EJWill

That's quite depressing to find that R2 has the feature I need. Sadly we're stuck using plain old 2008. So I guess the question still stands for now.

Are you sure it's in this GPO? http://www.simplehelp.net/images/saveas/saveas06.jpg

Could you provide a more detailed example of what you have? Just in case I may be doing something wrong.

Sadly that's a different issue. If you ran Explorer.exe directly from %windir%, it opens up showing the Libraries. By default, Windows 7 has a pinned Libraries link on the Task Bar and another shortcut too Windows Explorer in the Start Menu->All Programs->Accessories folder. If a new link was created to Windows Explorer this would also defaulted to Libraries. I need a way of modifying the Default Windows Explorer opening location.

Windows Explorer when opened up directly, defaults itself to the User Libraries folder. Now there are ways to change this by modifying the shortcuts to point to elsewhere on launch. Such as changing the target too: %windir%\explorer.exe ::{20D04FE0-3AEA-1069-A2D8-08002B30309D} This defaults explorer to open My Computer on launch but it relies on changing every known explorer shortcut. I'm looking for a way to do this via GPO (Server 2008 R1), and apply directly onto explorer. I've scoured the registry for references to explorer.exe and the Libraries CLSID name, but no joy. Has anyone got any other ideas, or has successfully come across a cure to this pest?

I've been searching high and low for an alternative myself. We currently use RealVNC for our network, but that seems to also have some flakey problems with Windows 7. Would also like to know if anyone has found a suitable VNC for Windows 7 or other monitoring tool.

Black Desktop Background after applying Desktop Background via Group Policy Only tested in Windows 7 on a 2008 Server environment. Group Policy that is set to change the users desktop background, can on some occassions be rendered black. Regardless of using Active Desktop or not. For some of us that have experienced this annoying "Feature", I have come across a simple solution that solves this issue. Last I heard MS was creating a hotfix to sort this problem out. Using Server 2008 style group policy preference settings we can modify the registry settings much more easily. You can create this registry setting by modifying the group policy directly on the 2008 server or using Win 7's Group Policy Management. User/Computer configuration > Preferences > Windows Settings > Registry Create an registry setting to HKEY_CURRENT_USER\Control Panel\Desktop and modify the value Wallpaper (Value type: REG_SZ) to the location of your background picture. That should then display the desktop background correctly. MS have released a hotfix for this: http://support.microsoft.com/kb/977944/en-gb which is included in windows 7 sp1. *Thanks to accura2000 for the link

Brilliant find, for something so completely unrelated to the issue it has fixed many of my ailing problems, just as the user appdata folder not hiding, or the task tray not hiding. Thankyou, you've saved me such a headache

In Windows 7, group policy that is set to change the users desktop image, can on some occassions be rendered black. Regardless of using Active Desktop or not. For some of us that have experienced this annoying "Feature", I have come across a simple solution that solves this issue. Last I heard MS was creating a hotfix to sort this problem out. Using Server 2008 style group policy preference settings we can modify the registry settings much more easily. You can create this registry setting by modifying the group policy directly on the 2008 server or using Win 7's Group Policy Management. User/Computer configuration > Preferences > Windows Settings > Registry Create an registry setting to HKEY_CURRENT_USER\Control Panel\Desktop\ and modify the value Wallpaper (Value type: REG_SZ) to the location of your background picture. That should then display the desktop background correctly.

If this is in the full scale Aero theme, try setting it to Aero Basic (Windows 7 Basic) theme. See if you notice any changes.

It's in the same location for both 2008 and 2003. Just 2008 has an extra folder called Policies before you get to Administrative Templates.

You need to enable verbose logging. Computer Configuration > Policies (2008 GPO) > Administrative Templates > System > Verbose vs normal status messages

You will need to paste this into a txt file with the extension '.adm'. ADM files go into %windir%\inf. Then when modifying a group policy, goto Computer Configuration/Policies. Right click on Administrative Templates and click Add/Remove Templates.... You should be able to browse for your adm in here and add it to your policy. In 2008 Server, a new folder will be created called Classic Administrative Templates (ADM) within the Administrative Templates folder. This will contain the imported adm.

I have scoured the SevenForums.com site and have made an ADM for some of the tutorials by the user Brink. So to save others the leg work, this is what I have: CLASS MACHINE CATEGORY "Windows 7 Explorer Navigation Items" POLICY "Hide Libraries" KEYNAME "Software\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2962227469 VALUEOFF NUMERIC 2961178893 END POLICY POLICY "Hide Homegroup" KEYNAME "Software\Classes\CLSID\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2962489612 VALUEOFF NUMERIC 2961441036 END POLICY POLICY "Hide Networking" KEYNAME "Software\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2962489444 VALUEOFF NUMERIC 2953052260 END POLICY POLICY "Hide Computer" KEYNAME "Software\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2962489612 VALUEOFF NUMERIC 2961441036 END POLICY POLICY "Hide Favourites" KEYNAME "Software\Classes\CLSID\{323CA680-C24D-4099-B94D-446DD2D7249E}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2839544064 VALUEOFF NUMERIC 2693792000 END POLICY POLICY "Hide Control Panel" KEYNAME "Software\Classes\CLSID\{26EE0668-A00A-44D7-9371-BEB064C98683}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2693791748 VALUEOFF NUMERIC 2684354564 END POLICY END CATEGORY; I no longer need to use the messy Disable Known Folder routine. Now all I need to do, is somehow redirect the UserFolder.

