Oto kompletna treść posta w języku angielskim, gotowa do skopiowania i wklejenia na forum community.nethserver.org. Zawiera wszystkie techniczne szczegóły, które wspólnie ustaliliśmy.
Subject: Folder Redirection (Error 0x1001/0x9001) on NS8 Samba - Works for Domain Admin, fails for regular user
Hi everyone,
I’m struggling with Folder Redirection GPO on NethServer 8 (running on Rocky Linux host). I’ve reached a point where the user folder is created, but the redirection fails with errors 0x1001 and 0x9001 in Windows Event Viewer for regular users.
My Setup:
-
Server: NethServer 8 (Stable) on Rocky Linux.
-
Client: Windows 11 Pro joined to the domain.
-
GPO Path:
\\192.168.0.53\profil\%USERNAME% -
GPO Settings: “Grant exclusive rights” is OFF, “Move contents” is OFF (for testing).
The Behavior:
-
As Domain Administrator: Folder Redirection works perfectly. Folders are created, and the policy applies without any issues.
-
As Regular User (e.g., “szymon2”): The system successfully creates the folder
\\192.168.0.53\profil\szymon2, but the redirection fails. The subfolder remains empty (no Desktop/Documents folders inside) and the user gets “Access Denied” when trying to enter their own folder.
Windows Event Viewer shows: “Failed to apply policy. Error: Can’t copy files… ErrorDetails: The copy function cannot be used.” (Error 502 / 0x1001).
Current Share ACLs (as seen from Windows):
-
NT AUTHORITY\SYSTEM: Full access
-
NT AUTHORITY\NETWORK: Special
-
Users: Full access
-
Domain Users: Full access
-
BUILTIN\Administrators: Full access
Current Permissions on Rocky Linux (host): The shared directory profil has the following attributes (note the ID 1005 which seems to be the mapped ID for domain users):
Bash
# ls -ln
drwxrwsr-x+ 1005 1005 profil
# getfacl profil
# file: profil
# owner: 1005
# group: 1005
# flags: -s-
user::rwx
group::rwx
group:1005:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:1005:rwx
default:mask::rwx
default:other::---
What I’ve tried so far:
-
Resetting the CSC cache on Windows (FormatDatabase registry key).
-
Setting
chmod 777andchown 1005:1005on the host. -
Forcing inheritance from the parent
profilfolder via Windows Advanced Security tab.
It seems like when a regular user creates the directory via GPO, the resulting permissions/ownership are not being set correctly by the NS8 Samba container (unlike for the Administrator).
Has anyone successfully configured Folder Redirection on NS8 for regular users? Are there any specific VFS settings or smb.conf tweaks needed to handle subfolder creation and ownership properly?
Thanks in advance for any help!