Re: Policy to prevent saving to desktop not working well enough
- From: "Florian Frommherz [MVP]" <florian@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 31 Mar 2009 08:50:59 +0200
Howdie!
"Mygposts" wrote:
I have setup a Windows SteadyState GPO with the option box checked next to
"Prevent users from saving files to the desktop."
It only prevents users from dragging files to the desktop, but it does not
prevent users from downloading files from IE and saving those downloads to
the desktop.
It also does not prevent users from saving a notepad file to the desktop.
If I remember correctly, SteadyState simply prevents the shell (explorer.exe) from copying files to the desktop. It doesn't do that with other apps.
I would like people to be able to save to the network or external drive, but
NOT save anything locally.
Use NTFS permissions on that. Tweak permissions on folders and the user's desktop so that they only have "read" permission on those places. Group Policy's "File System" section should get you started. Remember that when implementing you task list that when the network isn't available (connectivity loss, downtime of servers, laptops(!)), people can't save their files.
You may want to grant them at least one place at the file system they can temporarily save files on - and flush it on a weekly basis.
Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
.
- References:
- Policy to prevent saving to desktop not working well enough
- From: Mygposts
- Policy to prevent saving to desktop not working well enough
- Prev by Date: Re: Disable screen save via GP
- Next by Date: Re: Disable screen save via GP
- Previous by thread: Policy to prevent saving to desktop not working well enough
- Next by thread: Audit of Admin rights
- Index(es):
Relevant Pages
|
