How to Create Start Menu Shortcut on Windows 10 to a program on an NTFS Restricted share?

Hi Experts,

I am trying to create a shortcut to a program on our user's Start Menus. I am using GPO on a Server 2008 R2 domain controller, with the latest 1709 ADMX files.

The EXE that the shortcut needs to point to is located on a shared network drive that is restricted to our Accounts team using NTFS permissions.

During testing I found that simply adding the shortcut through Group Policy won't work, as the target EXE could not be found. I believe this is because the SYSTEM account that creates the shortcuts on the local machine has not got access to that location.
So I moved the shortcut creation GPO into the User Policy rather than Computer Policy, and told it to run as the logged-on user. This then failed because by default our users have not got security permissions on the "%AllUsersProfile%\Microsoft\Windows\Start Menu" folder.

Next I tried to add 'Everyone' and 'BUILTIN\Users' and granted them full control onto the "%AllUsersProfile%\Microsoft\Windows\Start Menu\" folder:

This created the shortcuts successfully. Great, I thought!
However, now users cannot pin anything to their Start Menu. The option is no longer in the Context Menu for them. (Start Menu is applied using an XML file to add locked groups, then users can add anything else but not touch the defaults. This was working correctly prior to me changing the folder permissions.)

So my question: How would you recommend going about doing this? I can see a couple of options:

> Adding the SYSTEM account to be able to access our Accounts share. Really not ideal as I don't understand the full implications of allowing this.
> Finding the correct permissions to allow start menu items to be added by users whilst retaining the 'Add to Start Menu' option in the Context Menu.

Thanks in advance for any assistance.
dgloverukAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Alex Green3rd Line Server SupportCommented:
Create a shortcut to the application in netlogon

Do a file copy from netlogon to  C:\programdata\Microsoft\Windows\Start Menu
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Alex Green3rd Line Server SupportCommented:
Oh use group policy preferences for this as well, so computer configuration, preferences, windows settings, files and use the replace action.
0
dgloverukAuthor Commented:
This worked wonders, many thanks Alex!
0
Alex Green3rd Line Server SupportCommented:
Excellent, you're very much welcome :D
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.