Disable saving to 'This PC'

[Koldov]

AKA: C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\Network Shortcuts

 

I seem to be having a lot of trouble locking down Windows 10!

 

Most of the Google hits I get for this, point to an issue with Office (2016 mostly), but I don't have that issue.

 

We have local profiles with redirected (read-only) documents (plus music, pictures and videos) and also the downloads folder.

 

Originally in Chrome I had to switch on 'ask where to save' as without this on, Scratch files were downloading without the user being able to rename.

 

Interestingly in the Chrome 'Advanced Settings' it shows \\SERVER\SHARE\USER\DOWNLOADS folder location, but I haven't found anywhere to change this (apart from the manual 'Change' button in the settings page - is there a GPO for this?). This doesn't stop the Original Problem - but might mitigate it.

 

Anyway, I have locked down everything so tightly that somehow even giving them permission to the re-directed download folder won't let them save to it....

 

So, somehow even if I switch off 'ask where to save' it still brings up a 'save as' style dialogue box!

 

This wouldn't be an issue as they can still click their Home Drive, but some of them are clicking on 'This PC' and saving there (we have quite young children)...

[fiza]

Did you find a solution for this?

[Koldov]

Unfortunately not!

 

I'm not sure if nobody else has this problem or they don't see it as a problem...

 

I've implemented as many workarounds, registry hacks and GPOs as I can find to stop them saving there (they can't navigate there and most Windows apps behave ok), but certain apps and browsers just seem to ignore these settings.

 

 

 

 

I would have Chrome set to auto-download to their home drives without asking, but then certain apps (such as Scratch) just download with a generic file name 'Scratch Project.sb3' ... so they need the 'Save As' dialogue.

 

But if they somehow click on 'This PC' and download, when they click on the download bar at the bottom it won't show them the file because it is obviously blocked!

 

 

[Arthur]

@Koldov, @fiza. I have found a fix.

 

It involves creating a CorrectFilePaths shim for each application you want to prevent saving to 'This PC'. What this does is redirect writes from "%USERAPPDATA%\Microsoft\Windows\Network Shortcuts" to the drive letter of the user's home directory (in my case: N:\).

 

I have attached my .sdb file which you can use or take a look at. You will need to install the Compatibility Administrator tool (part of the Application Compatibility Toolkit) from the Windows 10 ADK to view/edit it. All of the apps I use are 64-bit which is the reason for only creating an x64 fix. You will need to create a separate .sdb file for any 32-bit apps.

 

The .sdb file(s) need to be installed on the end user's PC.

 

 

 

"%USERAPPDATA%\Microsoft\Windows\Network Shortcuts;N:\"

 

 

The fix can be installed/uninstalled with the following commands:

 

Install

C:\Windows\System32\sdbinst.exe -q "\This PC Fix (x64).sdb"

 

Uninstall

C:\Windows\System32\sdbinst.exe -q -u "\This PC Fix (x64).sdb"

'This PC' Fix (x64).zip

Edited February 3, 2020 by Arthur

[Koldov]

Thanks for this @Arthur! @fiza have you had any luck?

 

Made a bit of progress, but hasn't quite worked for me.

 

The file in Chrome now shows 'Error Downloading' so it knows it's doing something wrong... but still downloads it to 'This PC'. The strangest part is that I noticed a temp file being created in the folder I want it downloading to!

 

 

Not sure if there are other policies conflicting, I will try taking a computer off to its own OU for further testing...

 

One other question... Say if someone deletes the .sdb file before it is uninstalled and then when trying to uninstall it says 'cannot find file' - are the changes made going to persist on that PC or would they be overwritten with the next install of a new .sdb file (with different settings)?

 

Where are the settings made and how can I view them?

 

Asking for a friend... because I wouldn't do anything that silly obviously...

 

 

'A little knowledge is a dangerous thing'

Edited February 3, 2020 by Koldov

[Arthur]

Made a bit of progress, but hasn't quite worked for me.

I should have asked what your home drive letter was before posting the fix. Mine is N:\ so that's why it's not working for you.

 

Based on your screenshot it looks like you are using H:\ so I have attached a new .sdb file that you could test. This one will work for you.

 

I am also going to assume you are using the 64-bit version of Google Chrome?

 

One thing to be aware of is that existing files in "%USERAPPDATA%\Microsoft\Windows\Network Shortcuts" won't be moved across. Only files that are created after my fix has been installed will be redirected to the user's H: Drive.

 

One other question... Say if someone deletes the .sdb file before it is uninstalled and then when trying to uninstall it says 'cannot find file' - are the changes made going to persist on that PC or would they be overwritten with the next install of a new .sdb file (with different settings)?

Assuming you installed the .sdb file on a single PC, the easiest method of reverting the changes would be to extract the .sdb file from my attachment again and then run the relevant sdbinst.exe command to uninstall it.

 

Alternatively you could install the Compatibility Administrator from the Windows 10 ADK, run the 64-bit version of the tool, find the fix listed under "Installed Databases", right-click it and choose Uninstall.

 

 

You are correct that the fixes will persist on the PC until they are uninstalled.

 

Where are the settings made and how can I view them?

You can view or modify the settings with the Compatibility Administrator.

 

'A little knowledge is a dangerous thing'

Definitely!

This PC Fix (x64) - H Drive.zip