Arcolite

That's what I've got already, but it doesn't always work. Most times it seems to need two logins before it applies.

Very true I guess. I'm just a bit OCD and precious about my new setup and hoping I'm missing something obvious.

Over the summer we rolled out Windows 7 x64 across the whoel site. Overall everything has gone really well. There's only one problem that seems to have me stumped at the moment. Our GPP Printers were working lovely, but then our GPO containing these printers became corrupted without a backup available. We recreated the GPO and copied all the printers over and it's working great but this has left our users with orphaned printers from the old GPO stuck in their profiles. All the Printer queues are setup to "Remove when no longer applies" with Item Filtering matching the Machine name to the Departmental Printer. For example, all machines starting MFL-* will get the MFL Photocopier etc... But because the orphaned queues are from another GPO, GPP in the new Policy wont touch them. To try and correct this I added a "Delete All Shared Printer Connections" as the first item. This works, just not at every login. I've found that it applies in the second login. If a Student logs in, notices he's got the wrong printers then logs off, then back on, GPP will sort itself out and remove all connections and apply the required ones. Trying to resolve this I also turned on "Process even if the Group Policy objects have not changed" for Printer Preferences under the Computer GPO. I had hoped this would "force" GPP to apply every login. No change. My only alternative at the moment is to apply a logoff script to the Students GPO which removes all Shared Printer Connections. However, so far our Windows 7 setup is 100% GPO/GPP. Ideally I would like to keep things that way and avoid scripts. Any suggestions?

We haven't had any problems installing these printers on Win7 x64 using GPP. They work perfectly (unlike most of our HP printers!!)

Thanks for the info. I was looking at the list from MS of known performance increases and thinking of toying with them List of Performance hotfixes post SP1 for Windows 7 SP1 - The troubleshooters and problem solvers... - Site Home - TechNet Blogs

From the Windows 7 Gotchas/Tips/FYI thread I've seen the Hotfix (You encounter a long logon time after you enable the "Do not automatically make redirected folders available offline" Group Policy setting in Windows 7 or in Windows Server 2008 R2) that solves the issue we're having however I have a few questions. For us, this is only causing a problem on our desktops, where the "Do not automatically make redirected folders available offline" setting is enabled. However! It isn't happening on all of them or for all users. On some machines users log in fine, then on the same machine with another user they'll have a slow login. Should we roll this hotfix out to all desktops? What has everyone else done?

Wouldn't that just copy the incorrect permissions that were on the files when they were backed up?

I can't seem to find a easy way to achieve what I need. Basically, our existing User Work Share permissions were setup incorrectly many many years ago. With our Windows 7 migration, we're looking to fix this. Our current shares are... \\domain\legacydata\staffwork \\domain\legacydata\studentwork Each user has a subfolder with their work or profile inside (e.g - \\domain\legacydata\StaffWork\Bloggs_J) Creator Owner was left off the Permissions when these were created so currently Administrator is the owner for ALL FILES. Also due to the way the permissions are setup, we have to manually create the folders for new starters. We now have setup new shares for Students and Staff which have been configured using Best Practice: Roaming Profiles and Folder Redirection (a.k.a. User State Virtualization). The new Shares are... \\domain\UserData\Staff \\domain\UserData\Students During logon, the gpo redirects create the needed sub folders. For example... \\domain\UserData\Staff\Bloggs_J\Documents \\domain\UserData\Staff\Bloggs_J\Favorites \\domain\UserData\Staff\Bloggs_J\Desktop This is working perfectly and we're very pleased. All the required folders are created for new users during the first logon! The problem we have is that I need to be able to migrate the data from the old shares into the new structure programatically without needing the user to log in first. If I create a folder via script then I'm the Creator Owner so the User doesn't have access. The same happens if I move files accross. I can manually fix the permissions, but with 1600 users I need to find a automated way. We used NTFSFix in the past and I'm pretty comfortable writing VBScripts when I need to, however this one has me baffled! Any suggestions?

