Jump to content

Recommended Posts

Posted (edited)

How to Re-Enable the Quicklaunch:

 

Right Click on the superbar>Toolbars>New Toolbar.

 

Paste this into the window: "%appdata%\Microsoft\Internet Explorer\Quick Launch" (without quotes) and OK. Next unlock the taskbar in the usual fashion and shimmy the quick launch bar to your preferred area.

 

Right click on the word Quick Launch and untick "Show text" and "Show title" and there you go.

 

(Credit: originofsymmetry)

Edited by ZeroHour
  • Thanks 4
  • 2 weeks later...
Posted
When viewing redirected folders share you may see many "My Documents"

When Windows sets up a new redirected My Documents it creates a hidden desktop.ini file which means that when you browse the share/location from Windows you may see a huge amount of folders called "My Documents"/"Documents" rather then the folder name it should be (e.g. \\server\share\username as the path could look like \\server\share\documents)

The folders are correctly named but when Windows sees the existance of the hidden desktop.ini in each directory it displays the folder as "My Documents"/"Documents" rather then the real folder name. This can happen with any special folder I believe such as Favourites.

 

The solution:

Remove the desktop.ini file in each my docs redirected folder. This can be done with script or using Group Policy Preferences. You can also redirect to a sub folder which hides the issue (e.g. redirect to \\server\share\username\documents\)

 

 

I think 2008 R2 now has a Policy Object that can be set to stop this from happening

 

http://www.moorsidehigh.com/img/gpo-redirection.PNG

 

I haven't tried it as I have already restructured to use ZH's solution.. but if someone wants to test it.. (tried Googling it, but just get the above GP Text!)

  • Thanks 3
  • 1 month later...
Posted

I haven't got past redirecting the Start Menu for our Students and Start Menu and Desktop for our Staff however this seemed interesting enough to post here:

 

...Many Microsoft customers deploy Roaming User Profiles. In fact, many combine Roaming User profiles and Folder Redirection to get the best experience possible. However, one of the drawbacks with Roaming User profiles is the user must logoff before their settings are uploaded to the server. Folder redirection solves this problem for any of the known folders within the user profile namespace, such as Documents, Music, or Downloads—the data is highly available without requiring a user logoff. Now, if this could only occur with user’s registry settings.

 

Windows 7 solves this problem by allowing the User Profile service to upload the user’s registry settings of a Roaming User profile while the user remains logged on to the computer, or terminal services session (provided the session is hosted on Windows Server 2008 R2).

 

You enabled this feature using Group Policy. The policy setting Background upload of a roaming user profile’s registry file while user is logged on, is located under Computer Configuration\Policies\Administrative Templates\System\User Profiles. The policy setting offers two configuration settings: scheduled or interval. The scheduled method allows you to configure a time of day (represented on 24 hour time) at which to upload the user’s registry settings. The interval method allow you to choose a specific interval (represented in hours) at which to upload the user’s registry settings. This method accepts an interval range between 1 and 720 inclusively. Both settings include a random delay that does not exceed one hour.

 

http://blogs.technet.com/blogfiles/askds/WindowsLiveWriter/BackgrounduploadingofUserRegistrySetting_8F44/image_2.png

 

Background uploading only occurs with Roaming User profile. Also, background uploading does not alter uploading the entire profile when the user logs off. It is important to remember that background uploading only uploads the user’s registry settings (ntuser.dat).

 

Now those subtle changes made in the registry can be uploaded to the server while the user remains logged on.

 

Source: Background uploading of User Registry Settings

  • Thanks 3
  • 1 month later...
Posted

Group Policy change Windows Explorer default opening location on Pinned/Start Menu (From Libraries to My Computer)

 

Currently the only way to change the default opening location is to manaully modify each user's shortcuts to point to my computer et al. If a new user logged on, the shortcuts for them would still default to Libraries.

 

The way i've worked around this is to store a copy of a modified Windows Explorer shortcut (%SystemRoot%\explorer.exe ::{20D04FE0-3AEA-1069-A2D8-08002B30309D}, which opens up my computer) in the netlogon location of my domain share.

 

Then I create a batch file called explorer-shortcut.bat (can be anything ofcourse).

