Solved

Create same desktop for all users in OU

Posted on 2016-10-09
3
36 Views
Last Modified: 2016-10-11
Have a client that would like the user's in the OU to have all the same desktop view. All clients are Windows 7. We'd like just to have the icons for a few apps like Office and Firefox and a few URLs. We don't want users to be able to save to the desktop. This is a mix of new and existing user accounts, and nothing saved on the desktop currently is necessary (extra programs they don't need to see). So we'd like the GPO to essentially remove all the icons and add the ones that we want. But I know the icons vary and creating a delete policy for every possibility is not administratively efficient. Is there any way to do this by GPO so that the Desktop is wiped clean and they just get the icons we want them to have?

Thanks!
0
Comment
Question by:Casey Weaver
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 41

Accepted Solution

by:
Adam Brown earned 450 total points
ID: 41836098
Yes, you can do this. What you can do is create a Folder Redirection policy that redirects the Desktop Folder to a single location that has all the shortcuts you want to appear on the desktop. https://technet.microsoft.com/en-us/library/cc732275(v=ws.11).aspx has details on this. You would basically create a network share somewhere that has the icons you want, then create the redirection policy using the Redirect to the following location as the redirect action. Make sure the option to move their data to the new location is *not* enabled, and when they log in and apply the policy, it will replace their desktop with whatever Icons are on the shared folder.

Note that you'll probably also want to set the policy to prevent users from making changes to the desktop. The settings to do this are in User Configuration\Administrative Templates\Desktop.
0
 
LVL 7

Assisted Solution

by:No More
No More earned 50 total points
ID: 41836300
Also you should set the security permission to read and execute for that folder to specific users / group
0
 
LVL 7

Author Closing Comment

by:Casey Weaver
ID: 41839379
This solution worked perfectly. We also secured the share to prevent users from accessing the share directly and doing modifications.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are many software programs on offer that will claim to magically speed up your computer. The best advice I can give you is to avoid them like the plague, because they will often cause far more problems than they solve. Try some of these "do it…
Postmortem reporting allow us to examine mistakes in a way that focuses on the situational aspects of a failure’s mechanism and the decision-making process of individuals proximate to the failure. Read our guide on how to handle IT post-mortem repor…
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question