Lost files on desktop after using Group Policy to set Wallpaper

Discussion in 'Windows Small Business Server' started by Andrew Vital, Sep 13, 2005.

  1. Andrew Vital

    Andrew Vital Guest

    Hello,
    I recently created a group policy to set a company wide standard
    wallpaper on our SBS 2003 domain. (Clients running Win2k and XP). Users have
    been complaining of lost content on thiir desktops (I.e documents, pictures,
    etc. ) that they had stored on there.

    If i take off the group policy and they reboot the documents do not
    reappear. Does anyone know where these may have went? Is there any way to
    recover them?

    Please help!

    thanks,
    Andrew
     
    Andrew Vital, Sep 13, 2005
    #1
    1. Advertisements

  2. Hello Andrew,

    Thank you for posting to the SBS Newsgroup.

    I understand that you have applied group policy to your SBS 2K3 domain to
    preset domain workstations' wallpaper, and now domain users cannot find
    their documents on the desktop. If I have misunderstood your concern,
    please let me know.

    Please see my following information:

    1> On the server, open a command window, run "gpresult /v >c:\gp.txt"
    (without quotation marks), go to c drive, get the gp.txt file, and paste
    the full content of the log to the Newsgroup.

    2> Please explain in detail "Users have been complaining of lost content on
    thiir desktops (I.e documents, pictures, etc.) that they had stored on
    there." I am not clear the exact symptom.

    a. Users cannot save documents, picture, etc on their desktop. Or

    b. Users can save documents, pictures, etc on desktop, but when they log on
    domain again, all these things disappear. Or

    c. Nothing at all left on their desktop now, for example, Recycle Bin, My
    Computer.

    3> Just a double check, does this issue occur after you applied this group
    policy to domain users?

    4> I am not sure how you edited the GPO. Did you apply it like following:

    a. Open Group Policy Management. Expand to
    Forest\Domains\Yourdomain.local\Group Policy Objects.

    b. Right click Group Policy Objects, select New to create a new GPO.

    c. Right click the new GPO and select Edit.

    d. In the Group Policy Object Editor, expand to User
    Configuration\Administrative Templates\Desktop\Active Desktop.

    e. On the right pane, double click Enable Active Desktop, on the Setting
    tab, select Enabled. Click OK.

    f. Double click Active Desktop Wallpaper, select Enabled. Fill in the
    Wallpaper local or UNC path and select its style. Click OK.

    g. Close Group Policy Object Editor. Link the GPO to OU.

    h. On a command prompt, run "gpupdate" to force the policy.

    [Note]: On step e, on the right pane, check whether you have enable or
    disable other settings.

    I have performed these steps on my test machine, and it works correctly.

    Thanks for your time. If anything is unclear, please feel free to let me
    know. I am looking forward to hearing from you!

    Best regards,

    Brandy Nee

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.



    --------------------
     
    Brandy Nee [MSFT], Sep 15, 2005
    #2
    1. Advertisements

  3. Andrew Vital

    Andrew Vital Guest

    Hi,
    Well the problem only occured once, the first time the GP was setup. When
    everyone came in to the office the next day ( i set the policy before i left
    the office at 5) they noticed the new desktop, but some users had files
    (.jpg, .wps, etc) on their desktop inaddition to nomal icons.
    These files are now missing, and even if I take off the GP those files don't
    come back.

    Were they wiped out by the GP or moved somewhere?

    ALso on a side note, i've been having rouble with GP working in a remote
    office over a VPN and see in the file i pasted below Group Policy slow
    link threshold: 500 kbps. Is there a way to lower this? Since the P2P VPN
    is 512kbps it's not sending the group policy.. if I lower the threshold to
    say 250 would this solve my problem?

    Thanks,
    Andy

    OS Type: Microsoft(R) Windows(R) Server 2003 for Small
    Business Server
    OS Configuration: Primary Domain Controller
    OS Version: 5.2.3790
    Terminal Server Mode: Remote Administration
    Site Name: Default-First-Site-Name
    Roaming Profile:
    Local Profile: C:\Documents and Settings\avital
    Connected over a slow link?: No


    COMPUTER SETTINGS
    ------------------
    CN=SBSSERVER,OU=Domain Controllers,DC=SBSDOMAIN
    Last time Group Policy was applied: 9/15/2005 at 12:35:18 PM
    Group Policy was applied from: sbsserver.SBSDOMAIN
    Group Policy slow link threshold: 500 kbps
    Domain Name: SBSDOMAIN
    Domain Type: Windows 2000

