Additionally, Procmon shows that affected computers are busy accessing the following registry key:
You may also notice frequent changes or additions to shortcuts on the desktop. This might occur if you use a logon script to update the desktop or in a Remote Desktop situation in which the cached profile is deleted. This makes all entries new on the next logon.
Note The UserSID placeholder represents the SID of the user, such as S-1-xx.
You can also use Group Policy preferences to work around this issue.
Note There's a known issue when you use this workaround. As soon as the script is in place, users will see entries on the Start menu marked as “new” even though there aren't any newly installed applications or items. It might be a good idea to share this information with users to prevent them from logging a call with the Service Desk about this.
Article ID: 3161390 - Last Review: May 27, 2016 - Revision: 1