Re: GPO Revent Saving to Desktop ??

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

According to the GPO explanation:

User Configuration/Administrative Templates/Desktop

Don't Save Settings on Exit: Does not prevent users from adding Programs
Shortcuts to Desktop

However, you can Set:
Hide and disable all items on desktop

By the way: You can lock the user into their My Documents folder as the
root folder:

Open Registry
Locate Key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum

(It may not exist). If you want to lock the user into their Login
environment, create the NonEnum key.
Then create a value:

{20D04FE0-3AEA-1069-A2D8-08002B30309D} DWORD 1

What this does, when the user logs in and opens Windows Explorer, the first
folder they see is My Documents and everything down from there.

You then can mark each User's Desktop folder as Hidden and System, thereby
preventing them from adding to it (you can also change the permissions to
read-only).

It really depends on how you want to lock the user down. You can prevent
them from using the Run command, thereby using the back door to get to
folders they can't, .....

"PeOpLeS" <PeOpLeS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B0C88326-ED5C-49E3-834E-D22E42940C12@xxxxxxxxxxxxxxxx
Great.. Can you explain to me how i do this then>?

"NewScience" wrote:

You can set users up so that any modifications they do to the environment
is
removed at login.
This will not remove any dealing with their My Documents, but will return
the Desktop and everything else (ScreenSavers, Appearance, Background,
...)
to the system default.

"PeOpLeS" <PeOpLeS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:87BBC757-9226-413A-81BC-6D42464D4BEA@xxxxxxxxxxxxxxxx
I need to assistance and guidance with following issue.

My users have roaming profiles and all I want to be able to do is
prevent
them from saving anything to their desktops. (It's a school) eek!!

Btw, they are a mix of XP and 2K clients and a 2K3 svr.

Can anyone explain and easy way to do this via group policy.

I'd be grateful for any helps with this..

Thanks

EN4






.

Relevant Pages

  • Re: singleton ienumerable, need to add more...
    ... you have told me how to set up an indexable folder. ... This is on the GetEnumerator function. ... have to lock the collection every time you enumerate it. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: corrupted Microsoft programs
    ... who would have had administrator access. ... winnt folder, your profile folder under document and settings, and maybe ... After that have the administrator account and any accounts in the ... computer when not using it by using control+alt+del and selecting lock. ...
    (microsoft.public.win2000.security)
  • Re: Database in readonly mode with FE/BE setup
    ... Regardless of the permissions you have ... assigned to the folder if ANY user opens the database in Exclusive Mode ... one lock which is the only lock I use. ...
    (microsoft.public.access.security)
  • Re: singleton ienumerable, need to add more...
    ... to invoke this, as it only ever changes once per app-domain. ... so if an admin adds a folder to your static object while another ... have to lock the collection every time you enumerate it. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Excel 2008 wont open xlsx files as read-only when file is open by owner
    ... Check in the folder the .xlsx is in, to make sure the "lock" file is there. ... For example, if I open "China Trip 2010b.xlsx", a hidden file named "~$China ...
    (microsoft.public.mac.office.excel)