User created Windows 7 Desktop Shortcuts Disappearing

[johnfromjersey]

Desktop shortcuts disappear in Windows 7

To fix the disappearing Windows 7 desktop shortcuts and not disable the System Maintenance troubleshooter, I have commented out the get command in the TS_BrokenShortcuts.ps1. I want to use GPO Computer Preferences to copy the new “TS_BrokenShortcuts.ps1” from a network share to the C:\Windows\diagnostics\scheduled\Maintenance\ folder. My GPO trace shows a 0x80070005 "Access is denied.” Error.


function Get-BrokenShortcutList([string]$path = $(throw "No path is specified"))
{
[string]$list = ""
# Get-ChildItem -Path $path -filter *.lnk | Foreach-Object {
# $fullPath = ConvertTo-WQLPath $_.FullName
# $wmiLinkFile = Get-WmiObject -query "SELECT Name,Target,AccessMask FROM Win32_ShortcutFile WHERE Name = '$fullPath'"
#
# if(-not(Test-ValidLink $wmiLinkFile) -and (Test-Delete $wmiLinkFile))
# {
# $list = AttachTo-List $list $wmiLinkFile.Name
# }
# }
#
return $list
}



Windows 7 - System Maintenance Desktop Shortcuts fix
Data collected on: 4/27/2011 9:30:00 AM all

....

Computer Configuration (Enabled)
Preferences
Windows Settings
Files
File (Target Path: C:\Windows\diagnostics\scheduled\Maintenance\TS_Br okenShortcuts.ps1)
TS_BrokenShortcuts.ps1 (Order: 1)
General
Action Replace
PropertiesSource file(s) \\company.org\NETLOGON\TS_BrokenShortcuts.ps1
Destination file C:\Windows\diagnostics\scheduled\Maintenance\TS_Br okenShortcuts.ps1
Suppress errors on individual file actions Disabled
AttributesRead-only Disabled
Hidden Disabled
Archive Enabled

Common
Options
Stop processing items on this extension if an error occurs on this item No
Remove this item when it is no longer applied No
Apply once and do not reapply No


2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] ----- Changed - 1
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] Options : ( ) GPO_FLAG_DISABLE - This GPO is disabled.
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] ( ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] Options (raw) : 0x00000000
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] Version : 786444 (0x000c000c)
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] GPC : LDAP://CN=Machine,cn={5F11F75B-AAAA-ZZZZ-8888-5E7EC123DBEF},cn=policies,cn=system,DC=company,DC= org
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] GPT : \\company.org\SysVol\company.org\Policies\{5F11F75 B-AAAA-ZZZZ-8888-5E7EC123DBEF}\Machine
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] GPO Display Name : Windows 7 - System Maintenance Desktop Shortcuts fix
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] GPO Name : {5F11F75B-AAAA-ZZZZ-8888-5E7EC123DBEF}
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] GPO Link : ( ) GPLinkUnknown - No link information is available.
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] ( ) GPLinkMachine - The GPO is linked to a computer (local or remote).
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] ( ) GPLinkSite - The GPO is linked to a site.
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] ( ) GPLinkDomain - The GPO is linked to a domain.
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] ( X ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] ( ) GP Link Error
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] lParam : 0x00000000
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] Prev GPO : Yes
2011-04-27 09:04:18.523 [pid=0x3f4,tid=0x4ac] Next GPO : No
2011-04-27 09:04:18.539 [pid=0x3f4,tid=0x4ac] Extensions : [{00000000-0000-0000-0000-000000000000}{3BAE7E51-1234-ABCD-WXYZ-9BB9FD47605F}][{7150F9BF-1234-ABCD-WXYZ-29EF4A8369BA}{3BAE7E51-1234-ABCD-WXYZ-9BB9FD47605F}]
2011-04-27 09:04:18.539 [pid=0x3f4,tid=0x4ac] lParam2 : 0x01558618
2011-04-27 09:04:18.539 [pid=0x3f4,tid=0x4ac] Link : LDAP://OU=test gpos,OU=eng,OU=Workstations,DC=company,DC=org
2011-04-27 09:04:18.570 [pid=0x3f4,tid=0x4ac] RunOnce value created [SUCCEEDED(S_FALSE)]
2011-04-27 09:04:18.601 [pid=0x3f4,tid=0x4ac] Read GPE XML data file (556 bytes total).
2011-04-27 09:04:18.601 [pid=0x3f4,tid=0x4ac] RunOnce value created [SUCCEEDED(S_FALSE)]
2011-04-27 09:04:18.773 [pid=0x3f4,tid=0x4ac] Properties handled. [ hr = 0x80070005 "Access is denied." ]
2011-04-27 09:04:18.788 [pid=0x3f4,tid=0x4ac] Error suppressed. [ hr = 0x80070005 "Access is denied." ]
2011-04-27 09:04:18.804 [pid=0x3f4,tid=0x4ac] Completed get next GPO. [SUCCEEDED(S_FALSE)]
2011-04-27 09:04:18.804 [pid=0x3f4,tid=0x4ac] Completed get GPO list. [SUCCEEDED(S_FALSE)]
2011-04-27 09:05:00.571 [pid=0x3f4,tid=0x4ac] Leaving ProcessGroupPolicyExFiles() returned 0x00000000

[johnfromjersey]

I have seem to have fixed it. This permissions change will allow the file copy to overwrite the current TS_BrokenShortcuts.ps1:

Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
File System
%SystemRoot%\diagnostics\scheduled\Maintenance\TS_ BrokenShortcuts.ps1
Configure this file or folder then: Propagate inheritable permissions to all subfolders and files

Owner
Permissions
Type Name Permission Apply To
Allow CREATOR OWNER Full Control Subfolders and files only
Allow NT AUTHORITY\SYSTEM Full Control This folder, subfolders and files
Allow BUILTIN\Administrators Full Control This folder, subfolders and files
Allow BUILTIN\Users Modify This folder, subfolders and files
Allow inheritable permissions from the parent to propagate to this object and all child objects Disabled