Mandatory Desktop and Item Level Targetting

[garethedmondson]

Good morning,

 

We have a mandatory desktop which is a redirected folder. Permissions are that staff cannot write or modify this desktop. Every staff has the same (you guys know what I mean).

 

Now I have used GPP to create a shortcut on that desktop for SIMS. I've used Item Level Targetting for machines in the SIMS security group to receive that icon yet because they are mandatory desktops with no write access the shortcut does not appear.

 

If I change security to write/modify then the icon is created - but the staff member can add new icons and files which get saved back to the server. Naturally we do not want this.

 

Is there anyway item level targetting and shortcut creation will work without modify/write permissions?

 

Cheers

 

Gareth

[Michael]

Folder Redirection will allow you to do this, but that's different from GPP of course.

[garethedmondson]

Yes - but we want to use one set of folder redirection directories and then add icons if a user or machine is part of a security group. This would save having hundreds of different folders for various desktops and users.

 

For example we could have one simple redirected desktop but then various GPP settings for DT machines that are part of the DT security group - which then places DT icons on the desktop. The same with ICT - ICT icons on the desktop and so on for different subjects.

 

Cheers

 

Gareth

[Michael]

I don't think you're going to win this however, as GPP is generally applied in the user's context. Folder Redirection is applied as a System context, allowing you to apply permissions as required.

[cromertech]

If you only want to do this for machines and not users can you use the public desktop? Use GPP in the machine context instead and add your shortcuts in a separate gpo for the group of machines you want them to apply to

[garethedmondson]

Shared desktop location and GPO for shortcuts on desktop - this page tells me it cannot be done in a user context by design.

 

Gareth

[_techie_]

How about using gpp to add application/department specific icons to the start menu?

Or how about redirecting to a local folder on each machine, for students, and for staff, e.g. C:\pupildesktop and c:\staffdesktop then depending on location, add the necessary shortcuts for each app to those locations. The desktop locations could exist on all workstations. Create a gpo for each department (e.g. D+t apps) and add the gpp shortcuts to the gpo to the c:\pupildesktop and c:\staffdesktop respectively.

 

Hope this helps

Mark