"the security descriptor is invalid"
that is the error im getting in my event viewer when its trying to move files from the old share to the new share of users redirected documents.
the server is a 2k8r2 and i have the following configured on it(*also note that this server is a read only domain controller and is a Global catlog server as well, not sure if that has any effect on the shared folder off of it).
share permissions for share$
EVERYONE - FULL CONTROL
NTFS PERMISSIONS:
SYSTEM: FULL ( THIS FOLDER, sub and files)
CREATOR/OWNER - FULL (subfolders and files only)
ADMINISTRATORS: FULL ( THIS FOLDER, sub and files)
AUTHENTICATED USERS - ALLOW following:
Create Folder/Append Data (Apply onto: This Folder Only)
List Folder/Read Data (Apply onto: This Folder Only)
Read Attributes (Apply onto: This Folder Only),
Traverse Folder/Execute File (Apply onto: This Folder Only)
***note that i do not have any home share setup on the user profile. so under the profile tab of the user it is completely blank, im not mapping any drive anywhere.***
all i have turned on is folder redirection in a Group policy
i have MY DOCUMENTS redirection settings set to:
BASIC > REDIRECT EVERYONES FOLDER TO THE SAME LOCATION
CREATE A FOLDER FOR EACH USER UNDER THE ROOT PATH
ROOT PATH: \\NEWSERVER\SHARE$ (this is the share that i have the security settings above configured for)
in the SETTINGS TAB of the redirection settings i ONLY have checked:
"Move the contents of the my documents to the new location" (and this is because i need to move the users current documents to this new share. The old share is on an older server we are decommissioning.
"Leave the folder in the new location when the policy is removed".
Whats strange is that when the user logs in, i see it create the username folder and the my documents folder under that username, it even starts to create the first directory its going to copy over(folderabc), but it doesnt copy any files over.
and i get this error in the eventviewer.
Failed to perform redirection of folder My Documents. The files for the redirected folder could not be moved to the new location. The folder is configured to be redirected to <\\NEWSERVER\share$\%USERNAME%\My Documents>. Files were being moved from<\\oldserver\oldshare\userA\mydocuments> to <\\NEWSERVER\share$\userA\My Documents>. The following error occurred while copying <\\oldserver\oldshare\userA\mydocuments\folderabc> to <\\NEWSERVER\share$\userA\My Documents\folderabc>:
This security ID may not be assigned as the owner of this object.
if i go to the computer, right click my documents(the old share path is still there)
if i manually type in the new share path "\\NEWSERVER\share$\userA\My
Documents" and hit APPLY, it asks if i want to move all the items to the new share. i say yes, and it does it with no problem.
why can i do it from windows, but the group policy fails. not only does it NOT move the files to the new destination, it doesn't change the path of the my documents folder for the user either.
sorry for the long description. and thx in advance.