 

@echo off
xcopy "\\school.local\NETLOGON\system\Windows Explorer.lnk" "C:\users\default\appdata\roaming\Microsoft\Windows\Start Menu\Programs\Accessories" /y

(replace school.local with your domain name)

 

Next I set up a group policy and set the script to run as the computer is starting up, by going too Computer Configuration -> Policies (If you're using server 2008) -> Windows Settings -> Scripts -> Startup. Then add the batch file to the startup list.

 

What this does is copy the modified shortcut to the deault user on the Windows 7 pc, which is then used a basis for all new users that log on. Which also creates a copy in the Pinned Start Bar.

  • Thanks 1
  • 3 months later...
Posted (edited)

Mixed Group Policy for users/PC's of both XP and Windows 7

The easiest way to do this is with WMI filters which allows you to have separate GP for XP desktops and Windows 7 desktops.

To do this:

  1. Load GPMC
  2. Browse the the "WMI Filters" subfolder under your domain
  3. Right-click -> New
  4. Type a name (XP or W7) and then click Add
  5. Do not change the namespace
  6. Enter
    Select * from Win32_OperatingSystem Where Version like "6.1%" and ProductType = "1"

    (Apply to Windows 7 Clients only)

  7. Select * from Win32_OperatingSystem Where Version like "5.1%" and ProductType = "1"

    (Apply to XP Clients Only)

  8. Save the filter
  9. Now browse to the policy you want to restrict to a certain OS
  10. Click the Scope tab
  11. Click the policy where its applied and you should see a drop down for WMI filters at the bottom, select the relevant client the policy is to apply to.
  12. Now the policy will only apply when the client is w7 or xp

OS Version:

6.1 = W7/2008 R2

6.0 = Vista/2008

5.2 = 2003/2003 R2

5.1 = XP

5.0 = 200

 

Product Type:

Client = “1”

Server running a Domain Controller role = “2”

Member server (server that’s not a DC) = “3”

 

NOTE: This WMI filtering approach can be used for computer policy filtering as well (W7 & XP machines in the same OU)

Edited by ZeroHour
  • Thanks 4
  • 2 weeks later...
Posted

IE8 Printing/Print Preview and JAVA dont work for users

 

* Original credit to Psymon for this post

 

IE8 will display/print blank pages rather then correctly formatted pages due to a lack of a "Low" folder being created in the "Local" area of the logged in profile.

This has also caused Java to crash the tab in my experience when it also was triggered on a web page.

 

MS KB Article: You cannot print or print preview Web pages in Internet Explorer on Windows Vista or on Windows 7

 

To Fix:

Basically you need to make a folder in c:\users\{username}\Appdata\local\temp called "Low" which then needs a special permission applied to it. Due to the fact this folder is flushed out at log out (roaming at least) you will have to do this each time someone logs in.

A slightly modified version of a bat script created by Psymon is below which can be used as a user logon script and it will automatically create and set the correct permissions on the folder on logon.

@ECHO off
If not exist %localappdata%\Temp\Low (
echo.
echo Creating Low Folder...
mkdir %localappdata%\Temp\Low
)
echo.
echo Apply Integrity Level...
echo.
ICACLS "%localappdata%\Temp\Low" /setintegritylevel (OI)(CI)low
exit

 

This has fixed Java and also the print/print preview issue for us.

Posted (edited)

How to show all icons in the notification area (disable hidden items)

*Original Credit to Psymon

The setting is available in group policy, named "Turn of notification area cleanup". When set to enabled it expands to show all the system tray items.

User Configuration\Administartive Templates\Start Menu and Taskbar\Turn off notification area cleanup

 

 

*Original Credit to p-dave for this post giving the reg key.

 

Using GPP, logon script or default profile set the following registry entry to 0 to disable icon hiding.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\EnableAutoTray = 0

Edited by ZeroHour
  • Thanks 2
  • 1 month later...
Posted

If you have followed the excellent guides on here for removing the various items of the nav pane that you don't want people having access to (Libraries etc), you may end up in a situation where, after first logon, your users have an empty nav pane on the left-hand side of their explorer windows. To default Explorer to not showing the nav pane, modify the following registry key. I have this set on my common gpo for all win7 PC's:

 

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Modules\GlobalSettings\Sizer\PageSpaceControlSizer

 

I have my GPO updating that binary value to:

 

A000000000000010030000

 

It is that bold zero that is changed to a one when you enable the Nav pane in Organise > Layout > Navigation Pane.

