samba - Oct 2012 - Samba4: Folder Redirection GPO not working with Windows 7

Hi
I have folder redirection working fine in XP. I see that W7 has taken 
the same configuration as I made in XP. Here is a screenshot:
  http://dl.dropbox.com/u/45150875/gpo.png

Unfortunately, on w7, whilst the roaming profile is correctly set, there 
is no folder redirection. Nothing appears in the \\hh1\USERS folder for 
the user who has logged in.

Upon opening the GPO editor as Administrator in W7, I get an error 
message about AD and sysvol permissions:

'The permissions for this GPO in the SYSVOL folder are inconsistent with 
those in ctive Directory. (...) To change the SYSVOL permissions to 
those in Active Directory, click OK.'

Clicking OK gives 'Access is Denied. I then ran samba-tool ntacl 
sysvolreset and restarted the GPO editor. It then opened without the 
error:) The settings appear exactly as I set them on XP but are not 
honoured in W7.

The share for the redirected folders says it's offline. There is an 
offline tab where the security tab normally is under the share 
properties. Relevant?

Can anyone help me trace what's wrong?
Cheers,
Steve

On 06/10/12 17:11, steve wrote:
> Hi
> I have folder redirection working fine in XP. I see that W7 has taken
> the same configuration as I made in XP. Here is a screenshot:
>   http://dl.dropbox.com/u/45150875/gpo.png
>
> Unfortunately, on w7, whilst the roaming profile is correctly set, there
> is no folder redirection. Nothing appears in the \\hh1\USERS folder for
> the user who has logged in.
>
> Upon opening the GPO editor as Administrator in W7, I get an error
> message about AD and sysvol permissions:
>
> 'The permissions for this GPO in the SYSVOL folder are inconsistent
with
> those in ctive Directory. (...) To change the SYSVOL permissions to
> those in Active Directory, click OK.'
>
> Clicking OK gives 'Access is Denied. I then ran samba-tool ntacl
> sysvolreset and restarted the GPO editor. It then opened without the
> error:) The settings appear exactly as I set them on XP but are not
> honoured in W7.
>
> The share for the redirected folders says it's offline. There is an
> offline tab where the security tab normally is under the share
> properties. Relevant?
>
> Can anyone help me trace what's wrong?
> Cheers,
> Steve
Further tests show using the windows 'set' command, that the policy is 
only being applied to Administrator. IOW, 'APPDATA' is being redirected 
to the server. Everyone else still has the local Roaming folder for appdata.

I have run gpupdate /force but still no folder redirection for users.
Thanks,
Steve