Domain User Cannot Access "My Documents" Subfolder

Hello, I have a users who uses a Windows 7 PC and a Windows 8 Laptop. The user is joined to a Domain and can access the "My Documents" folder and sub folders without an issue on the Windows 7 PC. When the user logs in with the same credentials
on the Windows 8 Laptop the user can go into the "My documents" folder but 2/10 of the subfolders the user gets a message "You do not have permission to access \\XXXXX\share\user\My Documents\subfolder" of course I changed a few of the
names for security reasons. I checked the parent directory "My Documents" security permissions and the user has Ownership of the folder as well as "Full Control." The Folder permissions are also applied to all subfolders and files. The
setting in group policy to create the "My Documents" folder is \\Domain\share\%USERNAME% so that shouldn't be an issue.
Any help to resolve this would be greatly appreciated.

Disable this setting and check the results after a reboot 
Network access: Do not allow anonymous enumeration
of SAM accounts and shares
Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Similar Messages

  • User cannot access redirected Documents folder, but can connect to share in Windows Explorer and access folder on server

    I am in the final stages of a cross-forest migration.  Users have Windows 7 workstations with redirected folders on a Windows Server 2012 box running in the old forest.  User accounts were not migrated.  The accounts in use have always
    been in the "new" forest.  One of our challenges was the large volume of data in redirected folders.  I made sure users in the target forest had continued to have access to their redirected folders in the old forest and robocopied
    the entire users share, copying the permissions with the files.  By doing incremental robocopies, we can get a final copy done now in about six hours.  The plan was simple: copy the files, do an incremental copy every night, on the night of the cutover
    change the folder redirection policy Documents path from
    \\oldserver\users\%USERNAME% to
    \\newserver\users\%USERNAME%. The policy is configured to NOT copy user files from the existing folder to the new redirected folder.  Everything was going well until I tested the policy change.  After the folder redirection policy is updated
    and applied, the user cannot access the private Documents folder.  For example, user Chester Tester logs on as ctester.  I open Windows Explorer and click the Documents shortcut.  I see one subfolder, which is subfolder of Public Documents. 
    So I can look at Public Documents but when I click on the Documents folder (Under the Documents library link) I get an access denied error.  Now for the kicker, if I open another Windows Explorer window and edit the address bar to
    \\newserver\users\ctester, I can navigate the Documents folder tree and see my thousands of documents. What the ....?
    I'm hoping this is something really simple to fix!
    TIA

    HI Vivian,
    Thank you for your reply.  Yes, the path in Group Policy Folder Redirection Root Path was updated to
    \\NEWSERVER\users.  I had planned to point this to the distributed file system, so the first used was actually
    \\domain\dfs\users.  To simplify things I have backed off to copying to just a normal share
    \\newserver\users. 
    We are using BASIC folder redirection and we create a folder for each user under the root path. 
    We did not want the policy to move content, as we were seeing users requiring 15-20 minute logon times  (or higher) after the policy is changed.
    Grant the User exclusive right to Documents - Disabled
    Move the contents of Documents to the new location - Disabled
    Related folder settings
    Video - Follow Documents
    Music - Follow Documents
    Pictures - Follow Documents
    Now when I change the folder redirection from old server to new server I now have TWO My Documents folders in the user's redirection folder on the server.  The redirected Documents points to an empty folder set.  The copied folders with all user
    data are there, but folder redirection refuses to recognize the original folder.
    I am looking at the full view of the folder, nothing hidden, so I'm wondering how a folder can have two subfolders with the exact same name.  For now, I just want the redirection to move from the old server to the new server properly.  I deleted
    the new My Documents folder, rebooted the user's workstation and tried again.  The behavior repeats itself, i.e., a new My Documents folder is always created when the redirection policy is changed from the old server to the new server.  The environment
    has about 1500 users with approximately 1.3TB of data in the redirected Documents folders.  OUCH!