 

Setting it to zero unticks it in that Explorer menu so it suggests that it is correct. Process Monitor didn't highlight any other keys being changed when I did it either, so I'm guessing that's it. The numbers later in the binary string, I'm guessing, dictate the actual size of your nav pane, so I guess they could be different.

 

Just thought someone might want to know. :)

 

Shuriken1.

  • 3 months later...
Posted
Our Help Desk support staff was really perplexed. They were getting hammered by phone calls whenever a print driver was updated and the Windows 7 clients attempted to upgrade the print driver. Windows XP clients had no problems upgrading, so obviously there was a UAC issue.

 

After doing some research a new setting was discovered that by default was set to require elevated permissions to install a new or upgraded print driver. To allow users to update or install a new driver there are two new gpo settings that need to be configured for your users.

 

Both reside at the following location:

 

Computer Configuration / Policies / Administratice Templates / Printers

 

When installing drivers for a new Connection: "Do not show warning or elevation prompt"

 

When updating drivers for an existing connection: "Do not show warning or elevation prompt"

 

By setting both vales as defined above, users will now be able to connect and update their workstations without a Help Desk support visit.

 

Link: Paul Bergson : Windows 7/Vista clients require elevated privileges to install or update a print driver

  • Thanks 1
Posted

Mouse Cursor will move very slowly or sluggishly as if being held back.

The cause is apparently due to secondary network adapters without a connection intermittently being checked for a live feed. This is found when you main board has a certain Intel NIC.

 

The sollution is to either connect a live network cable or disable the network adapter until it is needed. That and a possible driver update. The effect is imediate.

 

Long installation times or sluggish behavior in Windows 7 / 2008

 

Long installation times or sluggish behavior in Windows 7 / 2008

Posted

The "Desktop Wallpaper" Group Policy setting is not applied in Windows 7 or in Windows Server 2008 R2

 

In an Active Directory domain network environment, you apply a "Desktop Wallpaper" Group Policy setting to the domain users. However, the setting is not applied to domain users who log on to client computers that are running Windows 7 or Windows Server 2008 R2.

 

The "Desktop Wallpaper" Group Policy setting is not applied in Windows 7 or in Windows Server 2008 R2

Posted

Stop Them Chaning Timezones

 

Caught me out this did, notice a few of our Computers had odd time stamps on some of the logs we keep.

 

Group Policy > Computer Configuration > Policies > Windows Settings > Local Polices/User Rights Assignment

 

Set a user group permission that can change timezone on the 'Change the time zone' setting. (ie Administrators Only).

 

Utility built into Windows 7 called tzutil.exe that allows you to set a timezone with a script if required.

 

Pete

  • 2 months later...
Posted

You encounter a long logon time (Hanging at 'Applying Folder Redirection Policy') after you enable the "Do not automatically make redirected folders available offline" Group Policy setting in Windows 7 or in Windows Server 2008 R2 (including SP1)

 

This occurs when:

 

You deploy the 'Do not automatically make redirected folders available offline Group Policy' setting in a network environment.

 

You redirect multiple folders on a client computer that is running Windows 7 or Windows Server 2008 R2 to a file server.

 

There is a hotfix for this problem that solved the problem for me:

 

http://support.microsoft.com/kb/2525332

  • 3 weeks later...
Posted

When computer is locked, you have no idea who is logged in and locked the computer.

 

If you take a look in: HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/System there is a key called 'dontdisplaylockeduserid' which is set to '3' be default.

 

Changing this to 2 will show the Display Name of the user currently logged in.

Changing this to 1 will show the Logon Name and Display Name of tje current user who is logged in.

 

The default value of '3' will not show who is logged in.

