Re: single start menu, desktop for everyone but administrator

Can you be more specific with the "redirect the desktop to a customized
desktop
folder" part? I am unable to find this in GPO.

"Vera Noest [MVP]" wrote:

Sorry, I missed that info in your first post.
Yes, that complicates matters.
KB 816100 has a link to this article:

293655 (http://support.microsoft.com/kb/293655/) How to apply local
policies to all users except administrators on Windows 2000 in a
workgroup setting
http://support.microsoft.com/?kbid=293655

but the solution given there is not very practical.
I would try this: use a local policy (with gpedit) to lock down
your server and redirect the desktop to a customized desktop
folder. These settings will apply to everyone.
Create a folder in the customized desktop folder, let's call it
AdminTools, and copy your current start menu and desktop shortcuts
to this folder. Use NTFS permissions to make the folder accessible
for Administrators only.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?VGVycnk=?= <Terry@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 18
okt 2006 in microsoft.public.windows.terminal_services:

Thank you for your reply. Your advice on #3 seems to only apply
to domain groups policies. This is a standalone machine, no
domain involved.

"Vera Noest [MVP]" wrote:

#1 : Use the GPO to redirect users to a custom desktop folder,
in which you put your shortcuts. Make this folder read-only.

#3 : Use security filtering of the GPO.
816100 - How To Prevent Domain Group Policies from Applying to
Administrator Accounts and Selected Users in Windows Server
2003 http://support.microsoft.com/?kbid=816100

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?VGVycnk=?= <Terry@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on
18 okt 2006 in microsoft.public.windows.terminal_services:

I have a terminal server that I want to do a few things with.
It is not part of AD. There are about 10 users that will
need access to this server. I only want them to be able to
have a couple of icons on the desktop and for them to be able
to use only those applications. So here are my goals:

1) All users have same exact desktop
2) All users have 1 thing in start menu (log off)
3) Administrator settings, desktop, start menu stay unchanged

I have #2 kinda working but it removes everything for the
admins too. I am trying to achieve #2 through the group
policy editor but like I said, its changing EVERYONE's
settings. I am not having any success in #1. Please help.

.

Relevant Pages

  • Re: SBS Add User wizard problem
    ... It turned out that the reason was script's folder ... The rest of settings are ok (it means they are like You said they ... Say I have a script on server which checks every 15 ...
    (microsoft.public.windows.server.sbs)
  • Re: W2008: new location for folder redirection does not work
    ... So you would have a clean profile with the correct settings in the profiles folder. ... server though the domain name was the same as before. ... including finding a way how to export/import all the users on clients. ...
    (microsoft.public.windows.server.general)
  • Re: W2008: new location for folder redirection does not work
    ... server though the domain name was the same as before. ... it and all the users kept their program settings locally. ... including finding a way how to export/import all the users on clients. ... and Settings folder) to the new folder in Documents and Settings, ...
    (microsoft.public.windows.server.general)
  • Re: Email enable doc lib
    ... navigate to the public folder and send some posts with attachments to the ... Microsoft CSS Online Newsgroup Support ... I have disabled forms base Athentication from the default V.Smtp server ...
    (microsoft.public.windows.server.sbs)
  • Re: Documents & Settings - Users
    ... > when I installed a local server in my home office. ... > that I have approximately 2.5G of data in the Local Settings folder ... > Microsoft folder. ... I no longer log in on that account. ...
    (microsoft.public.windowsxp.general)