Shortcut will not work in start menu

[Canadiantech]

Hello All,

Ive been configuring a group policy for a new Sales contract and I am working on this last part of the users profiles.
I have a fairly restrictive group policy in place because of our multiple client base. I belive the GPO is the cause of why a shortcut that i've placed in thier start menu will not work.

Server is W2K3 stations are XP

the GPO is configured in the User config.
It is configured so that only the selected applications can run.
There are path rules in place for all the selected applications and network resources.
The test profile loads fine, now when they go to access the shortcut which points to \\server\share\share i get the error that the short might have been changed or moved and asks you if you'd like to delete it.
I've double and triple checked all the permissions in place and know that thier right.
I try to type the \\server into an IE window and I get the error 'access to this resource "\\server" has been disallowed'
I get the same error msg when i try to access C: or any other path.

does anyone have any suggestions of where this setting could be, or even the catagory that it should be under. Ive been pouring over my configuration and i cannot seem to pinpoint where i changed the setting.

Thanks everyone for your time.

[Trammel]

There are too many settings within the user configuration to give an explanation of what you may or may not have done.

Did you mess with the GPO or local security settings on the server. Located under computer configuration>windows settins>security settings>local policies>user rights assignment>access this computer from the network

This particular setting is an excelent way to lock a server down and I don't care what right's you set on the share and folder.

Also, set the logging on auditing and then see what is flagging as denied.

[AdamV]

This part:

I try to type the \\server into an IE window and I get the error 'access to this resource "\\server" has been disallowed'
I get the same error msg when i try to access C: or any other path.

sounds like you have the policy set which removes and disables Run on the Start menu. It also prevents you typing a local or UNC path in Explorer to avoid you using this as a way to get the same effect.

As for your underlying issue, you are saying that the exe is definitely in a folder called share in a share called share on a server? (I assume you have replaced these for the purpose of posing, what I am asking is do you have the sharename and the folder name correct). Does your software restriction policy allow this application? Is it accessed by UNC or through a mapped drive? Have you tried the other way?

[Canadiantech]

Hey guys, thx for the suggestions.

it turned out to be a combo of 2 things.... sadly the first one being permissions. As i have been working at this job by myself for just a few months i havent fully taken the time to figure out all the settings on the server. SOoooooo part of it was share permissions. I almost punched myself in the face! but also there was a restriction in place that did not allow access to any network paths.
I added in the path rule to the additional rules catagory and it worked fine.

Thx for your help guys! This is a great site with great advice.