Jump to content
Welcome to our new Citrix community!
  • 0

Issue with UPM and folder redirection


Martin Lauritzen

Question

Hi All you nice people

 

I have an issue im struggling to find out. I have a XenApp Version: 7.6.0.5029 in which I have enabled UPM. I want to have Desktop`s and Favorits to a different path than the UPM. I have setup policies for this aka. Desktop path policy and Redirection settings for desktop. I have created the share (Ctxdesktop) with everyone share permissions and ntfs rights as guided in this link.

 

http://www.carlstalhood.com/citrix-profile-management/

 

The issue that I have is that the folder is being created at the path for Ctxdesktop but it empty and not used, the one that is in effect is the desktop folder in the users ump profile. In the event viewer I get access is denied event ID 2007. I can't seem to find out what the issue is here so I was hoping some of you could maybe help ?

 

The Citrix Profile management Group Policy Extension could not redirect the folder 'Desktop' for user 'ADMIN\test2'.

 
Error code: '0x5': Access is denied.

 

Best regards

Martin

 

Link to comment

12 answers to this question

Recommended Posts

  • 0

This is an old post, but I'm running into the same error and it seems I'm trying to accomplish the same thing (redirect folders outside of folder where the profile is stored). I'm seeing duplicate folders where I expect them to be redirected, but content is still in the profile instead. I see eventid 2007 and "access denied" for each redirected folder. 

 

My question is what is being referred to here as the "Microsoft way" to redirect folders? I'm using the Citrix UPM admx (gpo\user\admin templates\citrix components\profileManagement\folderRedirection). Is this suggesting to not use this method (gpo) or not to use a Citrix policy or WEM for this? Should I instead be using (gpo\user\policies\windows settings\folder redirection)?

Link to comment
  • 0

The issue has been sorted out, which actually a bug feature within Microsoft Server OS.

You shall create a user gpo, to disable " Prohibit User from manually redirecting Profile Folders " As we usually want to restrict the users to be able to change the profile path, we actually need to re-enable to make Citrix policies to work. 

The policy is under:

 

User Configuration -> Administrative Templates -> 
Desktop and open Prohibit User from manually redirecting Profile Folders.

 

Further availabilities to make it happen: https://computerstepbystep.com/prohibit-user-from-manually-redirecting-profile-folders.html  Obviously you need to disable or set registry entries to 0

 

Hope, it will help for the ones, who struggled with this issue.

 

 

Link to comment
  • 0
14 hours ago, Adam Huszar1709158647 said:

@Adam,

Thank you for the updates, I faced the same issue and after disabling the setting you mentioned. The Citrix UPM folder redirection started working in my case.

Regards,

Sunil Srivastava



The issue has been sorted out, which actually a bug feature within Microsoft Server OS.

You shall create a user gpo, to disable " Prohibit User from manually redirecting Profile Folders " As we usually want to restrict the users to be able to change the profile path, we actually need to re-enable to make Citrix policies to work. 

The policy is under:

 

User Configuration -> Administrative Templates -> 
Desktop and open Prohibit User from manually redirecting Profile Folders.

 

Further availabilities to make it happen: https://computerstepbystep.com/prohibit-user-from-manually-redirecting-profile-folders.html  Obviously you need to disable or set registry entries to 0

 

Hope, it will help for the ones, who struggled with this issue.

 

 

 

Link to comment
  • 0

This issue is still valid and the solution also works like a charm.

We run into the same problem only for one particular delivery group which has User profiles configured with UPM with Citrix policy (XA7.15.4) on share A and My Documents redirected via Citrix policy again to Share B.

Users were getting the "Access Denied" error in the event logs but what is funny it was only affecting some users.

 

The problem seemed to be caused by our Security_Hardening GPO which was setting User Configuration -> Administrative Templates -> Desktop and open Prohibit User from manually redirecting Profile Folders to ENABLED.

Once we set the setting to DISABLED - the problem was solved.

It seems that the Windows Server GPO is treating the Citrix policy is if being executed in the User's context and thus blocking it when it tries to redirect the Documents folder.

 

Many thanks Adam, your post was a life saver :).

Citrix_Hardening.PNG

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...