?
Solved

Group Policy Files - Access Denied Error 4098

Posted on 2014-04-01
8
Medium Priority
?
4,178 Views
1 Endorsement
Last Modified: 2015-03-18
Dear Experts,

I have a computer GPO which is set to do 2 things:
1) Copy a file from a network share to all users profile desktop
2) Delete a specific file called "Remote Desktop.RDP" from all users profile desktop.

I use group policy preferences --> file to do this. The copying of the file works absolutely perfectly, however, the deleting of the file from the desktop only works on Windows XP machines. For Win 7 machines in the event viewer you get the following 4098 error:

The computer 'Remote Desktop.RDP' preference item in the 'Desktop Icons {84149EEF-6A4E-49A5-91E3-6638166B6663}' Group Policy object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed.

Any ideas?
1
Comment
Question by:Bladey001
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 16

Expert Comment

by:max_the_king
ID: 39968903
Hi,
if you're using a user GPO you may try and check "Run in logged-in user's security context".
It once made me solve a similar problem

hope this helps
max
0
 

Author Comment

by:Bladey001
ID: 39969141
Tried adding the user setting into the same GPO and selecting that but still no luck :(
0
 
LVL 16

Expert Comment

by:max_the_king
ID: 39969383
please keep in mind that computer's gpo sa priority over user's gpo
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 
LVL 82

Expert Comment

by:David Johnson, CD, MVP
ID: 39970571
because it is an all users shortcut a standard user cannot delete it ergo you need to do it in the computer preferences and not the user preferences.
0
 

Author Comment

by:Bladey001
ID: 39977607
So any other ideas?
0
 

Accepted Solution

by:
Bladey001 earned 0 total points
ID: 40001811
I managed to get around this by putting the direct path i.e. C:\Users\Public\Desktop

I guess it must not have like the %ALLUSERSPROFILE%
0
 

Author Closing Comment

by:Bladey001
ID: 40011175
Solved by doing this workaround
0
 

Expert Comment

by:jollywhitefoot
ID: 40673277
This is old, but I thought I would chime in.  The reason this worked on XP but did not work on Windows 7 machines when using the variable %ALLUSERSPROFILE% is because the variable in Windows 7 for the Public folder is %PUBLIC%.  In Windows 7 %ALLUSERSPROFILE%  is for ProgramData.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question