    Applied Group Policy Objects
    -----------------------------
    Small Business Server Auditing Policy
    Default Domain Controllers Policy
    Small Business Server Client Computer EG
    Small Business Server Remote Assistance Policy
    Small Business Server Lockout Policy
    Default Domain Policy
    Automatic Windows Update Policy
    Local Group Policy

    Audit Policy
    ------------
    GPO: Default Domain Controllers Policy
    Policy: AuditPolicyChange
    Computer Setting: No Auditing

    GPO: Default Domain Controllers Policy
    Policy: AuditPrivilegeUse
    Computer Setting: No Auditing

    GPO: Small Business Server Auditing Policy
    Policy: AuditDSAccess
    Computer Setting: No Auditing

    GPO: Default Domain Controllers Policy
    Policy: AuditAccountLogon
    Computer Setting: No Auditing

    GPO: Default Domain Controllers Policy
    Policy: AuditObjectAccess
    Computer Setting: No Auditing

    GPO: Small Business Server Auditing Policy
    Policy: AuditLogonEvents
    Computer Setting: Success, Failure

    GPO: Default Domain Controllers Policy
    Policy: AuditProcessTracking
    Computer Setting: No Auditing

    GPO: Default Domain Controllers Policy
    Policy: AuditSystemEvents
    Computer Setting: No Auditing

    User Rights
    -----------
    GPO: Default Domain Controllers Policy
    Policy: MachineAccountPrivilege
    Computer Setting: Authenticated Users

    GPO: Default Domain Controllers Policy
    Policy: DenyNetworkLogonRight
    Computer Setting: SBSDOMAIN\SUPPORT_388945a0

    GPO: Default Domain Controllers Policy
    Policy: RestorePrivilege
    Computer Setting: Server Operators
    Backup Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: TcbPrivilege
    Computer Setting: SBSDOMAIN\Administrator

    GPO: Default Domain Controllers Policy
    Policy: SystemProfilePrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: DenyServiceLogonRight
    Computer Setting: N/A

    GPO: Default Domain Controllers Policy
    Policy: ServiceLogonRight
    Computer Setting: NETWORK SERVICE
    SBSDOMAIN\Administrator
    ASPNET

    GPO: Default Domain Controllers Policy
    Policy: UndockPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: CreatePermanentPrivilege
    Computer Setting: N/A

    GPO: Default Domain Controllers Policy
    Policy: AuditPrivilege
    Computer Setting: LOCAL SERVICE
    NETWORK SERVICE

    GPO: Default Domain Controllers Policy
    Policy: TakeOwnershipPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: CreatePagefilePrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: EnableDelegationPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: DebugPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: SystemTimePrivilege
    Computer Setting: Server Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: DenyBatchLogonRight
    Computer Setting: N/A

    GPO: Default Domain Controllers Policy
    Policy: BackupPrivilege
    Computer Setting: Server Operators
    Backup Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: CreateTokenPrivilege
    Computer Setting: SBSDOMAIN\Administrator

    GPO: Default Domain Controllers Policy
    Policy: ChangeNotifyPrivilege
    Computer Setting: Pre-Windows 2000 Compatible Access
    Authenticated Users
    Administrators
    Everyone

    GPO: Default Domain Controllers Policy
    Policy: SyncAgentPrivilege
    Computer Setting: N/A

    GPO: Default Domain Controllers Policy
    Policy: ProfileSingleProcessPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: LoadDriverPrivilege
    Computer Setting: Print Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: InteractiveLogonRight
    Computer Setting: Print Operators
    Server Operators
    Account Operators
    Backup Operators
    Administrators
    IUSR_SBSSERVER

    GPO: Default Domain Controllers Policy
    Policy: RemoteShutdownPrivilege
    Computer Setting: Server Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: IncreaseBasePriorityPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: NetworkLogonRight
    Computer Setting: Pre-Windows 2000 Compatible Access
    Authenticated Users
    Administrators
    ASPNET
    IWAM_SBSSERVER
    IUSR_SBSSERVER
    Everyone
    ENTERPRISE DOMAIN CONTROLLERS

    GPO: Default Domain Controllers Policy
    Policy: LockMemoryPrivilege
    Computer Setting: N/A

