Access denied error on folder redirection only on Windows 10 machines updated to v2004 (build 19041)

Question

Hello,

I am administrator of a small network with about 20 windows 10 clients and a Windows server 2019. This server was upgraded from server 2012 to 2016 then to 2019, it is just running active active directory and DNS services with basic GPOs including folder redirection, drive maps, printer deployment, etc. I trusted Microsoft updates and was allowing machines to install updates automatically (Was a mistake) because it is a small network and never thought that updates could cause any issues. The problem is that 4 of my 20 Windows 10 clients were automatically updated from build 18363 to 19041 and since then the four machines running on build 19041 are erroring out at user logon saying " Access is Denied, \Server\forderredirection\Username\Desktop is not accessible." and of course is not allowing the user to access anything and remove user's personalized setting from the task bar then it fix itself after about 5 minutes. This problem is not happening on computers running on build 18363 and on users with local or domain administrator access. Also, I have noted the computers are login so fast but according to GPresult /R all user's GPOs are being applied.

I have tried next troubleshooting steps without success:

• Login in and off couple of times.
• Reviewed Folder redirection permissions, everything is fine.
• Ensured I don't have security filtering.
• Enabled GPO "wait for network at logon" and confirmed is being applied.
• Tested DC settings using DcDiag, it passed all tests.

• Temporarily I have provided local administrators access to users working on the 4 computers running on Windows v2004 until I can address this issue.

Thanks is advance for your help.

Answer 1

Hi,
To narrow down the issue, please confirm the following questions.

When the error is happening , can you access the redirection folder manually by : \Server\forderredirection\Username\Desktop?
Or it is the same error?
Any events logged from the event viewer ?
I would recommend you to capture a network package for more details.
Even the all the GPOs were applied according GPresult /R i would also recommend you check more details from the GPSVC log. For your reference:
https://blogs.technet.microsoft.com/askds/2015/04/17/a-treatise-on-group-policy-troubleshootingnow-with-gpsvc-log-analysis/

Best Regards,

Answer 2

Hello FanFan, Thanks for replying to my post and I am sorry for the delayed answer.

• I cannot access \Server\forderredirection\Username\Desktop while the error is happening
• I ensured there're not computers GPO trying to apply to users
• In the event viewer I just have Event "1085 Windows failed to apply the folder redirection settings"
• Remember, it is just happening on computers updated to Windows v2004, the rest of computers are working just fine.
• I ran GPSVC log and I found next errors

Extension folder redirection skipped with flag 0x10047.
Extension folder redirection ProcessGroupPolicy Failed, status 0x3eb
No GPO changes but couldn't read Extension folder redirection's status or policy time

Any idea?

Thansk