• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4623
  • Last Modified:

Users unable to delete files from their own desktop in RDS 2012

Hi there

We have an RDS environment running entirely on 2012 R2 session host servers.  User profile disks are in use to store user settings, desktops etc.

Users, obviously, do not have administrative permissions on the server.  We are currently experiencing an issue where users are unable to delete anything on their own desktops - even though they have full permission to it.  Creating a file there works fine, and the correct permissions are granted - system full control, Administrators full control, and the user full control - inherited from c:\users\<user>\desktop which maps from their UPD.

However when they try and delete a file they've just created, they get a UAC prompt, and are then denied access when they enter their own details.  Administrators on the server do not have this problem when trying to delete their own files.

Wyse TCX is running on this server, but don't think it will be a culprit.  Any ideas as to what the issue may be?

Thanks

Chris
1
chris3879
Asked:
chris3879
1 Solution
 
rhandelsCommented:
I have seen this issue once with permissions we've created on a directory were users had their profile stored. Eventually the issue was that the Domain users group (or whatever group you need) needed to have list access from top to bottom to be able to change these files (in our case eventually being the D drive itself).

You could also try and redirect the desktop, might that be an option??
0
 
chris3879Author Commented:
Just to feed back on this issue, it was actually caused by a rogue recycle bin in the default user profile disk template VMDK.

This created a recycle bin in the root of the user's profile disk, which had funny permissions, and wouldn't let the user themselves create anything within it (as only Administrators had write) - so deletions wouldn't work.  Shift+del worked, which is what pointed us at the bin itself.

I mounted the VMDK template, deleted the recycle bin from within the root of it, and created a new user.  Logged on, and it created the recycle bin with the correct permissions, and all was fine.  Existing users I had to mount their UPD manually, delete the same folder, and then get them to log on again, and it fixed it from their profiles too.

A tiny cause of a big problem - so hope this helps someone!

Thanks

Chris
1
 
digitapCommented:
Awesome! Thanks for posting the solution. I had the same exact issue and your solution fixed the problem.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
chris3879Author Commented:
Great! Glad posting the solution helped.

Cheers

Chris
0
 
chris3879Author Commented:
Troubleshot and solved the issue
0
 
iowasolutionsCommented:
which folder had to be deleted to correct the issue?
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now