Users are able to see hidden files and folders

[bigmouth]

WindowsXP Pro clients on Server2003

 

All users on the network are able to see hidden files and folders. I have several different images and it is the same for all. When the images are made I create a local user to check all is working locally and make sure that Folder Options are set to default (do not show hidden files and folders and hide system files) when finished, I then copy the local users profile to the default user. Sysprep is prepaired and an image taken.

 

Once the image has been istalled, sysprep run and attached to the domain it is possible for Domain Users to see hidden files and folders, they do not have to change settings, infact pupils do not have the option to go in and change settings.

 

We are running Active Directory but as far as I can see there is no option AD for setting this. Does anyone have ideas?

Edited November 24, 2009 by bigmouth
typo

[Michael]

I would say it's something to do with that default profile you're copying. Everyone's profile would be based on this. If the menu isn't there you've probably locked in down using a policy.

 

User Config > Admin Templates > Windows Components > Windows Explorer

 

Removes the Folder Options menu item from the Tools menu - Not Configured/Disabled

[K.C.Leblanc]

I havn't used SYSPREP for years (I'm a newsid man these days), but I think it copies the profile you're usign when you set it up over the default user profile.

 

The easiest bodge would be to use 'Regshot' to discover the exact reg key that's changed when you disable show hidden files and the use the reg write command in your log on scripts.

[bigmouth]

I have set Folder Options not to be shown in AD.

[elsiegee40]

I have set Folder Options not to be shown in AD.

 

 

Make sure the policy is not being overridden by another policy... and make sure the policy is actually enabled (Guess who's disabled it and forgotten to put it back? )

[ThePrutser]

User Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

Value Name: Hidden

Data Type: REG_DWORD (DWORD Value)

Value Data: (1 = show hidden, 2 = do not show)

 

You could make a custom .adm file load this into the policy and set this registry setting for the users using this policy.

[K.C.Leblanc]

I have set Folder Options not to be shown in AD.

 

Is the policy assigned to users of to machines?

[Michael]

That would be for users, you can tell by the way it starts - HKEY_CURRENT_USER.

[K.C.Leblanc]

That would be for users, you can tell by the way it starts - HKEY_CURRENT_USER.

 

But he could assign it to machines, and then it wouldn't work. Which would explain his problem.

[ThePrutser]

Here is the code to use in a custom .adm file

CLASS USER 

CATEGORY "Windows Components"
CATEGORY "Windows Explorer"
 KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" 
 POLICY !!HiddenFilesAndFolders 
  EXPLAIN !!HiddenFilesAndFolders_Help 
  VALUENAME Hidden
  VALUEON NUMERIC 1
  VALUEOFF NUMERIC 2
 END POLICY 
END CATEGORY
END CATEGORY

[strings]
HiddenFilesAndFolders="Show Hidden files and folders" 
HiddenFilesAndFolders_Help="Configures the folder option Hidden files and folders.\n\nIf you enable this policy, hidden files and folder will be shown.\n\nIf you disable this policy, hidden files and folder will not be shown.\n\n You will need to explicitly disable or enable this policy. Setting it to not configured leaves the setting as it was configured the last time" 

 

Copy this code to a text file. Save this file as hiddenFiles.adm (or whatever name you like, make sure it ends with .adm). Add this template to the Administrative Templates of a group policy especially for users. Browse to windows components, Windows Explorer there should be a new setting called "Show Hidden files and folders". Configure the setting the way you want to.

 

If it does not show. Activate the Administrative Templates Hive, right click and choose "View" -> "Filtering..." (if right click without selecting Administrative Templates it will not show the "View" option!). Clear the check box for "Only show policy settings that can be fully managed".

 

Please let me know if it works.

 

For more info on edit/creating custom .adm files click here

Edited November 25, 2009 by ThePrutser
removed the space behind [strings]

[bigmouth]

The policy is applied to the user configuration.

[ThePrutser]

>The policy is applied to the user configuration.

You mean it works now, or to what question are you responding?

[bigmouth]

Sorry, I'm running behind. That was a reply to KCLeblanc. I'm upgrading SIMS at the moment.

[bigmouth]

I have tried adding hiddenfiles.adm created from your post but get the following error when adding to 'Add/Remove template'. Any further help would be greatly appreciated.

 

Administrative Templates

---------------------------

The following error occurred in

 

\\****.local\SysVol\****.local\Policies\{5EA80EC9-EE7A-4C30-B7B4-273C9B3CC9C8}\Adm\hiddenfiles.adm on line 6:Error 62 The

 

corresponding string was not found in the [strings] sectionFound: !!hiddenfilesandfoldersThe file can not be loaded.

---------------------------

OK

---------------------------

[ThePrutser]

You will not believe this but the solution is very simple, I missed it too. Behind [strings] there is a space, remove this space and the error is gone. I have tested it overhere and it works (had not test is before, sorry) I also corrected the code above.

 

Please let me know if it works for you too.

[bigmouth]

Thanks for all your help ThePurtser. The policy is now working.

[ThePrutser]

Good to hear it finally works.

 

Too bad we couldn't figure out what was/is going wrong with the image in the first place.

[Stuart_C]

You can configure it in Group Policy Preferences as well if you don't want to create cutom ADM's

[lukev]

Good to hear it finally works.

 

Too bad we couldn't figure out what was/is going wrong with the image in the first place.

 

I think i have found the issue causing this, as it happened to my school recently due to creating an intranet page for students/staff

 

Problem lies in setting the default homepage through group policy for internet explorer, at first i was extremely confused why all users could see hidden files and folders then i worked out what was causing it to begin with, all users have logged into their workstations at least once since the change so i reverted back to unconfigured logged into a workstation as a student and hey presto no hidden files and folders, dont ask me why this causes it as i haven't the foggiest but im glad i worked it out haha

[ThePrutser]

I think i have found the issue causing this, as it happened to my school recently due to creating an intranet page for students/staff

 

Problem lies in setting the default homepage through group policy for internet explorer, at first i was extremely confused why all users could see hidden files and folders then i worked out what was causing it to begin with, all users have logged into their workstations at least once since the change so i reverted back to unconfigured logged into a workstation as a student and hey presto no hidden files and folders, dont ask me why this causes it as i haven't the foggiest but im glad i worked it out haha

I am not sure if you are right about this. What I get from your post is that you just set the custom policy to not configured. Because it is a custom policy where registry settings will be set, it is not enough to set it to "unconfigured" the setting will still be as it was. To turn off this custom policy you actually have to set it to disabled. To be sure check the registry on the computer where you "think" you have found the problem, I am afraid you will see that the registry setting is still in effect.

 

Or probably I am not completely following what you are trying to say

Edited March 25, 2013 by ThePrutser

[lukev]

Sorry for not making my post very clear.

 

Originally users were unable to see hidden files and folders as intended.

 

I then uploaded the new intranet page and forced the homepage to this intranet page.

 

After this change all users could see hidden files and folders.

 

Changing the settings back to unconfigured stopped users from viewing hidden files and folders.