Desktop Saving

[stevej]

Hi,

Is there a policy that I can impose on a domain group (Global) that would
restrict those particular users from saving anuthing to the desktop, such
as, links to web sites etc.

Thanks
Steve

 

[Simon Geary]

You could use a folder redirection Group Policy that forced every user to
use a Desktop folder of your choice that was located on a network share.
Remove write permissions on that folder and you have a secured desktop.

 

[Hank Arnold]

Or use Mandatory Profiles?

 

[lforbes]

Or use Mandatory Profiles?

--
Regards,
Hank Arnold


 >> Hi,
 >>
 >> Is there a policy that I can impose on a domain group
(Global) that would
 >> restrict those particular users from saving anuthing
to the desktop, such
 >> as, links to web sites etc.
 >>
 >> Thanks
 >> Steve
 >>
 >>

Hi,

Mandatory Profiles work great as I use them. However, this actually
doesn’t restrict the desktop it just deletes everything on the desktop
on logoff and doesn’t retain any of the users changes to the profile.

Cheers,

Lara

 

[stevej]

Hi Simon,

Would this folder allow people to run programs on it ,such as, Word,
Excel etc..? Also, some of the computers have diferent desktops and possibly
I could include the addtional programs on this rediredted desktop but again,
will the programs run on the local computer?

Thanks
Steve

 

[Simon Geary]

Sure, if you have a shortcut to an application on your shared desktop folder
(that lives on the server) you can still run the shortcut to run the
application. Although the shortcuts on this shared desktop are on a server
they will still just point to c:\program files\... the same as a regular
desktop. What to watch out for is putting a shortcut on a shared desktop
that points to an app that is not installed on everyone's PC. If you have a
shortcut, the application has to be installed on everyone's PC.

However, there are two options when you use folder redirection. Force
everyone to use the same folder, or for all users to use a different folder.
If you allow all users to use a different network folder on a server share
this overcomes that last problem.