Group policy question: set all users folder options

[wildwolf]

Hello. Figured I would come to my favorite forum to ask this question.

Is it possible to set specific folder options that will be set for all users of the computer/domain (we have a domain controller)?

Specifically, I would like to ensure that:
"Show hidden files and folders" is selected (radio button option)
"Hide extensions for known file types" is unchecked (checkbox)

in the advanced settings of folder options for windows XP. It would be preferred if no user (other than perhaps administrators) could modify those settings as well, but if possible, I would like to just "set" those options for all users and then worry about how to deny regular users from being able to change it.

Thanks,

Roger

 

[stash]

This is not possible with Group Policy. You would need to set something up with mandatory profiles to get this to work. Or configure the default profile on your workstation image.

 

[SagaLore]

From the Administrative Tools folder, open Active Directory Users and Computers.

- Right-click your domain
- Properties
- Group Policy tab
- Highlight Default Domain Policy
- Edit
- Expand User Configuration
- Expand Administrative Templates
- Expand Windows Components
- Highlight Windows Explorer
- Right-click Removes the Folder Options menu item from the Tools menu
- Properties
- choosed Enabled
- click OK, OK

 

[stash]

That will prevent them from changing, but you'll need to find some other method to configure the folder options the way you want in the first place. Show hidden files and do not hide file extensions are not enabled by default in a new profile.

 

[SagaLore]

Originally posted by: STaSh
That will prevent them from changing, but you'll need to find some other method to configure the folder options the way you want in the first place. Show hidden files and do not hide file extensions are not enabled by default in a new profile.

Oh I see, he wants the opposite of the default.

Okay then:

1. Make the changes in Folder Options
2. Then open Start/Run and type in gpedit.msc, and make the changes listed above

 

[stash]

Well, again, if he did that he would need to make the folder changes on every machine, for every user. Modifying the default user profile during the creation of an image would make this much easier (every user that logs on will pull the default profile), or use mandatory profiles.

also gpedit is the local policy, which will apply to admins as well, by default. You would need to modify the acl on the security folder on each machine to prevent admins from getting that. A domain based GPO would be a better idea.

 

[SagaLore]

Originally posted by: STaSh
Well, again, if he did that he would need to make the folder changes on every machine, for every user. Modifying the default user profile during the creation of an image would make this much easier (every user that logs on will pull the default profile), or use mandatory profiles.

also gpedit is the local policy, which will apply to admins as well, by default. You would need to modify the acl on the security folder on each machine to prevent admins from getting that. A domain based GPO would be a better idea.

Yes an image would be ideal. I'm going on the assumption that he has a lot of computers already established. Also I'm just trying to suggest a solution instead of telling him it's not possible. I'm looking for the registry keys responsible for those settings but no luck. Then he could use a domain GPO like you said and use the reg file to adjust it.

I bet there is a gpo template for this, but don't know where to get it.

 

[wildwolf]

Thanks for trying folks.

I'll see what I can work out...and if I find something useful, I'll post back when I remember to check the board. :