In this tutorial, you will learn how to use group policy to add shortcuts to all user’s desktops and how to target specific users. For example, add a shortcut just to a group or all users in an OU. Show You will also learn how to add shortcuts to the start menu and how to delete shortcuts. It’s easy, check it out. Table of contents:
With group policy, you can easily add shortcuts to all users desktops, the start menu, toolbar, and so on. You can also easily target specific computers and users with group policy item level targeting. This most common use is to add a shortcut to all users desktops so let’s jump into an example. GPO Create Desktop Shortcut for All Users (URL)To add a URL shortcut to all users desktop follow these steps. In this example, I’ll create a URL shortcut to my website https://activedirectorpro.com Step 1: Create a new GPOOpen the Group Policy Management Console and add a new GPO. Add a new GPO to the OU that contains the users you want to target. If you want to target everyone in the domain then you could add it to the root. I’m going to create and link a new GPO to my ADPRO Users OU. This OU has all of my users so the GPO will target all Sub Ous. Give the GPO a name, I’ve called mine “User – Add Shortcut” Step 2: Edit GPO SettingsEdit the new GPO and brose to these settings User Configuration > Preferences > Windows Settings and Shortcuts Right click shortcut select new > Shortcut On the New Shortcut Properties screen set the following: Action: Update Name: This will be the shortcut name Target type: URL Location: All Users Desktop Icon file path: This is optional. If you have a specific icon you can select it. When you have added your settings click ok. That completes the GPO configuration. GPO will refresh every 90 minutes on the desktops. To force a GPO refresh you can reboot or run the gpupate /force command. Open the command prompt and type gpupdate /force After running the gpupdate command the URL shortcut is added to the all users desktop. Any user that logs into the computer will have this shortcut. Add a Folder to the Desktop With Group PolicyIn this example, I will add a desktop shortcut to a network shared folder. You can create a new GPO or add an additional shortcut to an existing GPO. Here are the settings For target type select “File System Object” and in target path enter the UNC path. Run gpupdate command on the computer and the shortcut will appear. The steps are almost the same as adding a URL shortcut you just change the target type and target path. GPO Create Shortcut for Specific UsersThe first two examples added a shortcut to the all users desktop. Now let’s look at how you can target a specific group of users for adding a shortcut. Option #1 – Target OU The first option is to apply the GPO to a specific OU. This will depend on how you have your Active Directory organized. For example, I typically organize users by the department. This way if I want to add a desktop shortcut for just the Marketing department I can apply the GPO to the Marketing OU. Again, this only works if you have AD organized. If not then check out option 2. Option #2 – Item Level Targeting This is a really cool Group Policy feature. In the GPO settings, it is called Item-level targeting and it allows you to apply the GPO to very specific users and computers. For example, you can target users in a security group or computers with a specific IP address or operating system. I’ll walk through an example and target a security group. I’m going to link a GPO to add a shortcut to the root of my user’s OU. With item level targeting I can then define a security group that this GPO will only be applied. On the GPO shortcut screen click on Common Then click “Item-level targeting” and click the Targeting button Now click New item. The list of options will display. You can see there are a lot of options to choose from. I want to use a Security Group to add the desktop shortcut, so I select “Security Group” I have a group called “Desktop-Shortcut-Group” I select the group and click OK. Now only the users in the Desktop-Shortcut-Group will get the shortcut added to the desktop. This makes it super easy to control who gets the GPO. How to Delete a Shortcut Using GPODeleting or unlinking a GPO that adds a shortcut does not remove the shortcut. If you delete the GPO the shortcut still exists. You have to change the GPO action to Delete. There are 4 different action types. I’ll give a brief description of each. Create: Create a new shortcut for computers or users Delete: Use this to delete a shortcut for computers or users Replace: Delete and recreate a shortcut for computers or users. The end result is if the shortcut does not exist it will create it. If the shortcut exists, it will overwrite it. Update: Modify settings of an existing shortcut for computers or users. I typically use this action for creating shortcuts. If the shortcut does not exist it will create it. If you need to make changes to the shortcut this action will also update its settings. Adding desktop shortcuts with group policy is very easy to do. With item level targeting you can get very specific on which users the GPO applies to. Helpdesk likes to use this to add a shortcut to the printer share on all users desktop. This makes it easy for end users to install their own printers.
Tutorial Categories
 |
