Restricting Ability to Save to Desktop
Hi There,
Can anyone tell me of a way, via a GPO, of preventing specific users only from saving files to their desktops? I've had a look around the various options available and I can't see an obvious solution- but then I may have missed something ;o)
Many thanks in advance.
Software/Hardware used:
Software/Hardware used:
ASKED:
March 3, 2005 7:14 AM
UPDATED:
March 3, 2005 12:17 PM
Answer Wiki:
Simplest way I have found is folder quotas. The 'Desktop' is just a special folder. In roaming profiles the desktop is copied back and forth at login and logoff. It can be the #1 reason for slow startup when profiles exceed 15 to 20 MB. So I set restrictive quotas on profile and desktop at 1 MB (profile 30MB). Since Icons and their underlying shortcuts are only 1 to 3 kb they don't see a problem. If they try to save applications or large files then the error gives me a chance at remedial education. When I help them save where things should be, we are both happier.
To see all answers submitted to the Answer Wiki: View Answer History.
Drill down into permissions. You’ll find a choice for locking desktops. Create a security group and put your selected users in it. We have a large client user community accessing our systems and this works well. One caveat. Keep a copy of the locked down desktop handy. On a few occassions the locked down desktop has disappeared with no apparent cause. If you can restore it easily, it is not a big problem.
You can leave the desktop on the C: drive and restrict their access to the C drive through the policy. You can touch it then. Or redirect the desktop to a server on the folder and give them read access.