Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 502 Source: FolderRedirection

Level
Description
Failed to apply policy and redirect folder "<folder name>" to "<path>".
Redirection options=9211.
The following error occurred: "<error message>".
Error details: "<error details>".
Comments
 
Our issue was caused by a Microsoft update (KB2640148) in our Windows 2008 R2 domain on 2008 R2 shared folders for Windows 7 Pro x64 clients.

We uninstalled the update and cleaned up the registry left behind on the client. Others have reported the need to uninstall an additional Microsoft update (KB980408).

Our fix performed on affected client computers only:
1- Uninstall KB2640148 via WSUS or individual computer
2- Remove the following registry entries. (Note: Always backup registry keys before removal)  I made a batch script and then put into our login script for a week to clear things up.

Registry Code:
Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}\PropertyBag]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}\PropertyBag]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}\PropertyBag]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}\PropertyBag]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}\PropertyBag]
For me this was a simple permissions issue. I gave the user full access to the folder and stopped receiving the event in my terminal server logs.
The error in my case was: "Failed to apply policy and redirect folder "<folder name>" to "<path>".
Redirection options=80009231.
The following error occurred: "Can not create folder "<path>"".
Error details: "This security ID may not be assigned as the owner of this object.".

When I looked at the properties of the folder, it had Admin as the owner instead of the user, so I changed the owner to be the user.
I was seeing this error in several windows Vista environments where folder redirection was being used. Upon giving the user ownership of their redirected folder, the error disappeared.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...