hidden hit counter
Help!

How to lock user desktop?

 
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> Group Policy RSS
Next:  Firewall Group Policy  
Author Message
SteveW
External


Since: Mar 21, 2005
Posts: 7



PostPosted: Tue Oct 03, 2006 4:02 pm    Post subject: How to lock user desktop?
Archived from groups: microsoft>public>win2000>group_policy (more info?)

Is there a GPO to prevent users from saving anything (links, docs, shortcuts)
to the desktop? All I could find is a way to hide desktop icons, prevent
saving in the taskbar, etc.

I see a way to do this with mandatory profiles, but would like to go the
easier route of a GPO.

Thanks.
Back to top
Florian Frommherz
External


Since: Nov 17, 2005
Posts: 176



PostPosted: Wed Oct 04, 2006 1:52 pm    Post subject: Re: How to lock user desktop? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Howdy Steve!

SteveW wrote:
> Is there a GPO to prevent users from saving anything (links, docs, shortcuts)
> to the desktop? All I could find is a way to hide desktop icons, prevent
> saving in the taskbar, etc.

What about using the group policy filesystem-settings in CompConf\Window
s Settings\Security Settings\File System ? You can add a "rule" and deny
your users the "Write" and "Modify" permissions...

cheers,

Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
Back to top
SteveW
External


Since: Mar 21, 2005
Posts: 7



PostPosted: Wed Oct 04, 2006 1:52 pm    Post subject: Re: How to lock user desktop? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

I've not used this GPO item before - the only option I have is to add file.
What kind of file is it expecting to add so that I can try this?

Thanks.

"Florian Frommherz" wrote:

> Howdy Steve!
>
> SteveW wrote:
> > Is there a GPO to prevent users from saving anything (links, docs, shortcuts)
> > to the desktop? All I could find is a way to hide desktop icons, prevent
> > saving in the taskbar, etc.
>
> What about using the group policy filesystem-settings in CompConf\Window
> s Settings\Security Settings\File System ? You can add a "rule" and deny
> your users the "Write" and "Modify" permissions...
>
> cheers,
>
> Florian
> --
> Nachwuschsadmin aus dem Süddeutschen/Germany.
> eMail: Vorname [bei] frickelsoft [Punkt] net.
>
Back to top
Florian Frommherz
External


Since: Nov 17, 2005
Posts: 176



PostPosted: Wed Oct 04, 2006 10:17 pm    Post subject: Re: How to lock user desktop? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Howdy Steve!

SteveW wrote:
> I've not used this GPO item before - the only option I have is to add file.
> What kind of file is it expecting to add so that I can try this?

It's quite simple. The "file to add" is the "Desktop"-folder as you wish
to set permissions on that. So you need to "add" the Desktop folder and
click "OK". The editor will then open the known "Security" dialog where
you can change NTFS permissions.

If you haven't done this before, you might want to create a test-OU with
test-users and a test-computer and try this GP on them...

cheers,

Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
Back to top
SteveW
External


Since: Mar 21, 2005
Posts: 7



PostPosted: Wed Oct 04, 2006 10:17 pm    Post subject: Re: How to lock user desktop? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Would I select the "documents & settings\all users\desktop" folder from my
local machine and then adjust permissions for all authenticated users for
read only & list?

Thanks.

"Florian Frommherz" wrote:

> Howdy Steve!
>
> SteveW wrote:
> > I've not used this GPO item before - the only option I have is to add file.
> > What kind of file is it expecting to add so that I can try this?
>
> It's quite simple. The "file to add" is the "Desktop"-folder as you wish
> to set permissions on that. So you need to "add" the Desktop folder and
> click "OK". The editor will then open the known "Security" dialog where
> you can change NTFS permissions.
>
> If you haven't done this before, you might want to create a test-OU with
> test-users and a test-computer and try this GP on them...
>
> cheers,
>
> Florian
> --
> Nachwuschsadmin aus dem Süddeutschen/Germany.
> eMail: Vorname [bei] frickelsoft [Punkt] net.
>
Back to top
Florian Frommherz
External


Since: Nov 17, 2005
Posts: 176



PostPosted: Wed Oct 04, 2006 11:26 pm    Post subject: Re: How to lock user desktop? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Howdy Steve!

SteveW wrote:
> Would I select the "documents & settings\all users\desktop" folder from my
> local machine and then adjust permissions for all authenticated users for
> read only & list?

In order to restrict the permission for all _new_ users on the machine,
you will have to choose the "Documents and Settings\Default
User\Desktop" folder. But as I saw right now, this will not affect
existing profiles on the computers. So, you'd need to change the
existing profiles' permissions manually with a tool like subinacl.exe
(http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en)

Sorry...

cheers,

Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
Back to top
Evan
External


Since: Oct 01, 2006
Posts: 2



PostPosted: Sun Oct 08, 2006 3:11 am    Post subject: Re: How to lock user desktop? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

You may want to consider using a mandatory roaming profile instead of
local profiles

-Evan


"SteveW" wrote in message

> Is there a GPO to prevent users from saving anything (links, docs,
> shortcuts)
> to the desktop? All I could find is a way to hide desktop icons, prevent
> saving in the taskbar, etc.
>
> I see a way to do this with mandatory profiles, but would like to go the
> easier route of a GPO.
>
> Thanks.
Back to top
MPerrault
External


Since: Oct 07, 2006
Posts: 1



PostPosted: Sun Oct 08, 2006 3:59 am    Post subject: Re: How to lock user desktop? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

You can try to use a third party application app like scriptlogic's
desktop authority.

http://www.scriptlogic.com/products/desktopauthority/

It solves many problems acocited with roaming profiles.

Michael P. Perrault
MCSE, CCNA, A+, MBA
Senior Systems Engineer,
ScriptLogic Corporation

Michael.Perrault@scriptlogic.com
www.scriptlogic.com




On Oct 7, 8:11 pm, "Evan" wrote:
> You may want to consider using a mandatoryroamingprofile instead of
> localprofiles
>
> -Evan
>
> "SteveW" wrote in messagenews:E3F180AD-F6BB-43E1-B771-49DC17C07D65@microsoft.com...
>
>
>
> > Is there a GPO to prevent users from saving anything (links, docs,
> > shortcuts)
> > to the desktop? All I could find is a way to hide desktop icons, prevent
> > saving in the taskbar, etc.
>
> > I see a way to do this with mandatoryprofiles, but would like to go the
> > easier route of a GPO.
>
> > Thanks.- Hide quoted text -- Show quoted text -
Back to top
Display posts from previous:   
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> Group Policy All times are: Eastern Time (US & Canada)
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum