Little-Miss Posted January 15, 2014 Posted January 15, 2014 Ok, this is where I am so far. I'm running Windows 8.1 Enterprise. I've pulled the AMDX's from the Client because I didn't get what I needed from the MSI downloaded from MS. I created an XML file of the customised Start Screen using Powershell Have placed said XML file in a share on the network. I placed it in the file share that users get their desktop icons from as they have access to his folder. As these are the only Win8's I have, I created a GPO in the computer OU and have changed that accordingly. Problem is, only my domain administrator account is picking it up at the moment. This makes me think permissions... I've created a new share and have opened it up to everyone for now....still doesn't seem to work. Any suggestions? All I get at the moment is the Sound Recorder tile...
cromertech Posted January 15, 2014 Posted January 15, 2014 Have you checked the file permissions on the actual xml file itself? Which account did you use to create the xml file in the first place. I used a local machine account to do this but I'm unsure if using a domain account will give you a different file. I placed mine in the netlogon share for the domain as I was guaranteed everyone has read access there. 1
Little-Miss Posted January 15, 2014 Author Posted January 15, 2014 (edited) I have had it in netlogon as well but it just doesn't seem to work. What would you expect the see permission wise on the file? edit: pretty sure I used local Admin to make it.... Edited January 15, 2014 by Little-Miss
cromertech Posted January 15, 2014 Posted January 15, 2014 I would expect to see the file inheriting permissions but stranger things have happened. I've just been back to my setup and I did use a domain user to create the layout. Made a user account just for this purpose with domain admin rights so that they were able to elevate the powershell prompt. Last thing to look at is if you have the group policy set to remove the all users start menu folders. (user setting/admin templates/start menu & taskbar/remove common program folders from the start menu) A lot of the tiles will relate to the all users start menu and if this setting is on they disappear. This caught me out as the resulting start layout had no desktop, pc or IE tiles.
Little-Miss Posted January 15, 2014 Author Posted January 15, 2014 The only others I've messed with were: Prohibit access to Control Panel and PC settings Enabled Hide Network Locations icon on desktop I've unconfigured them just to test but it doesn't seem to make a difference. Grr...
cromertech Posted January 15, 2014 Posted January 15, 2014 Only other thing I can think of at the moment is are you able to open the xml file and edit it? I had this problem when I didn't specify the file type to be XML on the command line so I ended up with a bin file with an xml extension.
Little-Miss Posted January 15, 2014 Author Posted January 15, 2014 Oh will check that too. Thanks for your help so far. Feel like I'm so close to cracking this!
FN-GM Posted January 15, 2014 Posted January 15, 2014 I would store the file locally. It will put less stress on the network and make things a little better. Actually might sort your issues out.
Little-Miss Posted January 15, 2014 Author Posted January 15, 2014 I was wondering if I could use a script to pop it on the machine locally, but I'd like to try and get it working this way first.
Little-Miss Posted January 16, 2014 Author Posted January 16, 2014 Right, if try to edit it, it opens in notepad with the extention XML, so i'm guessing that's all good. I've set it as a Computer configuration...that's ok isnt it? Authenticated Users having read/read&execute permissions on the file is enough isn't it? Mines sat in the netlogon share, i would've thought permission would've been inherited....
cromertech Posted January 16, 2014 Posted January 16, 2014 Right, if try to edit it, it opens in notepad with the extention XML, so i'm guessing that's all good. And you get proper notation? i.e. you can actually read what it says? I've set it as a Computer configuration...that's ok isnt it? I have mine set as user options but will test with the computer config side too Authenticated Users having read/read&execute permissions on the file is enough isn't it? Mines sat in the netlogon share, i would've thought permission would've been inherited.... That seems to be fine.
beany1 Posted January 16, 2014 Posted January 16, 2014 All I get at the moment is the Sound Recorder tile... By that do you mean ordinary users are getting the Sound Recorder tile from the XML? If so that sounds like its more to do with the links in the XML rather than permissions...
cromertech Posted January 16, 2014 Posted January 16, 2014 I can't get it to work at all as a Computer setting only as a user one.
Little-Miss Posted January 16, 2014 Author Posted January 16, 2014 By that do you mean ordinary users are getting the Sound Recorder tile from the XML? If so that sounds like its more to do with the links in the XML rather than permissions... Sorry, yes. When i log on as a student, they only recieve the sound recorder tile. Which is a step up from nothing at all. I can't get it to work at all as a Computer setting only as a user one. Ohhh......let me try it the other way. Oh the XML, when opened in notepad. It's not formated, but still in english
SYNACK Posted January 16, 2014 Posted January 16, 2014 It will only show the apps that are installed. I got it going but I pointed to it in the user goo as it does not apply to w7 or lower so makes no odds to the existing setup.
Little-Miss Posted January 16, 2014 Author Posted January 16, 2014 Some of these programs are installed locally, like Office. I still don't get why Domain admin account will see the customised Start screen but any other account doesn't...just the sound recorder tile..
Little-Miss Posted January 16, 2014 Author Posted January 16, 2014 Just cus i know you're sooooooooo enjoying this thread, i'll let you know where i am now. So still nothing for a domain user. I get everything for domain adminstrator. Just for the crack, i logged on using my account that i use to log into my workstation (admin rights) and that picked up the screen too. This is why i keep going back to permissions...it's not like the machine isn't pulling the Start Screen down, so that bits all good. It's like there's something in the middle blocking it. Does that make sense or have i completely lost the plot?
Michael Posted January 16, 2014 Posted January 16, 2014 Create a share called ICONS2, then apply the following permissions: Everyone - Read & Execute CREATOR OWNER - Full Control Authenticated Users - Read & Execute SYSTEM - Full Control Domain Admins - Full Control Administrators - Full Control This is what I set for Folder Redirection for Windows 7. I suspect the permissions will be the same/similar, so copy/paste your XML file here and leave Netlogon alone!
Little-Miss Posted January 16, 2014 Author Posted January 16, 2014 Ha! Don't worry, i'm not touched Netlogon. Most I've done it plonk the file in there...
Little-Miss Posted January 16, 2014 Author Posted January 16, 2014 same issue... I seem to have gained internet explorer though.. (that happened before setting up the new share...)
Michael Posted January 16, 2014 Posted January 16, 2014 According to this link the XML can be located locally or on a file share. Try specifying the FQDN as the path using the Start Screen Layout GPO - Such as: \\Servername.pri\ICONS2\filename.xml User Config > Policies > Admin Templates > Start Menu and Taskbar - Start Screen Layout 1
HenryJr Posted January 17, 2014 Posted January 17, 2014 Sounds like its seeing what it needs on the Server, just doesn't have permission to do it locally. Perhaps test to see what happens if you give Domain Users and Everyone local admin rights?
Little-Miss Posted January 22, 2014 Author Posted January 22, 2014 I ended up getting another set of eyes on it and it resulted in my Curriculum GPO being rewritten. If I remember correctly it was something to do with the All Users folder. So I now have a start screen on all the PC's....but with missing tiles...
robjduk Posted February 27, 2014 Posted February 27, 2014 I'm having similar problems, did you ever find the exact cause? It's annoying because I did get it working on a test lab a while back but just failing at the moment... Really annoying.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now