Windows 2003 Group Policy on Windows Xp

[Guest]

I am currently in the process of building a business delegation and security structure in a 2003 AD. I am currently having a problem with certain group policy application on a Windows XP desktop and In particular displaying default desktop icons on the desktop. Because i am implementing a 'leat rights' approach i have a user baseline policy which disables access to these icons (via the desktop section of administration templates). I have then defined a number of incremental policies which grant access back to these icons based on a users policy level. However i am unable to make the default icons appear the exact policies settings regarding this are as below:

Baseline:
Hide and disable all items on the desktop - Enabled
Remove My Documents icon on the desktop - Enabled
Remove My Computer icon on the desktop - Enabled
Remove Recycle Bin icon from the desktop - Enabled
Hide Internet Explorer icon on the desktop - Enabled

Incremental:
All of the above are disabled

Result on desktop:
Only the recycle bin appears but if i open the desktop folder the icons can be seen but are not on the desktop

 

[Roger Abell]

The only default desktop item in XP is the recycle bin.
When you move the AD computer object out from the
OU where these GPOs are applied, so it is not within
the scope of their effect, how does the desktop appear?

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

I am currently in the process of building a business delegation and

security structure in a 2003 AD. I am currently having a problem with
certain group policy application on a Windows XP desktop and In particular
displaying default desktop icons on the desktop. Because i am implementing
a 'leat rights' approach i have a user baseline policy which disables access
to these icons (via the desktop section of administration templates). I
have then defined a number of incremental policies which grant access back
to these icons based on a users policy level. However i am unable to make
the default icons appear the exact policies settings regarding this are as
below:

Baseline:
Hide and disable all items on the desktop - Enabled
Remove My Documents icon on the desktop - Enabled
Remove My Computer icon on the desktop - Enabled
Remove Recycle Bin icon from the desktop - Enabled
Hide Internet Explorer icon on the desktop - Enabled

Incremental:
All of the above are disabled

Result on desktop:
Only the recycle bin appears but if i open the desktop folder the icons

can be seen but are not on the desktop