Tidying up My docs on Win 7

[Little-Miss]

Got rid of a lot of the crap I don't need/want. (Control panel icon wont go but that's another issue).

So i log in as my test student S1. Got the S1 document icon in the corner of desktop but unfortunately it's got things in there I don't want as it just confuses peeps. Like Saved Games, searches, links, contacts, desktop and then it contains another S1 folder which looks like a redirected one.

I basically just want to either get rid of it, or let it take me straight into the redirected documents folder.

Clicking the S1 link on the start menu does the same thing too...

[sonofsanta]

Use group policy preferences to hide them.

For each of these folders:
gppHideDuplicates.png
Update them and tick the Hidden attribute.
gppHideDuplicates2.png
You need to tick the "Run in logged-on user's security context" on the Common tab as well.

Neater than removing them, and lets you hide the duplicate Documents folder as well, as that can't be deleted.

Holler if you need me to expand on that anymore!

[Little-Miss]

Ooh trying it now..

[gshaw]

I know the one you mean, hide it in two places:

- remove user folder link from Start Menu GPO (takes the name out the Start Menu)
- hide user folder on desktop GPO via GPP registry keys e.g. User folder icon on desktop

That way your Start Menu only shows the Documents, Pictures etc links and never takes you to the local profile folder

[sonofsanta]

I quite like having the User Folder Link on the start menu, as it's an easy way of seeing who's logged on at a computer personal preference that though.

If you do leave it there though, you need to set the following group policy:
User Config > Policies > Admin Templates > Windows Components > Windows Explorer > Prevent users from adding files to the root of their Users Files folder - Enabled
Otherwise people can save in that folder, but said folder only exists locally and will be deleted if their profile is ever removed from the machine (which Win7 does automatically after a certain number of unique logins have passed).

There's also a reg key worth setting to stop people having access to this User Root in the Save As dialog. This is a few steps long, I fear, but not too bad.
Download SetACL from Download | Helge Klein | Home of SetACL and save it to a shared location - so we have a shared folder caled AppShared for programs run on the server, and I put it there.
In a GPO, set the following code to run as a startup script:

call "SHARED_FOLDER\SetACL.exe" -on "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\ShellFolder" -ot reg -actn ace -ace "n:SYSTEM;p:full"

(change SHARED_FOLDER to the relevant path)
Then under Computer > Preferences > Windows Setting > Registry, set the following key:
userRootRegKey.png
That key path you can't quite read is

SOFTWARE\Wow6432Node\Classes\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\ShellFolder

This is based on the instructions @ Hide User Folder on Save as Dialog Box - TechNet Forum Windows 7 Support Team - Site Home - TechNet Blogs but modified to let you do it automatically on startup.

Hope that helps!

[Little-Miss]

Hmmm still struggling with your first bit @sonofsanta.

Should this show up in RSOP if its been successful?

[sonofsanta]

Hmmm still struggling with your first bit @sonofsanta.

Should this show up in RSOP if its been successful?

RSOP can't handle group policy preferences, you have to use Group Policy Modelling instead now (it's part of the Group Policy Management snap-in, so underneath where your domain is listed and where you set all your GPOs, there's an icon for GPM; right click on that and run the wizard. Similar to RSOP though)

Did you remember the logged on context tick box?

[Little-Miss]

oooh, i thought that might be the case... ooh thats clever!!

Doesnt look like it failed, its listed as applied.

I didnt tick the box the first time around if im honest, but even when i did it still hasnt removed anything. I havent had much luck with applying registry things also so wondering if i have a bigger issue.

[sonofsanta]

I'm not sure tbh, I can't remember any particular problems implementing that lot.

If you set up a GPP to copy a random text file from $network to C:\somewhere\, does it work? Might be worth testing if that much works for you...

[Little-Miss]

ok, i may be messing up a simple thing here...

I've asked it to copy a file from \\server\staff common\me and put it in c:\program files for the hell of it.

Havent had much luck so far. Is it how im trying to do it?

[sonofsanta]

ok, i may be messing up a simple thing here...

I've asked it to copy a file from \\server\staff common\me and put it in c:\program files for the hell of it.

Havent had much luck so far. Is it how im trying to do it?

If it's a file you need to give it the full file path, not just the folder path - i.e. \\server\share\file.txt to c:\program files\file.txt, as opposed to \\server\share\ to c:\program files\

Always catches me out!

[Little-Miss]

hmmm i didn't put the file.txt at the end of its destination, but still nothing....

[Little-Miss]

This is really weird....the test GPO doesn't display in the GPM either....

[sonofsanta]

So all your GPOs are applying, but not your GPPs?

Not that I have any idea what is going wrong for you if that is the case, but still, narrows it down for others to leap in and heroically save the day.

[Little-Miss]

that's pretty much it....

confuzzled. May Google it and then make new thread as people aren't going to look here.