?
Solved

Read Only Favourites

Posted on 2014-08-13
8
Medium Priority
?
195 Views
Last Modified: 2014-08-19
Hi Experts,

I hope you can help me. I am presently attempting to lock down the favourite folder for users in a training environment. In short, i want them to have the links to the course materials and nothing else

However I'm having some difficulties in achieving this. I set up folder redirection for all users favourites directory to a DFS location.

However my first plan of using the favourite bar seemed to be scrapped as nothing appeared in there. And even when i placed the links in the root, I found the user had write access to the directory, instead of read, they couldn't see the favourites either

Kind Regards,

Graham
0
Comment
Question by:FSIFM
  • 5
  • 3
8 Comments
 
LVL 14

Expert Comment

by:Brad Groux
ID: 40258383
Have you tried changing the security permissions on the favorites folder to read-only? On Windows 7 it would be located C:\Users\username\Favorites. Right-click the favorites folder and choose properties, then choose the security tab.
0
 
LVL 4

Author Comment

by:FSIFM
ID: 40258462
Hi Brad,

Originally i did try it that way, as there were only 30 or so static users, and I could swallow that in terms of work (obviously a central location is easier to manage). However when I tried this, as soon as the user logged back in, it reverted the rights and gave the user write access back to the folder
0
 
LVL 14

Assisted Solution

by:Brad Groux
Brad Groux earned 2000 total points
ID: 40258519
You can utilize group policies to pass the GPOs down to the users. You could probably pass the rights to the favorites folder down via GPO too.

User Configuration\Policies\Windows Settings\Internet Explorer Maintenance\URLs\Favorites and Links

If you utilize GPO, regardless of what the current users does, they could delete or change the GPO - it would revert back to the original on the next login.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 4

Author Comment

by:FSIFM
ID: 40258542
That actually sounds like a better way of doing it :)

I cant find that path however?

Window settings contains no internet explorer maintenance? Just the usual scripts, security settings, and folder redirection?

Did you mean Administrative templates>Windows Components>Internet Explorer?

If so is it in a different sub directory there as i cannot find a URL folder?
0
 
LVL 14

Expert Comment

by:Brad Groux
ID: 40258617
Sorry, I forgot to mention that the path with change slightly depending on the version of Windows or IE you are working with. IEM was depreciated in Windows 8 / Server 2012 and IE10+.
http://technet.microsoft.com/en-us/library/jj890998.aspx

Internet Explorer Administration Kit (IEAK) is the preferred way of administering IE GPOs now - http://technet.microsoft.com/en-us/ie/bb219517.aspx
0
 
LVL 4

Author Comment

by:FSIFM
ID: 40260011
hmmmm im not entirely sure that's going to work. IEAK does a single package. It wont allow me to tailor per user who logs in?

As its for a training environment, different users will do different courses and need access to separate materials
0
 
LVL 4

Accepted Solution

by:
FSIFM earned 0 total points
ID: 40260310
New solution!

Pretty much, i've used a gpo to create the shortcuts on the profile, and fix the home page. Then i added the users to the domain guest list. That way as soon as they log out their profiles are deleted. When they login they only have the favourites via the shortcuts. Perfect for trainees!
0
 
LVL 4

Author Closing Comment

by:FSIFM
ID: 40269790
Came up with own solution to resolve matter, based upon own research
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question