Discussion:
Prevent Users from saving to Desktop by GPO???
(too old to reply)
John
2007-09-24 19:22:03 UTC
Permalink
Is there a way to set up an GPO to prevent users from saving to the desktop.
I know how to restrict access to the local c drive by GPO, but I also want to
prevent the desktop also.

TIA
John
Jorge Silva
2007-09-24 19:28:00 UTC
Permalink
Hi
You can use mandatory profiles, or use the GPO setting:
User configuration->Administrative Templates->Desktop->"Don't save settings
at exit"
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
Post by John
Is there a way to set up an GPO to prevent users from saving to the desktop.
I know how to restrict access to the local c drive by GPO, but I also want to
prevent the desktop also.
TIA
John
John
2007-09-24 21:30:00 UTC
Permalink
Hi

In both yor options, the user will be able to add or delete items from the
desktop. The Mandatory Profile will overwrite their profile so even if I
tell them not to save items to their desktop they still will and as soon as
they log in it's my fault that their work is gone. As for the GPO I will
test it to see if I like what it is preventing. I want the user to be
presented with an error message when they try to drop, copy, past, download,
create anyting on their desktop. Any ideas about that?

TIA
John
Post by Jorge Silva
Hi
User configuration->Administrative Templates->Desktop->"Don't save settings
at exit"
--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE, MVP Directory Services
Post by John
Is there a way to set up an GPO to prevent users from saving to the desktop.
I know how to restrict access to the local c drive by GPO, but I also want to
prevent the desktop also.
TIA
John
Jorge Silva
2007-09-24 21:36:33 UTC
Permalink
Desktop is part of user profile and they need to have access to the desktop,
just tell them that they can't save any work to their desktop ootherwise the
work will be lost.
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
Post by John
Hi
In both yor options, the user will be able to add or delete items from the
desktop. The Mandatory Profile will overwrite their profile so even if I
tell them not to save items to their desktop they still will and as soon as
they log in it's my fault that their work is gone. As for the GPO I will
test it to see if I like what it is preventing. I want the user to be
presented with an error message when they try to drop, copy, past, download,
create anyting on their desktop. Any ideas about that?
TIA
John
Post by Jorge Silva
Hi
User configuration->Administrative Templates->Desktop->"Don't save settings
at exit"
--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE, MVP Directory Services
Post by John
Is there a way to set up an GPO to prevent users from saving to the desktop.
I know how to restrict access to the local c drive by GPO, but I also
want
to
prevent the desktop also.
TIA
John
Mathieu CHATEAU
2007-09-24 21:38:41 UTC
Permalink
Hello,

This may be achieved by forcing active desktop and then lock it up :

USER
Administrative Templates\
Desktop\
Active Desktop
=>Enable Active Desktop
=>Prohibit changes
=>Prohibit adding items
=>Prohibit deleting items

I didn't test it yet
--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com
Post by John
Hi
In both yor options, the user will be able to add or delete items from the
desktop. The Mandatory Profile will overwrite their profile so even if I
tell them not to save items to their desktop they still will and as soon as
they log in it's my fault that their work is gone. As for the GPO I will
test it to see if I like what it is preventing. I want the user to be
presented with an error message when they try to drop, copy, past, download,
create anyting on their desktop. Any ideas about that?
TIA
John
Post by Jorge Silva
Hi
User configuration->Administrative Templates->Desktop->"Don't save settings
at exit"
--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE, MVP Directory Services
Post by John
Is there a way to set up an GPO to prevent users from saving to the desktop.
I know how to restrict access to the local c drive by GPO, but I also
want
to
prevent the desktop also.
TIA
John
Jorge Silva
2007-09-24 22:07:02 UTC
Permalink
sounds promising
lets us know the results
;)
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
Post by Mathieu CHATEAU
Hello,
USER
Administrative Templates\
Desktop\
Active Desktop
=>Enable Active Desktop
=>Prohibit changes
=>Prohibit adding items
=>Prohibit deleting items
I didn't test it yet
--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com
Post by John
Hi
In both yor options, the user will be able to add or delete items from the
desktop. The Mandatory Profile will overwrite their profile so even if I
tell them not to save items to their desktop they still will and as soon as
they log in it's my fault that their work is gone. As for the GPO I will
test it to see if I like what it is preventing. I want the user to be
presented with an error message when they try to drop, copy, past, download,
create anyting on their desktop. Any ideas about that?
TIA
John
Post by Jorge Silva
Hi
User configuration->Administrative Templates->Desktop->"Don't save settings
at exit"
--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE, MVP Directory Services
Post by John
Is there a way to set up an GPO to prevent users from saving to the desktop.
I know how to restrict access to the local c drive by GPO, but I also
want
to
prevent the desktop also.
TIA
John
Loading...