desktop gpo

Good day Surya M. Bajracharya,

     I have another workaround to be sure that the desktop wallpaper will be injected properly the folder where the wallpaper is located the user or the users will be member of "Domain Users" see the steps below: Using Windows Server 2003 Ent. Ed., Windows XP Pro. SP2.

     "Sharefolder" Sharing and Security Permissions:

          Sharing Permissions:
    
          1.)  Everyone - Read

          Security/NTFS Permissions:

          1.)  Domain Users - Full Permissions (grade-out)
          2.)  CREATOR OWNER - No Permissions
          3.)  Domain Users (<NetBUIName>\Domain Users) - Read & Execute, List Folder Contents, Read
          4.)  SYSTEM - Full Permissions (grade-out)
          5.)  Users (<NetBUIName>\Users) - Read & Execute, List Folder Contents, Read (grade-out)

     Note:  You can modify this security permissions.

     At the Group Policy of a certain OU which implements the Desktop Wallpaper:

          1.)  Active Desktop Wallpaper - User Configuration, Administrative Templates, Desktop, Active Desktop
                Path:  \\<server>\<sharefolder>\wallpaper.jpg
          2.)  Allow only bitmapped Wallpaper - User Configuration, Administrative Templates, Desktop, Active Desktop
                Set - Enable
          3.)  Prevent changing wallpaper - User Configuration, Administrative Templates, Control Panel, Display
                Set - Enable

      Another way of checking at the Client Computer Windows Registry - if this is really injected, the wallpaper .jpg fill will be converted to bitmap file and you will see this converted file from .jpg to .bmp below on "b" and "c":

          1.)  At HKEY_CURRENT_USER, Control Panel, Desktop - this entries will be updated
                a.)  ConvertedWallpaper - \\<server>\<sharefolder>\wallpaper.jpg - added entries
                b.)  OriginalWallpaper - C:\Documents and Settings\<username>\Local Settings\Application Data\Microsoft
                c.)  Wallpaper - C:\Documents and Settings\<username>\Local Settings\Application Data\Microsoft

          Note:  The converted, copied .jpg file from server to clients the capacity will be 340KB and the filename converted to .bmp wil be "Wallpaper1.bmp" which will be same as the entry at Registry, if not try this command below.

      Another way of forcing the Group Policy do this command below:

          1.)  Try to run this on Server @ Command Prompt - gpupdate /target:user /force /wait:0
          2.)  Try to run this on Client @ Command Prompt - gpupdate /target:user /force /wait:0 /logoff /boot /sync - this will reboot the client.
          3.)  Place this one on Login Scripts when the users will logon - gpupdate, or gpupdate /target:user /force /wait:0

      Hope this will help you with another alternative way.

      Thanks and Regards,

      Cheers...