Windows

Windows Server 2019 – Desktop path for all users redirected to System32 \ SystemProfile \ Desktop

I've got a strange request a few days ago regarding users getting a prompt about their Desktop location pointing to C:\Windows\system32\config\systemprofile\Desktop on freshly installed Windows Server 2019. It only happened when the user was using Save As functionality.

A bigger issue was that this didn't just happen for one user. It was happening for all users, and this was an RDS server. It meant that I couldn't just recreate user profile and forget about it. This was an issue every single user had. I started going thru usual suspects in such scenario:

Quick check for Desktop profile path  in File Explorer – Correct

Registry entries verification in HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders – Correct

Variables verification – Correct

And yet all users including myself had this problem. I've scanned thru google but haven't had any luck. Most of the issues were related to old Windows 10 1803 faulty patch or generally desktop-based systems, and every lead was a dead end.

How do I fix it?

I was a bit out of ideas and was thinking that rebuilding the whole server is my only option. After all, at some point, you start wasting more hours than it takes to build a new server from scratch. Fortunately, I won't have to do it. It seems that Ransomeware protection is responsible for my misery. It's a new feature in Windows 2019 and in Windows 10 1809 but it's also a feature that needs to be configured properly.

By default this feature is disabled, and someone has turned it on with default settings thinking it solves all the problems.

Turning it off makes the error of non-existing redirection to C:\Windows\system32\config\systemprofile\Desktop go away. I wish Microsoft would give better notification to a user when such a thing happens. It took me a while to understand what is happening and it wasn't that obvious. It was a bit harder because it wasn't me who configured this feature, so I didn't know it's even on. But from now on it's something on my checklist to verify any issues I get with Windows Server 2019. New server version brings built-in antivirus and ransomware protection. It's a significant improvement to the system since you don't have to worry about AV anymore. While antivirus works out of the box, ransomware protection requires some configuration. As Microsoft puts it “Most of your apps will be allowed by Controlled folder access without adding them here. Apps determined by Microsoft as friendly are always allowed.”. So while some apps on the server worked correctly, others didn't, and there was no clear way to tell why the error happens from the message presented to the user.

This post was last modified on %s = human-readable time difference 11:43

Przemyslaw Klys

System Architect with over 14 years of experience in the IT field. Skilled, among others, in Active Directory, Microsoft Exchange and Office 365. Profoundly interested in PowerShell. Software geek.

Share
Published by
Przemyslaw Klys

Recent Posts

Upgrade Azure Active Directory Connect fails with unexpected error

Today, I made the decision to upgrade my test environment and update the version of…

1 miesiąc ago

Mastering Active Directory Hygiene: Automating Stale Computer Cleanup with CleanupMonster

Have you ever looked at your Active Directory and wondered, "Why do I still have…

2 miesiące ago

Active Directory Replication Summary to your Email or Microsoft Teams

Active Directory replication is a critical process that ensures the consistent and up-to-date state of…

7 miesięcy ago

Syncing Global Address List (GAL) to personal contacts and between Office 365 tenants with PowerShell

Hey there! Today, I wanted to introduce you to one of the small but excellent…

11 miesięcy ago

Active Directory Health Check using Microsoft Entra Connect Health Service

Active Directory (AD) is crucial in managing identities and resources within an organization. Ensuring its…

1 rok ago

Seamless HTML Report Creation: Harness the Power of Markdown with PSWriteHTML PowerShell Module

In today's digital age, the ability to create compelling and informative HTML reports and documents…

1 rok ago