Prevent Users from saving to Desktop by GPO???

John

Is there a way to set up an GPO to prevent users from saving to the desktop.
I know how to restrict access to the local c drive by GPO, but I also want to
prevent the desktop also.

TIA
John

Jorge Silva

Hi
You can use mandatory profiles, or use the GPO setting:
User configuration->Administrative Templates->Desktop->"Don't save settings
at exit"

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"John" <John@discussions.microsoft.com> wrote in message
news:C51FCCA2-0C38-469B-930F-2CA4BB772572@microsoft.com...
> Is there a way to set up an GPO to prevent users from saving to the
> desktop.
> I know how to restrict access to the local c drive by GPO, but I also want
> to
> prevent the desktop also.
>
> TIA
> John

John

Hi

In both yor options, the user will be able to add or delete items from the
desktop. The Mandatory Profile will overwrite their profile so even if I
tell them not to save items to their desktop they still will and as soon as
they log in it's my fault that their work is gone. As for the GPO I will
test it to see if I like what it is preventing. I want the user to be
presented with an error message when they try to drop, copy, past, download,
create anyting on their desktop. Any ideas about that?

TIA
John

"Jorge Silva" wrote:

> Hi
> You can use mandatory profiles, or use the GPO setting:
> User configuration->Administrative Templates->Desktop->"Don't save settings
> at exit"
>
> --
> I hope that the information above helps you.
> Have a Nice day.
>
> Jorge Silva
> MCSE, MVP Directory Services
> "John" <John@discussions.microsoft.com> wrote in message
> news:C51FCCA2-0C38-469B-930F-2CA4BB772572@microsoft.com...
> > Is there a way to set up an GPO to prevent users from saving to the
> > desktop.
> > I know how to restrict access to the local c drive by GPO, but I also want
> > to
> > prevent the desktop also.
> >
> > TIA
> > John
>
>
>

Jorge Silva

Desktop is part of user profile and they need to have access to the desktop,
just tell them that they can't save any work to their desktop ootherwise the
work will be lost.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"John" <John@discussions.microsoft.com> wrote in message
news:984BFD13-A349-4911-AD4F-830ECF3C2C45@microsoft.com...
> Hi
>
> In both yor options, the user will be able to add or delete items from the
> desktop. The Mandatory Profile will overwrite their profile so even if I
> tell them not to save items to their desktop they still will and as soon
> as
> they log in it's my fault that their work is gone. As for the GPO I will
> test it to see if I like what it is preventing. I want the user to be
> presented with an error message when they try to drop, copy, past,
> download,
> create anyting on their desktop. Any ideas about that?
>
> TIA
> John
>
> "Jorge Silva" wrote:
>
>> Hi
>> You can use mandatory profiles, or use the GPO setting:
>> User configuration->Administrative Templates->Desktop->"Don't save
>> settings
>> at exit"
>>
>> --
>> I hope that the information above helps you.
>> Have a Nice day.
>>
>> Jorge Silva
>> MCSE, MVP Directory Services
>> "John" <John@discussions.microsoft.com> wrote in message
>> news:C51FCCA2-0C38-469B-930F-2CA4BB772572@microsoft.com...
>> > Is there a way to set up an GPO to prevent users from saving to the
>> > desktop.
>> > I know how to restrict access to the local c drive by GPO, but I also
>> > want
>> > to
>> > prevent the desktop also.
>> >
>> > TIA
>> > John
>>
>>
>>

Mathieu CHATEAU

Hello,

This may be achieved by forcing active desktop and then lock it up :

USER
Administrative Templates\
Desktop\
Active Desktop
=>Enable Active Desktop
=>Prohibit changes
=>Prohibit adding items
=>Prohibit deleting items

I didn't test it yet

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"John" <John@discussions.microsoft.com> wrote in message
news:984BFD13-A349-4911-AD4F-830ECF3C2C45@microsoft.com...
> Hi
>
> In both yor options, the user will be able to add or delete items from the
> desktop. The Mandatory Profile will overwrite their profile so even if I
> tell them not to save items to their desktop they still will and as soon
> as
> they log in it's my fault that their work is gone. As for the GPO I will
> test it to see if I like what it is preventing. I want the user to be
> presented with an error message when they try to drop, copy, past,
> download,
> create anyting on their desktop. Any ideas about that?
>
> TIA
> John
>
> "Jorge Silva" wrote:
>
>> Hi
>> You can use mandatory profiles, or use the GPO setting:
>> User configuration->Administrative Templates->Desktop->"Don't save
>> settings
>> at exit"
>>
>> --
>> I hope that the information above helps you.
>> Have a Nice day.
>>
>> Jorge Silva
>> MCSE, MVP Directory Services
>> "John" <John@discussions.microsoft.com> wrote in message
>> news:C51FCCA2-0C38-469B-930F-2CA4BB772572@microsoft.com...
>> > Is there a way to set up an GPO to prevent users from saving to the
>> > desktop.
>> > I know how to restrict access to the local c drive by GPO, but I also
>> > want
>> > to
>> > prevent the desktop also.
>> >
>> > TIA
>> > John
>>
>>
>>

Jorge Silva

sounds promising
lets us know the results



--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Mathieu CHATEAU" <gollum123@free.fr> wrote in message
news:eneaINv$HHA.2268@TK2MSFTNGP02.phx.gbl...
> Hello,
>
> This may be achieved by forcing active desktop and then lock it up :
>
> USER
> Administrative Templates\
> Desktop\
> Active Desktop
> =>Enable Active Desktop
> =>Prohibit changes
> =>Prohibit adding items
> =>Prohibit deleting items
>
> I didn't test it yet
>
> --
> Cordialement,
> Mathieu CHATEAU
> http://lordoftheping.blogspot.com
>
>
> "John" <John@discussions.microsoft.com> wrote in message
> news:984BFD13-A349-4911-AD4F-830ECF3C2C45@microsoft.com...
>> Hi
>>
>> In both yor options, the user will be able to add or delete items from
>> the
>> desktop. The Mandatory Profile will overwrite their profile so even if I
>> tell them not to save items to their desktop they still will and as soon
>> as
>> they log in it's my fault that their work is gone. As for the GPO I will
>> test it to see if I like what it is preventing. I want the user to be
>> presented with an error message when they try to drop, copy, past,
>> download,
>> create anyting on their desktop. Any ideas about that?
>>
>> TIA
>> John
>>
>> "Jorge Silva" wrote:
>>
>>> Hi
>>> You can use mandatory profiles, or use the GPO setting:
>>> User configuration->Administrative Templates->Desktop->"Don't save
>>> settings
>>> at exit"
>>>
>>> --
>>> I hope that the information above helps you.
>>> Have a Nice day.
>>>
>>> Jorge Silva
>>> MCSE, MVP Directory Services
>>> "John" <John@discussions.microsoft.com> wrote in message
>>> news:C51FCCA2-0C38-469B-930F-2CA4BB772572@microsoft.com...
>>> > Is there a way to set up an GPO to prevent users from saving to the
>>> > desktop.
>>> > I know how to restrict access to the local c drive by GPO, but I also
>>> > want
>>> > to
>>> > prevent the desktop also.
>>> >
>>> > TIA
>>> > John
>>>
>>>
>>>
>