  • Users cannot access Document Library althouth they have Edit permissions

    Hello,
    I have a strange SharePoint 2013 case, or at least it's strange to me.
    Users from the company cannot access a Document Library although I've granted them Edit permissions. The Inheritance from the parent have been broken, all inherited groups have been removed and all users have unique permissions to this library. Here is the
    setup:
    Web App -> Sub Site A -> Sub Site B -> Sub Site C -> Sub Site D -> Library
    So these users have Read access from the Web App down to Sub Site B. They cannot see Sub Site C and D because these sites are also with broken inheritance and unique permissions. But I've granted Edit permissions for these users to the Library.
    If I assign View permissions for these users to the Sub Site D then they can upload and edit documents in the library, but still cannot see Sub Site C which was my intention anyway. Again i don't want them to see Sub Site D either, but if i remove the View
    permissions they can't access the library.
    On SP 2010 this was not an issue. I'm not sure if here the permissions are different or not, but I've never seen such issue before.
    Any ideas will be much appreciated. I hope the explanation is good enough to describe the issue.
    Many Thanks in advance.
    Ivo

    Hi Ivaylo,
    According to your description, my understanding is that the user with only Edit permission on the library cannot access the library.
    I recommend to check if the Limited-access user permission lockdown mode feature is deactivated in root site.
    If it is not, deactivate it and then test to see if the issue still occurs.
    To deactivate the feature, please go to the root site > Site Settings > Site collection features > deactivate Limited-access user permission lockdown mode.
    Best regards.
    Thanks
    Victoria Xia
    TechNet Community Support

  • Pages program is frozen.  I cannot access my documents.  Can somebody help me?

    I cannot access my document in the pages program because it is stuck.  Can anybody give me any suggestions on what I need to do so that it will respond?  Thank you

    susanjoan50,
    Go to iCloud.com on your computer. Log in and open the Calendar App, to verify that your events are still present. If so, follow the Calendars Archive/Copy procedure listed in iCloud: Archiving or making copies of your iCloud data.
    Then Quit/Force Quit iCal on your computer, and paste this text ~/Library into the Finder>Go>Go to Folder...window and select "Go." This will open the Users Library Folder.
    Next open the Calendars Folder in the User Library Folder and move any any files with "Cache" listed in the name field to your Desktop.
    Also open the Preferences Folder in the same Library Folder, and move the com.apple.iCal.plist file to the Desktop.
    Log out/in or restart, and open iCal.

  • User cannot access

    hi,
    i  am new to this forum,i have one doubt,
    user cannot access one authorization field , how can i analysis this issue, i know su 53 for find the authorization field...but user have 100 roles... how can i find the which role and object...plz help me..

    Hi Hassan,
    This is not the correct category. This message should be opened under security item. However, you can find the whole required authorization objects list, by using ST01 trace.
    Best regards,
    Orkun Gedik

  • Non-admin user cannot access Essbase server level variables

    Version 11.1.1.3
    Essbase Substitution variables are created at server level. Users are getting error in FR report that uses the Subsitution Variable -- Essbase Error(1051085): You do not have sufficient access to get this substitution variable. Also, users cannot access Substitution variable in SmartView. However, users can access variables created at database level. Users are provisioned as "Server Access" to Essbase and filter access to ASO application "MGTRPTG", where MGTRPTG is an ASO essbase application for reporting. We tried the same provisioning in two other environments and it seems to be working fine.
    User is type "Essbase and Planning" provisioned with essbase "server access", application mgtrptg "filter", Reporting and Analysis "analyst", "dynamic viewer" and "Explorer". In addition, it is given a filter "REP_DME_GALB" which restricts 2 dimensions (Division and Geography).
    Steps taken to resolve:
    1. Existing users were deprovisioned and reprovisioned with no effect.
    2. Created brand new identically provisioned users in Prod and QA. QA user can access the server level var and Prod user cannot
    3. Created a brand new server level variable in Prod and this cannot be accessed.
    4. All services have already been restarted several times.
    5. SR has been opened.
    Temporary workaround:
    By creating a duplicate of the same set of variables at the database level, the reports work. This can only be a temporary workaround as the client cannot be expected to maintain two sets of substitution variables since there are 3 applications using these server level variables.
    Thank you for any ideas!
    Jennifer

    You have stumbled on a defect which is resolved in the Hyperion Planning 9.3.1 patch 6 and above. If you have your planning preferences set to indent members it will cause forms which have page selections to show as invalid in SmartView.
    You can either patch Planning or turn off the preference. The patches are available from http://metalink3.oracle.com and require account which has been associated with your client ID.
    P.S. Usually it's not a good practice to use the admin id.
    Regards,
    -John
    Edited by: Jbooth on Nov 3, 2008 2:12 PM

  • Users cannot access removable devices after you enable and then disable a Group Policy setting in Windows 7 64 Bit

    Users cannot access removable devices after you enable and then disable a Group Policy setting on Windows 7 64 bit machines.
    on the 32 bit machines I was able to apply this hotfix
    http://support2.microsoft.com/kb/2738898
    But it will not install on 64 bit machines. 
    Is there a hotfix for 64 bit?  If not, what is the work around?
    Thanks!
    Robert

    Select "Show hotfixes for all platforms and languages", then download x64 hotfix:
    Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.

