Two tactics that you should implement:
1) Start -> Run -> RSOP.msc. That will give you effective settings in effect on the client. That might give you an obvious hint as to what is causing the issue, and what GPO it comes from 2) Get ProcessMonitor, and work out what Access Denied issues you are facing when trying to save a file. Cheers Ken From: Owens, Michael [mailto:[email protected]] Sent: Wednesday, 9 December 2009 10:10 PM To: NT System Admin Issues Subject: RE: Odd GP issue Thank you. Sorry I don't know GPs at all. ________________________________ From: James Rankin [mailto:[email protected]] Sent: Wednesday, December 09, 2009 9:09 AM To: NT System Admin Issues Subject: Re: Odd GP issue Possibly one of the ones that restricts access to the c: drive? I can't remember the GPO exactly offhand... 2009/12/9 Owens, Michael <[email protected]<mailto:[email protected]>> Good call. Do you know which GP would lock out the Temp directory? :) ________________________________ From: Christopher Bodnar [mailto:[email protected]<mailto:[email protected]>] Sent: Tuesday, December 08, 2009 11:50 AM To: NT System Admin Issues Subject: RE: Odd GP issue I believe it's creating a temporary file in the %TEMP% directory, which is probably not set to the users desktop. Chris Bodnar, MCSE Sr. Systems Engineer Infrastructure Service Delivery Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: [email protected]<mailto:[email protected]> Phone: 610-807-6459 Fax: 610-807-6003 ________________________________ From: Owens, Michael [mailto:[email protected]<mailto:[email protected]>] Sent: Tuesday, December 08, 2009 10:29 AM To: NT System Admin Issues Subject: Odd GP issue Hey guys - I have a Citrix server that is locked down pretty well. People can create items on their desktop, which is fine but no where else. (if i create a document in word, I get errors saying I cant open my documents folder, but I CAN save it to the desktop without any problems) This is a school, and I only want the students to be able to save to their desktop. It is easier for me to see if they are doing something they shouldnt be. However, if they run Microsoft Access, it will not allow users to create a database on the desktop. Does anyone know why? I know it is a GP, I just dont know which one. It tells me there is a policy in effect disallowing that action ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
