Desktop folder redirection

[kcalderw]

I'd like to setup a redirect for all students that gives them a set desktop (shortcuts) but that they're not allowed to change. Is it as simple as redirecting to a folder with the shortcuts in it?

[Jawloms]

And setting the file permissions correctly on where you're redirecting to. I have been in places where students rename things on a redirected desktop/start menu and it then appears on everybodies.

[kcalderw]

Good point.

[kcalderw]

So just change the attributes to read-only?

[KibosJ]

This is what we do, I have a policy to redirect their desktops to a share and give them read only access, works perfectly

[kcalderw]

This is what we do, I have a policy to redirect their desktops to a share and give them read only access, works perfectly

 

Did you just change the attributes using command prompt? I'm guessing I can just do attrib +R *.* (all files in the folder are for the redirect).

[snagrat]

Just set the folder permissions so your users only have read access. No need to set the files themselves to read only

[kcalderw]

Am I doing something wrong here?

 

Edited May 6, 2016 by kcalderw

[snagrat]

No looks good assuming that desktop path exists

[kcalderw]

It does, I was able to browse to it via the student profile. So they do have access. Just does not seem to be applying even after a gpupdate.

[KibosJ]

It does, I was able to browse to it via the student profile. So they do have access. Just does not seem to be applying even after a gpupdate.

 

That should work, what sharing permissions do you have set?

 

Try creating a new student profile and then logging in with that, does it apply then?

[kcalderw]

I originally had student security groups by grade. I made a new one for this that has ALL students. I added that group with read only permissions. See screenshot.

 

[kcalderw]

Would appreciate any suggestions on this issue.

[snagrat]

So what is actually happening when users log in?

Do you get an error or does it just not work?

 

Anything in eventvwr?

[kcalderw]

No errors, the bat file just doesn't run. Nothing in eventviewer either.

[snagrat]

Bat file?

 

This should all be do through group policy

[defrostie]

What are you using the .bat file for? You should be able to do what you require, all through the GPO.

 

Have you run 'rsop.msc' to see whether the GPO is applying successfully?

[kcalderw]

I posted screenshots earlier in the thread with my GPO settings and also the .bat file settings. Essentially each time a student logs in, the bat file will run and check if a file is present in a specified directory. If the file is missing or altered (upgrade) then the folder will be copied to their local profile.

[snagrat]

Sorry you have lost me regarding the bat file.

 

When student logs on GPO will set the desktop location to a share on a server. That's all that is required, no reason to run a bat file

[Gardinho]

You will need to add all of the students to a security group, then make that group the 'owner' of the folder, contents and files. I don't think it will work with just the ntfs permissions being set.

[kcalderw]

Sorry about that, getting my threads mixed up.

 

I do have a folder setup with shortcuts in it, however logging in as a student there is no redirect that takes place. I still get the standard local desktop.

[ITGURU]

This is what we do, I have a policy to redirect their desktops to a share and give them read only access, works perfectly

 

 

Same here, then if you delete/add any shortcuts to the redirected desktop , the immediately change on the students desktop without needing to log off or back on.

[snagrat]

Is the GPO linked to the correct OU?

[kcalderw]

OK I was able to get it working using loopback processing. However, I now have both the local desktop AND the redirected shortcuts appearing.

[free780]

You have to deny users access to c:\users\public\desktop.