Hello,
I need to restrict file saving on desktop through GPO.
After long research I found a clean solution to accomplish that (without scripts).
Look please at this suggestion below. It says: Add 2 files. I created to text files with one line in each. Renamed to .bat . Pointed to those files in Security Settings. Restarted pc to which applied this. Not works. Should it be batch file.
Or the author of this suggestion means something else?
Thanks.
"You can stop users from saving files or folders directly to the desktop through group policy. If you greate a gp, and go to Computer Configuration / Windows Settings / Security Settings / File System. Then add 2 files,
%AllUsersProfile%\Desktop
%UserProfile%\Desktop
If you accept the default permissions for these, standard users will not have the write permission to these folders. I've added IT to have full control of these just in case, but ordinary bods, no way.
This is much tidier than using Xcacls and login scripts
Microsoft Windows (other)