Jump to content


adding user account to a folder via group policy

Recommended Posts

Hi, I was hoping I can get some hints or pointed in the right direction with an annoyance of mine and my users...


Problem: standard users are unable to delete desktop icons from their desktop that were added during system deployment (via SCCM) or through application updates. Only administrator can delete the icons.


Possible Solution: Is there a way through Domain group policy to Add the group "Domain Users" with Modify Permissions to folder "c:\users\public\desktop"? That would give people access to delete the icons they want. That is the easiest way that I can think of to fix this issue for now and through the future.


P.S. This is a 100% windows 7 + 2008 R2 domain environment.



Thanks for your help!,


Share this post

Link to post
Share on other sites

Some people actually do use the icons, I want to give the freedom to remove if desired, not have things disappear and generate more support questions for me.

Share this post

Link to post
Share on other sites

Any one have a better idea then just adding this to a start up/logon script?

attrib -h c:\Users\Public\Desktop


Icacls c:\Users\Public\Desktop /grant "domain\Domain Users":M /T /C


attrib +h c:\Users\Public\Desktop

Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Create New...