Desktop redirection

[Guest]

hello, i'd like to redirect everyones desktop yet deny them access to create
new stuff on the desktop, i've also created a default users profile on the
network, so i created a share \\server\desktop configured a GPO to redirect,
security i configured the creater owner full control and a specific group
deny access to the subfolder, my problem then when logging a new user for the
first time within the deny group its unable to create the icons from the
default profile and stops the redirection, how can I make this work?

1)Redirection shold continue on error
2)some automation on the security

 

[lforbes]

hello, i'd like to redirect everyones desktop yet deny them
access to create
new stuff on the desktop, i've also created a default users
profile on the
network, so i created a share \serverdesktop configured a
GPO to redirect,
security i configured the creater owner full control and a
specific group
deny access to the subfolder, my problem then when logging a
new user for the
first time within the deny group its unable to create the
icons from the
default profile and stops the redirection, how can I make this
work?

1)Redirection shold continue on error
2)some automation on the security

Hi,

Why do you use Deny? This works if you set the User permissions on
\\server\desktop to "read" not deny.

On the Group Policy Redirection make sure you UNTICK - Copy current
desktop to new redirected one. This is essential. The default is it
tries to copy the current desktop to the redirected one.

Another way to do this is to use Mandatory Profiles. They don’t
redirect, but the profiles download on logon and delete on logoff.
Therefore nothing remains. If they save on the desktop it is lost. I
have 2400 Users and this is how I do it. I found the redirected one
didn’t work as well.

Cheers,

Lara

 

[Joe]

Thanks for your response, I was thinking of using MAN profiles but I had
more issues with roaming then redirection, unless there is a global setting
to make all local profiles mandatory, another reason I like redirection is
that I could control what should be on the desktop by simply accessing the
share, and no difference if I set to deny or read 'only' either way will
fail if I don't uncheck to copy profile, the reason I don't untick copy
current profile is because they currently have icons that they need, please
suggest advice

I have two questions for you, 1)how do I set a default set of
icons/shortcuts on each desktop, 2)I know how do create default icons for
new users by creating a default profile on the network, but once again if
they don't have write and if I untick the copy profile they will never see
those icons

Thanks

 

[lforbes]

Hi,

share, and no difference if I set to deny or read ’only’
either way will fail if I don’t uncheck to copy profile, the
reason I don’t untick copy
current profile is because they currently have icons that they need,
please
suggest advice.

I have two questions for you, 1)how do I set a default set of
icons/shortcuts on each desktop, 2)I know how do create default icons
for
new users by creating a default profile on the network, but once again
if
they don’t have write and if I untick the copy profile they will
never see
those icons

You can’t have it both ways. If you want to have the system copy the
current profile, then you have to give write access. If not then
untick the "copy profile desktop" and copy the desktop icon files
manually.

I know how do create default icons for new users by creating a

default profile on the network

Create a default profile and then just manually copy the contents of
the "Desktop" folder to the share on the server you plan to redirect
the desktop to. Desktop Redirection is to just redirect the
"Desktop" folder from the local profile to the server. That is all
it does.

Cheers,

Lara