We are attempting to create a kiosk-style machine using Group Policy. For the most part it works like we want, except that some icons we placed in All Users\Desktop do not appear on the desktop of users that log in.
We have created an OU in AD, and placed the test machine in the OU. I have created 2 policies, one for computer settings and one for user settings. Here are what I think are the relevant settings:
[blue]Computer Configuration
User Group Policy loopback processing mode: enabled; mode merge
Prevent roaming profile changes from propagating to the server: enabled
User Configuration
Display control panel is hidden
Don't save settings at exit: enabled
Allow only bitmapped wallpaper: enabled
Enable Active Desktop: enabled[/blue]
I've tried different combinations of settings, but so far it completely ignores the icons in All Users.
There is a higher-level GPO and inheritance is not blocked (there are a few settings we want inherited, though I could duplicate them), but the higher GPO does not have any desktop-related settings.
The users have no special privileges on the machine (neither administrators not power users) since we want to prevent the installation of software (especially ad/spyware).
Anyone have any ideas?
We have created an OU in AD, and placed the test machine in the OU. I have created 2 policies, one for computer settings and one for user settings. Here are what I think are the relevant settings:
[blue]Computer Configuration
User Group Policy loopback processing mode: enabled; mode merge
Prevent roaming profile changes from propagating to the server: enabled
User Configuration
Display control panel is hidden
Don't save settings at exit: enabled
Allow only bitmapped wallpaper: enabled
Enable Active Desktop: enabled[/blue]
I've tried different combinations of settings, but so far it completely ignores the icons in All Users.
There is a higher-level GPO and inheritance is not blocked (there are a few settings we want inherited, though I could duplicate them), but the higher GPO does not have any desktop-related settings.
The users have no special privileges on the machine (neither administrators not power users) since we want to prevent the installation of software (especially ad/spyware).
Anyone have any ideas?