Users unable to delete files from their own desktop in RDS 2012

Hi there

We have an RDS environment running entirely on 2012 R2 session host servers.  User profile disks are in use to store user settings, desktops etc.

Users, obviously, do not have administrative permissions on the server.  We are currently experiencing an issue where users are unable to delete anything on their own desktops - even though they have full permission to it.  Creating a file there works fine, and the correct permissions are granted - system full control, Administrators full control, and the user full control - inherited from c:\users\<user>\desktop which maps from their UPD.

However when they try and delete a file they've just created, they get a UAC prompt, and are then denied access when they enter their own details.  Administrators on the server do not have this problem when trying to delete their own files.

Wyse TCX is running on this server, but don't think it will be a culprit.  Any ideas as to what the issue may be?


Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

I have seen this issue once with permissions we've created on a directory were users had their profile stored. Eventually the issue was that the Domain users group (or whatever group you need) needed to have list access from top to bottom to be able to change these files (in our case eventually being the D drive itself).

You could also try and redirect the desktop, might that be an option??
chris3879Author Commented:
Just to feed back on this issue, it was actually caused by a rogue recycle bin in the default user profile disk template VMDK.

This created a recycle bin in the root of the user's profile disk, which had funny permissions, and wouldn't let the user themselves create anything within it (as only Administrators had write) - so deletions wouldn't work.  Shift+del worked, which is what pointed us at the bin itself.

I mounted the VMDK template, deleted the recycle bin from within the root of it, and created a new user.  Logged on, and it created the recycle bin with the correct permissions, and all was fine.  Existing users I had to mount their UPD manually, delete the same folder, and then get them to log on again, and it fixed it from their profiles too.

A tiny cause of a big problem - so hope this helps someone!



Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Awesome! Thanks for posting the solution. I had the same exact issue and your solution fixed the problem.
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

chris3879Author Commented:
Great! Glad posting the solution helped.


chris3879Author Commented:
Troubleshot and solved the issue
which folder had to be deleted to correct the issue?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.