  • PIX Users Cannot Access Other Websites & Email Servers on Same-Shared T1 Co

    We are sharing a T1 connection with another business in our building. They have their own separate network environment from mine. I have a Windows 2003 Small Business Server behind a PIX-501 and the users in my network connect to the Internet via Windows Server?s DHCP and Internet sharing (NAT) services.
    All Internet and email traffic is accessible except for those hosted by the other company who we're sharing a connection with. My users cannot access that company?s web server or send email to their email server (we all get 4.4.7 SMTP errors? days later after sending the message).
    They have no firewall on their end; which is why I think there may be something wrong with my PIX configuration (see attached config file). I'm sort of a newbie with the PIX CLI, so any help I can get could be great. Thanks in advanced!

    The problem is not with PIX. This is a common problem when sharing a T1 link as it creates a routing problem since routing cannot be done based on shared T1 channels. Your PIX config is fine and has nothing to do with this issue.

  • BOX31 - Users cannot access InfoView

    After upgrading BOXIR2 to BOX31 the users cannot access InfoView. The following message is shown:
    Account Information Not Recognized: Enterprise authentication could not log you on ...
    As administrator I can access OK.
    What has changed between BOXIR2 and BOX31 in terms of user authentication?
    Thank you in advance.

    The structure of the users is as follow:
    Management (at the top)
    - Accounting
    - Marketing
    - Sales, etc
    Users can then access one of the above, only one.
    Universe restrictions has been applied to allow users to see information related to their department only.
    We do not use any Windows AD authentication, it is just Business Objects.
    Thank you.

  • Computer clock that user cannot access

    I have made a game that i published on Kongregate using C# language with Unity.
    I have a serious issue though. If the player stays offline, he gets some bonus in game when he returns. The more he is offline the bigger bonus. The issue is that if someone while he is offline changes the clock of his computer to 1 day or 10 years in the
    future he gets so much bonus that he ruins the game.
    Is there any way to avoid that without having a server to get time?
    In the webplayer i cannot use NTP due to security limitations, so i am trying to find a clock that the user cannot access.
    Thanks in advance for any possible answers!

    The software house where I'm working as a phone app which uses a timestamp on data it sends to a server.
    There are frequent issues with users messing with the time on their devices for games like candy crush.
    This causes no end of problems since you get data which is sent as if it happened like yesterday or some such and bad stuff happens.
    You definitely don't want to rely on the time on the users computer.
    Get the time when you start up or support bonus for save to server only and apply it retrospectively.
    Use a timer to see how long they play between saves if necessary.
    Or change the game and ditch the bonus mechanism.
    Hope that helps.
    Technet articles: Uneventful MVVM;
    All my Technet Articles