    GPO: Default Domain Controllers Policy
    Policy: ShutdownPrivilege
    Computer Setting: Print Operators
    Server Operators
    Backup Operators
    Administrators

    GPO: Default Domain Controllers Policy
    Policy: SecurityPrivilege
    Computer Setting: Administrators
    SBSDOMAIN\Exchange Enterprise Servers

    GPO: Default Domain Controllers Policy
    Policy: AssignPrimaryTokenPrivilege
    Computer Setting: LOCAL SERVICE
    NETWORK SERVICE
    SBSDOMAIN\IWAM_SBSSERVER

    GPO: Default Domain Controllers Policy
    Policy: SystemEnvironmentPrivilege
    Computer Setting: Administrators

    GPO: Default Domain Controllers Policy
    Policy: IncreaseQuotaPrivilege
    Computer Setting: LOCAL SERVICE
    Administrators
    NETWORK SERVICE
    SBSDOMAIN\IWAM_SBSSERVER

    GPO: Default Domain Controllers Policy
    Policy: BatchLogonRight
    Computer Setting: SBSDOMAIN\IIS_WPG
    ASPNET
    IWAM_SBSSERVER
    IUSR_SBSSERVER
    SBSDOMAIN\SUPPORT_388945a0
    LOCAL SERVICE

    GPO: Default Domain Controllers Policy
    Policy: DenyInteractiveLogonRight
    Computer Setting: SBSDOMAIN\SBS Remote Operators
    SBSDOMAIN\SUPPORT_388945a0
    ASPNET
    SBSDOMAIN\SBS STS Worker

    Security Options
    ----------------
    GPO: Default Domain Policy
    Policy: TicketValidateClient
    Computer Setting: Enabled

    GPO: Default Domain Policy
    Policy: RequireLogonToChangePassword
    Computer Setting: Not Enabled

    GPO: Default Domain Policy
    Policy: PasswordComplexity
    Computer Setting: Not Enabled

    GPO: Default Domain Policy
    Policy: ForceLogoffWhenHourExpire
    Computer Setting: Not Enabled

    GPO: Default Domain Policy
    Policy: ClearTextPassword
    Computer Setting: Not Enabled