JOY!!! Haha! It's neater than having a dozen login scripts, but it's not as foolproof as it could be.

Resetting the profile of the User I'm using to test with has solved the problem. Although I'm totally confused now. Seems like there are some "quirks" with GPP. Hope it was just a one off.

Sure, here's the config for the Excel shortcut. The others are the same, just not in Core Programs. It's set to replace so "Remove this item when it is no longer applied" and Item-level targeting will delete the shortcut if the software is removed. Could it be related to "Programs" being used in the "Core Programs" folder? http://dl.dropbox.com/u/14391517/StartMenu-3.jpg

I'm still in the procress of crafting our Start Menu for our upcoming Windows 7 upgrade in the summer. We're using GPP to create the Start Menu with Item level Targeting to detect if the software is present on the machine. It works perfectly however I've spotted a really odd quirk. http://dl.dropbox.com/u/14391517/StartMenu.jpg As you can see from the screenshot it's showing the contents of the Programs folder twice, causing an odd duplication thing. The Start Menu folder in the profile has only the following items. http://dl.dropbox.com/u/14391517/StartMenu-2.jpg I have no idea what I'm doing wrong. The Programs folder is created by the GPP process so everything should work fine. Any suggestions?

Deleting from the Default User worked. I don't know why I didn't think of trying there first. There are so many different areas where Win7 stores stuff now it's hard to think straight sometimes. Thanks for the second piece of info. I already knew about this, however it was removing the Shortcuts I was having problems with. The shortcuts didn't work, I just wanted to remove them to keep it tidy.

I thought this would be simple, however I'm struggling. We've always done our Start Menu using startup scripts and robocopy. It works, but it's not very high tech. We're moving to Windows 7 this summer and I'm looking to use GPP to sculpt the Users Start Menu to meet my needs. I've made most of the changes I need by removing unwanted items using either Shortcut or Folder Preferences. However I'm struggling with this one last item. I do not want Ease of Access in the Start Menu (C:\Users\%UserName%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Ease of Access). Obviously I could script to remove it, however the defeats the object! I've tried deleting or hiding the folder using GPP Folder Preferences but it does nothing. It works fine on other folders in the same location, so the path and setup is fine. When I try to hide it using GPP it will create a second "Ease of Access" folder and hide that one instead! It's as if it's isn't actually called that! Any suggestions?

Just to provide an update to this. I've been testing and can confirm that this only happens with Folder Redirection settings. When all other settings are put back to Not Configured they are removed from the Settings report as expected.

If it's as simple as that, awesome. I wouldn't say this is top priority, but we're in the process of creating our brand new Windows 7 GPO's and OU Structure. but I'm very protective and slightly OCD about my GPO's. I want them perfect and stuff like this bugs me. If someone else in the department looks at the Settings report I want to be able to give them a informed answer on why that still shows up rather than a "meh! dunno". Surely this is a bug in GPMC?

In which case, I don't need to know that something is not configured. Otherwise they might as well show me the entire contents of the GPO regardless of their configuration status.

I don't mean GPO Link status, I mean the actual settings status contained within the GPO. For example. If I go into a GPO and set "Verbose vs normal status messages" to Enabled. The Settings report shows Enabled. Later down the road I decide I no longer want that. I set it back to Not Configured in the GPO. Previously this would remove the entry for this Setting from the Settings report, however now it shows it as Not Configured. That means I have a entry in a report telling me that something isn't configured...which isn't very helpful.

Is this new behaviour in 2008/R2? In 2003 R2 once I set something back to Not Configured it no longer appears in the Settings report (because there isn't anything set anymore). The Settings report used to only show you Enabled or Disabled items. It's a little messy because we do all our development in test OU's, not on live clients. So if we enable something to "try it out" then decide we don't want to use it, that GPO will be left with the traces of that test. We'd have to recreate the GPO again when we want to put that GPO into production.

