5 Replies Latest reply on Feb 8, 2005 6:28 AM by Scott1

    NTFS Shortcut Permissions

    Scott1 Apprentice
      Is there a way to change the NTFS permissions on a folder shortcut on the desktop with NetInstall?  I know I can change them on a folder but I want to do it on a shortcut.  I am trying to create a shortcut to a folder on one of our shared drives to the users desktop and I want to prevent them from deleting it.  Thanks
        • 1. Re: NTFS Shortcut Permissions
          Support_1 Specialist
          There shouldn't be any problem targeting a shortcut. Just make sure you use the .lnk extension in the text field when specifying the file.
          • 2. Re: NTFS Shortcut Permissions
            Scott1 Apprentice

            There shouldn't be any problem targeting a shortcut. Just make sure you use the .lnk extension in the text field when specifying the file.



            Ok, I was able to do the above and get the permissions how I want them but since this is a shortcut on the desktop even if they don't have rights to the shortcut they can still delete it.  I think it has to do with their rights on the actual %USERPROFILE%\Desktop folder.  I can change the permissions on the desktop folder but then the user can't create any new shortcuts.  Any ideas on how to make it so a user cannot delete certain shortcuts on their desktops but still be able to create their own shortcuts? 

            Maybe another idea is to have NetInstall check to see if the shortcut is missing and then it will re-create it but I am not sure how to go about that either.  Any help would be appreciated.  Thanks
            • 3. Re: NTFS Shortcut Permissions
              Support_1 Specialist

              I think it has to do with their rights on the actual %USERPROFILE%\Desktop folder.  I can change the permissions on the desktop folder but then the user can't create any new shortcuts.  Any ideas on how to make it so a user cannot delete certain shortcuts on their desktops but still be able to create their own shortcuts? 

              Maybe another idea is to have NetInstall check to see if the shortcut is missing and then it will re-create it but I am not sure how to go about that either.  Any help would be appreciated.  Thanks



              I see 2 solutions for this:

              - Change the security of the desktop folder for wherever you are writing the shortcut to and remove the 'Delete' right. They will still be able to create whatever they want.
              - Have the NetInstall project's Automatic Installation scheduling set to 'On Every Login'
              • 4. Re: NTFS Shortcut Permissions
                Joe1 Apprentice
                Since you would typically expect the user to manage what is on their own Desktop (in their userprofile) removing the Delete permission would not be a very friendly strategy going forward. 

                Is there any reason you could not put the shortcut on the %AllUsersProfile%\Desktop and set the no delete permission on that folder?  The user could then create and delete files, shortcuts, etc. as they would normally, but you can manage the community desktop.

                -Joe
                • 5. Re: NTFS Shortcut Permissions
                  Scott1 Apprentice

                  Since you would typically expect the user to manage what is on their own Desktop (in their userprofile) removing the Delete permission would not be a very friendly strategy going forward. 

                  Is there any reason you could not put the shortcut on the %AllUsersProfile%\Desktop and set the no delete permission on that folder?  The user could then create and delete files, shortcuts, etc. as they would normally, but you can manage the community desktop.

                  -Joe



                  I don't like the idea of the user not being able to manage their other shortcuts either.  With our current group policies we have certain generic user logins that don't have access to the all users desktop and can't see those icons so I think my best bet is to do the install on every login.  Thanks for the ideas.