Redirected Desktop - same for all users.

[Koldov]

Not sure if I should even admit this... but we have always been a 'class log-in' school...

 

I inherited it and up until recently haven't had any reason to change it. We have very young children, a lot of SEN/EAL and in general the vast majority of them don't even know their own (Legal) name, let alone how to spell it (or even simple words to create passwords). This would make using any sort of sync software a nightmare... However, we have recently started using Google Classroom and although it was initially a struggle, I don't get many issues now, so I am using parts of these log-in details for their Windows accounts to simplify things.

 

Anyway, I know we're late to the party and all that aside we have decided we should start the journey to individual Windows log-ins. This has been prompted by recent changes to DfE recommendations and KCSIE guidelines.

 

Obviously the Headteacher (who has also recently become Designated Safeguarding Lead), has suddenly taken a very keen interest in filtering and monitoring... and has been advised we are 'non-compliant'... so we are knee-jerking our way to some sort of monitoring software that will require individual accounts.

 

I would like if possible to start very simply, leveraging the structure I already have in place if possible, as this works perfectly for the class log-in, but will obviously behave differently when multiple accounts are used (as in I can't choose the option like 'create folders for each user'). So far I have created the relevant class OUs in AD and have created all the student accounts, created Security Groups to make permissions easier to grant. I have used a GPO to point their desktop to a shared class folder and I have edited their AD accounts to all point to a folder in the class share and have used this as their 'Home Drive', but I can't seem to get it working how I want...

 

So, to keep management simple and required device storage for accounts to a minimum (as I've read a few posts where it's been noticed that student accounts are eventually filling up the drive and I also don't want them saving anything on the desktop or in any other folder but their home drive), I'd like the following:

 

Just bear in mind they only need to sign-in with individual account for monitoring purposes, not 'really' to have an individual space to work....

 

All students to have the same 'read-only' desktop (this is only ever going to be used for shortcuts that I add into the 'desktop' folder).

All students of a particular class to share one 'Home Drive' within which they can create their own folder if they wish although this is how we currently have it set for the 'one class' log-in, they have hardly ever bothered (this might be against the spirit of individual user accounts, but honestly most of the 'work' they do is in an online learning platform and they only ever save the odd Word document or PowerPoint).

Possibly the Downloads folder needs to be in there, but no need to have Documents/Music/Pictures folders at all.

 

After the recent meeting where I told the headteacher what the changes would mean and I was told to get it done ASAP, I spent the afternoon trying to figure out how I could make this work for multiple users, but ended up without the correct desktop, or the desktop appearing as a folder in the Home Drive, or in the root share and lots of other weird and wonderful combinations...

 

Does anybody do anything similar and could share their Group Policy?

[Steve21]

3rd times a charm?

 

Not sure if my last post deleted itself as can't find it when I went to edit it

 

But basically:

 

Wouldn't suggest that route - not redirecting folders just means more sits locally on machine (eg 2 users

save same pic = 2x storage locally)

 

Either redirect all to unique folders per user, or redirect them still but to same folder for all users (obviously not recommended)

 

Regarding the desktop dir, this does not need to be in the home folders and can be totally different share that just holds short cuts - this can then be read only to stop the writing to it)

 

Make sure you aren't using exclusive access set in the redirect as you'll need to make all users have access to the shared folders that you're redirecting

 

Can you post your current settings as easier to check what you have set as it won't match any of my GPOs

 

Steve

[Koldov]

Thanks, yes I could separate out the home drive from the redirected folders, I guess I was just trying to re-use what I'd already done as it seemed to work OK. Trying to minimise the places I have to give permissions and troubleshoot.

 

.Share (All Users Folder)

.....> INDIVIDUAL CLASS FOLDER

............> Home Drive (H:\ Whole Class Folder) > Redirected (Documents/Pictures/Music etc.) Students can create Individual Student Folders (optional)

............> Redirected Folder (Class Desktop)

 

I'd still rather they didn't use Documents etc. Just save everything in the class home drive as they do now (or individual folders if they want to make them).

 

There are times I'd need to put a class specific shortcut on, otherwise I'd give all year groups and classes the same desktop.

 

Exclusive rights is not ticked, I've learnt that the hard way...

 

 

 

EDIT: Probably overcomplicating this, but in my head it seems so simple...

Edited October 6, 2024 by Koldov

[Steve21]

You don't need the \\ on the path

 

%homeshare%%homepath% should give you the full UNC path itself

 

You can test it using cmd prompt (not powershell) and just type %homeshare%%homepath% in and it'll return the path its using in a weird erorr way

 

 

e.g.

 

C:\Windows\system32>%homeshare%%homepath%

'\\MyFileServ\Home\Students\Demo\' is not recognized as an internal or external command,operable program or batch file.

 

Steve

[Koldov]

You don't need the \\ on the path

 

iirc I didn't put those in, that was what was entered for me when I chose the option 'redirect to users homedrive' or something along those lines...