 2:27 PM | 5 votes}

After the update, in some cases the GPO not apply (without traces in gpresult)...
In the documentation have the solution:

Resolution

To resolve this issue, use the Group Policy Management Console (GPMC.MSC) and follow one of the following steps:
Add the Authenticated Users group with Read Permissions on the Group Policy Object (GPO).
If you are using security filtering, add the Domain Computers group with read permission.

According:
https://support.microsoft.com/en-us/kb/316362

_{Wednesday, June 22, 2016 9:07 AM | 2 votes}

I found the cause of my problems. Apparently MS introduced a WMI class for performing folder redirection rather than Group Policy Client Side Extension. This is an option for Windows 8 and newer. You can read more about the class here:

https://msdn.microsoft.com/en-us/library/windows/desktop/hh830621(v=vs.85).aspx

Now. With SCCM (at least from 2012 R2 SP1, 5.00.8239.1206) there is a compliance setting in the default client settings called "Enable User Data and Profiles". Having this one set to Yes will replace GPCSE handling of folder redirection with the new WMI way, for Windows 8 and Windows 10 clients.

If you're using the combination of Windows 10, GPO based folder redirection and SCCM 2012 or Current Branch you have to set this setting to No, or figure out how to set up folder redirection with WMI (for me, that'll be a later project. Perhaps it's not to complicated).

Here's another discussion but for Windows 8:

https://social.technet.microsoft.com/Forums/windowsserver/en-US/1050a55d-2fb5-4d63-88f8-5816ca06790f/windows-8-folder-redirection-policy-missing-from-gp-results?forum=winserverGP

Hope this helps others out there.

_{Wednesday, July 6, 2016 8:20 AM | 2 votes}

Thanx!

We used security filtering so the policy was applied when  users is are member of a specific group. It was working on Windows 7 + 8 but for Windows 10 we needed to add domain computers with read permission on the policy

_{Wednesday, July 6, 2016 9:07 PM}

Yes, many thanks! We were having the same problem and I was ready to scream. I added the domain computers with read access and that fixed it. Sheesh, Microsoft, way to shoot your golden child (Windows 10) in the foot.

_{Monday, August 22, 2016 4:16 AM}

I have the same issue where the policy is not being applied and even with the filter the folders are not redirected.

_{Tuesday, November 15, 2016 4:11 AM | 2 votes}

I hope this helps,

This may not pertain to your specific instance of the issue you are experiencing, but I include it that it may lead you to the correct resolution, with that said...

I had a similar issue, after many attempts the only resolution for me was to include in the GPO security filtering tab "domain computers", which to me makes no sense as this is a user GPO!?! but it did work and is still working and continues to work, you got me on that one, but it does and has for me.

So to recap, this originally is a user GPO, applied to users, but in order for it to work I had to add domain computers to the security filtering tab of the GPO,.. weird yes, I hope it helps.

Things that don't work as they should is an understatement....

_{Thursday, December 8, 2016 4:29 AM}

If you are using SCCM Current Branch you have to disable the User Profile and data or it breaks Folder Redirection. https://support.microsoft.com/en-ca/kb/3060058

lforbes

_{Saturday, December 10, 2016 9:18 AM}

Thank you, this is the only thing that worked for me! Messing with the WMI filters did nothing for me...

Server 2012 R2 Datacenter in a pure Windows 10 Pro environment. 

_{Wednesday, December 14, 2016 1:06 PM}

Thanks,

I had the same problem with Windows 10 Enterprise machines and this solution worked for me.

-- emnavarro02

_{Friday, April 14, 2017 5:02 AM}

Thanks for me to, this was the only solution!!

_{Wednesday, August 16, 2017 5:41 PM}

All these answers look really great, if you're on Server 2012. They don't work so good on Server 2016. I followed every one of the suggestions, 2016 does not have WMI filters, and still, not one single time will it redirect a valid domain user on a valid domain computer, who is an authenticated user, to the redirected folder. Nothing changes.

