+ Post New Thread
Results 1 to 4 of 4
Windows 7 Thread, Desktop Redirection using Security Groups - not working as XP :( in Technical; Slight conundrum here..... Currently testing win7 and building up policies from scratch and using WMI filtering. Servers are 2003 DC's ...
  1. #1
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,254
    Thank Post
    75
    Thanked 45 Times in 31 Posts
    Rep Power
    30

    Desktop Redirection using Security Groups - not working as XP :(

    Slight conundrum here.....

    Currently testing win7 and building up policies from scratch and using WMI filtering.

    Servers are 2003 DC's and I am running a win7 machine to create the policies.

    I created a desktop redirection policy as per our XP version and logged in as a student and it successfully gives the correct desktop for students. I don't worry about the start menu as I redirect that to the same "location".

    I am using Security Groups ie the setting "Advanced - Specify locations for various user groups"

    Domain\Pupils - path = \\server\pupils\desktop
    Domain\Staff - path = \\server\staff\desktop

    This is exactly as it is set in XP but on my Win7 test PC the test teacher logon gets the pupil desktop.

    Pupils are in the following security groups: Domain Users & Pupils
    Staff are in : Domain Users, Pupils & Staff

    It's as if the policy is seeing that the staff are in the Pupils Security group but not "seeing" like XP does that the Staff Security group should take priority...

    Any ideas?

  2. #2

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    569
    Thank Post
    38
    Thanked 114 Times in 104 Posts
    Rep Power
    45
    Only resolution I could think of is to have two separate GPOs and use the GPO targetting for pupils/staff to do this - then stick the staff gpo at higher priority in group policy management. When you've got staff in the pupils group you're going to hit this issue - any reason for them being in this?

  3. #3
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,254
    Thank Post
    75
    Thanked 45 Times in 31 Posts
    Rep Power
    30
    tbh I think it's historic and has presumably sorted problems in the past - I am reluctant to change this as it may have a detrimental effect on current operation of our existing XP clients...

    good idea about 2 GPO's targetting the specific groups - first though I am going to try disabling all other GPO's except the redirection one to see what happens.

    I wonder how come XP works then? lol how does it KNOW to set the staff desktop based on the "higher" staff group - must be a setting somewhere - I am sure it's not just choosing it at random....

    Hmmmm

  4. #4

    Join Date
    Feb 2011
    Posts
    77
    Thank Post
    6
    Thanked 22 Times in 13 Posts
    Rep Power
    10
    We used the WMi filtering to direct windows 7 policys seperate to windows xp. When we started adding windows 7 PC's we had no filtering. After setting it up i made sure all the original policies were filtered for xp and then made new ones for windows 7 and filtered them to 7 (we skipped vista) This has worked fine for us so hopefully u should be ok too.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 15
    Last Post: 2nd February 2011, 01:08 PM
  2. Replies: 3
    Last Post: 10th September 2010, 07:27 AM
  3. Drive Mappings and Security Groups
    By garethedmondson in forum Windows 7
    Replies: 1
    Last Post: 30th June 2010, 11:49 AM
  4. Dansguardian, NTLM & security groups
    By j17sparky in forum Internet Related/Filtering/Firewall
    Replies: 3
    Last Post: 21st September 2009, 02:53 PM
  5. Security Groups in 2003
    By SpuffMonkey in forum Windows
    Replies: 1
    Last Post: 19th July 2006, 11:18 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •