SpiderPig
asked on
How to disable desktop folder redirection for certain users in Group Policy
This this is killing me. I dont like GPO...
I created a new GPO called Desktop folder redirection for desktop folder redirections, I then created a two new OUs one workstations and one laptops. I then moved laptops to the laptops OU and workstations to the workstations OU. In security of both GPO I have "auth users". From some reason it does not take effect. I even restarted the laptop like 4 times. Desktop icons are still being mapped and I am getting an access error when trying to login to profile of a laptop not connected to the network. What am I missing here?
Maybe I should place with the security of each GPO
I created a new GPO called Desktop folder redirection for desktop folder redirections, I then created a two new OUs one workstations and one laptops. I then moved laptops to the laptops OU and workstations to the workstations OU. In security of both GPO I have "auth users". From some reason it does not take effect. I even restarted the laptop like 4 times. Desktop icons are still being mapped and I am getting an access error when trying to login to profile of a laptop not connected to the network. What am I missing here?
Maybe I should place with the security of each GPO
ASKER
I created a new security distro and added all nonmobile users to it. I then removed the all auth users and replaced it with the nonmobile users. I am in the process of rebooting
ASKER
Arghhhh I didnt work, I still get \\server\users profiles\john\DEsktop cannot access error.... while I am not connected to network...
ASKER
By the way its a windows 2003 Ent w/ SP2 and the client is a Windows 7 Pro x64, not sure if it is related.
No should be good but you can install the adm files for Windows 7.
Run gpresult check to see if the gpo gets applied.
Run gpresult check to see if the gpo gets applied.
ASKER
I dont see the new Desktop GPO anywhere in the GPResult.... What am I missing?
ASKER
is there a service I need to restart on the server to push those or a simple gpupdate/force will help?
ASKER
I also noticed in the gpresult /r that it gets policies from the secondary DC and not the main one. Just reboot again, and desktop has not been mapped back to the desktop. Going to remove from AD and re-add to AD.
Run dcdiag.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You can setup laptop users group then give this group Apply Group Policy then remove all other groups from the Permissions. Or you can put the laptop users in their own OU.