Desktop folder redirection

[KibosJ]

You have to deny users access to c:\users\public\desktop.

 

You shouldn't have to :/

 

In our GPO I have a policy that redirects the desktop to a share I have created, the students have read only share and NTFS permissions and nothing else.

 

They are not the owner of any folders, they do not get the public desktop items and it just works.

 

I don't understand what is going wrong. Have you looked at the Group Policy logs on the client?

[kcalderw]

Nothing in Event Viewer to show that it wasn't processed.

 

This is from the Client:

https://drive.google.com/file/d/0B5WwyYQ7JxrsQjdVam5fb2dLREk/view?usp=sharing

Edited May 11, 2016 by kcalderw

[KibosJ]

Nothing in Event Viewer to show that it wasn't processed.

 

This is from the Client:

https://drive.google.com/file/d/0B5WwyYQ7JxrsQjdVam5fb2dLREk/view?usp=sharing

 

That's exactly how it is set here.

 

Could you also screenshot your advanced NTFS permissions for the folder and your share permissions on root of the share (\\FILESERVER\Data)?

[HBPS]

sounds like an issue i had a few years ago it was because in AD you still have a profile path for the students. so its combining both profile and redirected desktop

[kcalderw]

That's exactly how it is set here.

 

Could you also screenshot your advanced NTFS permissions for the folder and your share permissions on root of the share (\\FILESERVER\Data)?

 

Here is the folder:

[KibosJ]

Here is the folder:

[ATTACH=CONFIG]36734[/ATTACH]

What about the folders below that? Are they inheriting permissions from Data?

 

I'd also check what HBPS has said too.

[kcalderw]

Sorry which profile am I checking for students? The minecraft.bat file is in the root of this directory.

 

[KibosJ]

As far as I can see you have everything correct.

 

We apply permissions slight differently here, I have global and domain local groups and have a group for each share rather than user groups but it shouldn't really make any difference.

 

I'm sorry I can't be of much help :/

[HBPS]

this one here at the top

[kcalderw]

No those are empty for students.

[HBPS]

here's my setup that works here

[kcalderw]

[ATTACH=CONFIG]36750[/ATTACH] here's my setup that works here

 

I changed my settings to match yours exactly, and I'm still seeing the local desktop and the redirected one.

[HBPS]

ok had a quick google for you open the GPO for that user open user configuration > policies > administrative templates > Start Menu & task bar > and enable Remove common program groups from start menu..... this also covers what you need give it a try

[kcalderw]

Enabled it and it had no effect.

[Joanne]

set a script to delete things in C:\Users\Public\Desktop?

[HBPS]

Strange as it worked for me have you checked the client event logs after a gpupdate /force and relogged in

[kcalderw]

Don't ask why, but I did yet another gpupdate this morning (probably the 5th) and it's now working.

[HBPS]

winner glad you got it sorted

[mukz]

Don't ask why, but I did yet another gpupdate this morning (probably the 5th) and it's now working.

 

I know i'm late to the convo and sorry for reviving a dead conversation too, but out of interest what is your refresh policy time set to? and do you apply any local GPO's like i have seen in some schools?

[ITJS2015]

Im Sure classic shell needs to be enable with the users policy of your startup menu

 

Make sure that you can navigate to your folder through run on a desktop with permissions setup

 

Let me know if your still having issues