none
File type association and Open file dialog doesn't work in 2012GPO

    Question

  • Hi.

    1. I had GPO to set File association on RDP farm in 2008 and it worked. In 2012 it doesn't work.

    2. I want to add folder on local client computer when users logs in RDP farm. GPO "Open File dialog" doesn't work here too.

    Please help.

    Thursday, November 26, 2015 11:47 AM

All replies

  • > 1. I had GPO to set File association on RDP farm in 2008 and it worked.
    > In 2012 it doesn't work.
     
    Yes. As soon as an App has already registered a file association, you
    cannot set it through GPP anymore. AFAIK this is due to changed ACLs on
    the registry keys used, System cannot write them.
     
    > 2. I want to add folder on local client computer when users logs in RDP
    > farm. GPO "Open File dialog" doesn't work here too.
     
    Please explain - what is the relation between "add folder" and "open
    file dialog", and to which exact GPO setting does "open file dialog" refer?
     
    Thursday, November 26, 2015 3:02 PM
  • Hi Martin and thanks.

    1. I checked...It seems you are right. Deny ACL is used and I cannot change with GPO. I can use PS script to kill this Deny ACL but this is not exit. Hash key is what I cannot create.

    I tried:

    May be you advice something else?

    2. I mean that I want to map local folder in terminal session like "\\tsclient\C (or D or I)". Now I cannot do it:

    If I use:

    policy applies but drive U doesn't appear.

    Thursday, November 26, 2015 5:19 PM
  • > 1. I checked...It seems you are right. Deny ACL is used and I cannot
    > change with GPO. I can use PS script to kill this Deny ACL but this is
    > not exit. Hash key is what I cannot create.
     No other way round - you cannot take ownership (which is required to
    change ACL) within GPO, so you cannot change ACL. You MUST use a script
    to change that ACL (computer startup or shutdown).
     
    > 2. I mean that I want to map local folder in terminal session like
    > "\\tsclient\C (or D or I)". Now I cannot do it:
     
    I'm not sure whether GPP can connect TS redirected drives... You migth
    enable the GPP Drive Mapping debug log to see how exactly it fails:
     
     
    Friday, November 27, 2015 9:12 AM
  • Hi Martin,

    Ok. Let's make the borders for this topic with logging GPO. 

    I have configured this policy using your link. Screenshot with gpresult on server is attached.

    But in %TEMP% folder there is no such files.

    Wednesday, December 02, 2015 1:58 PM