Re: Desktop Lockdown

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 02/02/04 

Date: Mon, 2 Feb 2004 22:37:28 +0100

Hello Mandatory Profiles may are an alternative for your organization?

User Data and Settings Management:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/maintain/operate/user01.asp

Here is a few policies you may can enable I think this is the closest we can
get with the built-in policy settings.

User Configurations Node:

Administrative Templates\Start Menu and Taskbar\
Remove and prevent access to the Shut Down command

Administrative Templates\Start Menu and Taskbar\
Prevent changes to Taskbar and Start Menu Settings

Administrative Templates\Start Menu and Taskbar\
Prevent grouping of taskbar items

Administrative Templates\Desktop\
Prevent adding, dragging, dropping and closing the Taskbar's toolbars 

-- 
Regards,
Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1
"DCA" <dpca001@hawaii.rr.com> skrev i meddelandet
news:zfzTb.5248$Sv1.66@twister.socal.rr.com...
> Thanks Chris,
>
> We don't want to hide the icons, just not have the user the ability to
move
> them around.  At the very least if, that's not possible, then if they log
> off and log back in, the desktop will "refresh" and icons will retain
their
> position.  Currently we have the desktop locked down so users cannot add
or
> delete items to it.
>
>
> "Chriss3" <noSpamHere@chrisse.se> wrote in message
> news:eUJQOXb6DHA.2380@TK2MSFTNGP10.phx.gbl...
> > Hello DCA.
> >
> > There is a policy to prevent users from using the desktop at all.
> >
> > User Configuration\AdministrativeTemplates\Desktop\
> > Hide all icons on Desktop
> >
> > You may want to take use of Mandatory Profiles to prevent users from do
> any
> > changes at all to there profile.
> >
> > If you just want to lockdown the desktop and prevent users from creating
> > item on the desktop you have to modify ACL and prevent users from access
> the
> > Desktop Folder in there profile, may by redirect the Desktop out side
the
> > profile with Folder Redirection within a Group Policy.
> >
> > -- 
> > Regards,
> >
> > Christoffer Andersson
> > No email replies please - reply in the newsgroup
> > If the information was help full, you can let me know at:
> > http://www.itsystem.se/employers.asp?ID=1
> >
> > "DCA" <dpca001@hawaii.rr.com> skrev i meddelandet
> > news:9UvTb.2845$ow4.914@twister.socal.rr.com...
> > > Trying to enforce a policy of not allowing changes on the user's
> desktop.
> > > We're looking to enable a policy that will not even allow users to
move
> > > icons around.  Thanks in advance.
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: RDP logn script override?
    ... I'm guessing you want to change the user account settings as opposed ... When you set the policy on the computer, ... setting if the computer will allow a roaming user's profile to be downloaded ... >> What this does is apply a different logon script when the users log on to ...
    (microsoft.public.scripting.vbscript)
  • Mandatory profiles and Logon/Logoff scripts
    ... VBS logon script for printers, ... NOT allowed to use use 'Terminal profile settings path' in the properties ... Implemented local policy setting 'Set TS Roaming Profile path' to point to ...
    (microsoft.public.windows.terminal_services)
  • Re: Ive done something silly (I think)
    ... The registry settings warning may have something to do with it and I don't ... your user account on your computer. ... another administrator for your computer to do such and if your profile does ... > PC for my userID and it said that the only policy being applied to me was ...
    (microsoft.public.win2000.group_policy)
  • Re: Lost my profile
    ... Well I logged in the other night and noticed all my icons gone expect ... settings and a new profile - MYUSERNAME.MYDOMAIN was created. ... validation. ...
    (microsoft.public.win2000.networking)
  • Re: Group policy problem - Really strange problem with profiles
    ... Please visit the experts in the Group Policy newsgroup ... I've also made this profile mandatory, ... | they can see "Printers and Faxes" and another program, HP-Supporttools! ... | "inheriting" down those settings to the userprofile. ...
    (microsoft.public.windowsxp.security_admin)