|
Found this little tidbit of info this morning while working on Citrix UPM, cleaning up the desktop policy. I move the desktop icons out of Default User into All Users and when I log in to my limited user test account, all I see on the desktop is My Computer and IE. Works fine with my administrator account, no permission issues apparent. I head into the GPO and take a look in the User Configuration > Administrative Templates > Desktop policies and see nothing that matches. Looking at the rest of the user policies, I see Remove common program groups from Start Menu. Just about the only one that even mentions the All Users profile and is under the Start Menu and Taskbar policies. It's enabled so I turn it off, log off and back on. Lo and behold, I see the expected icons.
From the policy:
Removes items in the All Users profile from the Programs menu on the Start menu.
By default, the Programs menu contains items from the All Users profile and items from the user's profile. If you enable this setting, only items in the user's profile appear in the Programs menu.
Tip: To see the Program menu items in the All Users profile, on the system drive, go to ProgramData\Microsoft\Windows\Start Menu\Programs.
Does not mention the Desktop in one place but it definitely affects the visibility state when Enabled. Thanks for the confusion. |