This is brand new, patched, 2016 Server Standard Edition, with 70 CAL, it authenticates as expected, I can create user accounts and policies all day long. Not a single one of the policies work. If I MANUALLY, at the workstation, relocate a folder to the server/NAS, that works just great. Do it from a login however, one giant failure.

So, any suggestions? Or do I ditch this thing and go with SAMBA on a Linux box, and ask for my money back?

Thanks!

_{Saturday, August 19, 2017 11:08 PM}

What does the Folder Redirection Event Log say on the workstations? It will tell you if it is applying or why not. Did you do an RSOP to see applied policies? You can do an mmc snapin on the local machine and add the RSOP and see what is applying. There could be a thousand reasons why it is not working. All of our Servers are 2016 and do folder redirection just fine. Note that User Policies only apply to OU's users are in unless you have loopback enabled.  How are your home directories in the user profile path? Are the using DFS \domain.local\usershare\username%. What did you put for Folder Redirection? Redirect to user home profile location (that is the best one).

lforbes

_{Wednesday, September 20, 2017 10:05 AM}

Talk english dude ? select * from Win32_OperatingSystem where (Version >= "6.1%" or Version like "10.%") and ProductType = "1"

IS Win32_OperatingSystem a folder must this be done in CMD prompt you need to give more info if you want to assist.

_{Wednesday, September 20, 2017 3:48 PM}

Talk english dude ? select * from Win32_OperatingSystem where (Version >= "6.1%" or Version like "10.%") and ProductType = "1"

IS Win32_OperatingSystem a folder must this be done in CMD prompt you need to give more info if you want to assist.

This is referencing a WMI Group Policy Filter. It is the way it is filtered. Google setting wmi filters on GPO's. I have no issues with Folder Redirection and Windows 10 but we only use laptop wmi filters.

lforbes

_{Wednesday, September 20, 2017 3:53 PM}

I hope this helps,

This may not pertain to your specific instance of the issue you are experiencing, but I include it that it may lead you to the correct resolution, with that said...

I had a similar issue, after many attempts the only resolution for me was to include in the GPO security filtering tab "domain computers", which to me makes no sense as this is a user GPO!?! but it did work and is still working and continues to work, you got me on that one, but it does and has for me.

So to recap, this originally is a user GPO, applied to users, but in order for it to work I had to add domain computers to the security filtering tab of the GPO,.. weird yes, I hope it helps.

Things that don't work as they should is an understatement....

Microsoft introduced a security KB3163622 MS16-072 last year which processes ALL Group Policies in the system context. Therefore for any User GPO's filtered on a GROUP of Users has to have Domain Comouters = Read or it won't apply.

lforbes

_{Thursday, November 2, 2017 2:50 AM}

Not for me. Didn't do anything.

_{Thursday, January 25, 2018 7:42 PM}

Adding read permision on the policy for W10 computers works great!

_{Wednesday, May 2, 2018 6:30 PM}

salve a tutti,

sto configurando dc windows 2016 con client windows 10, come sopra  non funzionano i criteri per il reindirizzare le cartelle, ho seguito tutto quanto sopra, inserito i permessi, ma continua a non funzionare.

per impostazione predefinita non ho nessun non ho nessun filtro WMI, deve essere inserito necessariamente per funzionare windows 10 e 7.

_{Tuesday, December 4, 2018 3:06 AM}

Thanks,

I had the same problem with Windows 10 Enterprise machines and this solution worked for me.

-- emnavarro02

Which one?

/* Server Support Specialist */

_{Tuesday, December 4, 2018 3:08 AM}

Thanx!

We used security filtering so the policy was applied when  users is are member of a specific group. It was working on Windows 7 + 8 but for Windows 10 we needed to add domain computers with read permission on the policy

OK, The **Folder Redirection **Policy is applied to User not Computer:

User Configuration (Enabled) | Policies | Windows Settings | Folder Redirection | Documents | Setting: Basic (Redirect everyone's folder to the same location) Path: '\FILESERVER\USERNAME%\My Documents'

Do you still require to add Domain Computers Allowed Permissions: READ?

/* Server Support Specialist */