Yeah-the way we got around that was to implement an extremely restrictive quota (WS03 R2+ has FSRM built in, schema extensions for R2 required.) on that folder. It's not perfect, but does a pretty good job of keeping things clean.
First use the FSRM tool to see how much space it is using, and then start locking down until nothing can be added. IIRC, 100kb is a good starting point, but I think you can go smaller, depending on how much stuff you are putting up there. When we used this method with kids a few years back we left room to create a few shortcuts, and that was it. -Bonnie From: James Rankin [mailto:[email protected]] Sent: Thursday, May 20, 2010 12:08 AM To: NT System Admin Issues Subject: Re: Weird folder redirection issue I was thinking along the same sort of lines - there are an awful lot of issues linked to users needing Full Control on profile folders. The problem is once I grant Full Control they start removing and adding stuff from the standard desktop. I might have to have a rethink of my strategy :-( On 19 May 2010 18:43, Miller Bonnie L. <[email protected]<mailto:[email protected]>> wrote: Never seen that particular error, but we use a similar structure, except that the desktop and my documents both go to a non-shared area in the same subfolder. But we used to have a lot of issues with Desktop redirection if the user did not have full control over the folder. We finally pinned it down to the fact that the Desktop is really part of the profile, which requires full control. So for example, if the folder is redirected to \\stafffiles\stafffolder\, it should create the desktop folder underneath. If either the share or NTFS permissions are not full control, it can't create the desktop folder or files within it and the entire redirection process fails. Just thinking this might be what is happening in your case. Maybe something specific to the permissions those users have? BTW, the above stuff for us is all XP and WS03-we'll have to test things out still with W7. -Bonnie From: James Rankin [mailto:[email protected]<mailto:[email protected]>] Sent: Tuesday, May 18, 2010 2:38 AM To: NT System Admin Issues Subject: Weird folder redirection issue I have configured Start Menu and Desktop redirection to a shared area on a fileserver via GPO. The idea is that the shortcuts for all our applications sit in this shared area, and the NTFS permissions on the shortcuts control what users can see/use. This seems to be working quite well - however, for one or two users, I get the error shown below when they log on [cid:[email protected]] This only seems to happen on certain terminal servers (the users are logging in via Citrix XenApp), but whenever I try to recreate it with a test user, it works fine. Google is not showing me very many hints - has anyone seen this before, or have any idea what is causing it? Cheers, JRR -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
<<inline: image001.jpg>>
