How to Add or Remove Pinned Folders to Quick Access with PowerShell and GPO

Windows File Explorer has a separate panel that displays a list of favorite folders and locations called Quick Access. Many users and administrators unjustly ignore this handy Windows tool for quickly accessing your favorite folders. This article describes how to use PowerShell and Group Policies to automate the configuration of the Quick Access pane and pinned folders on Windows.

By default, the Quick Access panel displays only the standard user profile libraries (Desktop, Downloads, Pictures, Documents). Windows automatically adds folders the user has opened frequently (or recently) to Quick Access. The user can also manually pin any folder to the Quick Access pane. To do this, select the required folder on your computer or a shared folder on a remote computer and select the Pin to Quick Access option. A pushpin icon will appear next to the folder name in this case.

In my case, I want to pin certain folders to Quick Access, depending on the access groups (roles) that are assigned to the users. For example, accountants need one list of favorite folders, sales managers need another, and so on. Group Policy doesn’t have the built-in tools to centrally manage Quick Access, so PowerShell had to be used.

To add (pin) a specific folder to the Quick Access List, specify the path to the folder in the the command:

$quickaccess = new-object -com shell.application
$quickaccess.Namespace("C:\CorpApp\Report").Self.InvokeVerb("pintohome")

A local folder or a shared network folder (by UNC path) can be added to the Quick Access:

$quickaccess.Namespace("\\munfs01\public\sales").Self.InvokeVerb("pintohome")

Any user profile folder can be pinned

$quickaccess.Namespace("C:\Users\$($env:USERNAME)\AppData\Roaming\MyApp").Self.InvokeVerb("pintohome")

Remove (unpin) a folder from Quick Access:

($QuickAccess.Namespace("shell:::{679f85cb-0220-4080-b29b-5540cc05aab6}").Items() | where {$_.Path -eq "C:\CorpApp\Report"}).InvokeVerb("unpinfromhome")

You can remove any of the profile library folders that are pinned to Quick Access by default:

$quickaccess = new-object -com shell.application
$results=$QuickAccess.Namespace("shell:::{679f85cb-0220-4080-b29b-5540cc05aab6}").Items()
$DeleteDefaultItems = @("Desktop","Documents","Pictures","Videos","Downloads")
($results| where {$_.name -in $DeleteDefaultItems}).InvokeVerb("unpinfromhome")

Remove all pinned items from Quick Access:

($quickaccess.Namespace("shell:::{679f85cb-0220-4080-b29b-5540cc05aab6}").Items() | where { $_.IsFolder -eq "True"}).InvokeVerb("unpinfromhome")

The following PowerShell script adds folders to the Quick Access pane only if the user is a member of a specific AD group:

$usergroups=(New-Object System.DirectoryServices.DirectorySearcher("(&(objectCategory=User)(samAccountName=$($env:username)))")).FindOne().GetDirectoryEntry().memberOf
if ($usergroups.Contains('CN=MUN_SaleManagers,OU=Groups,OU=MUN,DC=woshub,DC=loc'))
    {
      $AddItems = @(
        [pscustomobject]@{Name=Report;Path="\\woshub.loc\DFS\Reports"}
        [pscustomobject]@{Name='Scans';Path="\\woshub.loc\DFS\Scans"}
        [pscustomobject]@{Name='Test1';Path="$env:USERPROFILE\Downloads"}
  )
       ForEach ($Item in $AddItems)
        {          
            if (($Item.Name -notin $results.Name) -and (Test-Path -Path $Item.path)) {
            $QuickAccess.Namespace($Item.path).Self.InvokeVerb("pintohome")
         }
        }
    }

If the user is a member of the MUN_SaleManagers group, this PowerShell script will check if the user’s QuickAccess list contains pinned folders from the $AddItems array. If such a folder is missing from the Quick Access, the script will check the availability of the specified path and pin the folder.

You can add several conditions to the script to check if the user is a member of other AD security groups. As a result, the PowerShell script will pin folders to the user’s Quick Access list based on their AD group membership.

Save this PowerShell to the \\woshub.loc\NETLOGON folder on the AD domain controller (this allows ignoring PowerShell execution policy settings.) and run it as a user logon script using Group Policy (more information about running PowerShell scripts via GPO).