CLASS MACHINE CATEGORY "Windows 7 Libraries" POLICY "Hide Libraries" KEYNAME "Software\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2962227469 VALUEOFF NUMERIC 2961178893 END POLICY END CATEGORY; I have tested this out on two of our Win 7 computers, which appears to work. My original code was creating REG_SZ values by default instead of REG_DWORD. I will modify my first post so its easier to find the solution. I think a drink is in order

I was lead to believe Preference Group Policy settings would only work on Server 2008. Sadly we're still using 2003 and won't be migrating anytime soon.

Smart find. However it only details how to hide the library if you were to modifiy each individual machine. Now we could create an ADM like: BE WARNED THIS IS PSEUDO - THIS HAS NOT BEEN FULLY TESTED CLASS MACHINE CATEGORY "Windows 7 Libraries" POLICY "Hide Libraries" KEYNAME "Software\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC "2962227469" VALUEOFF NUMERIC "2961178893" END POLICY END CATEGORY; BE WARNED THIS IS PSEUDO - THIS HAS NOT BEEN FULLY TESTED However, I'm not sure if we can create a HEX DWORD or Decimal alternative. Much head scratching!

I have modified my first post to reflect your question.

Thought I would post our solution to the Libraries problem. It may seem a little messy as it still leaves the Libraries link in the Explorer Navigation side panel. (A cleaner, more complete, ADM can be found on post #12) Using Windows 7 with Group Policy Management installed or a 2008 Server. Navigate too: User Configuration/Policies/Administrative Templates/Windows Components/Windows Explorer/ Enable Disable Known Folders and add the following: {2112AB0A-C86A-4ffe-A368-0DE96E47012E} - Music Library {491E922F-5643-4af4-A7EB-4E7A138D8174} - Videos Library {7b0db17d-9cd2-4a93-9733-46cc89022e7c} - Documents Library {A302545D-DEFF-464b-ABE8-61C8648D939B} - User Libraries Folder {A990AE9F-A03B-4e80-94BC-9912D7504104} - Pictures Library {031E4825-7B94-4dc3-B131-E946B44C8DD5} - Another reference to User Library If you have a Windows 7 and XP mixed network on Server 2003 you may want to Disable Turn off Windows Libraries features that rely on indexed file data this will help with problems of folder redirection. What this will do, is stop the library folders from being created. I hope this is of help to some of you scratching your heads. EDIT - HIDING LIBRARIES FROM EXPLORER SIDE BAR: This custom ADM file will work for those of us still using Server 2003: CLASS MACHINE CATEGORY "Windows 7 Libraries" POLICY "Hide Libraries" KEYNAME "Software\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder" VALUENAME Attributes VALUEON NUMERIC 2962227469 VALUEOFF NUMERIC 2961178893 END POLICY END CATEGORY; For those lucky enough to have Server 2008 you can modify the registry using group policy preferences. By modifying the attributes key at HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder too 2962227469 (DECIMAL) A cleaner, more complete, ADM can be found on post #12

I wish I could say the same, we've been let down by a delivery of 3 servers and a SAN. Think I've gone through the entire TV listings of BBC iPlayer to keep myself sane. Take your time though PeterP

Could it be that you don't have the .NET framework installed, or at least the latest version installed?

If you're using Group Policy, then Software Restriction Policy should be able to blanket block .exe files. There are other forum threads more dedicated to that however.

I'm positively salivating! The running of games in emails is a real thorn in our side here, and until recently we've had no permission to go through student mail boxes due too the school policy on protecting their privacy! This is being changed for the future thank god. However, it just seems there are too many barriers in the way these days. Keep the motivation going PeterP I set up a service to run GameKiller2 that logged on with one of our Enterprise Admin accounts. This was during testing mind you, I never fully deployed it due to the fact the ICT courses were using Flash in their curriculum. Waiting on the hash checking version

Great news PeterP, I think most of us School Techies are going to be busy over the summer. We're hoping to be moving to blade systems and virtualisation over holidays period I can't wait to too take a peek at what you've got! How about calling it Game Monitor.

It's all for the common cause! Hopefully your release, plus a few more additions I'd like to make with logging (if you release the source that is!) should hit at the heart of the problem. However a quick note about Externally hosted games. There are obviously thousands, even tens of thousands out there, and a blacklist against them would be folly as we could see that list expand to an unmanageable size. I still recommend using a firewall such as ISA, and then block SWF and the SWF MIME type, then use a whitelist to allow tutor requested sites. Cheers peterp