Read Only Favourites

Hi Experts,

I hope you can help me. I am presently attempting to lock down the favourite folder for users in a training environment. In short, i want them to have the links to the course materials and nothing else

However I'm having some difficulties in achieving this. I set up folder redirection for all users favourites directory to a DFS location.

However my first plan of using the favourite bar seemed to be scrapped as nothing appeared in there. And even when i placed the links in the root, I found the user had write access to the directory, instead of read, they couldn't see the favourites either

Kind Regards,

Graham HirstIT EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brad GrouxSenior Manager (Wintel Engineering)Commented:
Have you tried changing the security permissions on the favorites folder to read-only? On Windows 7 it would be located C:\Users\username\Favorites. Right-click the favorites folder and choose properties, then choose the security tab.
Graham HirstIT EngineerAuthor Commented:
Hi Brad,

Originally i did try it that way, as there were only 30 or so static users, and I could swallow that in terms of work (obviously a central location is easier to manage). However when I tried this, as soon as the user logged back in, it reverted the rights and gave the user write access back to the folder
Brad GrouxSenior Manager (Wintel Engineering)Commented:
You can utilize group policies to pass the GPOs down to the users. You could probably pass the rights to the favorites folder down via GPO too.

User Configuration\Policies\Windows Settings\Internet Explorer Maintenance\URLs\Favorites and Links

If you utilize GPO, regardless of what the current users does, they could delete or change the GPO - it would revert back to the original on the next login.
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Graham HirstIT EngineerAuthor Commented:
That actually sounds like a better way of doing it :)

I cant find that path however?

Window settings contains no internet explorer maintenance? Just the usual scripts, security settings, and folder redirection?

Did you mean Administrative templates>Windows Components>Internet Explorer?

If so is it in a different sub directory there as i cannot find a URL folder?
Brad GrouxSenior Manager (Wintel Engineering)Commented:
Sorry, I forgot to mention that the path with change slightly depending on the version of Windows or IE you are working with. IEM was depreciated in Windows 8 / Server 2012 and IE10+.

Internet Explorer Administration Kit (IEAK) is the preferred way of administering IE GPOs now -
Graham HirstIT EngineerAuthor Commented:
hmmmm im not entirely sure that's going to work. IEAK does a single package. It wont allow me to tailor per user who logs in?

As its for a training environment, different users will do different courses and need access to separate materials
Graham HirstIT EngineerAuthor Commented:
New solution!

Pretty much, i've used a gpo to create the shortcuts on the profile, and fix the home page. Then i added the users to the domain guest list. That way as soon as they log out their profiles are deleted. When they login they only have the favourites via the shortcuts. Perfect for trainees!

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Graham HirstIT EngineerAuthor Commented:
Came up with own solution to resolve matter, based upon own research
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.