During user log on, the Application event log records:
Event Type: Error
Event Source: Folder Redirection
Event Category: None
Event ID: 102
Date: MM/DD/YYYY
Time: HH:MM:SS
User: <Domain Name\User Name>
Computer: <Computer Name>
Description: Failed to perform redirection of folder My Documents.
The files for the redirected folder could not be moved to the new location.
The folder is configured to be redirected to \\servername\sharename\%username%.
Files were being moved from C:\Documents and Settings\<UserName>\My Documents to \\servername\sharename\<UserName>.
The following error occurred: The security descriptor structure is invalid.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: MM/DD/YYYY
Time: HH:MM:SS
User: Nt Authority\System
Computer: <Computer Name>
Description: The Group Policy client-side extension Folder Redirection was passed flags (0)
and returned a failure status code of (1338).
When you type net helpmsg 1338, you receive The security descriptor structure is invalid.
This behavior will occur if the permissions at the folder redirection destination are too restrictive.
To workaround this behavior, grant the System account FULL CONTROL on the destination folder and sub-folders.
NOTE: When a user first logs on after the folder redirection policy has been enabled, the destination folder is automatically created with the System account being granted FULL CONTROL and the user account being granted ownership. Sub-folders are granted permissions via inheritance.
NOTE: See How can I insure that administrators have access to a user's redirected folder?
