Where to re-enable right-click on the desktop

[SimpleSi]

I'm in the process of trying to restore right-click "functionality" on the teachers desktop to a locked down w2k3 setup but I can't find where its being restricted.

 

Any clues please?

 

Si

[Steve21]

There's a few places it could be, but guessing USER\Administrative Templates\Windows Components\Windows Explorer\Remove Windows Explorer's default context menu

 

or something close?

 

Steve

[SimpleSi]

USER\Administrative Templates\Windows Components\Windows Explorer\Remove Windows Explorer's default context menu

 

Nope - got that disabled now (it was enabled) (And yes I've been doing gpupdate /force and re-booting the workstation )

Si

[Steve21]

What do you have these set as:

 

Prevent adding, dragging, dropping and closing the Taskbar's toolbars

 

Prohibit adjusting desktop toolbars

 

Active Desktop Prohibit changes

 

Thought it should be the one I originally said though,

 

Steve

[SimpleSi]

All 3 disabled

 

Si

[localzuk]

Easiest way to find these things is to run Resultant Set of Policies (RSoP) via Active Directory Users and Computers.

 

Right click on user/OU and choose tasks - Resultant Set of Policies (RSoP) and then go through the tool choosing a machine to work with, and then go through the result window and look for those settings in their usual places. There will be an extra tab explaining which policy is applying that setting.

[SimpleSi]

@localzuk - I like the idea but the process is hanging on me when I try to go through the results tree _ i'm going to try a quikc server reboot.

 

Si

[localzuk]

@localzuk - I like the idea but the process is hanging on me when I try to go through the results tree _ i'm going to try a quikc server reboot.

 

Si

 

Ah, this might be down to an ADM file issue - it was doing that here too. On the machine you're running ADUC on, go to c:\windows\inf and look for the files with names like AER_XXXX.adm, where XXXX is a number. Delete all the ones which are not 1033. (They are all foreign language ADM files, not needed).

 

These files can be deleted according to Microsoft, as they are not needed in an English environment. They were causing RSoP and Group Policies to hang for me, followed by a series of 'cannot use file' errors.

[Michael]

It is 'Remove Windows Explorer's default context menu' as Steve21 has mentioned. Make sure it isn't set on the Default Domain Policy or somewhere higher up the chain. Policy Inheritance is enabled by default in Group Policy.

[SimpleSi]

I've run out of time - will give suggestions a go next week

 

Ta everyone

 

Simon

[bondbill2k2]

Could it be restricted locally if none of the above work?