Little-Miss Posted November 27, 2012 Posted November 27, 2012 Got rid of a lot of the crap I don't need/want. (Control panel icon wont go but that's another issue). So i log in as my test student S1. Got the S1 document icon in the corner of desktop but unfortunately it's got things in there I don't want as it just confuses peeps. Like Saved Games, searches, links, contacts, desktop and then it contains another S1 folder which looks like a redirected one. I basically just want to either get rid of it, or let it take me straight into the redirected documents folder. Clicking the S1 link on the start menu does the same thing too...
sonofsanta Posted November 27, 2012 Posted November 27, 2012 (edited) Use group policy preferences to hide them. For each of these folders: Update them and tick the Hidden attribute. You need to tick the "Run in logged-on user's security context" on the Common tab as well. Neater than removing them, and lets you hide the duplicate Documents folder as well, as that can't be deleted. Holler if you need me to expand on that anymore! Edited November 27, 2012 by sonofsanta spleling 2
gshaw Posted November 27, 2012 Posted November 27, 2012 I know the one you mean, hide it in two places: - remove user folder link from Start Menu GPO (takes the name out the Start Menu) - hide user folder on desktop GPO via GPP registry keys e.g. http://www.edugeek.net/forums/windows-7/60579-user-folder-icon-desktop.html That way your Start Menu only shows the Documents, Pictures etc links and never takes you to the local profile folder 1
sonofsanta Posted November 27, 2012 Posted November 27, 2012 I quite like having the User Folder Link on the start menu, as it's an easy way of seeing who's logged on at a computer personal preference that though. If you do leave it there though, you need to set the following group policy: User Config > Policies > Admin Templates > Windows Components > Windows Explorer > Prevent users from adding files to the root of their Users Files folder - Enabled Otherwise people can save in that folder, but said folder only exists locally and will be deleted if their profile is ever removed from the machine (which Win7 does automatically after a certain number of unique logins have passed). There's also a reg key worth setting to stop people having access to this User Root in the Save As dialog. This is a few steps long, I fear, but not too bad. Download SetACL from Download | Helge Klein | Home of SetACL and save it to a shared location - so we have a shared folder caled AppShared for programs run on the server, and I put it there. In a GPO, set the following code to run as a startup script: call "SHARED_FOLDER\SetACL.exe" -on "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\ShellFolder" -ot reg -actn ace -ace "n:SYSTEM;p:full" (change SHARED_FOLDER to the relevant path) Then under Computer > Preferences > Windows Setting > Registry, set the following key: That key path you can't quite read is SOFTWARE\Wow6432Node\Classes\CLSID\{59031a47-3f72-44a7-89c5-5595fe6b30ee}\ShellFolder This is based on the instructions @ Hide User Folder on Save as Dialog Box - TechNet Forum Windows 7 Support Team - Site Home - TechNet Blogs but modified to let you do it automatically on startup. Hope that helps! 1
Little-Miss Posted November 27, 2012 Author Posted November 27, 2012 Hmmm still struggling with your first bit @sonofsanta. Should this show up in RSOP if its been successful?
sonofsanta Posted November 27, 2012 Posted November 27, 2012 Hmmm still struggling with your first bit @sonofsanta. Should this show up in RSOP if its been successful? RSOP can't handle group policy preferences, you have to use Group Policy Modelling instead now (it's part of the Group Policy Management snap-in, so underneath where your domain is listed and where you set all your GPOs, there's an icon for GPM; right click on that and run the wizard. Similar to RSOP though) Did you remember the logged on context tick box?
Little-Miss Posted November 27, 2012 Author Posted November 27, 2012 oooh, i thought that might be the case... ooh thats clever!! Doesnt look like it failed, its listed as applied. I didnt tick the box the first time around if im honest, but even when i did it still hasnt removed anything. I havent had much luck with applying registry things also so wondering if i have a bigger issue.
sonofsanta Posted November 27, 2012 Posted November 27, 2012 I'm not sure tbh, I can't remember any particular problems implementing that lot. If you set up a GPP to copy a random text file from $network to C:\somewhere\, does it work? Might be worth testing if that much works for you...
Little-Miss Posted November 27, 2012 Author Posted November 27, 2012 ok, i may be messing up a simple thing here... I've asked it to copy a file from \\server\staff common\me and put it in c:\program files for the hell of it. Havent had much luck so far. Is it how im trying to do it?
sonofsanta Posted November 27, 2012 Posted November 27, 2012 ok, i may be messing up a simple thing here... I've asked it to copy a file from \\server\staff common\me and put it in c:\program files for the hell of it. Havent had much luck so far. Is it how im trying to do it? If it's a file you need to give it the full file path, not just the folder path - i.e. \\server\share\file.txt to c:\program files\file.txt, as opposed to \\server\share\ to c:\program files\ Always catches me out!
Little-Miss Posted November 27, 2012 Author Posted November 27, 2012 hmmm i didn't put the file.txt at the end of its destination, but still nothing....
Little-Miss Posted November 27, 2012 Author Posted November 27, 2012 This is really weird....the test GPO doesn't display in the GPM either....
sonofsanta Posted November 27, 2012 Posted November 27, 2012 So all your GPOs are applying, but not your GPPs? Not that I have any idea what is going wrong for you if that is the case, but still, narrows it down for others to leap in and heroically save the day.
Little-Miss Posted November 27, 2012 Author Posted November 27, 2012 that's pretty much it.... confuzzled. May Google it and then make new thread as people aren't going to look here.
sonofsanta Posted November 27, 2012 Posted November 27, 2012 That is weird. Is there anything in Event Viewer? If you go into Applications and Services logs, Microsoft, Windows, there's a Group Policy log there. There should be separate entries for GPP files and what have you. Make a note of the time a computer starts up and just step through, or just quickly breeze through looking for errors/warnings. There may well be a hotfix for whatever problem you have, there's a few around for GPP I believe. A new thread is probably a better idea though, yeah, then come back here and continue with the original problem (which should be fixed as soon as you get GPP fixed, if its any consolation )
gshaw Posted November 27, 2012 Posted November 27, 2012 I quite like having the User Folder Link on the start menu, as it's an easy way of seeing who's logged on at a computer personal preference that though. I use bginfo to paint the user login details on the desktop but the other info is useful as an extra layer of protection against the dreaded local user folder (great piece of design for business users there MS!)
Little-Miss Posted November 28, 2012 Author Posted November 28, 2012 (edited) I had a quick look through Event Viewer but couldn't see anything....was very quick though so will go back and look again. Edit: Nope....nothing there! Edited November 28, 2012 by Little-Miss
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now