Restricting Ability to Save to Desktop

pts.
Tags:
Active Directory
Hi There, Can anyone tell me of a way, via a GPO, of preventing specific users only from saving files to their desktops? I've had a look around the various options available and I can't see an obvious solution- but then I may have missed something ;o) Many thanks in advance.

Answer Wiki

Thanks. We'll let you know when a new response is added.

Simplest way I have found is folder quotas. The ‘Desktop’ is just a special folder. In roaming profiles the desktop is copied back and forth at login and logoff. It can be the #1 reason for slow startup when profiles exceed 15 to 20 MB. So I set restrictive quotas on profile and desktop at 1 MB (profile 30MB). Since Icons and their underlying shortcuts are only 1 to 3 kb they don’t see a problem. If they try to save applications or large files then the error gives me a chance at remedial education. When I help them save where things should be, we are both happier.

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Kerm
    Drill down into permissions. You'll find a choice for locking desktops. Create a security group and put your selected users in it. We have a large client user community accessing our systems and this works well. One caveat. Keep a copy of the locked down desktop handy. On a few occassions the locked down desktop has disappeared with no apparent cause. If you can restore it easily, it is not a big problem.
    0 pointsBadges:
    report
  • Cptrelentless
    You can leave the desktop on the C: drive and restrict their access to the C drive through the policy. You can touch it then. Or redirect the desktop to a server on the folder and give them read access.
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following