    Event Log Settings
    ------------------
    N/A

    Restricted Groups
    -----------------
    N/A

    System Services
    ---------------
    N/A

    Registry Settings
    -----------------
    N/A

    File System Settings
    --------------------
    N/A

    Public Key Policies
    -------------------
    N/A

    Administrative Templates
    ------------------------
    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\RebootRelaunchTimeoutEnabled
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    software\policies\microsoft\PCHealth\ErrorReporting\DW\DWFileTreeRoot
    State: disabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    software\policies\microsoft\PCHealth\ErrorReporting\ShowUI
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName: software\microsoft\windows
    nt\currentversion\winlogon\SyncForegroundPolicy
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    software\policies\microsoft\PCHealth\ErrorReporting\DW\DWNoSecondLevelCollection
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Remote Assistance Policy
    KeyName: software\policies\microsoft\windows NT\Terminal
    Services\fUseMailto
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Default Domain Policy
    KeyName:
    Software\Policies\Microsoft\Windows\Installer\DisableMSI
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    software\policies\microsoft\PCHealth\ErrorReporting\DW\DWAllowHeadless
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallTime
    Value: 15, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\RebootRelaunchTimeout
    Value: 120, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AutoInstallMinorUpdates
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Remote Assistance Policy
    KeyName: software\policies\microsoft\windows NT\Terminal
    Services\RAUnsolicit\SBSDOMAIN\Domain Admins
    Value: 83, 0, 66, 0, 83, 0, 68, 0, 79, 0, 77, 0, 65,
    0, 73, 0, 78, 0, 92, 0, 68, 0, 111, 0, 109, 0, 97, 0, 105, 0, 110, 0, 32, 0,
    65, 0, 100, 0, 109, 0, 105, 0, 110, 0, 115, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Remote Assistance Policy
    KeyName: software\policies\microsoft\windows NT\Terminal
    Services\Shadow
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Remote Assistance Policy
    KeyName: software\policies\microsoft\windows NT\Terminal
    Services\fAllowToGetHelp
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Remote Assistance Policy
    KeyName: software\policies\microsoft\windows NT\Terminal
    Services\fAllowFullControl
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\AUOptions
    Value: 4, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName: software\policies\microsoft\windows\network
    connections\NC_AllowNetBridge_NLA
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\ScheduledInstallDay
    Value: 4, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    software\policies\microsoft\PCHealth\ErrorReporting\ForceQueueMode
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Remote Assistance Policy
    KeyName: software\policies\microsoft\windows NT\Terminal
    Services\MaxTicketExpiry
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    software\policies\microsoft\PCHealth\ErrorReporting\DW\DWReporteeName
    State: disabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\WUStatusServer
    Value: 104, 0, 116, 0, 116, 0, 112, 0, 58, 0, 47, 0,
    47, 0, 115, 0, 98, 0, 115, 0, 115, 0, 101, 0, 114, 0, 118, 0, 101, 0, 114, 0,
    58, 0, 56, 0, 53, 0, 51, 0, 48, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    software\microsoft\windows\currentversion\policies\explorer\NoWelcomeScreen
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    software\policies\microsoft\PCHealth\ErrorReporting\DW\DWNoFileCollection
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Remote Assistance Policy
    KeyName: software\policies\microsoft\windows NT\Terminal
    Services\fDenyTSConnections
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Remote Assistance Policy
    KeyName: software\policies\microsoft\windows NT\Terminal
    Services\fAllowUnsolicitedFullControl
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    software\policies\microsoft\PCHealth\ErrorReporting\DW\DWNoExternalURL
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Remote Assistance Policy
    KeyName: software\policies\microsoft\windows NT\Terminal
    Services\fAllowUnsolicited
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\WUServer
    Value: 104, 0, 116, 0, 116, 0, 112, 0, 58, 0, 47, 0,
    47, 0, 115, 0, 98, 0, 115, 0, 115, 0, 101, 0, 114, 0, 118, 0, 101, 0, 114, 0,
    58, 0, 56, 0, 53, 0, 51, 0, 48, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Remote Assistance Policy
    KeyName: software\policies\microsoft\windows NT\Terminal
    Services\MaxTicketExpiryUnits
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\RebootWarningTimeoutEnabled
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName: software\policies\microsoft\windows\network
    connections\NC_ShowSharedAccessUI
    Value: 0, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoRebootWithLoggedOnUsers
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Automatic Windows Update Policy
    KeyName:
    Software\Policies\Microsoft\Windows\WindowsUpdate\AU\RebootWarningTimeout
    Value: 30, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    Software\Policies\Microsoft\Messenger\Client\PreventAutoRun
    Value: 1, 0, 0, 0
    State: Enabled


    USER SETTINGS
    --------------
    CN=Andrew Vital,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=SBSDOMAIN
    Last time Group Policy was applied: 9/15/2005 at 11:01:03 AM
    Group Policy was applied from: sbsserver.SBSDOMAIN
    Group Policy slow link threshold: 500 kbps
    Domain Name: SBSDOMAIN
    Domain Type: Windows 2000

    Applied Group Policy Objects
    -----------------------------
    Internet Explorer Policy
    Small Business Server Client Computer EG
    Default Domain Policy
    Local Group Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
    Desktop Settings
    Filtering: Denied (Security)

    Automatic Windows Update Policy
    Filtering: Not Applied (Empty)

    Small Business Server Remote Assistance Policy
    Filtering: Disabled (GPO)

    Small Business Server Windows Firewall
    Filtering: Denied (WMI Filter)
    WMI Filter: PostSP2

    Small Business Server Internet Connection Firewall
    Filtering: Denied (WMI Filter)
    WMI Filter: PreSP2

    Small Business Server Lockout Policy
    Filtering: Disabled (GPO)

    The user is a part of the following security groups
    ---------------------------------------------------
    Domain Admins
    Everyone
    BUILTIN\Administrators
    BUILTIN\Users
    REMOTE INTERACTIVE LOGON
    NT AUTHORITY\INTERACTIVE
    NT AUTHORITY\Authenticated Users
    This Organization
    LOCAL
    Enterprise Admins
    SBS Report Users

    The user has the following security privileges
    ----------------------------------------------

    Bypass traverse checking
    Manage auditing and security log
    Back up files and directories
    Restore files and directories
    Change the system time
    Shut down the system
    Force shutdown from a remote system
    Take ownership of files or other objects
    Debug programs
    Modify firmware environment values
    Profile system performance
    Profile single process
    Increase scheduling priority
    Load and unload device drivers
    Create a pagefile
    Adjust memory quotas for a process
    Remove computer from docking station
    Impersonate a client after authentication
    Create global objects
    Enable computer and user accounts to be trusted for delegation
    Perform volume maintenance tasks
    Add workstations to domain

