Re: Stop files being saved to the desktop



You could always go in under Computer Configuration> Windows Settings>
Security Settings> File System... browse to a profile\desktop, and apply
List, Read, Execute permissions to it for anything less than Administrators
(and SYSTEM) (which hopefully your users are not local admins), leaving
Administrators and SYSTEM with Full Control).

HTH

Ken

"jas0n" <no@xxxxxxxxxx> wrote in message
news:MPG.1d2ce0708e7e6aa79896ad@xxxxxxxxxxxxxxxxxxxxx
> Is it possible to stop files being saved to the w2k desktop?
>
> Ive been having a play with mandatory profiles which work fine but I
> dont like the idea of a user being able to create/save the file to the
> desktop and then log off, reboot, shut down or have a computer crash at
> which point the file would be gone - thats potentially several hours
> lost work per incident.
>
> I tested to see if ntfs settings would be possible to make the desktop
> read/execute/list only but the settings dont stick. Tested whilst an
> ordinary profile, then renamed to .man but no go.
>
> So, is it possible via either group policy or another method.


.



Relevant Pages

  • AD and GP - Basic Questions
    ... Users are in OU1a & 1b. ... I see that in Group Policy, there are Computer Configuration & User ... Do Computer Configuration settings only apply to AD Computer accounts? ... this from the admin group, and I'm thinking there's another way to do this?? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy to allow stopping a service
    ... I do not want non-Domain Admins to stop services on DC. ... I went to Group Policy and under Computer Configuration> Windows Settings> System Services I modified the service I wanted and added Domain Users with Stop, Start, pause rights. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Terminal Services Policy via Computer Configuration
    ... I agree with "Lanwench" that using a Domain Controller for Terminal Services is not a good idea. ... But, to shed some light on your quandry, there are several Computer Configuration settings, including the ones you cite, that, although they "talk about users", are applied by the target computer to every user that logs on at that computer. ... These settings can not be selectively applied to users in the way that the settings in the User Configuration portion can be. ... I am configuring Terminal Services policies under the CompConf. ...
    (microsoft.public.windows.group_policy)
  • Re: Software Restriction Policies
    ... If you applied it via Group Policy at the domain or Organizational Unit ... default security level to unrestricted or unlink the GPO that is applying ... the settings to the user or computer depending on where the policy is being ... applied - user or computer configuration. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Will "Computer Configuration" policies that are applied at the OU level get passed dow
    ... > I have an OU called Florida that contains all of my users in Florida. ... > attach a Group Policy to this OU that contains Computer Configuration ... > settings, ... you'll need to link a GPO to the OU where your computer accounts ...
    (microsoft.public.win2000.group_policy)