Mixed XP and Win7 Desktop files, profile.V2

[burgemaster]

Hi all,

 

We are looking to deploy more and more Win 7 Machines, but currently as with Vista when staff log into a Win7 machine they create and use a xxx.v2 profile in our staff_profiles share.

 

This means that they dont see any desktop files from their normal XP profile.

 

Might be asking too much but is there a way for them to use the same profile?

 

Or a way for them to use the same desktop when loggin into xp/vista or win7 ?

 

TIA

[sted]

set up folder redirection for the desktop so that it points to say userarea\desktop for indicidual ones ot \\server\share\desktop then remove wirte access

[burgemaster]

Thanks for the reply,

 

I tested this before and failed, i am now having the same problems with security as before

I have also found that we have the same problem with our staff profiles !!

 

I have redirected the share to \\SERVER\Staff_Desktops$

 

I have set security on this folder for staff to modify.

 

Everything works perfectly, but staff COULD create a shortcut to \\SERVER\Staff_Desktops$

 

and then browse through everyone elses desktops?

 

http://i43.tinypic.com/bf4cqd.jpg

 

If i DO check "Grant the user exclusive rights to Desktop" then we cannot access the folders.

If we take ownership then it loses the users permissions.

 

Can Cacls add the domain admin account somehow?

Maybe part of a logon script?

 

Or have I set something up incorrectly?

 

Thanks in advance

[sted]

if they all want their own individual desktop why not redirect to \\server\users$\staff\%username%\desktop

[burgemaster]

if they all want their own individual desktop why not redirect to \\server\users$\staff\%username%\desktop

 

Keep their desktop files within their home drive?

[sted]

Keep their desktop files within their home drive?

 

yup why not

[glennda]

if they all want their own individual desktop why not redirect to \\server\users$\staff\%username%\desktop

I think he is meaning redirect there desktop to the one that is located in the users xp profile

 

Toby

 

EDIT: maybe not he got in first!! or you could redirect to old profile as I said - although im not sure if it would like it

Edited March 29, 2010 by glennda

[burgemaster]

Ive setup staff desktops to redirect to \\SERVER\Staff_Desktops$\Username

 

I left "Grant user exclusive rights to Desktop" checked, so when they log in, the folders are created but only they have access to them.

 

Ive also added a line to the log-off script:

 

cacls "\\SERVER\staff_desktops$\%username%" /e /p "Domain Admins":F

 

Now admin also have access and staff cannot create shortcuts to other peoples desktop folders etc

 

 

Also, ive created a log-on script that I can leave on for a few days, it copies their desktop files from the old location (in their profile) to the new desktop share. It then renames the old location desktop_old so if ever run twice it will skip through:

 

@ECHO OFF
@cacls "\\SERVER\staff_desktops$\%username%" /e /p "Domain Admins":F
CLS
COLOR 4C
Echo Backing Up Your Desktop Files.... 
Echo Please wait.. 
Echo If you have a lot of Files on your desktop this may take a few minutes...

@xcopy "\\SERVER\staff_profiles$\%username%\desktop\*" "\\SERVER\staff_desktops$\%username%\" /E /C /Y /Q
@rename "\\SERVER\staff_profiles$\%username%\desktop" "desktop_old"
CLS
COLOR 2A
Echo DONE
Rem 5sec wait
ping -n 5 127.0.0.1 > nul

 

There is probably an easier way around this with special NTFS permissions, or maybe as sted suggested redirect to inside the homedrive. lol

Glennda - Redirecting to the old profile on vista/win7 didnt work correctly.

Edited March 29, 2010 by burgemaster

[_Adam_]

Folder Redirection is a good stepping stone while you have XP. Keep in mind you'll want to do Pictures/Music/Videos as well as Documents as XP automatically groups them.

 

The path supplied by sted is a good example. It is Microsoft's best practice now to not use a Home Folder/Drive with Folder Redirection, the exception being only if the Home Drive already exists.

 

You do not need to set the "Grant user exclusive..." if you have the parent folder permissions correct.

[burgemaster]

 

The path supplied by sted is a good example. It is Microsoft's best practice now to not use a Home Folder/Drive with Folder Redirection, the exception being only if the Home Drive already exists.

 

 

Hi Adam,

 

Could you please explain what you mean here, Are you say NOT to redirect to the Home Folder/Drive.

 

I was about to start over and create a new policy that will redirect:

 

Desktop:

\\server\staff_drives$\%username%\Desktop

Pictures:

\\server\staff_drives$\%username%\Pictures

Music:

\\server\staff_drives$\%username%\Music

Videos:

\\server\staff_drives$\%username%\Videos

 

Cheers

Tim

Edited March 30, 2010 by burgemaster

[_Adam_]

I am certain I had link to the document, just cannot find the favourite.

 

However I did find a similar document which says "Typically, it is recommended that you do not redirect to a home directory unless you have already deployed home directories in your organization".

 

You can find the full document here - Recommendations for Folder Redirection: Group Policy

 

Like I said, it's very similar to the page I had bookmarked but the page I wanted to link for you also covers folder security permissions and more.