    Resultant Set Of Policies for User
    -----------------------------------

    Software Installations
    ----------------------
    N/A

    Logon Scripts
    -------------
    N/A

    Logoff Scripts
    --------------
    N/A

    Public Key Policies
    -------------------
    N/A

    Administrative Templates
    ------------------------
    GPO: Small Business Server Client Computer EG
    KeyName:
    Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSimpleStartMenu
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWelcomeScreen
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceStartMenuLogOff
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Local Group Policy
    KeyName: Software\Policies\Microsoft\Windows NT\Terminal
    Services\Shadow
    Value: 2, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceClassicControlPanel
    Value: 1, 0, 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    Software\Microsoft\Windows\CurrentVersion\Policies\System\SetVisualStyle
    Value: 0, 0
    State: Enabled

    GPO: Small Business Server Client Computer EG
    KeyName:
    Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoTaskGrouping
    Value: 1, 0, 0, 0
    State: Enabled

    Folder Redirection
    ------------------
    N/A

    Internet Explorer Browser User Interface
    ----------------------------------------
    GPO: Internet Explorer Policy
    Large Animated Bitmap Name: gencorpanimated38.bmp
    Large Custom Logo Bitmap Name: gencorpstill38.bmp
    Title BarText: Gencorp Insurance Group
    UserAgent Text: N/A
    Delete existing toolbar buttons: No

    Internet Explorer Connection
    ----------------------------
    HTTP Proxy Server: N/A
    Secure Proxy Server: N/A
    FTP Proxy Server: N/A
    Gopher Proxy Server: N/A
    Socks Proxy Server: N/A
    Auto Config Enable: No
    Enable Proxy: Yes
    Use same Proxy: No

    Internet Explorer URLs
    ----------------------
    GPO: Internet Explorer Policy
    Home page URL: http://companyweb/default.aspx
    Search page URL: N/A
    Online support page URL: N/A

    Internet Explorer Security
    --------------------------
    Always Viewable Sites: N/A
    Password Override Enabled: False

    GPO: Internet Explorer Policy
    Import the current Content Ratings Settings: No
    Import the current Security Zones Settings: No
    Import current Authenticode Security Information: No
    Enable trusted publisher lockdown: No

    Internet Explorer Programs
     
    Andrew Vital, Sep 15, 2005
    #3
  4. Hello Andrew,

    Thank you for posting back!

    Please take your time to read my following information:

    1> I understand that some users' files disappeared after applying Group
    Policy. I need to confirm whether this issue happened to all users, or some
    of them? Also, on the problematic client workstations, did all customize
    files disappear?

    Most of the possibility is user's profile being corrupted. You can ask the
    problematic client go to C:\Documents and Settings. Check whether there is
    new user profile lists there. Please read the following KB article for
    detail information:

    How to restore a user profile in Windows 2000
    http://support.microsoft.com/?id=314045

    How to copy data from a corrupted user profile to a new profile
    http://support.microsoft.com/?id=811151

    Another possibility is problematic users did not log in domain when they
    creating customize files on desktop.

    You can search the disappeared files on the problematic workstations to see
    whether you can find them.

    So this issue does not relate to the Group Policy you have applied. I think
    they just met by accident.

    2> Yes, you can slow the connection for apply and updating Group policy. To
    do so:

    a. Right click the GPO and select Edit.

    b. Expand to User Configuration\Administrative Templates\System\Group
    Policy.

    c. On the right pane, double click Group Policy slow link detection.

    d. Select Enabled, and change the value to 250.

    e. Go to Start -> Run "gpupdate" (without quotation marks)

    227369 Default Behavior for Group Policy Extensions with Slow Link
    http://support.microsoft.com/?id=227369

    227260 How a Slow Link Is Detected for Processing User Profiles and Group
    Policy
    http://support.microsoft.com/?id=227260

    Some computers may not be able to receive the group policy when it connects
    to the server by VPN. You can add the following registry settings on the
    clients to resolve this issue:

    HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System. REG_DWORD
    Value GroupPolicyMinTransferRate=0

    Hope this information helps. If anything is unclear, please feel free to
    let me know. I am looking forward to hearing from you!


    Best regards,

    Brandy Nee

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.



    --------------------
     
    Brandy Nee [MSFT], Sep 16, 2005
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.