 

Pete

  • 2 months later...
Posted

When viewing redirected folders share you may see many "My Documents"

When Windows sets up a new redirected My Documents it creates a hidden desktop.ini file which means that when you browse the share/location from Windows you may see a huge amount of folders called "My Documents"/"Documents" rather then the folder name it should be (e.g. \\server\share\username as the path could look like \\server\share\documents)

The folders are correctly named but when Windows sees the existance of the hidden desktop.ini in each directory it displays the folder as "My Documents"/"Documents" rather then the real folder name. This can happen with any special folder I believe such as Favourites.

 

The solution:

Remove the desktop.ini file in each my docs redirected folder. This can be done with script or using Group Policy Preferences. You can also redirect to a sub folder which hides the issue (e.g. redirect to \\server\share\username\documents\)

[/code]

 

Could you provide a little bit of guidance doing this using GPP? Not really sure where it needs to go e.g. Computer / User configuration and how high up the tree it needs to be...

 

Our home dirs are \\fileserver\staff$\%username%

 

Thanks

Posted
Could you provide a little bit of guidance doing this using GPP? Not really sure where it needs to go e.g. Computer / User configuration and how high up the tree it needs to be...

 

Our home dirs are \\fileserver\staff$\%username%

 

Thanks

 

Hi Googlemad,

 

Set up a Group Policy object and go into User Configuration > Preferences >Windows Settings > Files. In there, add a new File rule by right-clicking on the empty list and selecting New > File. Choose action Delete. Then in the Delete files field, put (in your case) '\\fileserver\staff$\%username%\desktop.ini'.

 

You might need to go through and delete the files once but once that's enforced, it should stop the file being created and thus, fix the problem.

 

Hope that help,

 

Shuriken1.

  • Thanks 1
  • 3 months later...
Posted
Hi Googlemad,

 

Set up a Group Policy object and go into User Configuration > Preferences >Windows Settings > Files. In there, add a new File rule by right-clicking on the empty list and selecting New > File. Choose action Delete. Then in the Delete files field, put (in your case) '\\fileserver\staff$\%username%\desktop.ini'.

 

You might need to go through and delete the files once but once that's enforced, it should stop the file being created and thus, fix the problem.

 

Hope that help,

 

Shuriken1.

 

Alternatively, if you use multiple folders for the user areas (i.e. staff, 07, 08, 09 ect...) I did exactly the same as above but deleted H:\desktop.ini (all home drives are H:\ here) and make sure to tick the common option "run in logged on users security context" (user policy)

  • 5 months later...
Posted

A great important tip...

 

You experience the following 2 Event IDs

 

Event ID 6005

The winlogon notification subscriber is taking long time to handle the notification event (CreateSession).

 

Followed later with the Event ID 6006

The winlogon notification subscriber took xxx second(s) to handle the notification event (CreateSession).

 

This occurs if you're stuck at the Applying Computer Settings

 

 

 

Simply disabling (or setting it to Not Configured) "Run logon scripts synchronously” cures the problem.

 

This is found under Computer Configuration\Policies\Administrative Templates\System\Scripts

Posted

You experience the following 2 Event IDs

 

Event ID 6005

The winlogon notification subscriber is taking long time to handle the notification event (CreateSession).

 

Followed later with the Event ID 6006

The winlogon notification subscriber took xxx second(s) to handle the notification event (CreateSession).

 

This occurs if you're stuck at the Applying Computer Settings screen prior to logging on.

 

 

Simply disabling (or setting it to Not Configured) "Run logon scripts synchronously” cures the problem.

 

This is found under Computer Configuration\Policies\Administrative Templates\System\Scripts

  • 1 month later...
Posted

This one just caught me out for a few minutes.

 

If you are using a redirected Start Menu, and you want to allow users to pin shortcuts to the Start Menu themselves, your shortcuts must all reside inside the Programs folder of your redirected Start Menu folder. Given the layout of the Start Menu in Windows 7 everything displays as if it were in the Programs folder anyway; but any items not in this folder will not display Pin to Start Menu on the context menu.

 

The rest of your GPO settings have to allow this as well, of course.

  • 1 month later...
Posted
So do I need to do both things? Disable Known Folders AND the ADM file? I've tried each individually, and the ADM file did remove the libraries feature from the navigation bar, but NOT from the open or save dialog boxes. Any help appreciated

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...