Solved

Group Policy Files - Access Denied Error 4098

Posted on 2014-04-01
8
3,572 Views
1 Endorsement
Last Modified: 2015-03-18
Dear Experts,

I have a computer GPO which is set to do 2 things:
1) Copy a file from a network share to all users profile desktop
2) Delete a specific file called "Remote Desktop.RDP" from all users profile desktop.

I use group policy preferences --> file to do this. The copying of the file works absolutely perfectly, however, the deleting of the file from the desktop only works on Windows XP machines. For Win 7 machines in the event viewer you get the following 4098 error:

The computer 'Remote Desktop.RDP' preference item in the 'Desktop Icons {84149EEF-6A4E-49A5-91E3-6638166B6663}' Group Policy object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed.

Any ideas?
1
Comment
Question by:Bladey001
8 Comments
 
LVL 15

Expert Comment

by:max_the_king
Comment Utility
Hi,
if you're using a user GPO you may try and check "Run in logged-in user's security context".
It once made me solve a similar problem

hope this helps
max
0
 

Author Comment

by:Bladey001
Comment Utility
Tried adding the user setting into the same GPO and selecting that but still no luck :(
0
 
LVL 15

Expert Comment

by:max_the_king
Comment Utility
please keep in mind that computer's gpo sa priority over user's gpo
0
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
Comment Utility
because it is an all users shortcut a standard user cannot delete it ergo you need to do it in the computer preferences and not the user preferences.
0
Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

 

Author Comment

by:Bladey001
Comment Utility
So any other ideas?
0
 

Accepted Solution

by:
Bladey001 earned 0 total points
Comment Utility
I managed to get around this by putting the direct path i.e. C:\Users\Public\Desktop

I guess it must not have like the %ALLUSERSPROFILE%
0
 

Author Closing Comment

by:Bladey001
Comment Utility
Solved by doing this workaround
0
 

Expert Comment

by:jollywhitefoot
Comment Utility
This is old, but I thought I would chime in.  The reason this worked on XP but did not work on Windows 7 machines when using the variable %ALLUSERSPROFILE% is because the variable in Windows 7 for the Public folder is %PUBLIC%.  In Windows 7 %ALLUSERSPROFILE%  is for ProgramData.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now