  • Domain Controller cannot access \\domain\netlogon causing Auth issues

    Hi everyone, I have been spent all day trying to figure out what is going on here, I have a Domain controller (only DC in the environment) that is acting funny
    I first noticed when I was attempting to RDP into a server in my domain I was getting "access denied" (but I could log in as a local admin). So when I looked at the Domain Controller, I ran a DCDiag DNS test and got some an AUTH error, but am not
    able to figure out how to fix this.
    Another thing I notice is when I am signed into the domain Controller (GP2010-a), I cannot browse to
    \\contoso.com\netlogon or any similar share.
    Here is the kicker, other servers on this domain, server3, server4, server5 etc... THEY CAN access
    \\contoso.com\netlogon It is ONLY the Domain controller and Server2 that CANNOT access this share. The other servers also allow me to RDP into them fine, it is only 1 server that is affected by this strange behavior.
    I have checked for no IP conflicts and as far as I can tell all the DNS records are correct.
    Regarding the DYNAMIC ip warning, we have a reservation that assigns the IP
    thanks for any input here as i'm really stuck,
    Directory Server Diagnosis
    Performing initial setup:
       Trying to find home server...
       Home Server = GP2010-A
       * Identified AD Forest.
       Done gathering initial info.
    Doing initial required tests
       Testing server: Default-First-Site-Name\GP2010-A
          Starting test: Connectivity
             ......................... GP2010-A passed test Connectivity
    Doing primary tests
       Testing server: Default-First-Site-Name\GP2010-A
          Starting test: DNS
             DNS Tests are running and not hung. Please wait a few minutes...
             ......................... GP2010-A passed test DNS
       Running partition tests on : ForestDnsZones
       Running partition tests on : DomainDnsZones
       Running partition tests on : Schema
       Running partition tests on : Configuration
       Running partition tests on : contoso
       Running enterprise tests on : contoso.com
          Starting test: DNS
             Test results for domain controllers:
                DC: GP2010-A.contoso.com
                Domain: contoso.com
                   TEST: Authentication (Auth)
                      Error: Authentication failed with specified credentials
                   TEST: Basic (Basc)
                      Warning: Adapter 00:0D:3A:00:0D:01 has dynamic IP address
                      (can be a misconfiguration)
             Summary of test results for DNS servers used by the above domain
             controllers:
                DNS server: 128.8.10.90 (d.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 128.8.10.90              
                DNS server: 2001:500:1::803f:235 (h.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:1::803f:235              
                DNS server: 2001:500:2::c (c.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:2::c              
                DNS server: 2001:500:2d::d (d.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:2d::d              
                DNS server: 2001:500:2f::f (f.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:2f::f              
                DNS server: 2001:500:3::42 (l.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:3::42              
                DNS server: 2001:500:84::b (b.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:500:84::b              
                DNS server: 2001:503:ba3e::2:30 (a.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:503:ba3e::2:30              
                DNS server: 2001:503:c27::2:30 (j.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:503:c27::2:30              
                DNS server: 2001:7fd::1 (k.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:7fd::1              
                DNS server: 2001:7fe::53 (i.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:7fe::53              
                DNS server: 2001:dc3::35 (m.root-servers.net.)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa failed on the DNS server 2001:dc3::35              
             Summary of DNS test results:
    Auth Basc Forw Del  Dyn  RReg Ext
                Domain: contoso.com
                   GP2010-A                     FAIL WARN PASS PASS PASS PASS n/a 
             ......................... contoso.com failed test DNS

    Hi,
    TEST: Basic (Basc)
                      Warning: Adapter 00:0D:3A:00:0D:01 has dynamic IP address
                      (can be a misconfiguration)
    Do you have any NIC conifgured to get dynamic IP on your DC which is having issue? If yes, please disable that NIC. Also, please provide me the result of the below
    1) On your DC which is having issue, run "ipconfig /all"
    2) Repadmin /showrepl
    Thanks,
    Umesh.S.K
    Thanks, there is only 1 nic card. It is getting a dhcp address because this is an AZURE Hyper-v machine and I have set an IP reservation for it. I have no way to hardcode the IP because it gets shut off/on all the time
    C:\Users\Administrator>repadmin /showrepl
    Repadmin: running command /showrepl against full DC localhost
    Default-First-Site-Name\GP2010-A
    DSA Options: IS_GC
    Site Options: (none)
    DSA object GUID: 007c755c-f56c-4e51-a211-fd4431f63927
    DSA invocationID: 007c755c-f56c-4e51-a211-fd4431f63927

  • User cannot access Crystal reports after user was deleted and recreated

    We are using Crystal Enterprise XIr2.  We are using Windows AD authentication.  We had an issue with a user where they were deleted in Active Directory.  Now they can no longer run Crystal reports.  When I go into the CMC and open users I see this user.  When I try to open this user I get the following error
    There was an error while retrieving data from the server: Active Directory Authentication failed to get the Active Directory groups for the account with ID "8B003DF11D45B244AC3B61AB36B6C445:ALLENDG". Please make sure this account is valid and belongs to an accessible domain.
    I think Crystal is still trying to access the user's old Active Directory account.
    I cannot delete the user either in CMC.
    Is there someway I can correct this user.
    Thanks
    Adam

    Arjun - Thank you for your help.  I looked in Central Management Console but I could not find what you indicated.
    CMC--> Public Folder --> Administration Tools
    In administration tool, there are two objects
    1) Update Windows AD Group Graph
    2) Update Windows AD Group Graph and Aliases --> Right click on this Report and click on RUN Now.
    I ended up deleting the records for this user in these SQL tables and then user could access InfoView
    CMS_Aliases5 (2 records for this user)
    CMS_InfoObjects5 (1 record with both aliases)

  • My Documents have disappeared since upgrade to iOS 8 in pages - as I use them every day this is an emergency. I seem to activated cloud drive which now means I cannot access my documents  -  why no warning?

    ssince installing iiOS 8 and clod drive I have lost the link to Mac micro and all my pages documemts! This is an emergency!