I've searched for the answer for this for ages and it's driving me made. This happens with all GPO's but for example I'll use a clean GPO. If I create a new GPO in the GPMC on Server 2008 R2 and then configure something in the ADMX side it works as expected. The Settings report shows the correct setting. If then undo that setting and revert it back to Not Configured I expect the Settings report to so that the GPO is empty. However, this isn't the case. It still shows me the Setting and also that it's set as Not Configured. It's not actually applying anything, the Not Configured is working. It's more a visual quirk, but a irritating one! I know there was a KB update to fix the Backspace issue. Has there been anything relating to this? Has anyone else had this problem.

I had initially thought to do that, however the link I followed suggested that it's optional and only needed if you're still using Windows XP. They configure the Profile to be within the same structure. Best Practice: Roaming Profiles and Folder Redirection (a.k.a. User State Virtualization)

We're looking to move to Windows 7 this year and with that move gives us the opportunity to change how we currently have things setup at the moment. Currently we have four shares for storing UserData. \\servername\StaffWork$\ \\servername\StaffProfile$\ \\servername\StudentWork$\ \\servername\StudentProfile$\ Users have Profile path and HomeDrive (mapped to N:) added in their AD Account pointing to the relevant Share, for example \\servername\StaffWork$\UserName\. We do not redirect any other Folders and User Folders are created manually or with scripts. Windows 7 gives us the chance to change this to give ourselves more control over UserData. I found the following link in the How-To Forum which works perfectly > Best Practice: Roaming Profiles and Folder Redirection (a.k.a. User State Virtualization) We've created new shares and plan to consolidate the four we have into just two. \\servername\UserData-Staff$\ \\servername\UserData-Student$\ Ideally we want the contents of each user folder to look like this. \\servername\UserData-Staff$\UserA\Desktop \\servername\UserData-Staff$\UserA\Documents \\servername\UserData-Staff$\UserA\Favourites \\servername\UserData-Staff$\UserA\Profile Using the GPO's, each user will get their folders created when they first log into a workstation. This works perfectly...however, there's a catch. For our existing users, we'd like to move some of the old data from the Old Shares into the New ones. For example, we'd like to move UserA's old N Drive/HomePath into the new structure, so \\servername\StaffWork$\UserA copied into \\servername\UserData-Staff$\UserA\Documents If I do this, the user doesn't have access to the files. Whoever copies the files into the folder is the CREATOR OWNER and not the User. Permissions can be added and tweaked, but it's a manual fudge and kind of defeats the object. Has anyone resolved this? It seems such a elegant solution it would be a shame to not use it.

Does the Redirected Start Menu resolve differently to a Local Start Menu?

Last term we had all our machines setup to use Redirected Start Menus from UNC Shares on one of our servers. This worked fine, however we found that Wireless clients would really struggle to resolve the folders with a lot of shortcuts in. The decision was made to put the shortcuts locally on each machine and get rid of the redirect, hopefully resolving slow issues on Laptops. This was implimented during the 2011 Summer Break. We're now faced with a really really bizzare problem. The Shortcuts are placed in C:\Windows\HABSBOYS\ShortcutBanks\. There are different ones for Staff and Students. During Login, a script will copy the folders it needs from that location (based on the User and Workstation build type) straight into the users local profile (C:\Documents and Settings\\Start Menu). I would have thought that this would speed things up, however, when you log in as a User then mouse over any folders that have Shortcuts pointing to Network Locations, the whole Start Menu freezes for 10-15 seconds. During which time the Workstation is unusable. However, the exact same Shortcuts, placed on a Server Share then Redirected via GPO does not have this issue (yet it did in the past!!!!). So confused! Any ideas?

I've been using WDS in our school for a while now and it's working out perfectly. However, we've just got a new batch to workstations in and even though our image has driver packs, these must be old as the soundcard in these machines isn't being installed (it's installing a driver, but it's the wrong one or soemthing). How can I inject new drivers into our image? Obviously I can recreate it from scratch with new driver packs, but I don't really want to do that, it's my last resort.