Locking Down the Deskop via Policy

[Randy Faulkner]

I'm coming from NT roaming mandatory profiles which really locked the
desktop down. Under AD, I've set some desktop policies, but have not found
anything that will prevent users from creating desktop shortcuts, or adding
files to their desktop. Am I missing something? Thank you.

 

[Colin Nash [MVP]]

On an NTFS partition, don't give them Write access to the Desktop folder in
their profile. (They have it by default.)

Is that what you wanted to do?

 

[Randy Faulkner]

Colin: Yes, that would work, **but** they are creating their profile using
the default user settings when logging onto a workstation. And this could
be on many workstations as some users roam. I guess I could script ACL
permissions to change it during logon, but was hoping for a policy fix.