    It seems as if the two systems need to be installed together, i.e. Yosemite and IOS 8.
    However, like you, I have installed IOS 8 on my iPad and iPhone, and now I find I cannot access my Pages, Keynote, Numbers and MacFamilyTree documents on my iMac and MacBook Pro until Yosemite is released.
    Apple have trumpeted the closer integration of the two operating systems, yet they have not released the two simultaneously. This is going to cause a lot of problems for users of iCloud, and seems to be an own goal for Apple.

  • Multiple Users CANNOT access folders

    I recently created multiple users on my IMAC G4 (10.3.9). The additional users CAN access applications when logged in to their individual accounts. They CANNOT create new folders or access USB drives. The new folder command is dimmed. Recommendations?
    Thanks!

    Hi Appleallie, and a warm welcome to the forums!
    From the Account that can, in the Finder, do a Get info on the places/locations/drives that the others cannot access/ create in, report the 3 Permissions at the bottom.

  • [Solved] Non-root user cannot access mounted ntfs filesystem

    Hi -,
    i have a dualboot system (arch/xfce + win7) and i use a ntfs partition /dev/sda2 to store files i use with both operating systems. I added the partition to fstab and it gets mounted, but i cannot access it with my non-root user. With root it works fine...
    My fstab:
    # cat /etc/fstab
    # /etc/fstab: static file system information
    # <file system> <dir> <type> <options> <dump> <pass>
    tmpfs /tmp tmpfs nodev,nosuid 0 0
    LABEL=home /home ext4 defaults 0 1
    LABEL=root / ext4 defaults 0 1
    LABEL=swap swap swap defaults 0 0
    /dev/sda2 /media/sda2 ntfs defaults 0 2
    Is there any option that allows all users to use the mounted device? Or how is this usually done ...
    Last edited by muzzel (2012-05-30 20:39:58)

    See: NTFS-3G for important setup information.
    My fstab line looks like:
    /dev/sdb1 /media/Win_USB ntfs-3g uid=1000,gid=users,fmask=113,dmask=0022 0 0
    This sets up some important parameters which the NTFS-3G Wiki Page covers.  Basically, "ntfs" is only a basic driver and is built into the kernel.  "ntfs-3g" is a much better, and less disk-eating, driver that you should install and use if you need the drive in Linux any more than occasionally.  My fstab line makes my user (1000) the owner and the masks lets me write and etc to it.  When you install NTFS-3G it is automatically used when you use the mount command to mount NTFS drives.  In fstab, as above, you would specify it explicitly.
    You can find your own user number by entering "id" at a terminal.

Maybe you are looking for

  • Cannot access photos on the phone - iPhone 3G 16GB

    Hi there I am no longer able to access the photos on my phone - even though I have a suspicion they still exist. Background info as follows: I was transferring photos from my iPhone 3G recently to my WinXP PC at work, I had about 200-odd photos (quit

  • Error in Activating Community site feature

    Hi, I'd like to ask anyone if they encounter this problem. I received an error while activating a feature called community site feature. this is strange because i was able to start this feature in my other site collection. Thanks. JD

  • Add New Device to Zone Cluster without Reboot

    We have a zone cluster running Oracle RAC on it. We need to ass new did device for use of Oracle RAC. How can I add a new did device with out rebooting the zone cluster? Edited by: klkumar10 on Jan 5, 2011 9:41 PM

  • BAPi for PR create

    Dear Experts , I am searching the BAPi for purchase requisition create for enjoy transaction ( ME51N ) . I have found the BAPi "BAPI_PR_CREATE" . But I am using it at SAP ECC 4.6 so here it is giving error that BAPi doesn't exist . Suggest me........

  • Configuring discoverer viewer

    Hi, I'm trying to customize the layout of discoverer viewer (10g) in OEM. Specifically, I'm trying to remove the 'send as email' option. I go to the customization tab, and select 'layout', then go to the action links, and uncheck 'send as email'. How