ph03n!x

I dont want to set up mandatory / roaming profile coz I have problems applying group policies on them (Have posted another thread on that in this forum). And anyways, my requirement is that people should never be able to change the wallpaper I;ve given them thru Active desktop group policy. I tried forcing the Active Desktop wallpaper, as well as the Reg Key, but nopes, users are still able to change the wallpaper through IE (The wallpaper tab in display options is greyed out)... Let me experiment a bit more, I shall let you know what I got into. Meanwhile, if anyone can find an option to grey-out the option to "Set as Background" from IE, let me know...

No luck with this, huh? I tried googling a bit, but none of the solutions seem to work.... any hopes????

All, I've done a simple workaround to resolve my issue - though I'd share it here... Instead of using a Roaming / mandatory profile for putting in a couple of icons on the user's desktop, i set up a folder in my server with the necessary icons and redirected the user's desktop to the folder onthe server. The folder has read-only rights so I can rest assured that nothing will be changed, and the desktop will look as it should. I've already set up a wallpaper, and setup a couple of programs to launch through GP... I thank all of you for putting in your time for this. @chilifrei64, I am already applying different policies for computer and users - thanks for your suggestions! now if only some one would tell me how to get rid of "Set as background" from IE's context menus... Even with the GP applied, which disables changing of wallpaper, if a user right clicks on a image in IE and sets it a background, the wallpaper gets changed! I couldnt get much luck in getting around this problem till now....

Hi all!! I have set a group policy for my domain users to give them a wallpaper, and have disabled their ability to change it. But then, if I open a picture in IE, right click on it, and choose "Set as Background", then my wallpaper (which is supposed to be "unchangeable") gets changed!!! As a workaround, I disabled right-click within IE- but the folks are not happy about it at all! Is there any other way to patch this loop hole?

@chilifrei64 - It is reassuring indeed to know GP and Roaming profile does work :-). I havent been able to spend as much time as I can on the systems, as that is not my primary role... I shall follow ur suggestions / advices and figure out where I goofed-up... Thanks a lot for all those who perched in to help!!!

@chilifrei64 - I tried the 'copy n paste' first, and used the 'copy to' when I ran into this problem. There is jus one group policy that needs to be applied, which is a mix of comp and user policy. The permissions look fine. And it is for workstations, not Terminal Services. There aint any loopback processing. My server is a Win2000, so GP modeling wizard is out. As for the need of Man profiles, here is a problem - The people in my workplace wanted a particular wallpaper on all systems, and wanted a particular website to be opened when the system starts up - these two were done through user group policies. Their third requirement was a particular Icon that needs to be placed on all Desktops - I couldnt find any way other than creating a profile. Am not really particular about Mandatory profiles, I could get away with a Roamin profile and, like some has said in this thread, prohibit changes to it. But the problem is that the policies aint getting applid on the Roaming profile / Mandatory Profile! Am sure it should be possible, and am sure I am making a mistake somewhere... but where??? I would be grateful for any help at all in solving my problem - I dont want to sit on all those darn workstations and putting a silly icon in the "All Users > Desktop" folder :-(!!!

Hi All, Thanx for your replies!!! I've been posting this query elsewhere, and never got any help... This forum rocks :-)!!! @chilifrei64, Here's what I did after I read your reply - I logged in as a normal user in a local system, created the profile and then copied it to the server's profile folder using the "Copy to" in User Profiles under System Properties. The folder on the server that holds all the profiles has read rights to everyone, while the individual profiles folder has full control for the owner of the profile. Now, the roaming profile loads fine - but when I log off, I get the "Windows could not update the roaming profile..." error. Am sure there is no network problem. And I think the security settings I've said above should work fine (or aint they fine enuf?). And no, the Group Policy does not apply at all, even when the profile is a roaming profile! So where is the error? Why is the system not able to update changes on the server when the profile is roaming? and why is the GP not applying???

Hi! I've been trying to fix this for 10 hrs at a stretch, but no goes till now... I have applied a Group Policy for an OU, and that is working like it should. Recently I had to make my user's profiles mandatory. Here comes the problem: If I make a user's profile mandatory, the profile loads fine, but the group policy does not come into effect when the user logs in. If the mandatory profile is removed, all works fine again. Now, as a part of my experiment, I logged in as a fresh user in a stand-alone XP system and created a local group policy for that system. After I had the profile as well as the group policy configured, I copied the profile on to my server and tried using it as the mandatory profile- the profile loads ok, but the policies dont, eventhough the profile path has the ntuser.pol file! What am I doing wrong? Is what I am trying to do possible?