+ Post New Thread
Results 1 to 7 of 7
Windows 7 Thread, Mandatory Desktop and Item Level Targetting in Technical; Good morning, We have a mandatory desktop which is a redirected folder. Permissions are that staff cannot write or modify ...
  1. #1

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,271
    Thank Post
    965
    Thanked 325 Times in 193 Posts
    Blog Entries
    11
    Rep Power
    165

    Mandatory Desktop and Item Level Targetting

    Good morning,

    We have a mandatory desktop which is a redirected folder. Permissions are that staff cannot write or modify this desktop. Every staff has the same (you guys know what I mean).

    Now I have used GPP to create a shortcut on that desktop for SIMS. I've used Item Level Targetting for machines in the SIMS security group to receive that icon yet because they are mandatory desktops with no write access the shortcut does not appear.

    If I change security to write/modify then the icon is created - but the staff member can add new icons and files which get saved back to the server. Naturally we do not want this.

    Is there anyway item level targetting and shortcut creation will work without modify/write permissions?

    Cheers

    Gareth

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,265
    Thank Post
    242
    Thanked 1,575 Times in 1,254 Posts
    Rep Power
    341
    Folder Redirection will allow you to do this, but that's different from GPP of course.

  3. #3

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,271
    Thank Post
    965
    Thanked 325 Times in 193 Posts
    Blog Entries
    11
    Rep Power
    165
    Yes - but we want to use one set of folder redirection directories and then add icons if a user or machine is part of a security group. This would save having hundreds of different folders for various desktops and users.

    For example we could have one simple redirected desktop but then various GPP settings for DT machines that are part of the DT security group - which then places DT icons on the desktop. The same with ICT - ICT icons on the desktop and so on for different subjects.

    Cheers

    Gareth

  4. #4

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,265
    Thank Post
    242
    Thanked 1,575 Times in 1,254 Posts
    Rep Power
    341
    I don't think you're going to win this however, as GPP is generally applied in the user's context. Folder Redirection is applied as a System context, allowing you to apply permissions as required.

  5. #5
    cromertech's Avatar
    Join Date
    Dec 2007
    Location
    Cromer by the coast
    Posts
    731
    Thank Post
    177
    Thanked 109 Times in 97 Posts
    Rep Power
    54
    If you only want to do this for machines and not users can you use the public desktop? Use GPP in the machine context instead and add your shortcuts in a separate gpo for the group of machines you want them to apply to

  6. #6

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,271
    Thank Post
    965
    Thanked 325 Times in 193 Posts
    Blog Entries
    11
    Rep Power
    165
    Shared desktop location and GPO for shortcuts on desktop - this page tells me it cannot be done in a user context by design.

    Gareth

  7. #7

    Join Date
    Jan 2009
    Location
    United Kingdom
    Posts
    230
    Thank Post
    22
    Thanked 9 Times in 9 Posts
    Rep Power
    13
    How about using gpp to add application/department specific icons to the start menu?
    Or how about redirecting to a local folder on each machine, for students, and for staff, e.g. C:\pupildesktop and c:\staffdesktop then depending on location, add the necessary shortcuts for each app to those locations. The desktop locations could exist on all workstations. Create a gpo for each department (e.g. D+t apps) and add the gpp shortcuts to the gpo to the c:\pupildesktop and c:\staffdesktop respectively.

    Hope this helps
    Mark

SHARE:
+ Post New Thread

Similar Threads

  1. Item Level Targetting
    By Michael in forum Windows Server 2008 R2
    Replies: 12
    Last Post: 27th October 2011, 10:50 AM
  2. Mandatory Profiles and Desktops
    By faza in forum Wireless Networks
    Replies: 14
    Last Post: 19th December 2007, 11:05 AM
  3. Mandatory Profiles and Macros
    By Midget in forum Windows
    Replies: 3
    Last Post: 24th January 2007, 05:07 PM
  4. Mandatory profile and GPO settings
    By windy in forum Wireless Networks
    Replies: 14
    Last Post: 7th April 2006, 11:17 AM
  5. Replies: 61
    Last Post: 14th November 2005, 08:27 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •