Link to home
Start Free TrialLog in
Avatar of Henrik Johansson
Henrik JohanssonFlag for Sweden

asked on

GPO for desktop icons in Windows Server 2008 R2

The method of disabling 'Administrative Templates\Desktop\Remove My Computer icon on the desktop' etc policy settings to force the icon to be visible on desktop doesn't seem to work on Windows Server 2008 R2.
I've for the moment forced Computer icon by creating a shortcut in public desktop by using GPP, but want if possibly to avoid the shortcuts.
Is there any policy setting to force displaying the core objects for the desktop icons in 'Desktop' -> ''Personalize' -> 'Change desktop icons' by using GPO?
Avatar of Glen Knight
Glen Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

OK, I have just done some investigation and although not very helpfull may shed some light.

Firstly I created a Group Policy to Disable the Remove My Computer option and made sure this was applied to a user, logged into a Windows 2008 R2 server and indeed there was no My Computer Icon.

I then right clicked on the desktop and selected Personalize then change desktop icons and selected Computer.  This obviously put the Computer icon on my desktop.

I then went into the Group Policy and modified the policy so it was set to remove the icon, ran gpupdate, logged out and back in again and the Computer Icon was gone.  I again went into the Group Policy and disabled the option again, ran gpupdate logged out and back in again and the Computer icon was back.

So although it doesn't directly answer your question it does work but it needs to be enabled first, bit odd.......I will continue to investigate.
SOLUTION
Avatar of Ducknaldi
Ducknaldi

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
@Ducknaldi > this is not correct.
If you install the Desktop Experience role then you can right click on the desktop and select personalize and then change desktop icons.
Avatar of Ducknaldi
Ducknaldi

Yes maybe IF you install desktop Experience.
I prefer to install next to nothing unnecessary on a server and the other way this is possible without installing Desktop Experience.
Maybe it's a terminal server?  You might want the "Desktop Experience"
Your statement "There is no policy to do this and in fact MS even removed the option to personalize desktop icons in 2008 R2" is wrong which is why I clarified it.
No Demazter.
MS removed this option thorugh policy, which is why it´s not working for the guy who ask this question.

They removed the option to personalize desktop icons directly though personalize desktop also, UNLESS you intstall desktop experience OR follow this small hint.
@Ducknaldi > I made it work through policy.
Once I had added it through customization I was able to control it through group policy!
Yes Demazter, BECAUSE you installed Desktop experience.

Avatar of Henrik Johansson

ASKER

Yes, it's a TS/RD and Desktop Experience has already been installed.
The GPO only works to override when user has manually tries to manually display unwanted icons.

I completely agree to the above installing as few features/roles as possibly on a server, and try to use Server Core when possibly, but it's a little bit tricky to have that on a TS...
If the icons have been enabled then you can turn them on and of with the GPO, I am trying to work out how to turn them on for all users.

Will let you know what I find.
I found the setting is stored in the following registry key
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPage

Editing the registry and refresh desktop gives the expected result for Computer and Documents, but IE doesn't seem to be handled this way in newer OS or the registry value/path has been moved/changed when comparing registry with Win2003.

Editing the registry with GPP to set the values to 0 will solve the issue, but a request from our frontend guys was to also display IE on desktop.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Typo for registry path in last post

I found the setting is stored in the following registry key
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel

Editing the registry and refresh desktop gives the expected result for Computer and Documents, but IE doesn't seem to be handled this way in newer OS or the registry value/path has been moved/changed when comparing registry with Win2003.

Editing the registry with GPP to set the values to 0 will solve the issue, but a request from our frontend guys was to also display IE on desktop.
Unsynced refreshing...
I had already tried {871C5380-42A0-1069-A2EA-08002B30309D}.
It doesn't work on the server. Maybe because of it's being IE8, and the link notes it to be for IE7.
It doesn't work anymore to get IE icon displayed on desktop in Win7/2008R2.

http://support.microsoft.com/kb/976915
"Important Windows 7 no longer supports the ability to modify the registry for the special Internet Explorer icon to appear on your desktop. This change was made to make sure Internet Explorer could be removed easily for compliance reasons. The only way to add the Internet Explorer icon to the desktop in Windows 7 is to create a shortcut"
Ahh well that covers it then!
I am sorry but I am going to have to object because the answer you are accepting that says "There is no policy to do this and in fact MS even removed the option to personalize desktop icons in 2008 R2" is wrong.

I proved this can be done, you need to add the Desktop Experience and you can then control the icons.

Admittedly the Internet Explorer icon cannot be controlled but this has been removed as documented by the link provided.  But considering the My Computer icon was the only one mentioned in the question this was not discussed until later on.
What you posted doesn't work if user hasn't manual chosen that the icon should be displayed. The builtin policy restricts if user is allowed or not to display the icons, but it doesn't force the displaying of icons for user that hasn't already enabled that the icons shall be displayed.

My opinion is that what you initial posted doesn't solve the question as it will not work for new users that hasn't done the manual configuration.
I offered your later comment assistance because you tried to help and provided a link with info about how to try to get the missing IE-icon to re-appear.

The other user answered the question about if there's a policy to force the icons to be displayed, and the answer for that is no.

It's true that Computer is the only icon mentioned by name in question, but except of that it's pluralis for "icons" and "objects" in the question...

Thank you henjoh09, thank you for clarifying your thoughts.
I respect your decision.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Can you elaborate on this final solution a little more.  I am trying to get this going right now on my 2008 R2 GPO.  I am under the User Configuration.  I have created the GPP for Computer with no problem following that HKCU path you gave in the solution.  When I do the Recycle Bin, following that same path and finding that same {5399.....] number, the desktop icon I get is "Control Panel" instead of the Recycle Bin icon.  I also cannot find "Network" under this HKCU path that you gave.  You say it can be managed and give the {F02C....} number but it is not there under HKCU.

Can you still help with this?

Thanks!