Desktop Redirection

[Joanne]

Nursery have asked me if I can simplify their desktop - currently pupil desktops are redirected to a location on the server and I can add / remove shortcuts easily.

 

"No problem!" I said.

 

I created a security group called nursery.

I created a group policy called nursery settings.

I created a nursery folder in my redirection area and gave read and execute permissions and allowed this to propagate down.

In the GPO under desktop redirection I put in the correct path. I disabled granting exclusive rights, disabled move contents, enabled redirection on older systems, leave contents on removal behaviour. These are all the same as my pupil desktop which works fine.

The scope of the nursery settings gpo is applied to the nursery security group.

The nursery user is in an OU called pupils. The GPO is applied to this OU.

The nursery user is a member of Domain Users and the Nursery security group.

 

When I first logged on, I got the pupil desktop. I have since noticed that the GPO scope for pupil settings included Authenticated users. I have since removed this.

I have deleted the local profile on the machine I am testing on.

When I make changed I run gpupdate / force on the server and the machine.

When I run a gpresult it says which group policies are applied - one being a lightspeed policy is applied fine and is on the same OU as the nursery settings GPO.

 

It says The user is part of the following security groups:

ERROR: An unexpected error occured.

 

Does anyone have any extra things to try? Machine is Windows 10, Server is on 2008 R2, but if need be I can jump on the 2012 R2 box.

[Joanne]

When I log on, GPresult shows all of my security groups... so don't think this is a machine issue....

[Joanne]

Just tried logging in on the nursery machine (windows 7) and it returned the correct security groups on a gpresult, but didn't show the nursery settings GPO.

 

I've created a new OU and popped the user in there and applied the nursery settings to that OU and added authenticated users to the scope. We will see if that makes any difference.

[Joanne]

YESSSS! That worked!

[Koldov]

Hahaha!

 

Awesome self thread!

 

Well done!

[Joanne]

I got there in the end! Sometimes you just need to write everything down.