• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4670
  • Last Modified:

Group Policy Files - Access Denied Error 4098

Dear Experts,

I have a computer GPO which is set to do 2 things:
1) Copy a file from a network share to all users profile desktop
2) Delete a specific file called "Remote Desktop.RDP" from all users profile desktop.

I use group policy preferences --> file to do this. The copying of the file works absolutely perfectly, however, the deleting of the file from the desktop only works on Windows XP machines. For Win 7 machines in the event viewer you get the following 4098 error:

The computer 'Remote Desktop.RDP' preference item in the 'Desktop Icons {84149EEF-6A4E-49A5-91E3-6638166B6663}' Group Policy object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed.

Any ideas?
1
Bladey001
Asked:
Bladey001
1 Solution
 
max_the_kingCommented:
Hi,
if you're using a user GPO you may try and check "Run in logged-in user's security context".
It once made me solve a similar problem

hope this helps
max
0
 
Bladey001Author Commented:
Tried adding the user setting into the same GPO and selecting that but still no luck :(
0
 
max_the_kingCommented:
please keep in mind that computer's gpo sa priority over user's gpo
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
David Johnson, CD, MVPOwnerCommented:
because it is an all users shortcut a standard user cannot delete it ergo you need to do it in the computer preferences and not the user preferences.
0
 
Bladey001Author Commented:
So any other ideas?
0
 
Bladey001Author Commented:
I managed to get around this by putting the direct path i.e. C:\Users\Public\Desktop

I guess it must not have like the %ALLUSERSPROFILE%
0
 
Bladey001Author Commented:
Solved by doing this workaround
0
 
jollywhitefootCommented:
This is old, but I thought I would chime in.  The reason this worked on XP but did not work on Windows 7 machines when using the variable %ALLUSERSPROFILE% is because the variable in Windows 7 for the Public folder is %PUBLIC%.  In Windows 7 %ALLUSERSPROFILE%  is for ProgramData.
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now